last executing test programs: 3.71777138s ago: executing program 1 (id=4148): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x0, 0x0, 0x7}) 3.660656459s ago: executing program 1 (id=4150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="484d31ed08c1e7b15ead05631f0decf044d5a6fdd371bf"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) 2.647580224s ago: executing program 2 (id=4170): syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="f30f01df0f01c9c4e2f922dcf20f0f8f44000000b00fc731c7442400d6000000c744240203000000c7442406000000000f011c2466ba2000b806000000efea000000001a0166baa00066ed660f3882b819698fab", 0x54}], 0x1, 0x0, 0x0, 0x0) 2.013975171s ago: executing program 4 (id=4180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) 2.001011883s ago: executing program 4 (id=4181): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.524237516s ago: executing program 2 (id=4187): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r0, 0x0, 0x0) 1.511951348s ago: executing program 2 (id=4188): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 1.414192093s ago: executing program 2 (id=4189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) 1.381145568s ago: executing program 2 (id=4190): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) 1.356838421s ago: executing program 0 (id=4191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc) 1.317963778s ago: executing program 2 (id=4192): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902240001"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x4093e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x7fff) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x1, 0x522, &(0x7f0000000a80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) 1.282674753s ago: executing program 0 (id=4193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r2, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x1010, 0x0, 0x0, "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"}, {0x10}, {0xf58, 0x0, 0x0, "8b1400f31eba91b8b48ea37743cc44ef9c5a3c0cfbc5298e1a3313edb0d07f1881df1a52faecda8cd5806e37e6390e3e778c0f14e53a0b116accfd4296525a4f4c49b87c01decf1e15f9b51fcbf1ab4203cfe79e0c6911272cdfae4cda4eecb27c1155856294c58fc3f7e1e14d040841816acea855f334aad50f20e435f93c763d73bba2a62afe443e742d0ded8e0d44b378db967e149a5ea8d6db572d8c19f3aa12d678224abe9ac5ab2c4b3d66a3df563a4098a33e48b0819b9d59debe2e8eb93c3c3e8f2d8ab8ba4bcd121a62bffa29ccf335eb7a715a122a2b9fd3c5e4107f6d39be188508d99719995fb517ee0aa28a88252f9bb1db4f1f1366e8c2f428f04fcecb719d128d7d5d4321ce421caf94fb03d7bb2cad9972331638e35862c553f69c0b65e8a629611a0442545fba5753487be54b85a6d39098fbe6a8868d590233799b2bfb9c1df06a84e092d8b531d00c2cad2547a3acd38fb7e865193123d94a8b50b5523b3b0cb6d9e3e2dba69266f5e4288667aeea3001513171dec3b7a2383127c739b99b2c2df7c2581080b1fe3d5484923598efb5b2582a247dc85641d4f09068c7d958913acaadd7210024c1470a8ad96e74cb9910046841be392d43dbcdd6f97407d3f775f853f7c650d86fff1738fa08befc75c1844681240fd32cc83e7b562b4438d8be506c692d3fa534dad183e435a14890ed9c926eb4455b6645304c332aa4e30755330a885e2c4282fba0536104740c52c2822c7edb11921a252f2ba7ddace11eb9eeadab122874fd04a811cb0a61aebb7591d7cf951650a1f44703330a4a257abfa939c8356cc32b0d14a436e3a1042f86b8325b8fb84145d0ff4b68b600573a7707fab5a909ce7d15568716dee0556f20a38ab461f428718148de1460f4836b9f39386a7f1d3a44b24c1762d34b2367296f8d14b360cdfab7b956626254ade86ad2241cd0bfcc262972fdf979ef05384087a4fcc4d47d3617cc6c1f9efd38c37af2526c4affbb98118423ca2e1edce318592d4c343d8e4c2ba2be63f94cfd71a3cf71d58e69c24b085fbd90f08aec0fb4157ef88321e9b80a53f3cda3cf67f4bc38daf911949c96a6ddd48a7cdb267fa4ae12c8b6ece67ebe392f81ebbc2f571fd59c8e3ed63b5e0e5a1aa51838be0c4959c1729023a8e136c3c197d3e4f8c755d446efbea0b8da291a779fe5e699458d2692fbbc5e5c13f9d9864249701f6172a78774773e4d3d48a8bb771550738b51afeb53176f5cc41a21bc6fbc07426f7363f8e96fb84770ed669464bb34841b6686e1bef7d8206ebe4d7712fef03b8eeb0a0165cae430d92664df9d060e273da052373d4ef39816b17a285034b5fbbc11246a80a3563a731a3f52d4ce892e3a15ac63312f01a2f3c9394b5c83c94a0adadab13ecde53bcba1b034f4fce901b0c9cdf3ee9de5aa973c99c78569491b27d962ec9ff9a7e331c2952c61426e6978f9257a98333fd778647dd748924fd39b77f8a6d8198f5ce696f7343840e832f1db6556c19d1203049d8ab146ea50117d5db5c2efb1355782b2b9a7f6391c74e664e743fb351a07fe0a764da243c8edee7898aef028fee058b34c3a8bb756c3e2e39e2662860a59726c744f9823f76e2d79fe5bfd7c8c6c616d2cecc7d06bc3b7014b338e00bf593cb7f19a9faee1ae44c59f4e172abb042d8363845ab4021fc2471e65911d0b2900d971cd969e5e499e449a08e1461c71ae6d399007308a241c609cd8cc74cbc8bbbcf954b3c851f4ce734d16e34f6a455440e19b1ea7a730747967ef649e9ae0f385f7129748a9d26c82edeac3ae690cd40a399241746f815baf7e5eb17476ddfafe2fb5cb5f7b32e36a4b91c498eed7e9fc874705676e32ebf4a544da16a7db8788545a2e843d5ad5c04d3ae52a5f5e0b635b1aa2d0d760c592dbad45109bed62d5a6874bc6a110311f3fe15490d2b0aedbde01ca7d6a48929d8b6164dd0f7d9f92e3ce2647e6aee2b8802c6439c26867cd871967d1e203b7863b71ec21246da2242ec4bfabc932188c473af12fb99a83562e907f8548263c6b579b0a7587cefd0609a5cecbd464916ace92dccf6a4872a894e9e3e611e99a4e2fee1f50a2e18ccf29a84d0f72f9988059854785bc3bb622505e10e84d6d5b55550b0ebb6fd803a2b7f49a0fe3361c7f7bcdb949cf730757649519a56fe772beb92b38b74680be4e3289c7f6702c937f19fe0107aeeaf83a510383558eb5478fce7cc1c63be1a12348e3cbceb2790cc6a6e312c051737d37bd48571786ee24a3b43bd8cbd5f69aa42be084ebebfe3a277f7ba6edf3ccb0f70208cab92f1909569ad81494684a142bb32793195105c08a43637bf439f51396c71c0e0f7ad789480e41c9773cc606f27fcd04b8e260606c492a232178a6205ccc25fedb20b09700cf43700b36b7a4f9a4d0d44873369fd51947c40956e0824a41955c248eb74830903119e729ddb4e7f82d0cda543e6399a92d6aabbd034eb8bbf079b8d22afae3b3e88507dff8f3a7bdf00df2969132faa36d36c9bf9d5c662612a99d2fa57e3ae40cebc473d04d7925fb3378ee0e2c0dc79a715428f5edf7df3aba511a8d8c2f58e573ccd06aa6f28f04ccd5495d2994a6b1cb2b0b902183be678b72ff27f274b50a82aca045f8744a549000eaf270118d78ea41d7a901d4376c55f46c47aeb88630ef1dcaeecae0adcd6845ec138355e85e71026b52479b72b88e024c3dfa65cf1d7a22d0c17e67f1f5a04c694f98d683f46c29d5482a610d219ddb18a7f23c1a8f3bbe0fdb7cc7e417eb9fec52cfd7e224d342bbe49283fa6e4e3e9105d32a377e25d386f572661867dd43d2716fc85cf56bdb4f91ab3c015ffeefde0cc59f0a964e8e1960287d7d7b9c43ebeab6421ea4173fa1624f21383c755518d3fc8a95aee2bd97bda4650cf4de7d01c1104dcdc1dc560de578e16208e14562895d5bfbe6eb1436b5c417a02c492d4bb30de5b59f6b2f08878df7509fec1942a4b27fa0b46d3b040f32d97759776ea91ba66d426e535120a79d5d0964fa00e85cb12a3dc53030c295f8345eff62c520ffc6c7b787389e08c3281be33023f6fa33a351d2a924ace40d75907f3d87417b5903a049e1ddcc954df93baf480d273a8df24d125bbf412070ec5542910d89da53cf72b7c17c2f8bc0d37ecfaed11bb8f6a969aff6b83c8dd00f45ab8d88a0435190178eb2725ec9998c3a822677571a5cb97d0a266ca7a156832b090518e14f3f790eca2db8c7353abcf5a37b56bcf382eb86858eb04ef6465cf4f20c85e88cb7a916d25ab7389e1907e6fb69186d344af1a07ee6a80534c2cd710f6fe33684c52207896592a817856d800819e41b574596c0cd3ba64a28fb2f4ae75e9183ab759f56ecd67e2cd9607659ec21f6a61427558a7a2e33c6216d21c2583ddce80f146978c5ae1a5926b08cd76e19507d52ac2f1ead2a540908aeb5b720b0066c5323c74a029ed5303d069033f80ab086686dceb8abcc8e7e118dc143904049f71aab9f80c6fc9d96eb214424c197857ad0880b55a3a6df471d56a0804c37f3be2e3b4b91c820f9248ed56b82fe3a8fd5dd3eb75f3408d4422047007d2f2372e0a6b3333c72764f41efcbb8904da7e03189427c939d05ecc7a2b101a10d8e1a430ec259cdaa59d16c3289ca5663414b16ee60e1e094f72d3d2e107f204dd8acebdea3124d95eac1f896e0feced00e5ec24249642c9dd8f4ac094002ebfca45cd0050e88b565e47a48ac781d67875cb3aa57a8ff3504ce9415ea7ec6824dcb9ef8672474224c568440ac9a4f83cb3a823e716c70655fb1c2500eebc72d04b7469c306091e4be185a5d9196a505560dc9481106a367ff6fdad93f6fe0088c6f7859a20edb1027ff1dae25aeebcba88a413154ccd6dc45f62d5f2ce455a323245da6799750c2dddc44e70a457284b16f2eedf1d28d1e3beccdde310365eabf857b0a2ee0df004112d46a8f1982b0c63d4aad6d9900469731b86fb2dc21fa225a30ba8458b433551a3578887530d04fdfaad239b72c09c362965e3c42ce75e4ebe18f677e7770930755f6d7ba4a0246c42fc64797211d730291634f1a0b08d3e9efad02bc582f5a559f29e6c635a56653615052f0950e441633708e086c0f740c45406100bed18fbc07322ff164c1eb6638d34258c5f309f55cb903790b5ef2ae7006049473f9cbf25adad57c6bd047e9d29ee2c7215f1f65638358c0e18c64e89174beb15c8f3e7d9cb339b6c8cd2983158d81f899553e5ac63f1b4770440884725046bd449b8b5f4f530fb9bcc3bc74a2af52a9b6feed31e54d95bffc9334b7dc8111b91c90bc101d0ae5c2375df4700ce478fc998acccf90e5f8515d13f1103565580d19c64335c8a390f700e292a8d401428fae58da346152cf28f57d08429dd90e8549f429bd862433a7c5cdb074c1becd1edeac786749753ed8387a25b9a5d67a7bd49393c343812f07aa58afb41a78f07e50f534471d41dbe867423481966f12acbd3f68168266f9585fcf50bf2334a043e153c8bdfa3643af11b2999752167755a65addcaedf3990148dc6d5171b34f68c111d1bf9e631ad7676875a3b9d8ad6a7d864499ad0ffc762869e91892e81cbee6615ed293873200381698c87b7db1f61ae6acc39b73da6aca3b7e8bc2e4bdb623a44d4eb05d3ed7e6c07b0311d210e48d7417488f77e43bc553a0fd00ee88b4211bff96ea5d7ac5cac4cc6dcaaef2530dc08aea7db693e31d059d324289312fea5fbc7094f487e69a2407ef4e4e9893528b341e1b6b9841aca7ec36308eab9ba385e1f79cb828999284532b7eef9fac1f1fbf4cd1d98fc188feb87066136f7ac16cc54b32f65e5001ccb2e06e9ed1a5b1a5106abfa5b70bb9b621de53cf273fb581a2fe74bea8c8ce44bb324e8ab218b3745a1eb4d1f08eb15877c95e9aae98721a5c6f2e3d0da4091bc55cff736fa8981b6670e88529507dcebbd6f40cc94278c19d77093c1868859d762f58f4e9db8f751d6604c27996c1247dd09bbed676e924db097c9eede6c9bdeaee91c77931afee96a72885daaaa82daa4da2f39a3143acda7acce737c5c8293c3272bf9fe4445f989c4a24134393f447e2fa4ba68ca94c1a502a99fd042725891083884776cb75bf0cc4a4ad44aa5799a99fa1f74e9140bd1a6cb12a95d5e05ec9b84148c72b5f96ff02817a5ff787f55f0ff7ec3837ecef5032c92becd47a0fedd5bf20894104a18defc3ed5f33947587e1b12e7ffd8bda71bc8ecdad88c1f8bfb761557134df3f2823a8666d957eb87cf11ca991c52cdca494f2a92809d6121c9fd815822c06dda0f15d44b8fdb9cfe0d5eff1bf9ecd6283b2c36e9093b14f514606b88781e1d71fdd02947838d65d9963f938cb2e5833179c48728a495bbccfe712137cd1c7eec9fc15a035c3370e5ba2e1303a4281ad350a435d41121dd163254f5e17b888458889c85d602fb241cf1b8e7d8545a2322b247c244c59"}, {0x10}], 0x1f88}, 0x0) 1.208367514s ago: executing program 0 (id=4194): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000180)={0x0, 0x0, 0x7}) 1.119165538s ago: executing program 0 (id=4195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x2, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) 1.061006537s ago: executing program 0 (id=4196): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x6}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x318, 0x1e8, 0x7, 0xfeffffff, 0x140, 0xa8, 0x280, 0x280, 0xffffffff, 0x280, 0x280, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\v', @ANYRESHEX=r4, @ANYBLOB="e239e0e8bea2b1d803224f8f70093ee8e9e09346335eaefd724bd6295d6f83a8dca8a53502c969c84decfe1ebb913b62a50b401078c18ec56281076cc729358153880456d48ebda71288743bd1f6bf276cebda1be3edd776f9ad0780952122801c0f73550bb8c3d012da3a775335415389601ccf", @ANYRES32=r4], 0x28}], 0x1}, 0x0) 897.116412ms ago: executing program 1 (id=4198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 889.166653ms ago: executing program 1 (id=4199): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 844.59057ms ago: executing program 4 (id=4200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) 825.870563ms ago: executing program 4 (id=4201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000540)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file1\x00') 801.604176ms ago: executing program 4 (id=4202): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) 778.99847ms ago: executing program 4 (id=4203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc) 750.340575ms ago: executing program 1 (id=4204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r2, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x1010, 0x0, 0x0, "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"}, {0x10}, {0xf58, 0x0, 0x0, "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"}, {0x10}], 0x1f88}, 0x0) 743.678426ms ago: executing program 3 (id=4205): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 685.378934ms ago: executing program 1 (id=4207): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) 661.041208ms ago: executing program 3 (id=4208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 512.768021ms ago: executing program 3 (id=4209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 502.537872ms ago: executing program 3 (id=4210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setuid(0x0) 469.763147ms ago: executing program 3 (id=4211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) 113.625362ms ago: executing program 3 (id=4212): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 0s ago: executing program 0 (id=4213): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): _u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 344.973399][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 344.990884][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 344.994526][ T30] audit: type=1400 audit(1719464286.292:347): avc: denied { open } for pid=9424 comm="syz.1.3444" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 345.008290][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.059051][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.087168][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.106840][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.135114][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.142524][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.157169][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.174586][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.194777][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.202249][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.217168][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.227308][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.234603][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.256110][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.266014][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.286907][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.303056][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.320618][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.339692][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.349837][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.357754][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.365082][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.373389][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.398073][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.415678][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.429807][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.447951][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.455184][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.467677][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.475482][ T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 345.502122][ T448] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 345.578897][ T9404] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 345.817287][ T8350] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 345.826919][ T8350] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 345.879289][ T9470] loop1: detected capacity change from 0 to 8192 [ 345.947515][ T9470] loop1: p1 p2 p3 [ 346.075115][ T8350] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 346.299089][ T8350] usb 1-1: USB disconnect, device number 31 [ 346.325051][ T8350] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 346.358155][ T100] loop1: p1 p2 p3 [ 346.488487][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 346.498930][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 346.509895][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 346.584871][ T9095] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /root/syzkaller.P8BacV/35/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 