last executing test programs: 6.732250796s ago: executing program 3 (id=594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 5.848358327s ago: executing program 3 (id=603): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = inotify_init() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x5452, &(0x7f0000000000)={'sit0\x00', 0x0}) 5.590272874s ago: executing program 3 (id=605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040cb06a78100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "5dfc077a"}]}}, 0x0}, 0x0) 3.548343165s ago: executing program 3 (id=635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0000000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.115832865s ago: executing program 1 (id=652): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x208, 0x20a, 0x278, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'netdevsim0\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.089724147s ago: executing program 1 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 3.017867831s ago: executing program 1 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000300)=[@clear_death, @acquire_done], 0x0, 0x0, 0x0}) 2.960156605s ago: executing program 1 (id=659): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="011f28bd700100008c001900000008000300", @ANYRES32=0x0, @ANYBLOB="06006d00ffff000005001e000f"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2.959446316s ago: executing program 0 (id=660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008180)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) read$FUSE(r1, &(0x7f000000a180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0x0, r2, {0x6, 0x2, 0x6, 0x5, 0x7, 0x8, {0x0, 0x8, 0x2, 0xe3f, 0x6, 0x200, 0xffff, 0x700, 0x1, 0x1000, 0xfffffff9, r3, r4, 0x400, 0x3}}}, 0x90) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2.938796647s ago: executing program 1 (id=661): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a0000001a6ca2a6"], 0x0}, 0x0) 2.938423317s ago: executing program 0 (id=662): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0) 2.821470445s ago: executing program 0 (id=663): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.691939144s ago: executing program 0 (id=664): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@grpjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r0, r0, 0x0, 0x100000001) 2.540704024s ago: executing program 0 (id=666): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 2.256688874s ago: executing program 4 (id=665): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r3, 0x280000f, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) 2.255836104s ago: executing program 0 (id=676): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 2.112235534s ago: executing program 4 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 1.622120488s ago: executing program 3 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfffffffffffffffb) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.621708678s ago: executing program 4 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.525847504s ago: executing program 3 (id=671): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x5}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.523994674s ago: executing program 4 (id=672): io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='sched_kthread_stop\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.479515728s ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1.294309021s ago: executing program 4 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xdd218) 1.293572651s ago: executing program 2 (id=688): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xd}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.267285112s ago: executing program 4 (id=678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "860e0a31"}]}}, 0x0}, 0x0) 990.986301ms ago: executing program 1 (id=679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='mm_page_alloc\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 380.242023ms ago: executing program 2 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) 372.383764ms ago: executing program 2 (id=682): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') 142.96543ms ago: executing program 2 (id=683): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffeffffff0ff00"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2000000, 0x2}) 0s ago: executing program 2 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x1, 0xfffffffc, 0x18, "1207b72d7fff64e9cafb000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 222] on usb-dummy_hcd.1-1/input0 [ 37.983972][ T1094] usb 2-1: USB disconnect, device number 7 [ 38.014757][ T1120] input: syz1 as /devices/virtual/input/input6 [ 38.160024][ T1131] loop2: detected capacity change from 0 to 256 [ 38.171465][ T1131] FAT-fs (loop2): Directory bread(block 64) failed [ 38.179355][ T1131] FAT-fs (loop2): Directory bread(block 65) failed [ 38.187378][ T1131] FAT-fs (loop2): Directory bread(block 66) failed [ 38.194839][ T1131] FAT-fs (loop2): Directory bread(block 67) failed [ 38.201553][ T1131] FAT-fs (loop2): Directory bread(block 68) failed [ 38.208128][ T1131] FAT-fs (loop2): Directory bread(block 69) failed [ 38.209720][ T311] usb 5-1: 0:2 : does not exist [ 38.214546][ T1131] FAT-fs (loop2): Directory bread(block 70) failed [ 38.226632][ T1131] FAT-fs (loop2): Directory bread(block 71) failed [ 38.233096][ T1131] FAT-fs (loop2): Directory bread(block 72) failed [ 38.239435][ T1131] FAT-fs (loop2): Directory bread(block 73) failed [ 38.246040][ T311] usb 5-1: USB disconnect, device number 5 [ 38.320260][ T1131] loop2: detected capacity change from 256 to 255 [ 38.367562][ T290] FAT-fs (loop2): error, invalid access to FAT (entry 0x00007f6d) [ 38.378055][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 38.533233][ T1160] xt_hashlimit: size too large, truncated to 1048576 [ 38.602284][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.609128][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.626497][ T1161] device bridge_slave_0 entered promiscuous mode [ 38.634555][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.639584][ T737] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.641471][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.666131][ T1167] loop4: detected capacity change from 0 to 128 [ 38.672800][ T1161] device bridge_slave_1 entered promiscuous mode [ 38.684042][ T1167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.699625][ T1094] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.709893][ T1167] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 38.767021][ T613] EXT4-fs (loop4): unmounting filesystem. [ 38.830143][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.837355][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.844431][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.851285][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.890976][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.898951][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.906159][ T737] usb 4-1: Using ep0 maxpacket: 16 [ 38.911962][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.931719][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.939927][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.946773][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.958986][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.966964][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.973894][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.981467][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.000807][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.016680][ T1161] device veth0_vlan entered promiscuous mode [ 39.023230][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.031937][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.039781][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.051821][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.059146][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.059683][ T1094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.066289][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.086704][ T316] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.092856][ T1094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.094686][ T737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.108944][ T1094] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 39.122720][ T1161] device veth1_macvtap entered promiscuous mode [ 39.131422][ T1094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.132368][ T737] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.143115][ T1094] usb 1-1: config 0 descriptor?? [ 39.149524][ T737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.163806][ T737] usb 4-1: config 0 descriptor?? [ 39.177656][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.186528][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.195213][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.261108][ T330] device bridge_slave_1 left promiscuous mode [ 39.267093][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.277800][ T330] device bridge_slave_0 left promiscuous mode [ 39.283885][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.291524][ T330] device veth1_macvtap left promiscuous mode [ 39.297441][ T330] device veth0_vlan left promiscuous mode [ 39.452247][ T1189] loop4: detected capacity change from 0 to 2048 [ 39.473887][ T1189] loop4: p1 < > p3 p4 < > [ 39.478941][ T1189] loop4: p3 start 4284289 is beyond EOD, truncated [ 39.489717][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.502271][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.507357][ T1189] F2FS-fs (loop4p4): Unable to read 1th superblock [ 39.512340][ T316] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 39.519119][ T1189] F2FS-fs (loop4p4): Unable to read 2th superblock [ 39.527480][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.539635][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.552762][ T316] usb 2-1: config 0 descriptor?? [ 39.613548][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 39.631227][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.638286][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.646062][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.653496][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.660932][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.668068][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.679786][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.686849][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.694299][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.701483][ T737] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 39.713040][ T737] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input7 [ 39.728997][ T737] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 39.898067][ T737] usb 1-1: USB disconnect, device number 7 [ 39.909894][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.926218][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.936507][ T291] usb 4-1: USB disconnect, device number 5 [ 39.938180][ T311] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 39.952308][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.961715][ T311] usb 3-1: config 0 descriptor?? [ 40.021424][ T316] hid-multitouch 0003:0EEF:72D0.0014: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 40.132489][ T1208] loop4: detected capacity change from 0 to 40427 [ 40.139232][ T1208] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 40.147614][ T1208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.156246][ T1208] F2FS-fs (loop4): invalid crc value [ 40.162576][ T1208] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.185552][ T1208] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 40.192788][ T1208] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.218937][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 40.230224][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 40.272252][ T1094] usb 2-1: USB disconnect, device number 8 [ 40.336092][ T1214] loop4: detected capacity change from 0 to 8192 [ 40.440396][ T311] belkin 0003:1020:0006.0015: report_id 0 is invalid [ 40.452405][ T311] belkin 0003:1020:0006.0015: item 0 0 1 8 parsing failed [ 40.459868][ T311] belkin 0003:1020:0006.0015: parse failed [ 40.465765][ T311] belkin: probe of 0003:1020:0006.0015 failed with error -22 [ 40.474579][ T1220] xt_hashlimit: size too large, truncated to 1048576 [ 40.661502][ T311] usb 3-1: USB disconnect, device number 6 [ 40.689603][ T1098] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 40.929638][ T1098] usb 5-1: Using ep0 maxpacket: 16 [ 40.960631][ T1237] loop1: detected capacity change from 0 to 2048 [ 40.979621][ T291] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.002843][ T1237] loop1: p1 < > p3 p4 < > [ 41.007542][ T1237] loop1: p3 start 4284289 is beyond EOD, truncated [ 41.016369][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 41.016383][ T28] audit: type=1400 audit(1726276154.532:319): avc: denied { mounton } for pid=1236 comm="syz.1.381" path="/dev/loop1p4" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.048158][ T1237] F2FS-fs (loop1p4): Unable to read 1th superblock [ 41.054585][ T1237] F2FS-fs (loop1p4): Unable to read 2th superblock [ 41.060925][ T1098] usb 5-1: config 0 has no interfaces? [ 41.196505][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 41.219729][ T1098] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.229749][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 41.239213][ T1098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.250222][ T1098] usb 5-1: Product: syz [ 41.254453][ T1098] usb 5-1: Manufacturer: syz [ 41.269639][ T1098] usb 5-1: SerialNumber: syz [ 41.274661][ T1098] r8152-cfgselector 5-1: config 0 descriptor?? [ 41.360007][ T291] usb 1-1: config 0 has no interfaces? [ 41.409635][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.529742][ T291] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.530265][ T1258] loop2: detected capacity change from 0 to 40427 [ 41.539213][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.545145][ T1098] r8152-cfgselector 5-1: Unknown version 0x0000 [ 41.553036][ T291] usb 1-1: Product: syz [ 41.569628][ T1258] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 41.573038][ T291] usb 1-1: Manufacturer: syz [ 41.579324][ T1258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.582069][ T291] usb 1-1: SerialNumber: syz [ 41.596515][ T1258] F2FS-fs (loop2): invalid crc value [ 41.598110][ T291] r8152-cfgselector 1-1: config 0 descriptor?? [ 41.609043][ T1258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.632651][ T1258] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.639871][ T1258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.664346][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 41.673791][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 41.756496][ T1098] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 41.789749][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.809785][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.819436][ T1269] loop2: detected capacity change from 0 to 512 [ 41.832742][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.846572][ T1269] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.391: inode #1: comm syz.2.391: iget: illegal inode # [ 41.861380][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.871294][ T19] usb 2-1: config 0 descriptor?? [ 41.876343][ T1269] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.391: error while reading EA inode 1 err=-117 [ 41.888642][ T1269] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.391: inode #1: comm syz.2.391: iget: illegal inode # [ 41.903716][ T1269] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.391: error while reading EA inode 1 err=-117 [ 41.915906][ T1269] EXT4-fs (loop2): 1 orphan inode deleted [ 41.922068][ T1269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.939269][ T1161] EXT4-fs (loop2): unmounting filesystem. [ 41.983182][ T1280] netlink: 9 bytes leftover after parsing attributes in process `syz.2.393'. [ 41.993077][ T1280] device gretap0 entered promiscuous mode [ 42.001903][ T1280] netlink: 5 bytes leftover after parsing attributes in process `syz.2.393'. [ 42.011793][ T1280] device gretap0 left promiscuous mode [ 42.013123][ T481] usb 1-1: config 0 descriptor?? [ 42.143557][ T39] usb 1-1: USB disconnect, device number 8 [ 42.159669][ T481] usb 1-1: can't set config #0, error -71 [ 42.176504][ T1299] loop2: detected capacity change from 0 to 256 [ 42.279652][ T1098] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.280246][ T1301] loop4: detected capacity change from 0 to 512 [ 42.295923][ T1301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.406: inode #1: comm syz.4.406: iget: illegal inode # [ 42.301750][ T1161] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 42.309457][ T1301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.406: error while reading EA inode 1 err=-117 [ 42.316970][ T1161] FAT-fs (loop2): Filesystem has been set read-only [ 42.329623][ T1301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.406: inode #1: comm syz.4.406: iget: illegal inode # [ 42.335175][ T1161] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 42.354731][ T1301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.406: error while reading EA inode 1 err=-117 [ 42.368109][ T19] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 42.369928][ T1301] EXT4-fs (loop4): 1 orphan inode deleted [ 42.384965][ T1301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.385906][ T19] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 42.423098][ T613] EXT4-fs (loop4): unmounting filesystem. [ 42.512135][ T28] audit: type=1400 audit(1726276156.032:320): avc: denied { read } for pid=1306 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.529670][ T1098] usb 4-1: Using ep0 maxpacket: 8 [ 42.533971][ T28] audit: type=1400 audit(1726276156.032:321): avc: denied { open } for pid=1306 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.589391][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.596691][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.604104][ T1306] device bridge_slave_0 entered promiscuous mode [ 42.612899][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.619977][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.627225][ T1306] device bridge_slave_1 entered promiscuous mode [ 42.649727][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.666376][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.681700][ T1098] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 42.690752][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.703106][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 42.714349][ T1098] usb 4-1: config 0 descriptor?? [ 42.715072][ T1311] loop0: detected capacity change from 0 to 2048 [ 42.727814][ T1311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.752097][ T1311] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 42.752133][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.767911][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.775153][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.781914][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.802680][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.810389][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.817495][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.826365][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.834849][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.841726][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.878638][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.891065][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.899058][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.905953][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.913188][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.921060][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.933780][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.944736][ T1306] device veth0_vlan entered promiscuous mode [ 42.951733][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.958995][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.959706][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 42.975165][ T1306] device veth1_macvtap entered promiscuous mode [ 42.984998][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.997768][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.006384][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.090908][ T10] device bridge_slave_1 left promiscuous mode [ 43.097022][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.099834][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.114663][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.114852][ T10] device bridge_slave_0 left promiscuous mode [ 43.124299][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.124346][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 43.130993][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.143065][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.168111][ T10] device veth1_macvtap left promiscuous mode [ 43.174114][ T39] usb 5-1: config 0 descriptor?? [ 43.174411][ T10] device veth0_vlan left promiscuous mode [ 43.191204][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.198445][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.205888][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.213215][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.221446][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.228649][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.235965][ T1098] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 43.244111][ T1098] playstation 0003:054C:0CE6.0017: hidraw1: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 43.256179][ T19] usb 2-1: USB disconnect, device number 9 [ 43.329670][ T385] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 43.399881][ T1098] playstation 0003:054C:0CE6.0017: Invalid byte count transferred, expected 20 got 0 [ 43.409350][ T1098] playstation 0003:054C:0CE6.0017: Failed to retrieve DualSense pairing info: -22 [ 43.418522][ T1098] playstation 0003:054C:0CE6.0017: Failed to get MAC address from DualSense [ 43.427185][ T1098] playstation 0003:054C:0CE6.0017: Failed to create dualsense. [ 43.435153][ T1098] playstation: probe of 0003:054C:0CE6.0017 failed with error -22 [ 43.449722][ T291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.606421][ T1098] usb 4-1: USB disconnect, device number 6 [ 43.660536][ T39] koneplus 0003:1E7D:2E22.0018: item fetching failed at offset 0/2 [ 43.668420][ T39] koneplus 0003:1E7D:2E22.0018: parse failed [ 43.674501][ T39] koneplus: probe of 0003:1E7D:2E22.0018 failed with error -22 [ 43.689665][ T291] usb 3-1: Using ep0 maxpacket: 16 [ 43.689675][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.705344][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.714913][ T385] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.727531][ T385] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 43.736328][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.744740][ T385] usb 1-1: config 0 descriptor?? [ 43.810517][ T291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 43.881701][ T19] usb 5-1: USB disconnect, device number 7 [ 43.969918][ T291] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 43.978916][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.986811][ T291] usb 3-1: Product: syz [ 43.990913][ T291] usb 3-1: Manufacturer: syz [ 43.995322][ T291] usb 3-1: SerialNumber: syz [ 44.001052][ T291] usb 3-1: config 0 descriptor?? [ 44.039675][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.040180][ T291] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 44.054560][ T291] usb 3-1: Detected FT232R [ 44.122153][ T1333] capability: warning: `syz.3.418' uses deprecated v2 capabilities in a way that may be insecure [ 44.230267][ T385] holtek_mouse 0003:04D9:A070.0019: invalid report_size 862009739 [ 44.238112][ T385] holtek_mouse 0003:04D9:A070.0019: item 0 4 1 7 parsing failed [ 44.245814][ T385] holtek_mouse 0003:04D9:A070.0019: hid parse failed: -22 [ 44.252913][ T385] holtek_mouse: probe of 0003:04D9:A070.0019 failed with error -22 [ 44.269737][ T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.279665][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 44.399691][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.410572][ T385] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.417871][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.427693][ T24] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 44.436677][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.440377][ T736] usb 1-1: USB disconnect, device number 9 [ 44.445137][ T24] usb 2-1: config 0 descriptor?? [ 44.520311][ T291] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.649750][ T385] usb 4-1: Using ep0 maxpacket: 16 [ 44.728041][ T39] usb 3-1: USB disconnect, device number 7 [ 44.734524][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.744141][ T39] ftdi_sio 3-1:0.0: device disconnected [ 44.769707][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.780571][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.790205][ T385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 44.802925][ T385] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 44.811809][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.820016][ T385] usb 4-1: config 0 descriptor?? [ 44.930604][ T24] saitek 0003:06A3:0CCD.001A: unknown main item tag 0x0 [ 44.937400][ T24] saitek 0003:06A3:0CCD.001A: unknown main item tag 0x0 [ 44.944248][ T24] saitek 0003:06A3:0CCD.001A: item fetching failed at offset 2/11 [ 44.952146][ T24] saitek 0003:06A3:0CCD.001A: parse failed [ 44.957779][ T24] saitek: probe of 0003:06A3:0CCD.001A failed with error -22 [ 44.968259][ T1338] loop4: detected capacity change from 0 to 512 [ 44.981350][ T1338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.990364][ T1338] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 45.002834][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 45.024806][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 45.046428][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.069399][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 