347.064521][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.085929][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.102020][ T9521] device bridge_slave_0 entered promiscuous mode [ 347.135599][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.162818][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.185620][ T9521] device bridge_slave_1 entered promiscuous mode [ 347.188248][ T9533] loop1: detected capacity change from 0 to 8192 [ 347.257675][ T9533] loop1: p1 p2 p3 [ 347.319584][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 347.357206][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.364100][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.371241][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.377986][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.436800][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.447520][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.512192][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.522724][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.557375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.568719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.586091][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.592999][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.615600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.632085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.648442][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.655333][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.688448][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.698511][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.715623][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.731954][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.748656][ T442] device bridge_slave_1 left promiscuous mode [ 347.754620][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.787671][ T442] device bridge_slave_0 left promiscuous mode [ 347.793664][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.817260][ T442] device veth1_macvtap left promiscuous mode [ 347.823114][ T442] device veth0_vlan left promiscuous mode [ 348.075901][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.092553][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.121849][ T9521] device veth0_vlan entered promiscuous mode [ 348.139682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.151703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.175904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.191712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.207806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.225108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.242494][ T9521] device veth1_macvtap entered promiscuous mode [ 348.262267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.273013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.290502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.316716][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.327040][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.410188][ T9543] loop4: detected capacity change from 0 to 40427 [ 349.569467][ T9543] F2FS-fs (loop4): Found nat_bits in checkpoint [ 349.622806][ T9574] 9pnet: Insufficient options for proto=fd [ 349.687209][ T9543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 349.729843][ T5710] attempt to access beyond end of device [ 349.729843][ T5710] loop4: rw=2049, want=45104, limit=40427 [ 349.742042][ T9574] loop1: detected capacity change from 0 to 8192 [ 349.777455][ T9574] loop1: p1 p2 p3 [ 349.872134][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 349.872146][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 349.892536][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 350.039770][ T9585] loop4: detected capacity change from 0 to 256 [ 350.073749][ T9581] loop1: detected capacity change from 0 to 8192 [ 350.147525][ T9581] loop1: p1 p2 p3 [ 350.621868][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 350.628816][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 350.633681][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 350.835295][ T9605] 9pnet: Insufficient options for proto=fd [ 350.847192][ T8350] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 350.935188][ T9605] loop3: detected capacity change from 0 to 8192 [ 350.987449][ T9605] loop3: p1 p2 p3 [ 351.108626][ T8350] usb 2-1: Using ep0 maxpacket: 8 [ 351.111181][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 351.124893][ T336] udevd[336]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 351.124915][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 351.157437][ T9618] loop3: detected capacity change from 0 to 1024 [ 351.171700][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 351.226638][ T9618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.237293][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.337247][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 351.356313][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 351.366394][ T8350] usb 2-1: SerialNumber: syz [ 351.379926][ T8350] usb 2-1: config 0 descriptor?? [ 351.417944][ T8350] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 351.424660][ T8350] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 351.444737][ T8350] usb 2-1: Failed to create links for entity 255 [ 351.457141][ T39] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 351.464893][ T8350] usb 2-1: Failed to register entities (-22). [ 351.557167][ T962] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 351.619859][ T7194] usb 2-1: USB disconnect, device number 62 [ 351.707146][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 351.797135][ T962] usb 4-1: Using ep0 maxpacket: 16 [ 351.917181][ T962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.940117][ T962] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.957137][ T962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.979313][ T962] usb 4-1: config 0 descriptor?? [ 351.987231][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 352.006207][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.016296][ T39] usb 5-1: Product: syz [ 352.026394][ T39] usb 5-1: Manufacturer: syz [ 352.036487][ T39] usb 5-1: SerialNumber: syz [ 352.045470][ T39] usb 5-1: config 0 descriptor?? [ 352.087973][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 352.107049][ T39] usb 5-1: Detected FT232H [ 352.263426][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.270638][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.278278][ T9629] device bridge_slave_0 entered promiscuous mode [ 352.285547][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.294120][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.301877][ T9629] device bridge_slave_1 entered promiscuous mode [ 352.307245][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 352.391059][ T9637] loop1: detected capacity change from 0 to 256 [ 352.464258][ T962] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0039/input/input57 [ 352.465088][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.482345][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.489553][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.496486][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.538640][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.547331][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.567866][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.577265][ T39] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 352.587559][ T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 352.587935][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.617506][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.624365][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.631766][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.643217][ T962] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 352.871850][ T962] usb 5-1: USB disconnect, device number 41 [ 352.930462][ T962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 352.945968][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.952865][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.972672][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0 [ 352.989266][ T962] ftdi_sio 5-1:0.0: device disconnected [ 352.995486][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.002249][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0 [ 353.015915][ T9641] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 353.016035][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.025392][ T9641] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3510: mark_inode_dirty error [ 353.054168][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.062809][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0 [ 353.080949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.089136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.096512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.106956][ T9629] device veth0_vlan entered promiscuous mode [ 353.129279][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.138900][ T9629] device veth1_macvtap entered promiscuous mode [ 353.149856][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.165787][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.278047][ T2904] device bridge_slave_1 left promiscuous mode [ 353.284133][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.297806][ T2904] device bridge_slave_0 left promiscuous mode [ 353.303776][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.313014][ T2904] device veth1_macvtap left promiscuous mode [ 353.320984][ T2904] device veth0_vlan left promiscuous mode [ 353.426792][ T9650] 9pnet: Insufficient options for proto=fd [ 353.457141][ T7194] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 353.477747][ T9650] loop4: detected capacity change from 0 to 8192 [ 353.524816][ T9650] loop4: p1 p2 p3 [ 353.627643][ T448] usb 4-1: USB disconnect, device number 35 [ 353.692083][ T9521] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.a6vzjA/19/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 353.717184][ T7194] usb 3-1: Using ep0 maxpacket: 8 [ 353.782706][ T9521] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 353.827421][ T9521] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 353.841466][ T9521] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 353.887495][ T320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 353.937185][ T7194] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 353.955490][ T7194] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 353.970682][ T7194] usb 3-1: config 135 has no interface number 0 [ 353.982591][ T7194] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.287742][ T7194] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 354.320310][ T7194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.360452][ T7194] usb 3-1: Product: syz [ 354.384117][ T7194] usb 3-1: Manufacturer: syz [ 354.405003][ T7194] usb 3-1: SerialNumber: syz [ 354.528374][ T7194] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 354.538986][ T7194] usb 3-1: No valid video chain found. [ 354.637935][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.644888][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.652595][ T9670] device bridge_slave_0 entered promiscuous mode [ 354.659848][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.666706][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.689579][ T9670] device bridge_slave_1 entered promiscuous mode [ 354.730341][ T8350] usb 3-1: USB disconnect, device number 49 [ 354.867948][ T2904] device bridge_slave_1 left promiscuous mode [ 354.875044][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.890234][ T2904] device bridge_slave_0 left promiscuous mode [ 354.902730][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.919610][ T2904] device veth1_macvtap left promiscuous mode [ 354.931988][ T2904] device veth0_vlan left promiscuous mode [ 355.125010][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.132009][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.139116][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.145970][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.153220][ T9682] 9pnet: Insufficient options for proto=fd [ 355.251406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.262747][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.266517][ T9682] loop4: detected capacity change from 0 to 8192 [ 355.284267][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.317725][ T9682] loop4: p1 p2 p3 [ 355.329593][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.344607][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.351511][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.377258][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.407418][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.414374][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.437262][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.445738][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.466860][ T9670] device veth0_vlan entered promiscuous mode [ 355.469198][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 355.484073][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 355.496240][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 355.517236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.526116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.541820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.558248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.591623][ T9670] device veth1_macvtap entered promiscuous mode [ 355.606296][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.617937][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.634861][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.669543][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.686826][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.705869][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.722498][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.986398][ T9699] loop1: detected capacity change from 0 to 1024 [ 356.063952][ T9699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.106212][ T30] audit: type=1400 audit(1719464297.442:348): avc: denied { map } for pid=9698 comm="syz.1.3538" path="/root/syzkaller.SwXnXC/45/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 356.234054][ T9723] 9pnet: Insufficient options for proto=fd [ 356.243077][ T30] audit: type=1400 audit(1719464297.442:349): avc: denied { execute } for pid=9698 comm="syz.1.3538" path="/root/syzkaller.SwXnXC/45/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 356.701329][ T9727] loop4: detected capacity change from 0 to 8192 [ 356.778820][ T9727] loop4: p1 p2 p3 [ 356.811803][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.818742][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.826163][ T9730] device bridge_slave_0 entered promiscuous mode [ 356.833251][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.843660][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.851244][ T9730] device bridge_slave_1 entered promiscuous mode [ 356.937741][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.944642][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.951879][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.958756][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.205813][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 357.225506][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 357.266427][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 357.327474][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 357.328376][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 357.340158][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 357.363670][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.370677][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.382105][ T9733] device bridge_slave_0 entered promiscuous mode [ 357.426224][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.478984][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.486872][ T9733] device bridge_slave_1 entered promiscuous mode [ 357.555435][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.564304][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.580339][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.613888][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.622145][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.629031][ T8350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.636721][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.645069][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.651955][ T8350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.710170][ T2904] device bridge_slave_1 left promiscuous mode [ 357.716149][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.737691][ T2904] device bridge_slave_0 left promiscuous mode [ 357.753608][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.775421][ T2904] device veth1_macvtap left promiscuous mode [ 357.786689][ T2904] device veth0_vlan left promiscuous mode [ 357.830822][ T30] audit: type=1400 audit(1719464299.172:350): avc: denied { unmount } for pid=5710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 358.111455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.119509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.127390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.135324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.157770][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.166000][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.179318][ T9771] loop3: detected capacity change from 0 to 8192 [ 358.195184][ T9730] device veth0_vlan entered promiscuous mode [ 358.202699][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.211668][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.227887][ T9771] loop3: p1 p2 p3 [ 358.233012][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.240753][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.264361][ T9730] device veth1_macvtap entered promiscuous mode [ 358.273697][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.292455][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.302396][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.328312][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.338401][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.346666][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.355598][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.414159][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 358.414973][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.438181][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.445745][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.458571][ T9784] loop4: detected capacity change from 0 to 256 [ 358.462312][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.472725][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.479599][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.486832][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.495089][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.503451][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.510317][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.526232][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.534056][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.548498][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.571153][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.608325][ T39] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 358.620936][ T9733] device veth0_vlan entered promiscuous mode [ 358.634712][ T9733] device veth1_macvtap entered promiscuous mode [ 358.717735][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.725583][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.733829][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.742088][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.750359][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.758046][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.766321][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.774621][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.779328][ T9800] loop0: detected capacity change from 0 to 1024 [ 358.783018][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.798482][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.806932][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.882081][ T9803] loop4: detected capacity change from 0 to 256 [ 358.917174][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 359.066325][ T9800] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.111876][ T9809] loop2: detected capacity change from 0 to 8192 [ 359.257637][ T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 359.271638][ T9809] loop2: p1 p2 p3 [ 359.275354][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.352674][ T39] usb 4-1: Product: syz [ 359.356872][ T39] usb 4-1: Manufacturer: syz [ 359.363885][ T39] usb 4-1: SerialNumber: syz [ 359.369250][ T39] usb 4-1: config 0 descriptor?? [ 359.379300][ T100] loop2: p1 p2 p3 [ 359.407813][ T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 359.415595][ T39] usb 4-1: Detected FT232H [ 359.507652][ T448] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 359.617236][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 359.628832][ T2904] device bridge_slave_1 left promiscuous mode [ 359.635148][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.642963][ T2904] device bridge_slave_0 left promiscuous mode [ 359.649409][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.659015][ T2904] device veth1_macvtap left promiscuous mode [ 359.664913][ T2904] device veth0_vlan left promiscuous mode [ 359.685787][ T9822] loop2: detected capacity change from 0 to 1024 [ 359.743429][ T9822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.787287][ T448] usb 1-1: Using ep0 maxpacket: 16 [ 359.917246][ T448] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.925465][ T39] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 359.933643][ T448] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.946135][ T448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.946562][ T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 359.955463][ T448] usb 1-1: config 0 descriptor?? [ 360.188877][ T961] usb 4-1: USB disconnect, device number 36 [ 360.244669][ T961] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 360.256472][ T961] ftdi_sio 4-1:0.0: device disconnected [ 360.327215][ T7194] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 360.566361][ T448] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003A/input/input58 [ 360.657793][ T448] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 360.681340][ T9843] loop1: detected capacity change from 0 to 40427 [ 360.697574][ T7194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.708956][ T7194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.718636][ T7194] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 360.727505][ T7194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.736099][ T7194] usb 5-1: config 0 descriptor?? [ 360.755446][ T9843] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.795541][ T9843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 360.983582][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 360.996886][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 361.009973][ T9800] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 361.020268][ T9800] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #15: comm syz.0.3569: mark_inode_dirty error [ 361.032070][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 361.121237][ T9868] loop3: detected capacity change from 0 to 1024 [ 361.210292][ T9868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 361.247281][ T8350] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 361.478121][ T9878] loop2: detected capacity change from 0 to 40427 [ 361.487191][ T8350] usb 2-1: Using ep0 maxpacket: 8 [ 361.562423][ T9878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 361.571343][ T448] usb 1-1: USB disconnect, device number 32 [ 361.607284][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.607475][ T9733] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.cuJ44F/1/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 361.625313][ T9878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 361.646867][ T9733] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 361.661742][ T9733] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 361.675431][ T9733] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 361.691283][ T320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 361.697382][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 361.713641][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 361.721992][ T8350] usb 2-1: SerialNumber: syz [ 361.732267][ T8350] usb 2-1: config 0 descriptor?? [ 361.778241][ T8350] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 361.786588][ T8350] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 361.795708][ T8350] usb 2-1: Failed to create links for entity 255 [ 361.802744][ T8350] usb 2-1: Failed to register entities (-22). [ 361.951083][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.958027][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.965448][ T9887] device bridge_slave_0 entered promiscuous mode [ 361.972266][ T9895] loop3: detected capacity change from 0 to 8192 [ 361.972893][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.981703][ T2173] usb 2-1: USB disconnect, device number 63 [ 361.986703][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.998541][ T9887] device bridge_slave_1 entered promiscuous mode [ 362.007706][ T9895] loop3: p1 p2 p3 [ 362.090136][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.097134][ T9887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.104198][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.111005][ T9887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.117199][ T311] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 362.152932][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 362.163875][ T336] udevd[336]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 362.177461][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 362.198066][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.207799][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.215852][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.234299][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.242618][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.249478][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.256720][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.266437][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.273315][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.297814][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.309724][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.323833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.336357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.344493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.352103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.362229][ T9887] device veth0_vlan entered promiscuous mode [ 362.367212][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 362.375721][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.385156][ T9887] device veth1_macvtap entered promiscuous mode [ 362.392585][ T320] device bridge_slave_1 left promiscuous mode [ 362.398936][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.406541][ T320] device bridge_slave_0 left promiscuous mode [ 362.412671][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.420951][ T320] device veth1_macvtap left promiscuous mode [ 362.426855][ T320] device veth0_vlan left promiscuous mode [ 362.507756][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 362.523208][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 362.538296][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 362.554886][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.559354][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.564352][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.582612][ T311] usb 3-1: config 0 descriptor?? [ 362.591866][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.793548][ T9924] loop0: detected capacity change from 0 to 8192 [ 362.813376][ T9910] loop1: detected capacity change from 0 to 40427 [ 362.820312][ T9924] loop0: p1 p2 p3 [ 362.918479][ T9910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 362.931606][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 362.944046][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 362.956460][ T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 363.053307][ T9910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 363.074745][ T7194] usbhid 5-1:0.0: can't add hid device: -71 [ 363.082566][ T7194] usbhid: probe of 5-1:0.0 failed with error -71 [ 363.090138][ T7194] usb 5-1: USB disconnect, device number 42 [ 363.457163][ T7194] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 363.477243][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 363.483021][ T311] usbhid: probe of 3-1:0.0 failed with error -71 [ 363.492041][ T311] usb 3-1: USB disconnect, device number 50 [ 363.591837][ T9960] loop1: detected capacity change from 0 to 8192 [ 363.647632][ T9960] loop1: p1 p2 p3 [ 363.764074][ T7194] usb 5-1: Using ep0 maxpacket: 8 [ 364.057309][ T7194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.097156][ T8350] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 364.119266][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 364.133317][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 364.145728][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 364.147295][ T7194] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 364.184384][ T7194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 364.203968][ T7194] usb 5-1: SerialNumber: syz [ 364.209449][ T7194] usb 5-1: config 0 descriptor?? [ 364.247848][ T7194] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 364.255519][ T7194] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 364.264510][ T7194] usb 5-1: Failed to create links for entity 255 [ 364.271775][ T7194] usb 5-1: Failed to register entities (-22). [ 364.293851][ T9971] loop0: detected capacity change from 0 to 40427 [ 364.358250][ T9971] F2FS-fs (loop0): Found nat_bits in checkpoint [ 364.402261][ T9971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 364.450404][ T309] usb 5-1: USB disconnect, device number 43 [ 364.457538][ T8350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.469723][ T8350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.487152][ T8350] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 364.508799][ T8350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.521474][ T8350] usb 4-1: config 0 descriptor?? [ 364.630092][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.637010][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.644973][ T9996] device bridge_slave_0 entered promiscuous mode [ 