45.091194][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 45.112631][ T1346] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 18: comm syz.4.421: lblock 23 mapped to illegal pblock 18 (length 1) [ 45.129752][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.144822][ T28] audit: type=1400 audit(1726276158.662:322): avc: denied { lock } for pid=1349 comm="syz.0.424" path="socket:[21185]" dev="sockfs" ino=21185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 45.172738][ T736] usb 2-1: USB disconnect, device number 10 [ 45.179500][ T1338] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 18: comm syz.4.421: lblock 23 mapped to illegal pblock 18 (length 1) [ 45.195215][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 45.199696][ T1352] input: syz0 as /devices/virtual/input/input8 [ 45.216031][ T1338] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.421: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 45.290525][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.309732][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.316787][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.334038][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.344105][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.359593][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.376758][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.383843][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.399595][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.406678][ T385] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 45.431430][ T385] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input9 [ 45.453697][ T385] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 45.490973][ T1356] loop2: detected capacity change from 0 to 512 [ 45.492292][ T39] usb 4-1: USB disconnect, device number 7 [ 45.519788][ T1356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.531681][ T1356] EXT4-fs (loop2): 1 truncate cleaned up [ 45.537752][ T1356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.596522][ T1356] loop2: detected capacity change from 512 to 11 [ 45.629771][ T1306] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 45.641881][ T1306] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 45.664663][ T1306] EXT4-fs (loop2): unmounting filesystem. [ 45.712004][ T1360] loop1: detected capacity change from 0 to 2048 [ 45.773113][ T1360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.794586][ T1360] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 45.818300][ T294] EXT4-fs (loop1): unmounting filesystem. [ 45.834810][ T613] EXT4-fs (loop4): unmounting filesystem. [ 45.897955][ T1370] ------------[ cut here ]------------ [ 45.903285][ T1370] WARNING: CPU: 0 PID: 1370 at mm/page_alloc.c:5690 __alloc_pages+0xc0/0x780 [ 45.911907][ T1370] Modules linked in: [ 45.915577][ T1370] CPU: 0 PID: 1370 Comm: syz.4.434 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 45.925496][ T1370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 45.935471][ T1370] RIP: 0010:__alloc_pages+0xc0/0x780 [ 45.940646][ T1370] Code: 0b 72 13 44 89 e8 25 00 20 00 00 75 09 80 3d 0b 94 d7 05 00 74 0d 83 fb 0a 76 16 45 31 e4 e9 4e 03 00 00 c6 05 f5 93 d7 05 01 <0f> 0b 83 fb 0a 77 ea 89 1c 24 44 23 2d d7 be da 05 65 48 8b 05 67 [ 45.960128][ T1370] RSP: 0018:ffffc90000767a40 EFLAGS: 00010246 [ 45.965959][ T1370] RAX: 0000000000000000 RBX: 000000000000001a RCX: 0000000000000000 [ 45.973821][ T1370] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000767ae8 [ 45.981625][ T1370] RBP: ffffc90000767b78 R08: dffffc0000000000 R09: ffffc90000767ad0 [ 45.989500][ T1370] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 45.997352][ T1370] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff920000ecf54 [ 46.005129][ T1370] FS: 00007f21afa516c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 46.013964][ T1370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.020409][ T1370] CR2: 000000110c2d6f34 CR3: 000000010fd77000 CR4: 00000000003506b0 [ 46.028217][ T1370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.036223][ T1370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.044106][ T1370] Call Trace: [ 46.047164][ T1370] [ 46.050145][ T1370] ? show_regs+0x58/0x60 [ 46.054218][ T1370] ? __warn+0x160/0x3d0 [ 46.058211][ T1370] ? __alloc_pages+0xc0/0x780 [ 46.062777][ T1370] ? report_bug+0x4d5/0x7d0 [ 46.067229][ T1370] ? __alloc_pages+0xc0/0x780 [ 46.071806][ T1370] ? handle_bug+0x41/0x70 [ 46.075903][ T1370] ? exc_invalid_op+0x1b/0x50 [ 46.080451][ T1370] ? asm_exc_invalid_op+0x1b/0x20 [ 46.085303][ T1370] ? __alloc_pages+0xc0/0x780 [ 46.089823][ T1370] ? do_vfs_ioctl+0xba7/0x29a0 [ 46.094403][ T1370] ? prep_new_page+0x110/0x110 [ 46.098995][ T1370] __kmalloc_large_node+0x9e/0x1b0 [ 46.103984][ T1370] ? ioctl_has_perm+0x1f8/0x560 [ 46.108625][ T1370] ? input_mt_init_slots+0xcf/0xa50 [ 46.110586][ T1354] loop0: detected capacity change from 0 to 131072 [ 46.113720][ T1370] __kmalloc+0xef/0x1e0 [ 46.123991][ T1370] ? ioctl_has_perm+0x3f0/0x560 [ 46.125930][ T1354] F2FS-fs (loop0): invalid crc value [ 46.128673][ T1370] input_mt_init_slots+0xcf/0xa50 [ 46.128703][ T1370] ? mutex_lock_interruptible+0xb1/0x1e0 [ 46.144227][ T1370] uinput_create_device+0x522/0x630 [ 46.149246][ T1370] uinput_ioctl_handler+0xa63/0x16a0 [ 46.154401][ T1370] ? selinux_file_ioctl+0x3cc/0x540 [ 46.159592][ T1370] ? uinput_release+0x50/0x50 [ 46.164207][ T1370] ? __fget_files+0x2cb/0x330 [ 46.168623][ T1370] uinput_ioctl+0x28/0x30 [ 46.172840][ T1370] ? uinput_poll+0x120/0x120 [ 46.177210][ T1370] __se_sys_ioctl+0x114/0x190 [ 46.181756][ T1370] __x64_sys_ioctl+0x7b/0x90 [ 46.186156][ T1370] x64_sys_call+0x98/0x9a0 [ 46.190463][ T1370] do_syscall_64+0x3b/0xb0 [ 46.190964][ T1354] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 46.194653][ T1370] ? clear_bhb_loop+0x55/0xb0 [ 46.194683][ T1370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.215484][ T1370] RIP: 0033:0x7f21aeb7def9 [ 46.219777][ T1370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.224126][ T1354] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 46.239308][ T1370] RSP: 002b:00007f21afa51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.239341][ T1370] RAX: ffffffffffffffda RBX: 00007f21aed35f80 RCX: 00007f21aeb7def9 [ 46.239353][ T1370] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 46.239364][ T1370] RBP: 00007f21aebf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 46.278413][ T1370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.286495][ T1370] R13: 0000000000000000 R14: 00007f21aed35f80 R15: 00007fff5915fb68 [ 46.294324][ T1370] [ 46.297149][ T1370] ---[ end trace 0000000000000000 ]--- [ 46.325024][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.335765][ T1390] loop3: detected capacity change from 0 to 1024 [ 46.349900][ T1371] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.349922][ T1390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.359070][ T1371] device bridge_slave_0 entered promiscuous mode [ 46.396281][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.404490][ T1371] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.406485][ T1390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 46.412494][ T1371] device bridge_slave_1 entered promiscuous mode [ 46.419641][ T385] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.434883][ T1390] System zones: 0-1, 3-12 [ 46.450583][ T1390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.476387][ T28] audit: type=1400 audit(1726276159.992:323): avc: denied { create } for pid=1397 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.506156][ T1390] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 46.525261][ T1069] EXT4-fs (loop3): unmounting filesystem. [ 46.531444][ T28] audit: type=1400 audit(1726276160.022:324): avc: denied { write } for pid=1397 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.553484][ T1400] netem: change failed [ 46.565451][ T1402] loop3: detected capacity change from 0 to 512 [ 46.571690][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.572282][ T1402] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.578533][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.578633][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.598672][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.606442][ T1402] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.631067][ T1402] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 46.650618][ T1402] EXT4-fs (loop3): Remounting filesystem read-only [ 46.657008][ T1402] Quota error (device loop3): write_blk: dquota write failed [ 46.669777][ T385] usb 2-1: Using ep0 maxpacket: 16 [ 46.676690][ T1402] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 46.689707][ T1402] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.445: Failed to acquire dquot type 0 [ 46.702703][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.710045][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.717315][ T1402] EXT4-fs (loop3): 1 orphan inode deleted [ 46.739852][ T1402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.740429][ T1409] loop4: detected capacity change from 0 to 16 [ 46.755897][ T1409] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.768473][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.776186][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.787235][ T28] audit: type=1400 audit(1726276160.302:325): avc: denied { mounton } for pid=1405 comm="syz.4.446" path="/79/file2/file0" dev="loop4" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.789693][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.810643][ T1402] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.445: Abort forced by user [ 46.820916][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.840203][ T1406] incfs: Can't find or create .index dir in ./file0/../file0 [ 46.848246][ T1406] incfs: mount failed -30 [ 46.850392][ T1402] EXT4-fs (loop3): Remounting filesystem read-only [ 46.859197][ T481] device bridge_slave_1 left promiscuous mode [ 46.865373][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.873005][ T481] device bridge_slave_0 left promiscuous mode [ 46.879146][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.892139][ T481] device veth1_macvtap left promiscuous mode [ 46.898112][ T481] device veth0_vlan left promiscuous mode [ 46.909779][ T1069] EXT4-fs (loop3): unmounting filesystem. [ 46.921332][ T1417] loop4: detected capacity change from 0 to 1024 [ 46.939724][ T385] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 46.950912][ T1417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.959249][ T385] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 46.975433][ T385] usb 2-1: Product: syz [ 46.980633][ T10] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 46.995718][ T385] usb 2-1: Manufacturer: syz [ 47.000982][ T385] usb 2-1: config 0 descriptor?? [ 47.005830][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.018512][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.018512][ T10] [ 47.028244][ T10] EXT4-fs (loop4): Total free blocks count 0 [ 47.034770][ T10] EXT4-fs (loop4): Free/Dirty block details [ 47.040692][ T10] EXT4-fs (loop4): free_blocks=68451041280 [ 47.046327][ T10] EXT4-fs (loop4): dirty_blocks=16 [ 47.052332][ T10] EXT4-fs (loop4): Block reservation details [ 47.058125][ T10] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 47.064992][ T613] EXT4-fs (loop4): unmounting filesystem. [ 47.071405][ T1371] device veth0_vlan entered promiscuous mode [ 47.082751][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.092893][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.114160][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.121039][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.128181][ T736] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 47.141412][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.152339][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.160508][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.167340][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.174557][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.182672][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.190557][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.198444][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.206303][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.214520][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.223169][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.230939][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.238946][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.246513][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.261689][ T28] audit: type=1400 audit(1726276160.782:326): avc: denied { bind } for pid=1426 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.262969][ T1371] device veth1_macvtap entered promiscuous mode [ 47.289496][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.297866][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.305974][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.320207][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.328311][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.336561][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.345188][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.370599][ T1430] loop4: detected capacity change from 0 to 1024 [ 47.386113][ T1430] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.394643][ T1430] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.401542][ T1430] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.454: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.439889][ T1430] EXT4-fs (loop4): 1 orphan inode deleted [ 47.445562][ T1430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.460803][ T613] EXT4-fs (loop4): unmounting filesystem. [ 47.501319][ T385] kovaplus 0003:1E7D:2D50.001C: item fetching failed at offset 5/7 [ 47.512966][ T385] kovaplus 0003:1E7D:2D50.001C: parse failed [ 47.519849][ T736] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 47.521524][ T385] kovaplus: probe of 0003:1E7D:2D50.001C failed with error -22 [ 47.538418][ T736] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 47.559668][ T736] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 47.568520][ T736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.604941][ T1420] loop3: detected capacity change from 0 to 131072 [ 47.621108][ T1420] F2FS-fs (loop3): invalid crc value [ 47.628415][ T1420] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 47.639065][ T1412] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.669064][ T1420] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 47.727916][ T385] usb 2-1: USB disconnect, device number 11 [ 48.150777][ T10] device bridge_slave_1 left promiscuous mode [ 48.156743][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.174488][ T10] device bridge_slave_0 left promiscuous mode [ 48.194273][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.208732][ T10] device veth1_macvtap left promiscuous mode [ 48.215258][ T10] device veth0_vlan left promiscuous mode [ 48.425158][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.432788][ T1463] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.441022][ T1463] device bridge_slave_0 entered promiscuous mode [ 48.458516][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.465485][ T1463] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.473952][ T1463] device bridge_slave_1 entered promiscuous mode [ 48.497868][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.505183][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.512516][ T1460] device bridge_slave_0 entered promiscuous mode [ 48.519480][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.526521][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.533906][ T1460] device bridge_slave_1 entered promiscuous mode [ 48.589777][ T736] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 48.597309][ T736] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input11 [ 48.609622][ T385] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.646538][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.653532][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.661210][ T1471] device bridge_slave_0 entered promiscuous mode [ 48.667926][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.675018][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.682304][ T1471] device bridge_slave_1 entered promiscuous mode [ 48.742631][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.749610][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.756649][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.763572][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.775143][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.782027][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.789078][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.795914][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.811640][ T39] usb 1-1: USB disconnect, device number 10 [ 48.821132][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.828889][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.836395][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.843532][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.884529][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.892579][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.913266][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.921699][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.929919][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.936762][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.954603][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.962789][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.971203][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.978175][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.985627][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.996646][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.006310][ T385] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 49.015306][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.024055][ T385] usb 3-1: config 0 descriptor?? [ 49.032143][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.039897][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.047193][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.055667][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.063760][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070611][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.078046][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.086298][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.094229][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.101155][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.121183][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.129033][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.137339][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.145222][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.163339][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.171387][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.179141][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.187116][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.203956][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.212416][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.226847][ T1463] device veth0_vlan entered promiscuous mode [ 49.235380][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.243594][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.251540][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.258728][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.266056][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.274537][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.282951][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.290336][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.302708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.311063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.318963][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.325743][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.333092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.349430][ T1460] device veth0_vlan entered promiscuous mode [ 49.363039][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.371527][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.379565][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.386417][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.396864][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.404775][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.412650][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.420573][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.428298][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.436391][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.444289][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.451632][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.469712][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.477876][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.490887][ T385] itetech 0003:06CB:73F4.001D: unknown main item tag 0x0 [ 49.498804][ T1460] device veth1_macvtap entered promiscuous mode [ 49.505448][ T385] itetech 0003:06CB:73F4.001D: unknown main item tag 0x0 [ 49.513272][ T385] itetech 0003:06CB:73F4.001D: item fetching failed at offset 2/7 [ 49.513453][ T10] device bridge_slave_1 left promiscuous mode [ 49.521165][ T385] itetech: probe of 0003:06CB:73F4.001D failed with error -22 [ 49.527853][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.543086][ T10] device bridge_slave_0 left promiscuous mode [ 49.548998][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.556812][ T10] device bridge_slave_1 left promiscuous mode [ 49.562819][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.570157][ T10] device bridge_slave_0 left promiscuous mode [ 49.576142][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.583912][ T10] device veth1_macvtap left promiscuous mode [ 49.589815][ T10] device veth0_vlan left promiscuous mode [ 49.595531][ T10] device veth1_macvtap left promiscuous mode [ 49.601401][ T10] device veth0_vlan left promiscuous mode [ 49.690173][ T1098] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 49.702059][ T736] usb 3-1: USB disconnect, device number 8 [ 49.713550][ T1471] device veth0_vlan entered promiscuous mode [ 49.720568][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.728799][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.736919][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.744222][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.751665][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.759715][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.767695][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.778055][ T1463] device veth1_macvtap entered promiscuous mode [ 49.785188][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.792752][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.800874][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.808978][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.817133][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.833726][ T1471] device veth1_macvtap entered promiscuous mode [ 49.841718][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.850423][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.858330][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.869718][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.877807][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.886087][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.894161][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.918820][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.924769][ T1482] loop3: detected capacity change from 0 to 256 [ 49.943135][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.953578][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.962697][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.049755][ T1098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.079729][ T1098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.092775][ T1098] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 50.102722][ T1098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.132797][ T1098] usb 1-1: config 0 descriptor?? [ 50.245853][ T1502] loop2: detected capacity change from 0 to 256 [ 50.260543][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.279865][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.287308][ T1495] device bridge_slave_0 entered promiscuous mode [ 50.295771][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.302852][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.310952][ T1495] device bridge_slave_1 entered promiscuous mode [ 50.394219][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.401143][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.408199][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.415021][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.415589][ T1506] loop2: detected capacity change from 0 to 1024 [ 50.422247][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.458311][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.466423][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.480073][ T1506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.490812][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.509804][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.517987][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.518540][ T1371] EXT4-fs (loop2): unmounting filesystem. [ 50.524863][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.531182][ T28] audit: type=1400 audit(1726276164.052:327): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.559917][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.567927][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.574803][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.605466][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.616908][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.625541][ T1098] pantherlord 0003:0F30:0111.001E: item fetching failed at offset 6/7 [ 50.634122][ T1098] pantherlord 