364.663180][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.670278][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.677968][ T9996] device bridge_slave_1 entered promiscuous mode [ 364.753525][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.760437][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.767665][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.774510][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.824788][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.832802][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.853820][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.884239][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.892825][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.899705][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.906948][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.915600][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.922598][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.929850][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.950666][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.959251][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.972107][ T9996] device veth0_vlan entered promiscuous mode [ 364.979770][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.988566][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.995929][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.018075][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.029431][ T9996] device veth1_macvtap entered promiscuous mode [ 365.055824][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.072458][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.157262][ T2173] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 365.200368][ T320] device bridge_slave_1 left promiscuous mode [ 365.206443][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.237407][T10022] loop4: detected capacity change from 0 to 1024 [ 365.237661][ T320] device bridge_slave_0 left promiscuous mode [ 365.257582][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.342358][ T320] device veth1_macvtap left promiscuous mode [ 365.348165][T10022] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.359034][ T320] device veth0_vlan left promiscuous mode [ 365.397669][ T2173] usb 2-1: Using ep0 maxpacket: 16 [ 365.527674][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 365.540128][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 365.551577][ T2173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.564809][ T2173] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.573981][ T2173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.587030][ T2173] usb 2-1: config 0 descriptor?? [ 365.628158][ T448] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 365.876235][T10035] loop0: detected capacity change from 0 to 8192 [ 365.887346][ T448] usb 5-1: Using ep0 maxpacket: 16 [ 365.917648][T10035] loop0: p1 p2 p3 [ 366.017254][ T448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.020133][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 366.032618][ T448] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.048714][ T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.066681][ T448] usb 5-1: config 0 descriptor?? [ 366.078598][ T2173] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 366.085907][ T2173] microsoft 0003:045E:07DA.003B: No inputs registered, leaving [ 366.094157][ T2173] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 366.151480][ T2173] microsoft 0003:045E:07DA.003B: no inputs found [ 366.158401][ T2173] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 366.281225][ T7194] usb 2-1: USB disconnect, device number 64 [ 366.546332][ T448] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003C/input/input59 [ 366.629120][ T448] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 366.657206][ T8350] usbhid 4-1:0.0: can't add hid device: -71 [ 366.663004][ T8350] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.678109][ T8350] usb 4-1: USB disconnect, device number 37 [ 366.705797][T10063] loop3: detected capacity change from 0 to 8192 [ 366.727788][T10063] loop3: p1 p2 p3 [ 367.303729][T10091] loop2: detected capacity change from 0 to 8192 [ 367.340216][T10091] loop2: p1 p2 p3 [ 367.484136][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 367.495017][ T336] udevd[336]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 367.509981][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 367.547153][ T961] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 367.637145][ T309] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 367.797150][ T961] usb 4-1: Using ep0 maxpacket: 16 [ 367.827188][ T2173] usb 5-1: USB disconnect, device number 44 [ 367.830369][T10096] loop2: detected capacity change from 0 to 40427 [ 367.845547][ T5710] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 367.865242][ T5710] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 367.875450][ T5710] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 367.919107][T10096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 367.927281][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 367.947170][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 367.977647][ T961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.992931][ T961] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.006426][T10096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 368.007877][ T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.032564][ T961] usb 4-1: config 0 descriptor?? [ 368.057190][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.071967][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.084263][ T309] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 368.097708][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.122051][ T309] usb 1-1: config 0 descriptor?? [ 368.227070][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.234582][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.242339][T10120] device bridge_slave_0 entered promiscuous mode [ 368.249942][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.256982][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.264427][T10120] device bridge_slave_1 entered promiscuous mode [ 368.315991][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.322921][T10120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.329995][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.336835][T10120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.723671][ T961] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 368.773783][ T961] microsoft 0003:045E:07DA.003D: No inputs registered, leaving [ 368.864627][ T961] microsoft 0003:045E:07DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 368.879100][ T961] microsoft 0003:045E:07DA.003D: no inputs found [ 368.885316][ T961] microsoft 0003:045E:07DA.003D: could not initialize ff, continuing anyway [ 368.895920][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.903547][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.913961][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.921414][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.927843][ T7194] usb 4-1: USB disconnect, device number 38 [ 368.928544][ T448] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 368.947327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.955731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.964025][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.970926][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.979333][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.988321][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.996300][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.003200][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.021036][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.029347][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.045721][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.054145][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.072374][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.081234][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.089640][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.097532][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.105454][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.112830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.124442][T10120] device veth0_vlan entered promiscuous mode [ 369.136884][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.145081][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.155453][T10120] device veth1_macvtap entered promiscuous mode [ 369.162611][ T320] device bridge_slave_1 left promiscuous mode [ 369.168614][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.176075][ T320] device bridge_slave_0 left promiscuous mode [ 369.182377][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.190343][ T320] device veth1_macvtap left promiscuous mode [ 369.196189][ T320] device veth0_vlan left promiscuous mode [ 369.274664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.287375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.300566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.311432][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.320210][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.417286][ T448] usb 2-1: config 7 has an invalid interface number: 243 but max is 3 [ 369.425351][ T448] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 369.435038][ T448] usb 2-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config [ 369.445732][ T448] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 369.456841][ T448] usb 2-1: config 7 has no interface number 0 [ 369.468132][ T448] usb 2-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 369.481891][ T448] usb 2-1: config 7 interface 243 has no altsetting 0 [ 369.647285][ T448] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a [ 369.659303][ T448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.675397][ T448] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟ [ 369.687380][ T448] usb 2-1: Manufacturer: ᰉ [ 369.696983][ T448] usb 2-1: SerialNumber:   [ 369.709790][T10150] loop3: detected capacity change from 0 to 40427 [ 369.724926][T10148] loop4: detected capacity change from 0 to 40427 [ 369.732076][T10150] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 369.740045][T10150] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 369.750778][T10150] F2FS-fs (loop3): Found nat_bits in checkpoint [ 369.767204][ T39] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 369.788061][T10148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 369.794930][T10150] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 369.802351][T10150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 369.838426][T10148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 369.941212][T10122] UDC core: couldn't find an available UDC or it's busy: -16 [ 369.963999][T10122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 370.007175][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 370.067399][ T448] hub 2-1:7.243: bad descriptor, ignoring hub [ 370.074906][ T448] hub: probe of 2-1:7.243 failed with error -5 [ 370.108336][ T309] usbhid 1-1:0.0: can't add hid device: -71 [ 370.114590][ T309] usbhid: probe of 1-1:0.0 failed with error -71 [ 370.121188][ T448] usb 2-1: USB disconnect, device number 65 [ 370.127277][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.143033][ T309] usb 1-1: USB disconnect, device number 33 [ 370.196945][T10185] loop0: detected capacity change from 0 to 8192 [ 370.227448][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 370.240524][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 370.257407][ T39] usb 3-1: SerialNumber: syz [ 370.262136][T10185] loop0: p1 p2 p3 [ 370.276932][ T39] usb 3-1: config 0 descriptor?? [ 370.329291][ T39] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 370.346243][ T39] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 370.362491][ T39] usb 3-1: Failed to create links for entity 255 [ 370.369083][ T39] usb 3-1: Failed to register entities (-22). [ 370.415628][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 370.417445][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 370.427682][ T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 370.469907][T10186] loop4: detected capacity change from 0 to 40427 [ 370.504653][T10205] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.540195][ T309] usb 3-1: USB disconnect, device number 51 [ 370.811729][T10186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 370.931447][T10224] loop0: detected capacity change from 0 to 8192 [ 370.960997][T10186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.977300][ T39] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 370.982538][T10224] loop0: p1 p2 p3 [ 371.042595][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 371.042606][ T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 371.062811][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 371.080434][T10238] loop3: detected capacity change from 0 to 256 [ 371.101918][T10240] binder: 10239:10240 ioctl c0306201 0 returned -14 [ 371.158062][T10238] exfat: Deprecated parameter 'utf8' [ 371.185678][ T30] audit: type=1400 audit(1719464312.522:351): avc: denied { ioctl } for pid=10241 comm="syz.4.3736" path="socket:[63990]" dev="sockfs" ino=63990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.192570][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 371.220922][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 371.241870][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 371.315907][T10243] device team_slave_0 entered promiscuous mode [ 371.341153][T10238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 371.357337][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.372436][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.432333][ T39] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 371.446204][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.475431][ T39] usb 2-1: config 0 descriptor?? [ 372.113781][T10266] loop0: detected capacity change from 0 to 8192 [ 372.115293][T10261] loop4: detected capacity change from 0 to 40427 [ 372.167536][T10266] loop0: p1 p2 p3 [ 372.217175][ T20] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 372.218752][T10261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.274058][T10261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.301138][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 372.314054][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 372.318060][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 372.346402][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 372.358062][T10276] device team_slave_0 entered promiscuous mode [ 372.537189][ T7194] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 372.642790][T10291] loop2: detected capacity change from 0 to 256 [ 372.647239][ T20] usb 4-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config [ 372.667292][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.687174][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.697995][T10291] exfat: Deprecated parameter 'utf8' [ 372.740465][T10291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 372.777183][ T7194] usb 1-1: Using ep0 maxpacket: 8 [ 372.887271][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.897265][ T7194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.906369][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.915340][ T20] usb 4-1: Product: syz [ 372.919780][ T20] usb 4-1: Manufacturer: syz [ 372.924198][ T20] usb 4-1: SerialNumber: syz [ 372.977759][ T20] cdc_ncm 4-1:1.0: skipping garbage [ 372.984448][ T20] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 372.987251][ T7194] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 373.003165][ T20] cdc_ncm 4-1:1.0: bind() failure [ 373.008783][ T7194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 373.027004][ T7194] usb 1-1: SerialNumber: syz [ 373.038026][ T7194] usb 1-1: config 0 descriptor?? [ 373.087872][ T7194] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 373.097533][ T7194] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 373.116217][ T7194] usb 1-1: Failed to create links for entity 255 [ 373.130723][ T7194] usb 1-1: Failed to register entities (-22). [ 373.182150][T10264] UDC core: couldn't find an available UDC or it's busy: -16 [ 373.197318][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.289515][ T7194] usb 1-1: USB disconnect, device number 34 [ 373.376295][T10264] UDC core: couldn't find an available UDC or it's busy: -16 [ 373.383705][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.437139][T10264] UDC core: couldn't find an available UDC or it's busy: -16 [ 373.444466][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.457434][T10298] loop4: detected capacity change from 0 to 8192 [ 373.466267][ T448] usb 4-1: USB disconnect, device number 39 [ 373.498521][T10298] loop4: p1 p2 p3 [ 373.577178][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 373.582959][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 373.590307][ T39] usb 2-1: USB disconnect, device number 66 [ 373.669507][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 373.669538][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 373.682711][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 373.711345][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 373.725462][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 373.740545][T10302] loop1: detected capacity change from 0 to 40427 [ 373.782374][T10302] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.848583][T10302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 374.123310][T10331] loop3: detected capacity change from 0 to 256 [ 374.218168][T10331] exfat: Deprecated parameter 'utf8' [ 374.257807][T10331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 374.626350][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 374.637253][ T962] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 374.639091][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 374.946041][T10351] device team_slave_0 entered promiscuous mode [ 375.007151][ T20] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 375.007239][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.037149][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.046734][ T962] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 375.073156][ T962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.091126][ T962] usb 2-1: config 0 descriptor?? [ 375.249743][T10355] loop3: detected capacity change from 0 to 40427 [ 375.267165][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 375.318929][T10355] F2FS-fs (loop3): Found nat_bits in checkpoint [ 375.380329][T10382] loop4: detected capacity change from 0 to 256 [ 375.383638][T10355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 375.392842][T10382] exfat: Deprecated parameter 'utf8' [ 375.407208][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.431062][T10382] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 375.507293][ T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 375.516279][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 375.524536][ T20] usb 3-1: SerialNumber: syz [ 375.530082][ T20] usb 3-1: config 0 descriptor?? [ 375.577970][ T20] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 375.584981][ T20] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 375.593589][ T20] usb 3-1: Failed to create links for entity 255 [ 375.599902][ T20] usb 3-1: Failed to register entities (-22). [ 375.758032][ T30] audit: type=1400 audit(1719464317.102:352): avc: denied { lock } for pid=10388 comm="syz.3.3794" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 375.778586][ T309] usb 3-1: USB disconnect, device number 52 [ 375.962027][T10408] loop3: detected capacity change from 0 to 1024 [ 376.088337][T10408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.244245][T10410] loop0: detected capacity change from 0 to 40427 [ 376.334494][T10410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 376.377163][ T309] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 376.400514][T10410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 376.750868][ T309] usb 4-1: Using ep0 maxpacket: 16 [ 376.937256][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.957189][ T309] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.975928][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.990752][ T309] usb 4-1: config 0 descriptor?? [ 377.267248][ T962] usbhid 2-1:0.0: can't add hid device: -71 [ 377.273076][ T962] usbhid: probe of 2-1:0.0 failed with error -71 [ 377.289341][ T962] usb 2-1: USB disconnect, device number 67 [ 377.414772][ T30] audit: type=1400 audit(1719464318.752:353): avc: denied { mount } for pid=10445 comm="syz.1.3814" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 377.437769][ T30] audit: type=1400 audit(1719464318.752:354): avc: denied { write } for pid=10445 comm="syz.1.3814" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 377.557479][ T309] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003E/input/input60 [ 377.641948][ T309] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 377.738363][ T448] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 377.992166][T10455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 378.002127][T10455] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3802: mark_inode_dirty error [ 378.017262][ T448] usb 3-1: Using ep0 maxpacket: 8 [ 378.153285][ T30] audit: type=1400 audit(1719464319.492:355): avc: denied { unmount } for pid=9326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 378.187247][ T448] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.287237][ T448] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 378.296981][ T448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 378.306274][ T448] usb 3-1: SerialNumber: syz [ 378.321915][ T448] usb 3-1: config 0 descriptor?? [ 378.367922][ T448] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 378.378498][ T448] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 378.396223][ T448] usb 3-1: Failed to create links for entity 255 [ 378.408674][ T448] usb 3-1: Failed to register entities (-22). [ 378.647380][ T448] usb 4-1: USB disconnect, device number 40 [ 378.657197][ T309] usb 3-1: USB disconnect, device number 53 [ 378.667772][ T9670] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 378.708343][ T9670] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 378.723982][ T9670] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 378.735410][ T30] audit: type=1400 audit(1719464320.062:356): avc: denied { mount } for pid=10466 comm="syz.0.3822" name="/" dev="ramfs" ino=64350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 378.788672][ T30] audit: type=1400 audit(1719464320.062:357): avc: denied { mounton } for pid=10466 comm="syz.0.3822" path="/root/syzkaller.7iJiqH/44/file0/file0" dev="ramfs" ino=64351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 378.876907][ T30] audit: type=1400 audit(1719464320.102:358): avc: denied { unmount } for pid=9996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 378.998838][ T30] audit: type=1400 audit(1719464320.342:359): avc: denied { mounton } for pid=10471 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 379.098885][ T30] audit: type=1400 audit(1719464320.442:360): avc: denied { write } for pid=10478 comm="syz.1.3829" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.126953][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.134863][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.142687][T10471] device bridge_slave_0 entered promiscuous mode [ 379.151991][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.158952][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.166357][T10471] device bridge_slave_1 entered promiscuous mode [ 379.288583][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.295466][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.303609][T10474] device bridge_slave_0 entered promiscuous mode [ 379.331523][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.338797][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.346299][T10474] device bridge_slave_1 entered promiscuous mode [ 379.375887][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.382777][T10471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.389895][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.396758][T10471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.441008][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.455200][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.467663][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.500844][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.517145][ T309] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 379.524847][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.531743][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.551371][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.559703][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.566580][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.582754][ T2904] device bridge_slave_1 left promiscuous mode [ 379.588931][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.596522][ T2904] device bridge_slave_0 left promiscuous mode [ 379.605718][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.615174][ T2904] device veth1_macvtap left promiscuous mode [ 379.621346][ T2904] device veth0_vlan left promiscuous mode [ 379.767140][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 379.791087][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.808168][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.816372][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.842471][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.850848][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.873353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.881420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.889554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.897060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.897844][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 379.916206][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 379.928524][T10471] device veth0_vlan entered promiscuous mode [ 379.946365][T10471] device veth1_macvtap entered promiscuous mode [ 379.952608][ T309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.965789][ T309] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.975753][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.991225][ T309] usb 2-1: config 0 descriptor?? [ 379.999125][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.007306][ T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 380.015498][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.024723][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.032734][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.042753][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.050892][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.059465][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.067740][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.074616][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.082186][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.090538][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.098945][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.105783][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.113361][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.121405][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.129826][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.138289][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.158099][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.165844][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.174465][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.182990][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.191306][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.224357][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.236215][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.253823][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.258838][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 380.261976][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.275443][T10474] device veth0_vlan entered promiscuous mode [ 380.302786][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.313771][T10474] device veth1_macvtap entered promiscuous mode [ 380.331156][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.339656][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.420969][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.429797][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.857236][ T309] usbhid 2-1:0.0: can't add hid device: -71 [ 380.863157][ T309] usbhid: probe of 2-1:0.0 failed with error -71 [ 380.870666][ T309] usb 2-1: USB disconnect, device number 68 [ 380.897187][ T20] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 380.907162][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.915043][ T20] usb 3-1: Product: syz [ 380.919114][ T20] usb 3-1: Manufacturer: syz [ 380.923764][ T20] usb 3-1: SerialNumber: syz [ 380.935306][ T20] usb 3-1: config 0 descriptor?? [ 380.977931][ T20] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 380.987844][ T20] usb 3-1: Detected FT232H [ 381.187179][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 381.227992][ T2904] device bridge_slave_1 left promiscuous mode [ 381.233972][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.251988][ T2904] device bridge_slave_0 left promiscuous mode [ 381.264869][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.285650][ T2904] device veth1_macvtap left promiscuous mode [ 381.297977][ T2904] device veth0_vlan left promiscuous mode [ 381.437262][ T20] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 381.453828][ T20] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 381.705022][ T39] usb 3-1: USB disconnect, device number 54 [ 381.720839][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 381.733572][ T39] ftdi_sio 3-1:0.0: device disconnected [ 381.790809][T10562] loop3: detected capacity change from 0 to 32768 [ 382.051459][T10586] loop3: detected capacity change from 0 to 1024 [ 382.139486][T10586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.227564][ T309] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 382.427277][ T20] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 382.487222][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 382.517162][ T39] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 382.617437][ T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.707137][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 382.717221][ T309] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 382.726163][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 382.734548][ T309] usb 5-1: SerialNumber: syz [ 382.743097][ T309] usb 5-1: config 0 descriptor?? [ 382.757327][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 382.787843][ T309] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 382.794623][ T309] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 382.803094][ T309] usb 5-1: Failed to create links for entity 255 [ 382.809343][ T309] usb 5-1: Failed to register entities (-22). [ 382.827198][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.840009][ T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.848941][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.861028][ T20] usb 4-1: config 0 descriptor?? [ 382.877238][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.887993][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.897582][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 382.906542][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.960332][ T39] hub 3-1:4.0: USB hub found [ 382.989907][ T8350] usb 5-1: USB disconnect, device number 45 [ 383.207276][ T39] hub 3-1:4.0: 7 ports detected [ 383.227183][ T39] hub 3-1:4.0: insufficient power available to use all downstream ports [ 383.342987][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003F/input/input61 [ 383.427178][ T39] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 383.433342][ T39] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 383.488406][ T39] usb 3-1: USB disconnect, device number 55 [ 383.493354][ T20] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 383.755582][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0 [ 383.768381][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0 [ 383.781156][T10586] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 383.790596][T10586] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3867: mark_inode_dirty error [ 383.802057][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0 [ 383.837163][ T8350] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 383.917196][ T962] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 384.077163][ T8350] usb 2-1: Using ep0 maxpacket: 16 [ 384.157319][ T962] usb 5-1: Using ep0 maxpacket: 8 [ 384.277364][ T962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.342086][T10474] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.HNiROx/7/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 384.343290][ T39] usb 4-1: USB disconnect, device number 41 [ 384.364457][T10474] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 384.370570][ T8350] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 384.382869][T10474] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 384.391879][ T962] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 384.403244][T10474] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 384.421273][ T8350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.432262][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 384.441031][ T8350] usb 2-1: Product: syz [ 384.445387][ T962] usb 5-1: SerialNumber: syz [ 384.452561][ T8350] usb 2-1: Manufacturer: syz [ 384.463283][ T8350] usb 2-1: SerialNumber: syz [ 384.470250][ T962] usb 5-1: config 0 descriptor?? [ 384.475384][ T8350] usb 2-1: config 0 descriptor?? [ 384.480410][ T2904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 384.507872][ T962] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 384.514617][ T962] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 384.523475][ T962] usb 5-1: Failed to create links for entity 255 [ 384.530091][ T962] usb 5-1: Failed to register entities (-22). [ 384.538149][ T8350] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 384.561711][ T8350] usb 2-1: Detected FT232H [ 384.699701][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.706708][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.714372][T10686] device bridge_slave_0 entered promiscuous mode [ 384.718438][ T448] usb 5-1: USB disconnect, device number 46 [ 384.722262][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.733411][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.740891][T10686] device bridge_slave_1 entered promiscuous mode [ 384.757236][ T8350] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 384.800584][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.807445][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.814617][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.821438][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.844702][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.852329][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.859645][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.869505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.877679][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.884529][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.898238][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.906446][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.913404][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.930449][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.938472][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.952993][T10686] device veth0_vlan entered promiscuous mode [ 384.958931][ T20] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 384.966904][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.975644][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.983567][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.991117][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.005445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.013360][ T8350] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 385.020738][ T8350] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 385.022400][T10686] device veth1_macvtap entered promiscuous mode [ 385.045074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.055342][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.098205][ T320] device bridge_slave_1 left promiscuous mode [ 385.104210][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.111658][ T320] device bridge_slave_0 left promiscuous mode [ 385.117910][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.125695][ T320] device veth1_macvtap left promiscuous mode [ 385.133041][ T320] device veth0_vlan left promiscuous mode [ 385.198025][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 385.230547][ T309] usb 2-1: USB disconnect, device number 69 [ 385.239215][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 385.257571][ T309] ftdi_sio 2-1:0.0: device disconnected [ 385.317232][ T20] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 385.325591][ T20] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 385.335908][ T20] usb 3-1: config 135 has no interface number 0 [ 385.342204][ T20] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.528558][ T20] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 385.543602][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.554006][ T20] usb 3-1: Product: syz [ 385.558069][ T20] usb 3-1: Manufacturer: syz [ 385.562455][ T20] usb 3-1: SerialNumber: syz [ 385.619102][ T20] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 385.625308][ T20] usb 3-1: No valid video chain found. [ 385.727179][ T961] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 385.819853][ T20] usb 3-1: USB disconnect, device number 56 [ 385.874418][T10817] sock: sock_set_timeout: `syz.4.3972' (pid 10817) tries to set negative timeout [ 385.977527][ T961] usb 4-1: Using ep0 maxpacket: 8 [ 386.107904][ T961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.144584][T10871] device team_slave_0 entered promiscuous mode [ 386.187239][ T291] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 386.197207][ T961] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 386.213248][ T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 386.214135][T10886] __nla_validate_parse: 3 callbacks suppressed [ 386.214155][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 386.232160][ T961] usb 4-1: SerialNumber: syz [ 386.238147][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 386.256356][ T961] usb 4-1: config 0 descriptor?? [ 386.302976][T10899] device vlan1 entered promiscuous mode [ 386.310164][ T961] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 386.318318][ T961] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized! [ 386.326791][ T961] usb 4-1: Failed to create links for entity 255 [ 386.333328][T10899] device vlan1 left promiscuous mode [ 386.333372][ T961] usb 4-1: Failed to register entities (-22). [ 386.363354][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'. [ 386.424108][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 386.447158][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 386.461097][ T291] usb 5-1: Using ep0 maxpacket: 16 [ 386.512042][ T309] usb 4-1: USB disconnect, device number 42 [ 386.579964][T10940] loop1: detected capacity change from 0 to 128 [ 386.661072][ T30] audit: type=1400 audit(1719464328.002:361): avc: denied { mounton } for pid=10939 comm="syz.1.4031" path="/root/syzkaller.SwXnXC/126/file0/file0" dev="loop1" ino=1048912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 386.758059][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'. [ 386.766889][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'. [ 386.777591][ T291] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 386.791317][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.797184][ T39] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 386.804972][ T291] usb 5-1: Product: syz [ 386.811045][ T291] usb 5-1: Manufacturer: syz [ 386.822214][ T291] usb 5-1: SerialNumber: syz [ 386.836190][ T291] usb 5-1: config 0 descriptor?? [ 386.852225][T10956] loop1: detected capacity change from 0 to 256 [ 386.897908][ T291] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 386.905521][ T291] usb 5-1: Detected FT232H [ 386.927760][T10956] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 387.047154][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 387.117213][ T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 387.167351][ T39] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 387.175624][ T39] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 387.186501][ T39] usb 1-1: config 135 has no interface number 0 [ 387.192695][ T39] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.207179][ T8350] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 387.357249][ T39] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 387.366335][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.374287][ T39] usb 1-1: Product: syz [ 387.377216][ T291] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 387.378328][ T39] usb 1-1: Manufacturer: syz [ 387.385335][ T291] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 387.389857][ T39] usb 1-1: SerialNumber: syz [ 387.437942][ T39] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 387.444262][ T39] usb 1-1: No valid video chain found. [ 387.449538][ T8350] usb 2-1: Using ep0 maxpacket: 8 [ 387.567228][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.577270][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 387.586162][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.591630][ T291] usb 5-1: USB disconnect, device number 47 [ 387.599789][ T20] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 387.600310][ T8350] usb 2-1: config 0 descriptor?? [ 387.608248][ T291] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 387.621376][ T291] ftdi_sio 5-1:0.0: device disconnected [ 387.641143][ T962] usb 1-1: USB disconnect, device number 35 [ 387.851128][ T291] usb 2-1: USB disconnect, device number 70 [ 388.027206][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 388.297206][ T20] usb 4-1: string descriptor 0 read error: -22 [ 388.303457][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.312474][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.367690][ T20] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 388.377134][ T962] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 388.473481][T11009] syz.1.4059[11009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.473562][T11009] syz.1.4059[11009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.540963][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 388.565580][ T30] audit: type=1326 audit(1719464329.902:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.1.4059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67b1c9ae9 code=0x0 [ 388.593031][ T7194] usb 4-1: USB disconnect, device number 43 [ 388.637133][ T962] usb 5-1: Using ep0 maxpacket: 8 [ 388.666812][ T30] audit: type=1400 audit(1719464330.002:363): avc: denied { getopt } for pid=11008 comm="syz.1.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.757200][ T962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.847216][ T962] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 388.866280][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 388.874338][ T962] usb 5-1: SerialNumber: syz [ 388.887502][ T962] usb 5-1: config 0 descriptor?? [ 388.927918][ T962] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 388.934661][ T962] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 388.943197][ T962] usb 5-1: Failed to create links for entity 255 [ 388.950914][ T962] usb 5-1: Failed to register entities (-22). [ 389.129952][ T309] usb 5-1: USB disconnect, device number 48 [ 389.179837][T11016] loop3: detected capacity change from 0 to 256 [ 389.717163][ T291] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.814761][T11040] loop4: detected capacity change from 0 to 256 [ 389.816214][T11038] loop1: detected capacity change from 0 to 128 [ 389.847145][ T309] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 389.863970][T11040] FAT-fs (loop4): Directory bread(block 64) failed [ 389.870491][T11040] FAT-fs (loop4): Directory bread(block 65) failed [ 389.876929][T11040] FAT-fs (loop4): Directory bread(block 66) failed [ 389.883767][T11038] FAT-fs (loop1): Unrecognized mount option "184467440737095516150x000000000000ee01" or missing value [ 389.898195][T11040] FAT-fs (loop4): Directory bread(block 67) failed [ 389.904774][T11040] FAT-fs (loop4): Directory bread(block 68) failed [ 389.911414][T11040] FAT-fs (loop4): Directory bread(block 69) failed [ 389.918281][T11040] FAT-fs (loop4): Directory bread(block 70) failed [ 389.924886][T11040] FAT-fs (loop4): Directory bread(block 71) failed [ 389.931445][T11040] FAT-fs (loop4): Directory bread(block 72) failed [ 389.938391][T11040] FAT-fs (loop4): Directory bread(block 73) failed [ 389.967164][ T291] usb 1-1: Using ep0 maxpacket: 8 [ 390.071734][ T30] audit: type=1400 audit(1719464331.412:364): avc: denied { connect } for pid=11046 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 390.099605][ T30] audit: type=1400 audit(1719464331.432:365): avc: denied { write } for pid=11046 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 390.127271][ T291] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 390.127303][ T291] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 390.127326][ T291] usb 1-1: config 135 has no interface number 0 [ 390.127355][ T291] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.173877][ T30] audit: type=1400 audit(1719464331.512:366): avc: denied { read } for pid=11048 comm="syz.4.4074" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 390.196834][ T30] audit: type=1400 audit(1719464331.512:367): avc: denied { open } for pid=11048 comm="syz.4.4074" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 390.267254][ T309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.277320][ T309] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.327290][ T291] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 390.336555][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.344457][ T291] usb 1-1: Product: syz [ 390.348446][ T291] usb 1-1: Manufacturer: syz [ 390.352776][ T291] usb 1-1: SerialNumber: syz [ 390.367299][ T309] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 390.376283][ T309] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 390.384625][ T309] usb 3-1: Manufacturer: syz [ 390.390172][ T309] usb 3-1: config 0 descriptor?? [ 390.397842][ T291] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 390.404094][ T291] usb 1-1: No valid video chain found. [ 390.598919][ T309] usb 1-1: USB disconnect, device number 36 [ 390.634305][ T20] usb 3-1: USB disconnect, device number 57 [ 390.827168][ T448] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 391.067202][ T448] usb 2-1: Using ep0 maxpacket: 16 [ 391.177259][ T20] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 391.187285][ T448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.198222][ T448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.213360][ T448] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.225793][T11071] loop2: detected capacity change from 0 to 256 [ 391.232588][ T448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.241699][ T448] usb 2-1: config 0 descriptor?? [ 391.256359][T11071] FAT-fs (loop2): Directory bread(block 64) failed [ 391.263113][T11071] FAT-fs (loop2): Directory bread(block 65) failed [ 391.269730][T11071] FAT-fs (loop2): Directory bread(block 66) failed [ 391.276064][T11071] FAT-fs (loop2): Directory bread(block 67) failed [ 391.282533][T11071] FAT-fs (loop2): Directory bread(block 68) failed [ 391.288973][T11071] FAT-fs (loop2): Directory bread(block 69) failed [ 391.295327][T11071] FAT-fs (loop2): Directory bread(block 70) failed [ 391.301788][T11071] FAT-fs (loop2): Directory bread(block 71) failed [ 391.308275][T11071] FAT-fs (loop2): Directory bread(block 72) failed [ 391.314727][T11071] FAT-fs (loop2): Directory bread(block 73) failed [ 391.377254][ T7194] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 391.417907][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 391.497251][ T962] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 391.547287][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.647246][ T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 391.656179][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 391.664702][ T20] usb 4-1: SerialNumber: syz [ 391.670218][ T20] usb 4-1: config 0 descriptor?? [ 391.718464][ T448] microsoft 0003:045E:07DA.0040: No inputs registered, leaving [ 391.726706][ T20] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 391.733637][ T448] microsoft 0003:045E:07DA.0040: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 391.737551][ T7194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.744938][ T20] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized! [ 391.755162][ T7194] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.763587][ T448] microsoft 0003:045E:07DA.0040: no inputs found [ 391.778239][ T20] usb 4-1: Failed to create links for entity 255 [ 391.784422][ T20] usb 4-1: Failed to register entities (-22). [ 391.790367][ T448] microsoft 0003:045E:07DA.0040: could not initialize ff, continuing anyway [ 391.847460][ T7194] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 391.856450][ T7194] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 391.864405][ T7194] usb 1-1: Manufacturer: syz [ 391.868968][ T962] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 391.879622][ T962] usb 5-1: config 1 interface 0 has no altsetting 1 [ 391.886291][ T7194] usb 1-1: config 0 descriptor?? [ 391.922663][ T20] usb 4-1: USB disconnect, device number 44 [ 391.936764][T11060] UDC core: couldn't find an available UDC or it's busy: -16 [ 391.944013][T11060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 392.047267][ T962] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.056204][ T962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.064412][ T962] usb 5-1: Product: syz [ 392.068421][ T962] usb 5-1: Manufacturer: syz [ 392.072784][ T962] usb 5-1: SerialNumber: syz [ 392.117760][ T962] cdc_ether 5-1:1.0: skipping garbage [ 392.123088][ T962] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 392.148939][T11068] loop0: detected capacity change from 0 to 2048 [ 392.173205][ T20] usb 2-1: USB disconnect, device number 71 [ 392.233570][ T8350] usb 1-1: USB disconnect, device number 37 [ 392.318783][ T7194] usb 5-1: USB disconnect, device number 49 [ 392.747164][ T8350] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 392.754784][T11099] loop1: detected capacity change from 0 to 1024 [ 392.884340][T11099] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.895123][T11112] syz.4.4099[11112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.895202][T11112] syz.4.4099[11112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.935726][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4099'. [ 392.959923][ T30] audit: type=1326 audit(1719464334.302:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.4099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cd20cae9 code=0x0 [ 393.127208][ T8350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.137243][ T8350] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.177224][ T39] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 393.217293][ T8350] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 393.228225][ T8350] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 393.241766][ T8350] usb 4-1: Manufacturer: syz [ 393.255605][ T8350] usb 4-1: config 0 descriptor?? [ 393.427172][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 393.519048][ T20] usb 4-1: USB disconnect, device number 45 [ 393.547289][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.560016][ T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.569409][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.578076][ T39] usb 2-1: config 0 descriptor?? [ 394.007198][ T448] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 394.062875][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0041/input/input63 [ 394.139154][ T39] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 394.257231][ T448] usb 5-1: Using ep0 maxpacket: 16 [ 394.317201][ T20] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 394.397279][ T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.408169][ T448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.420966][ T448] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.429845][ T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.439080][ T448] usb 5-1: config 0 descriptor?? [ 394.481997][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0 [ 394.495027][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0 [ 394.507913][T11099] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 394.517712][T11099] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #15: comm syz.1.4094: mark_inode_dirty error [ 394.529284][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0 [ 394.697639][ T20] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 394.707876][ T20] usb 1-1: config 1 interface 0 has no altsetting 1 [ 394.908433][ T448] microsoft 0003:045E:07DA.0042: No inputs registered, leaving [ 394.915942][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.925080][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.933245][ T448] microsoft 0003:045E:07DA.0042: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 394.944524][ T448] microsoft 0003:045E:07DA.0042: no inputs found [ 394.950707][ T20] usb 1-1: Product: syz [ 394.954784][ T20] usb 1-1: Manufacturer: syz [ 394.959296][ T448] microsoft 0003:045E:07DA.0042: could not initialize ff, continuing anyway [ 394.967789][ T20] usb 1-1: SerialNumber: syz [ 395.019980][ T20] cdc_ether 1-1:1.0: skipping garbage [ 395.025299][ T20] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 395.064062][ T20] usb 2-1: USB disconnect, device number 72 [ 395.070858][ T9326] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.SwXnXC/145/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 395.093440][ T9326] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 395.109086][ T9326] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 395.123370][ T9326] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 395.132607][T11130] UDC core: couldn't find an available UDC or it's busy: -16 [ 395.143918][ T320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 395.156673][T11130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.220202][ T311] usb 1-1: USB disconnect, device number 38 [ 395.315756][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.322733][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.330525][T11162] device bridge_slave_0 entered promiscuous mode [ 395.340614][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.347485][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.354783][T11162] device bridge_slave_1 entered promiscuous mode [ 395.386834][ T309] usb 5-1: USB disconnect, device number 50 [ 395.423177][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.430189][T11162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.437399][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.444333][T11162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.465435][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.472877][ T962] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.481211][ T962] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.492375][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.500610][ T448] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 395.508466][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.515386][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.524500][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.532802][ T962] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.539671][ T962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.558235][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.566201][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.577705][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.591863][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.600155][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.607911][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.618362][T11162] device veth0_vlan entered promiscuous mode [ 395.628942][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.638117][T11162] device veth1_macvtap entered promiscuous mode [ 395.649671][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.663875][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.748154][ T320] device bridge_slave_1 left promiscuous mode [ 395.754256][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.762578][ T320] device bridge_slave_0 left promiscuous mode [ 395.768926][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.779197][ T448] usb 4-1: Using ep0 maxpacket: 16 [ 395.788200][ T320] device veth1_macvtap left promiscuous mode [ 395.799140][ T320] device veth0_vlan left promiscuous mode [ 395.948969][ T962] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 395.956924][T11188] syz.4.4129[11188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.957005][T11188] syz.4.4129[11188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.982695][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'. [ 396.006889][ T30] audit: type=1326 audit(1719464337.352:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.4.4129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cd20cae9 code=0x0 [ 396.117555][ T448] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 396.126493][ T448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.134810][ T448] usb 4-1: Product: syz [ 396.138832][ T448] usb 4-1: Manufacturer: syz [ 396.143180][ T448] usb 4-1: SerialNumber: syz [ 396.154737][ T448] usb 4-1: config 0 descriptor?? [ 396.218506][ T448] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 396.226150][ T448] usb 4-1: Detected FT232H [ 396.237338][ T39] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 396.317194][ T962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.327316][ T962] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.407289][ T962] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 396.416217][ T962] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 396.424542][ T962] usb 2-1: Manufacturer: syz [ 396.427258][ T448] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 396.430279][ T962] usb 2-1: config 0 descriptor?? [ 396.477183][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 396.593917][T11193] loop2: detected capacity change from 0 to 40427 [ 396.607371][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 396.618433][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 396.629421][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.641998][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.650842][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.659311][ T39] usb 1-1: config 0 descriptor?? [ 396.680419][T11193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 396.697694][ T448] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 396.707589][ T448] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 396.724961][T11193] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 396.731910][T11193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 396.794866][ T448] usb 2-1: USB disconnect, device number 73 [ 397.027590][ T30] audit: type=1400 audit(1719464338.292:370): avc: denied { setopt } for pid=11192 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.238289][ T962] usb 4-1: USB disconnect, device number 46 [ 397.244713][ T962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.254250][ T962] ftdi_sio 4-1:0.0: device disconnected [ 397.348955][ T9730] attempt to access beyond end of device [ 397.348955][ T9730] loop2: rw=2049, want=45104, limit=40427 [ 397.407636][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 397.413544][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 397.429654][ T39] usb 1-1: USB disconnect, device number 39 [ 397.557189][ T311] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 398.367309][ T311] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 398.378028][ T311] usb 5-1: config 1 interface 0 has no altsetting 1 [ 398.397170][ T291] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 398.537268][ T311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.546211][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.556130][ T311] usb 5-1: Product: syz [ 398.560421][ T311] usb 5-1: Manufacturer: syz [ 398.564912][ T311] usb 5-1: SerialNumber: syz [ 398.607690][ T311] cdc_ether 5-1:1.0: skipping garbage [ 398.612994][ T311] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 398.637186][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 398.686332][T11276] loop2: detected capacity change from 0 to 256 [ 398.773824][T11276] FAT-fs (loop2): Directory bread(block 64) failed [ 398.780501][T11276] FAT-fs (loop2): Directory bread(block 65) failed [ 398.792160][T11276] FAT-fs (loop2): Directory bread(block 66) failed [ 398.798687][T11276] FAT-fs (loop2): Directory bread(block 67) failed [ 398.811176][ T8350] usb 5-1: USB disconnect, device number 51 [ 398.817514][T11276] FAT-fs (loop2): Directory bread(block 68) failed [ 398.823951][T11276] FAT-fs (loop2): Directory bread(block 69) failed [ 398.831405][T11276] FAT-fs (loop2): Directory bread(block 70) failed [ 398.838606][T11276] FAT-fs (loop2): Directory bread(block 71) failed [ 398.844972][T11276] FAT-fs (loop2): Directory bread(block 72) failed [ 398.851532][T11276] FAT-fs (loop2): Directory bread(block 73) failed [ 398.887716][T11280] syz.0.4163[11280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.887800][T11280] syz.0.4163[11280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.917218][ T291] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 398.949567][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 398.976589][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.990844][ T30] audit: type=1326 audit(1719464340.332:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11279 comm="syz.0.4163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fab8ae9 code=0x0 [ 399.013958][ T291] usb 2-1: Product: syz [ 399.018346][ T291] usb 2-1: Manufacturer: syz [ 399.025263][ T291] usb 2-1: SerialNumber: syz [ 399.041365][ T291] usb 2-1: config 0 descriptor?? [ 399.078016][ T291] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 399.088138][ T291] usb 2-1: Detected FT232H [ 399.092960][ T30] audit: type=1400 audit(1719464340.402:372): avc: denied { ioctl } for pid=11297 comm="syz.3.4171" path="socket:[69735]" dev="sockfs" ino=69735 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.140996][T11307] loop3: detected capacity change from 0 to 256 [ 399.420513][T11307] FAT-fs (loop3): Directory bread(block 64) failed [ 399.433985][ T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 399.440838][T11307] FAT-fs (loop3): Directory bread(block 65) failed [ 399.449110][T11307] FAT-fs (loop3): Directory bread(block 66) failed [ 399.455472][T11307] FAT-fs (loop3): Directory bread(block 67) failed [ 399.461973][T11307] FAT-fs (loop3): Directory bread(block 68) failed [ 399.468374][T11307] FAT-fs (loop3): Directory bread(block 69) failed [ 399.474716][T11307] FAT-fs (loop3): Directory bread(block 70) failed [ 399.481173][T11307] FAT-fs (loop3): Directory bread(block 71) failed [ 399.487628][T11307] FAT-fs (loop3): Directory bread(block 72) failed [ 399.493953][T11307] FAT-fs (loop3): Directory bread(block 73) failed [ 399.757237][ T291] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 399.774102][ T291] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 399.792478][T11312] loop3: detected capacity change from 0 to 40427 [ 400.125173][T11337] loop0: detected capacity change from 0 to 256 [ 400.142688][T11312] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.160042][ T291] usb 2-1: USB disconnect, device number 74 [ 400.177651][T11337] FAT-fs (loop0): Directory bread(block 64) failed [ 400.186062][ T291] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 400.204896][ T291] ftdi_sio 2-1:0.0: device disconnected [ 400.206971][T11337] FAT-fs (loop0): Directory bread(block 65) failed [ 400.220279][T11312] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 400.226656][T11337] FAT-fs (loop0): Directory bread(block 66) failed [ 400.227298][T11312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 400.233118][T11337] FAT-fs (loop0): Directory bread(block 67) failed [ 400.254695][T11337] FAT-fs (loop0): Directory bread(block 68) failed [ 400.261256][T11337] FAT-fs (loop0): Directory bread(block 69) failed [ 400.267846][T11337] FAT-fs (loop0): Directory bread(block 70) failed [ 400.274317][T11337] FAT-fs (loop0): Directory bread(block 71) failed [ 400.281227][T11337] FAT-fs (loop0): Directory bread(block 72) failed [ 400.287976][T11337] FAT-fs (loop0): Directory bread(block 73) failed [ 400.617279][ T8350] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 400.630394][T11364] loop0: detected capacity change from 0 to 2048 [ 400.674998][T10686] attempt to access beyond end of device [ 400.674998][T10686] loop3: rw=2049, want=45104, limit=40427 [ 400.701136][T11364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.842884][T11377] syz.4.4201 (pid 11377) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 400.926819][ T30] audit: type=1400 audit(1719464342.262:373): avc: denied { create } for pid=11363 comm="syz.0.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 400.928385][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'. [ 401.028259][ T30] audit: type=1400 audit(1719464342.332:374): avc: denied { ioctl } for pid=11384 comm="syz.3.4205" path="/dev/rtc0" dev="devtmpfs" ino=167 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 401.129914][ T8350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.140527][ T8350] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.307504][ T8350] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 401.431716][ T8350] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 401.522206][ T8350] usb 3-1: Manufacturer: syz [ 401.552985][ T8350] usb 3-1: config 0 descriptor?? [ 401.576508][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.597186][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.604621][T11395] device bridge_slave_0 entered promiscuous mode [ 401.612569][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.619814][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.627489][T11395] device bridge_slave_1 entered promiscuous mode [ 401.706213][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.713135][T11395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.720336][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.727207][T11395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.791882][ T442] ================================================================== [ 401.799794][ T442] BUG: KASAN: use-after-free in l2tp_session_delete+0x24/0x4e0 [ 401.807155][ T442] Write of size 8 at addr ffff88811066bc08 by task kworker/u4:4/442 [ 401.814973][ T442] [ 401.817139][ T442] CPU: 1 PID: 442 Comm: kworker/u4:4 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 401.826947][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 401.836854][ T442] Workqueue: l2tp l2tp_tunnel_del_work [ 401.842146][ T442] Call Trace: [ 401.845279][ T442] [ 401.848044][ T442] dump_stack_lvl+0x151/0x1b7 [ 401.852554][ T442] ? io_uring_drop_tctx_refs+0x190/0x190 [ 401.858023][ T442] ? panic+0x751/0x751 [ 401.861934][ T442] print_address_description+0x87/0x3b0 [ 401.867306][ T442] kasan_report+0x179/0x1c0 [ 401.871642][ T442] ? schedule_preempt_disabled+0x20/0x20 [ 401.877112][ T442] ? l2tp_session_delete+0x24/0x4e0 [ 401.882146][ T442] ? l2tp_session_delete+0x24/0x4e0 [ 401.887183][ T442] kasan_check_range+0x293/0x2a0 [ 401.891954][ T442] __kasan_check_write+0x14/0x20 [ 401.896761][ T442] l2tp_session_delete+0x24/0x4e0 [ 401.901593][ T442] l2tp_tunnel_del_work+0x19d/0x380 [ 401.906625][ T442] process_one_work+0x6bb/0xc10 [ 401.911314][ T442] worker_thread+0xad5/0x12a0 [ 401.915827][ T442] ? _raw_spin_lock+0x1b0/0x1b0 [ 401.920517][ T442] kthread+0x421/0x510 [ 401.924416][ T442] ? worker_clr_flags+0x180/0x180 [ 401.929284][ T442] ? kthread_blkcg+0xd0/0xd0 [ 401.933703][ T442] ret_from_fork+0x1f/0x30 [ 401.937957][ T442] [ 401.940819][ T442] [ 401.942989][ T442] Allocated by task 11415: [ 401.947250][ T442] ____kasan_kmalloc+0xdb/0x110 [ 401.950603][T11353] loop2: detected capacity change from 0 to 2048 [ 401.951926][ T442] __kasan_kmalloc+0x9/0x10 [ 401.962438][ T442] __kmalloc+0x13a/0x270 [ 401.966515][ T442] l2tp_session_create+0x38/0xb60 [ 401.971468][ T442] pppol2tp_connect+0xc5d/0x1690 [ 401.976240][ T442] __sys_connect+0x38b/0x410 [ 401.980665][ T442] __x64_sys_connect+0x7a/0x90 [ 401.985300][ T442] do_syscall_64+0x3d/0xb0 [ 401.989528][ T442] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 401.995251][ T442] [ 401.997515][ T442] Freed by task 11415: [ 402.001420][ T442] kasan_set_track+0x4b/0x70 [ 402.005851][ T442] kasan_set_free_info+0x23/0x40 [ 402.010619][ T442] ____kasan_slab_free+0x126/0x160 [ 402.015571][ T442] __kasan_slab_free+0x11/0x20 [ 402.020169][ T442] slab_free_freelist_hook+0xbd/0x190 [ 402.025374][ T442] kfree+0xc8/0x220 [ 402.029019][ T442] l2tp_session_dec_refcount+0xa9/0x1b0 [ 402.034420][ T442] pppol2tp_session_destruct+0xaf/0xf0 [ 402.039710][ T442] __sk_destruct+0x56/0x5b0 [ 402.044035][ T442] __sk_free+0x36c/0x470 [ 402.048116][ T442] sk_free+0x51/0x80 [ 402.051850][ T442] pppol2tp_put_sk+0x77/0xb0 [ 402.056274][ T442] rcu_do_batch+0x57a/0xc10 [ 402.060613][ T442] rcu_core+0x517/0x1020 [ 402.064694][ T442] rcu_core_si+0x9/0x10 [ 402.068688][ T442] __do_softirq+0x26d/0x5bf [ 402.073025][ T442] [ 402.075193][ T442] Last potentially related work creation: [ 402.080750][ T442] kasan_save_stack+0x3b/0x60 [ 402.085259][ T442] __kasan_record_aux_stack+0xd3/0xf0 [ 402.090469][ T442] kasan_record_aux_stack_noalloc+0xb/0x10 [ 402.096110][ T442] call_rcu+0x135/0x1310 [ 402.100192][ T442] pppol2tp_release+0x20f/0x2d0 [ 402.104877][ T442] sock_close+0xdf/0x270 [ 402.108960][ T442] __fput+0x3fe/0x910 [ 402.112776][ T442] ____fput+0x15/0x20 [ 402.116599][ T442] task_work_run+0x129/0x190 [ 402.121030][ T442] exit_to_user_mode_loop+0xc4/0xe0 [ 402.126169][ T442] exit_to_user_mode_prepare+0x5a/0xa0 [ 402.131458][ T442] syscall_exit_to_user_mode+0x26/0x160 [ 402.136935][ T442] do_syscall_64+0x49/0xb0 [ 402.141191][ T442] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 402.146919][ T442] [ 402.149089][ T442] Second to last potentially related work creation: [ 402.155511][ T442] kasan_save_stack+0x3b/0x60 [ 402.160021][ T442] __kasan_record_aux_stack+0xd3/0xf0 [ 402.165379][ T442] kasan_record_aux_stack_noalloc+0xb/0x10 [ 402.171001][ T442] call_rcu+0x135/0x1310 [ 402.175086][ T442] fib6_del+0xd30/0x1060 [ 402.179167][ T442] fib6_clean_node+0x2ed/0x550 [ 402.183759][ T442] fib6_walk_continue+0x52d/0x720 [ 402.188619][ T442] fib6_walk+0x172/0x2d0 [ 402.192705][ T442] fib6_clean_all+0x202/0x2c0 [ 402.197218][ T442] rt6_disable_ip+0x153/0x730 [ 402.201725][ T442] addrconf_ifdown+0x160/0x1ae0 [ 402.206409][ T442] addrconf_notify+0x37d/0xdd0 [ 402.211011][ T442] raw_notifier_call_chain+0x8c/0xf0 [ 402.216131][ T442] dev_close_many+0x37c/0x530 [ 402.220648][ T442] unregister_netdevice_many+0x492/0x17c0 [ 402.226201][ T442] default_device_exit_batch+0x38a/0x3f0 [ 402.231668][ T442] cleanup_net+0x6ce/0xc00 [ 402.235943][ T442] process_one_work+0x6bb/0xc10 [ 402.240622][ T442] worker_thread+0xad5/0x12a0 [ 402.245126][ T442] kthread+0x421/0x510 [ 402.249027][ T442] ret_from_fork+0x1f/0x30 [ 402.253279][ T442] [ 402.255454][ T442] The buggy address belongs to the object at ffff88811066bc00 [ 402.255454][ T442] which belongs to the cache kmalloc-512 of size 512 [ 402.269337][ T442] The buggy address is located 8 bytes inside of [ 402.269337][ T442] 512-byte region [ffff88811066bc00, ffff88811066be00) [ 402.282269][ T442] The buggy address belongs to the page: [ 402.287750][ T442] page:ffffea0004419a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110668 [ 402.297806][ T442] head:ffffea0004419a00 order:2 compound_mapcount:0 compound_pincount:0 [ 402.305959][ T442] flags: 0x4000000000010200(slab|head|zone=1) [ 402.311880][ T442] raw: 4000000000010200 ffffea000485dd00 0000000300000003 ffff888100042f00 [ 402.320289][ T442] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 402.328700][ T442] page dumped because: kasan: bad access detected [ 402.334958][ T442] page_owner tracks the page as allocated [ 402.340504][ T442] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6, ts 26451976125, free_ts 26243182438 [ 402.358474][ T442] post_alloc_hook+0x1a3/0x1b0 [ 402.363068][ T442] prep_new_page+0x1b/0x110 [ 402.367408][ T442] get_page_from_freelist+0x3550/0x35d0 [ 402.372796][ T442] __alloc_pages+0x27e/0x8f0 [ 402.377216][ T442] new_slab+0x9a/0x4e0 [ 402.381122][ T442] ___slab_alloc+0x39e/0x830 [ 402.385548][ T442] __slab_alloc+0x4a/0x90 [ 402.389713][ T442] __kmalloc+0x16d/0x270 [ 402.393797][ T442] ___neigh_create+0x6d0/0x1bd0 [ 402.398482][ T442] __neigh_create+0x32/0x40 [ 402.402838][ T442] ip6_finish_output2+0x9ee/0x16e0 [ 402.407854][ T442] __ip6_finish_output+0x60f/0x7c0 [ 402.412803][ T442] ip6_finish_output+0x31/0x210 [ 402.417488][ T442] ip6_output+0x1f7/0x4d0 [ 402.421663][ T442] mld_sendpack+0x662/0xbb0 [ 402.425995][ T442] mld_ifc_work+0x7dc/0xbb0 [ 402.430334][ T442] page last free stack trace: [ 402.434846][ T442] free_unref_page_prepare+0x7c8/0x7d0 [ 402.440144][ T442] free_unref_page+0xe8/0x750 [ 402.444653][ T442] __free_pages+0x61/0xf0 [ 402.448819][ T442] __free_slab+0xec/0x1d0 [ 402.452984][ T442] __unfreeze_partials+0x165/0x1a0 [ 402.457934][ T442] put_cpu_partial+0xc4/0x120 [ 402.462445][ T442] __slab_free+0x1c8/0x290 [ 402.466711][ T442] ___cache_free+0x109/0x120 [ 402.471127][ T442] qlink_free+0x4d/0x90 [ 402.475120][ T442] qlist_free_all+0x44/0xb0 [ 402.479457][ T442] kasan_quarantine_reduce+0x15a/0x180 [ 402.484760][ T442] __kasan_slab_alloc+0x2f/0xe0 [ 402.489440][ T442] slab_post_alloc_hook+0x53/0x2c0 [ 402.494397][ T442] kmem_cache_alloc+0xf5/0x200 [ 402.499072][ T442] sock_alloc_inode+0x1b/0xb0 [ 402.503587][ T442] new_inode_pseudo+0x64/0x220 [ 402.508188][ T442] [ 402.510358][ T442] Memory state around the buggy address: [ 402.515830][ T442] ffff88811066bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 402.523726][ T442] ffff88811066bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 402.531632][ T442] >ffff88811066bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.539528][ T442] ^ [ 402.543689][ T442] ffff88811066bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.551589][ T442] ffff88811066bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.559479][ T442] ================================================================== [ 402.567380][ T442] Disabling lock debugging due to kernel taint [ 402.580111][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.587659][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.629871][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.638151][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.645530][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.653885][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.665461][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.673133][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.680776][ T8350] usb 3-1: USB disconnect, device number 58 [ 402.686635][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.695343][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.703431][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.710286][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.729916][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.738388][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.757948][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.765920][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.773989][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.782708][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.794249][T11395] device veth0_vlan entered promiscuous mode [ 402.808938][T11395] device veth1_macvtap entered promiscuous mode [ 402.836416][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.844970][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.853257][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.861816][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.869889][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 402.877410][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.885486][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.894028][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.902077][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.914235][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.921628][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.028322][ T10] device bridge_slave_1 left promiscuous mode [ 403.034291][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.041713][ T10] device bridge_slave_0 left promiscuous mode [ 403.047743][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.055645][ T10] device veth1_macvtap left promiscuous mode [ 403.061618][ T10] device veth0_vlan left promiscuous mode