0003:0F30:0111.001E: parse failed [ 50.640014][ T1495] device veth0_vlan entered promiscuous mode [ 50.649310][ T1098] pantherlord: probe of 0003:0F30:0111.001E failed with error -22 [ 50.657655][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.669976][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.677701][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.685906][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.701232][ T1495] device veth1_macvtap entered promiscuous mode [ 50.710737][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.738681][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.747065][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.770972][ T10] device bridge_slave_1 left promiscuous mode [ 50.777509][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.794623][ T10] device bridge_slave_0 left promiscuous mode [ 50.800856][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.809164][ T28] audit: type=1400 audit(1726276164.322:328): avc: denied { map } for pid=1516 comm="syz.2.488" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.809361][ T10] device veth1_macvtap left promiscuous mode [ 50.837992][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.838178][ T10] device veth0_vlan left promiscuous mode [ 50.854668][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.886586][ T311] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.895643][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.911293][ T311] usb 2-1: config 0 descriptor?? [ 50.916613][ T385] usb 1-1: USB disconnect, device number 11 [ 50.948886][ T1493] loop4: detected capacity change from 0 to 131072 [ 50.958109][ T1493] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.996804][ T1493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.026225][ T1493] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 51.037048][ T1493] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 51.091201][ T28] audit: type=1400 audit(1726276164.612:329): avc: denied { nlmsg_write } for pid=1538 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 51.121975][ T28] audit: type=1400 audit(1726276164.642:330): avc: denied { ioctl } for pid=1540 comm="syz.3.497" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.182488][ T385] kernel write not supported for file bpf-prog (pid: 385 comm: kworker/1:4) [ 51.191405][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.284036][ T1553] loop3: detected capacity change from 0 to 512 [ 51.291232][ T1553] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.310712][ T1553] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 51.318381][ T1553] System zones: 0-2, 18-18, 34-34 [ 51.324803][ T1553] EXT4-fs (loop3): 1 orphan inode deleted [ 51.330584][ T1553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.339429][ T1553] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 51.362672][ T1553] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 3: comm syz.3.502: bad entry in directory: directory entry overrun - offset=128, inode=16, rec_len=3968, size=4084 fake=0 [ 51.402862][ T1495] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 51.417786][ T1495] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 51.428022][ T1495] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 51.443603][ T1495] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 51.453066][ T1495] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 51.466345][ T1495] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 51.479907][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 51.479928][ T28] audit: type=1400 audit(1726276165.002:335): avc: denied { unlink } for pid=1495 comm="syz-executor" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.479942][ T1495] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 51.524409][ T1495] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor: corrupted xattr block 19 [ 51.536781][ T1495] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -74) [ 51.546005][ T28] audit: type=1400 audit(1726276165.072:336): avc: denied { unmount } for pid=1495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.546186][ T1495] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 51.566447][ T28] audit: type=1400 audit(1726276165.072:337): avc: denied { unlink } for pid=1495 comm="syz-executor" name="bus" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.580876][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.613745][ T1495] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 51.625294][ T311] usb 2-1: string descriptor 0 read error: -22 [ 51.631886][ T1495] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 51.645831][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.655828][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.668718][ T39] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 51.677648][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.686839][ T39] usb 3-1: config 0 descriptor?? [ 51.709768][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.719364][ T1495] EXT4-fs (loop3): unmounting filesystem. [ 51.832102][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.832163][ T311] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001F/input/input12 [ 51.838978][ T1574] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.858566][ T1574] device bridge_slave_0 entered promiscuous mode [ 51.858669][ T311] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001F/input/input13 [ 51.866086][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.883531][ T1574] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.890418][ T311] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001F/input/input14 [ 51.891261][ T311] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001F/input/input15 [ 51.903670][ T1574] device bridge_slave_1 entered promiscuous mode [ 51.916150][ T311] uclogic 0003:256C:006D.001F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 51.972930][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.979800][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.986893][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.993722][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.001390][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 52.009256][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.016571][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.048665][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.056611][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.075148][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.083411][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.091561][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.098404][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.105794][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.105969][ T291] usb 2-1: USB disconnect, device number 12 [ 52.114419][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.128184][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.135237][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.139705][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.153492][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.160380][ T39] holtek_mouse 0003:04D9:A070.0020: item fetching failed at offset 1/5 [ 52.163559][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 52.172483][ T39] holtek_mouse 0003:04D9:A070.0020: hid parse failed: -22 [ 52.180535][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.195639][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.203456][ T39] holtek_mouse: probe of 0003:04D9:A070.0020 failed with error -22 [ 52.203652][ T19] usb 5-1: config 0 descriptor?? [ 52.212164][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.227900][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.236044][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.252220][ T1574] device veth0_vlan entered promiscuous mode [ 52.259195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.267576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.276007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.283948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.293522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.301016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.313422][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.321923][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.333214][ T1574] device veth1_macvtap entered promiscuous mode [ 52.342401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.349994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.358086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.369262][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.377936][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.412978][ T39] usb 3-1: USB disconnect, device number 9 [ 52.471201][ T10] device bridge_slave_1 left promiscuous mode [ 52.477477][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.487554][ T10] device bridge_slave_0 left promiscuous mode [ 52.489502][ T1585] loop0: detected capacity change from 0 to 512 [ 52.493669][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.507854][ T10] device veth1_macvtap left promiscuous mode [ 52.514396][ T10] device veth0_vlan left promiscuous mode [ 52.516831][ T1585] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.514: casefold flag without casefold feature [ 52.534431][ T1585] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.514: missing EA_INODE flag [ 52.549981][ T1585] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.514: error while reading EA inode 12 err=-117 [ 52.562270][ T1585] EXT4-fs (loop0): 1 orphan inode deleted [ 52.567822][ T1585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.603793][ T1593] syz.3.517[1593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.603879][ T1593] syz.3.517[1593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.619052][ T288] EXT4-fs (loop0): unmounting filesystem. [ 52.646482][ T28] audit: type=1326 audit(1726276166.162:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.690587][ T19] lenovo 0003:17EF:6009.0021: item fetching failed at offset 1/5 [ 52.693717][ T1597] loop0: detected capacity change from 0 to 128 [ 52.698344][ T19] lenovo 0003:17EF:6009.0021: hid_parse failed [ 52.711158][ T19] lenovo: probe of 0003:17EF:6009.0021 failed with error -22 [ 52.712988][ T1597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.732104][ T28] audit: type=1326 audit(1726276166.162:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.759412][ T1597] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 52.764343][ T1602] syz.1.521[1602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.791728][ T1602] syz.1.521[1602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.803236][ T28] audit: type=1326 audit(1726276166.162:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.861807][ T28] audit: type=1326 audit(1726276166.162:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.889329][ T28] audit: type=1326 audit(1726276166.162:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.914980][ T288] EXT4-fs (loop0): unmounting filesystem. [ 52.922517][ T28] audit: type=1326 audit(1726276166.162:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.951438][ T28] audit: type=1326 audit(1726276166.192:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1594 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ab7def9 code=0x7ffc0000 [ 52.975325][ T19] usb 5-1: USB disconnect, device number 8 [ 53.088109][ T1622] loop3: detected capacity change from 0 to 128 [ 53.101809][ T1626] loop2: detected capacity change from 0 to 512 [ 53.108657][ T1622] EXT4-fs: Ignoring removed nobh option [ 53.140113][ T1626] EXT4-fs (loop2): 1 orphan inode deleted [ 53.145686][ T1626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.155252][ T1622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.159708][ T1626] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 53.173478][ T1622] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff) [ 53.214388][ T1371] EXT4-fs (loop2): unmounting filesystem. [ 53.219771][ T311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.228097][ T1574] EXT4-fs (loop3): unmounting filesystem. [ 53.244329][ T1635] loop3: detected capacity change from 0 to 512 [ 53.262364][ T1635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.271338][ T1635] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 53.288108][ T1574] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 53.305411][ T1574] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 53.381510][ T1574] EXT4-fs (loop3): unmounting filesystem. [ 53.509615][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.519907][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.526744][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.534091][ T1640] device bridge_slave_0 entered promiscuous mode [ 53.540862][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.547813][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.555536][ T1640] device bridge_slave_1 entered promiscuous mode [ 53.579740][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.590637][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.600390][ T311] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 53.609350][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.623431][ T311] usb 1-1: config 0 descriptor?? [ 53.667625][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.674511][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.681632][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.688380][ T1640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.728367][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.736937][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.744541][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.749588][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 53.768350][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.777084][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.783957][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.791189][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.799205][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.806062][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.813282][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.869701][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.889690][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.899238][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.929600][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.949592][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.959868][ T39] usb 3-1: config 0 descriptor?? [ 54.022058][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.037495][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.050565][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.060049][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.068129][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.077651][ T1640] device veth0_vlan entered promiscuous mode [ 54.096988][ T1640] device veth1_macvtap entered promiscuous mode [ 54.104058][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.112822][ T311] hid-multitouch 0003:1FD2:6007.0022: unknown main item tag 0x0 [ 54.121346][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.132068][ T311] hid-multitouch 0003:1FD2:6007.0022: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 54.144894][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.162856][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.172564][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.182080][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.183005][ T1663] user requested TSC rate below hardware speed [ 54.191129][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.206687][ T330] device bridge_slave_1 left promiscuous mode [ 54.213638][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.224030][ T330] device bridge_slave_0 left promiscuous mode [ 54.233401][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.243100][ T330] device veth1_macvtap left promiscuous mode [ 54.248924][ T330] device veth0_vlan left promiscuous mode [ 54.330679][ T737] usb 1-1: USB disconnect, device number 12 [ 54.339456][ T1672] loop3: detected capacity change from 0 to 512 [ 54.354577][ T1672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.371310][ T1672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.382253][ T1672] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 54.429658][ T1672] loop3: detected capacity change from 512 to 511 [ 54.440453][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.448863][ T1640] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 4: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 54.469359][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.476589][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.483877][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.491069][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.498232][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.505405][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.506387][ T1640] EXT4-fs (loop3): unmounting filesystem. [ 54.512496][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.512521][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.512548][ T39] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 54.516486][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input16 [ 54.555309][ T39] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 54.657194][ T39] usb 3-1: USB disconnect, device number 10 [ 54.688012][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.694902][ T1682] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.700413][ T311] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 54.710146][ T1682] device bridge_slave_0 entered promiscuous mode [ 54.717342][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.724331][ T1682] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.731465][ T1682] device bridge_slave_1 entered promiscuous mode [ 54.773171][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.780045][ T1682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.787202][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.794032][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.815587][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.823133][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.830851][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.845652][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.854167][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.861039][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.883044][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.891653][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.900050][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.906917][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.909711][ T1689] xt_hashlimit: size too large, truncated to 1048576 [ 54.915821][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.928615][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.940552][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 54.947615][ T1682] device veth0_vlan entered promiscuous mode [ 54.954897][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.962883][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.979918][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.996384][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.005268][ T1682] device veth1_macvtap entered promiscuous mode [ 55.016760][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.040991][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.059701][ T311] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.071057][ T311] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.080978][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.127288][ T1693] loop0: detected capacity change from 0 to 512 [ 55.146985][ T1693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.155982][ T1693] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038 (0x7fffffff) [ 55.207497][ T288] EXT4-fs (loop0): unmounting filesystem. [ 55.216124][ T1710] loop2: detected capacity change from 0 to 256 [ 55.249704][ T311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.260806][ T330] device bridge_slave_1 left promiscuous mode [ 55.266785][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.279617][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.287472][ T311] usb 5-1: Product: syz [ 55.287658][ T330] device bridge_slave_0 left promiscuous mode [ 55.291486][ T311] usb 5-1: Manufacturer: syz [ 55.297953][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.309329][ T311] usb 5-1: SerialNumber: syz [ 55.314010][ T330] device veth1_macvtap left promiscuous mode [ 55.320192][ T330] device veth0_vlan left promiscuous mode [ 55.394558][ T1719] loop1: detected capacity change from 0 to 512 [ 55.406101][ T1719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.440068][ T1719] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 55.447855][ T1719] System zones: 0-2, 18-18, 34-34 [ 55.470903][ T1719] EXT4-fs (loop1): 1 orphan inode deleted [ 55.476664][ T1719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.485999][ T1719] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 55.500526][ T1712] loop0: detected capacity change from 0 to 40427 [ 55.513599][ T1719] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz.1.566: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=3968, size=4084 fake=0 [ 55.520063][ T1712] F2FS-fs (loop0): Invalid log sectorsize (2) [ 55.543820][ T1712] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.552515][ T1471] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 55.568930][ T1471] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 55.579165][ T1471] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 55.592515][ T1471] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 55.601881][ T1471] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 55.610340][ T1712] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.627737][ T1471] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 55.639821][ T1471] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.669350][ T1471] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor: corrupted xattr block 19 [ 55.679854][ T1712] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 55.688403][ T1712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.688453][ T1471] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -74) [ 55.705855][ T1471] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.721693][ T1471] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 55.738171][ T1471] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 55.789938][ T311] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 55.801886][ T1471] EXT4-fs (loop1): unmounting filesystem. [ 55.839966][ T1746] netem: incorrect gi model size [ 55.844980][ T1746] netem: change failed [ 55.860875][ T1750] loop2: detected capacity change from 0 to 512 [ 55.888722][ T1750] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.579: casefold flag without casefold feature [ 55.919826][ T1750] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.579: missing EA_INODE flag [ 55.931602][ T1750] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.579: error while reading EA inode 12 err=-117 [ 55.944036][ T1750] EXT4-fs (loop2): 1 orphan inode deleted [ 55.949987][ T1750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.974190][ T1752] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.974493][ T1371] EXT4-fs (loop2): unmounting filesystem. [ 55.981208][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.994725][ T1752] device bridge_slave_0 entered promiscuous mode [ 56.002141][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.008993][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.016390][ T1752] device bridge_slave_1 entered promiscuous mode [ 56.025809][ T1760] loop2: detected capacity change from 0 to 512 [ 56.049814][ T1760] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.589: casefold flag without casefold feature [ 56.089883][ T1760] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.589: missing EA_INODE flag [ 56.101660][ T1760] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.589: error while reading EA inode 12 err=-117 [ 56.113970][ T1760] EXT4-fs (loop2): 1 orphan inode deleted [ 56.119513][ T1760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.139307][ T1371] EXT4-fs (loop2): unmounting filesystem. [ 56.145033][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 56.351770][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.359460][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.370069][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.378381][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.387270][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.394143][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.409619][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 56.415531][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.423513][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.431934][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.440709][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.447571][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.455014][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.463514][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.482602][ T1752] device veth0_vlan entered promiscuous mode [ 56.490882][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.499099][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.507393][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.515684][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.528568][ T1752] device veth1_macvtap entered promiscuous mode [ 56.537548][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.549661][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.560514][ T737] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 56.567980][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.570678][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.577650][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.598219][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.599997][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.607288][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.623954][ T19] usb 1-1: config 0 descriptor?? [ 56.629938][ T10] device bridge_slave_1 left promiscuous mode [ 56.636124][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.639654][ T311] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 56.648785][ T10] device bridge_slave_0 left promiscuous mode [ 56.654972][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.662810][ T311] usb 5-1: USB disconnect, device number 9 [ 56.669393][ T10] device veth1_macvtap left promiscuous mode [ 56.675411][ T10] device veth0_vlan left promiscuous mode [ 56.687509][ T1776] loop3: detected capacity change from 0 to 40427 [ 56.694500][ T1776] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 56.701437][ T1776] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.711177][ T1776] F2FS-fs (loop3): invalid crc value [ 56.717458][ T1776] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.747317][ T1776] F2FS-fs (loop3): Start checkpoint disabled! [ 56.754093][ T1776] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.761097][ T1776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 56.777576][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.817883][ T1783] loop1: detected capacity change from 0 to 512 [ 56.831602][ T1783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.832090][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 56.832101][ T28] audit: type=1400 audit(1726276170.352:361): avc: denied { link } for pid=1775 comm="syz.3.586" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.841082][ T1783] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 56.892457][ T330] kworker/u4:4: attempt to access beyond end of device [ 56.892457][ T330] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 56.906801][ T1752] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 56.934831][ T1752] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 56.981748][ T28] audit: type=1400 audit(1726276170.502:362): avc: denied { sys_module } for pid=1787 comm="syz.3.588" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.009808][ T737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.020878][ T737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.032175][ T737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.040392][ T1752] EXT4-fs (loop1): unmounting filesystem. [ 57.046044][ T737] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 57.059654][ T737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.068690][ T737] usb 3-1: config 0 descriptor?? [ 57.090841][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.098091][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.105492][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.113605][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.121132][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.128838][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.136290][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.154674][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.169643][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.188248][ T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 57.216709][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input17 [ 57.251702][ T19] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 57.255107][ T1802] geneve1: tun_chr_ioctl cmd 1074025672 [ 57.269937][ T1802] geneve1: ignored: set checksum enabled [ 57.320200][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.327120][ T1804] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.334593][ T1804] device bridge_slave_0 entered promiscuous mode [ 57.350358][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.352588][ T736] usb 1-1: USB disconnect, device number 13 [ 57.363115][ T1804] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.390238][ T1804] device bridge_slave_1 entered promiscuous mode [ 57.486451][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.493369][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.500450][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.507202][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.537096][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.545749][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.554284][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.561496][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.568365][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.576073][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.599615][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.614296][ T1804] device veth0_vlan entered promiscuous mode [ 57.616509][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.627278][ T1804] device veth1_macvtap entered promiscuous mode [ 57.630189][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.649573][ T737] wacom 0003:056A:0094.0025: unknown main item tag 0x0 [ 57.664791][ T737] wacom 0003:056A:0094.0025: Using device in hidraw-only mode [ 57.677994][ T737] wacom 0003:056A:0094.0025: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 57.689764][ T292] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.699191][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.710292][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.719031][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.727425][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.735545][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.737301][ T1813] loop1: detected capacity change from 0 to 1024 [ 57.742941][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.770241][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.781345][ T1813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.784782][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.799146][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.806020][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.813695][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.821754][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.828601][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.836004][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.843783][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.852055][ T10] device bridge_slave_1 left promiscuous mode [ 57.858105][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.865184][ T737] usb 3-1: USB disconnect, device number 11 [ 57.878175][ T10] device bridge_slave_0 left promiscuous mode [ 57.888672][ T1804] EXT4-fs (loop1): unmounting filesystem. [ 57.894737][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.909389][ T10] device veth1_macvtap left promiscuous mode [ 57.915954][ T10] device veth0_vlan left promiscuous mode [ 58.049632][ T292] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 58.055888][ T1817] loop0: detected capacity change from 0 to 40427 [ 58.065310][ T292] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 58.076910][ T1817] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 58.083948][ T1817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.089905][ T292] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.093449][ T1817] F2FS-fs (loop0): invalid crc value [ 58.111277][ T1817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.119792][ T292] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.128641][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.148299][ T1817] F2FS-fs (loop0): Start checkpoint disabled! [ 58.155435][ T1817] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.162376][ T1817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 58.173072][ T1825] loop3: detected capacity change from 0 to 512 [ 58.182023][ T1825] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.603: casefold flag without casefold feature [ 58.194602][ T736] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.205652][ T292] usb 5-1: invalid MIDI in EP 0 [ 58.219955][ T1825] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.603: missing EA_INODE flag [ 58.233309][ T292] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 58.241780][ T1825] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.603: error while reading EA inode 12 err=-117 [ 58.244969][ T330] kworker/u4:4: attempt to access beyond end of device [ 58.244969][ T330] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 58.267849][ T1825] EXT4-fs (loop3): 1 orphan inode deleted [ 58.273424][ T1825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.292648][ T1682] EXT4-fs (loop3): unmounting filesystem. [ 58.327249][ T1830] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.391605][ T1838] user requested TSC rate below hardware speed [ 58.406533][ T19] usb 5-1: USB disconnect, device number 10 [ 58.473885][ T1843] syz.2.611[1843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.473933][ T1843] syz.2.611[1843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.485222][ T736] usb 2-1: Using ep0 maxpacket: 32 [ 58.579694][ T737] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.590847][ T28] audit: type=1400 audit(1726276172.112:363): avc: denied { relabelfrom } for pid=1854 comm="syz.2.617" name="" dev="pipefs" ino=25289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.613195][ T39] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 58.659709][ T736] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.669817][ T736] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.859636][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 58.861035][ T736] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.879586][ T736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.887398][ T736] usb 2-1: Product: syz [ 58.891500][ T736] usb 2-1: Manufacturer: syz [ 58.895813][ T736] usb 2-1: SerialNumber: syz [ 58.979769][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.990655][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.999781][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.000354][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 59.011120][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.019940][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.029992][ T737] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 59.046648][ T737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.046809][ T39] usb 1-1: config 0 descriptor?? [ 59.055084][ T737] usb 4-1: config 0 descriptor?? [ 59.220903][ T736] usb 2-1: USB disconnect, device number 13 [ 59.530434][ T39] savu 0003:1E7D:2D5A.0026: item fetching failed at offset 2/5 [ 59.538004][ T39] savu 0003:1E7D:2D5A.0026: parse failed [ 59.543549][ T39] savu: probe of 0003:1E7D:2D5A.0026 failed with error -22 [ 59.550879][ T737] hid-rmi 0003:06CB:81A7.0027: collection stack underflow [ 59.550907][ T737] hid-rmi 0003:06CB:81A7.0027: item 0 4 0 12 parsing failed [ 59.551050][ T737] hid-rmi 0003:06CB:81A7.0027: parse failed [ 59.570933][ T737] hid-rmi: probe of 0003:06CB:81A7.0027 failed with error -22 [ 59.750544][ T737] usb 1-1: USB disconnect, device number 14 [ 59.770537][ T311] usb 4-1: USB disconnect, device number 8 [ 59.803220][ T1877] loop1: detected capacity change from 0 to 512 [ 59.809960][ T1877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.839473][ T1877] EXT4-fs (loop1): 1 truncate cleaned up [ 59.845104][ T1877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.879764][ T1877] loop1: detected capacity change from 512 to 11 [ 59.891664][ T1804] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Out of memory [ 59.901318][ T1804] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 59.926789][ T1887] loop2: detected capacity change from 0 to 128 [ 59.933522][ T1887] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 59.943001][ T736] kernel read not supported for file /newroot/19/file0 (pid: 736 comm: kworker/0:5) [ 59.999077][ T1887] syz.2.630: attempt to access beyond end of device [ 59.999077][ T1887] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 60.012767][ T1887] syz.2.630: attempt to access beyond end of device [ 60.012767][ T1887] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 60.109081][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.116241][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.123801][ T1893] device bridge_slave_0 entered promiscuous mode [ 60.130948][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.137866][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.145605][ T1893] device bridge_slave_1 entered promiscuous mode [ 60.211231][ T1892] loop2: detected capacity change from 0 to 40427 [ 60.217938][ T1892] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 60.225579][ T1892] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.234126][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.234517][ T1892] F2FS-fs (loop2): invalid crc value [ 60.241644][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.255090][ T1892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.275807][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.286357][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.295777][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.302567][ T1892] F2FS-fs (loop2): Start checkpoint disabled! [ 60.302653][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.319045][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.327336][ T1892] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.327515][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.342266][ T1892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 60.350108][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.356980][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.380020][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.397685][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.410187][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.427162][ T1893] device veth0_vlan entered promiscuous mode [ 60.450540][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.459887][ T481] kworker/u4:5: attempt to access beyond end of device [ 60.459887][ T481] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 60.475044][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.483054][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.490414][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.505062][ T1893] device veth1_macvtap entered promiscuous mode [ 60.512845][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.528016][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.537029][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.545798][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.579664][ T737] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 60.720169][ T1935] loop4: detected capacity change from 0 to 256 [ 60.737085][ T1463] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.744846][ T1463] FAT-fs (loop4): Filesystem has been set read-only [ 60.751695][ T1463] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.772340][ T1940] xt_TCPMSS: Only works on TCP SYN packets [ 60.954239][ T1960] loop0: detected capacity change from 0 to 512 [ 60.967140][ T1955] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.974265][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.979646][ T1955] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.989590][ T737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.993195][ T1955] device bridge_slave_0 entered promiscuous mode [ 61.001898][ T737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.008901][ T1960] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff) [ 61.021197][ T737] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 61.040889][ T1955] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.047802][ T1955] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.055182][ T1955] device bridge_slave_1 entered promiscuous mode [ 61.061581][ T737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.073709][ T737] usb 4-1: config 0 descriptor?? [ 61.139722][ T1955] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.146585][ T1955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.153721][ T1955] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.160487][ T1955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.171993][ T1971] loop0: detected capacity change from 0 to 512 [ 61.179117][ T1971] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.187189][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.194552][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.202739][ T1971] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.664: invalid block [ 61.214047][ T1971] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.664: couldn't read orphan inode 11 (err -117) [ 61.223284][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.225792][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 61.235031][ T1971] fscrypt: AES-256-XTS using blk-crypto-fallback [ 61.246738][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.271323][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.279472][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.288512][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.295384][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.303741][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.311959][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.320076][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.326905][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.334464][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.342668][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.350968][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.358833][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.366813][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.374949][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.390465][ T1955] device veth0_vlan entered promiscuous mode [ 61.400539][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.408443][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.418709][ T1955] device veth1_macvtap entered promiscuous mode [ 61.425861][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.433413][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.440751][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.448717][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.456707][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.464578][ T10] device bridge_slave_1 left promiscuous mode [ 61.470591][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.477956][ T10] device bridge_slave_0 left promiscuous mode [ 61.484039][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.491675][ T10] device veth1_macvtap left promiscuous mode [ 61.497485][ T10] device veth0_vlan left promiscuous mode [ 61.530672][ T737] prodikeys 0003:041E:2801.0028: unexpected long global item [ 61.538177][ T737] prodikeys 0003:041E:2801.0028: hid parse failed [ 61.544500][ T737] prodikeys: probe of 0003:041E:2801.0028 failed with error -22 [ 61.563076][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.571216][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.579261][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.587475][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.599711][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.610442][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.620765][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.636092][ T1982] loop2: detected capacity change from 0 to 256 [ 61.639733][ T311] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 61.651116][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.665242][ T311] usb 2-1: config 0 descriptor?? [ 61.743552][ T24] usb 4-1: USB disconnect, device number 9 [ 61.929694][ T39] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 62.150147][ T311] acrux 0003:1A34:0802.0029: item fetching failed at offset 3/5 [ 62.157857][ T311] acrux 0003:1A34:0802.0029: parse failed [ 62.163504][ T311] acrux: probe of 0003:1A34:0802.0029 failed with error -22 [ 62.271994][ T1992] user requested TSC rate below hardware speed [ 62.296505][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.307394][ T28] audit: type=1400 audit(1726276175.792:364): avc: denied { create } for pid=1996 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.369850][ T311] usb 2-1: USB disconnect, device number 14 [ 62.469730][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.478630][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.486565][ T39] usb 1-1: Product: syz [ 62.490645][ T39] usb 1-1: Manufacturer: syz [ 62.495068][ T39] usb 1-1: SerialNumber: syz [ 62.510183][ T10] device bridge_slave_1 left promiscuous mode [ 62.516112][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.523461][ T10] device bridge_slave_0 left promiscuous mode [ 62.529377][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.537089][ T10] device veth1_macvtap left promiscuous mode [ 62.543781][ T10] device veth0_vlan left promiscuous mode [ 62.598472][ T2010] syz.4.675[2010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.598529][ T2010] syz.4.675[2010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.629774][ T737] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.909649][ T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 63.059704][ T737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.069811][ T737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.149763][ T737] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.158779][ T737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.159620][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 63.166790][ T737] usb 4-1: SerialNumber: syz [ 63.299796][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.310547][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.320078][ T19] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 63.328888][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.337182][ T19] usb 5-1: config 0 descriptor?? [ 63.409609][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 63.450133][ T737] usb 4-1: 0:2 : does not exist [ 63.456185][ T737] usb 4-1: USB disconnect, device number 10 [ 63.521521][ T2020] loop2: detected capacity change from 0 to 512 [ 63.529750][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.540573][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.550468][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.559898][ T2020] EXT4-fs mount: 5 callbacks suppressed [ 63.559916][ T2020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.563263][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.569146][ T2020] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff) [ 63.577309][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.577892][ T24] usb 2-1: config 0 descriptor?? [ 63.612172][ T28] audit: type=1400 audit(1726276177.132:365): avc: denied { rename } for pid=2019 comm="syz.2.682" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.630240][ T2020] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.682: bg 0: block 18: invalid block bitmap [ 63.647504][ T2020] Quota error (device loop2): write_blk: dquota write failed [ 63.654763][ T2020] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 63.664837][ T39] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 63.670181][ T2020] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.682: Failed to acquire dquot type 1 [ 63.671164][ T39] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 63.689362][ T39] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 63.695244][ T2020] syz.2.682 (2020) used greatest stack depth: 19080 bytes left [ 63.703332][ T1371] EXT4-fs (loop2): unmounting filesystem. [ 63.715064][ T2025] loop2: detected capacity change from 0 to 256 [ 63.726615][ T2025] FAT-fs (loop2): Directory bread(block 64) failed [ 63.733247][ T2025] FAT-fs (loop2): Directory bread(block 65) failed [ 63.740178][ T2025] FAT-fs (loop2): Directory bread(block 66) failed [ 63.746739][ T2025] FAT-fs (loop2): Directory bread(block 67) failed [ 63.753147][ T2025] FAT-fs (loop2): Directory bread(block 68) failed [ 63.759628][ T2025] FAT-fs (loop2): Directory bread(block 69) failed [ 63.766020][ T2025] FAT-fs (loop2): Directory bread(block 70) failed [ 63.772355][ T2025] FAT-fs (loop2): Directory bread(block 71) failed [ 63.778739][ T2025] FAT-fs (loop2): Directory bread(block 72) failed [ 63.785030][ T2025] FAT-fs (loop2): Directory bread(block 73) failed [ 63.830451][ T19] itetech 0003:258A:6A88.002A: unknown main item tag 0x0 [ 63.837977][ T19] itetech 0003:258A:6A88.002A: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 63.859737][ T2025] loop2: detected capacity change from 256 to 11 [ 63.866347][ T2026] syz.2.683: attempt to access beyond end of device [ 63.866347][ T2026] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=11 [ 64.030851][ T19] usb 5-1: USB disconnect, device number 11 [ 64.069743][ T39] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 64.077167][ T39] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 64.089268][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.097223][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.106305][ T39] usb 1-1: USB disconnect, device number 15 [ 64.112314][ T39] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 64.121297][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.128276][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.136397][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.143602][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.150705][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.158379][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.165502][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.174117][ T24] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 64.186003][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input18 [ 64.198414][ T24] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 64.212847][ T24] ================================================================== [ 64.220741][ T24] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 64.227824][ T24] Read of size 8 at addr ffff88812d018ce0 by task kworker/1:0/24 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.235318][ T24] [ 64.237505][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Tainted: G W 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 64.248433][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.258323][ T24] Workqueue: 0x0 (usb_hub_wq) [ 64.262922][ T24] Call Trace: [ 64.266045][ T24] [ 64.268819][ T24] dump_stack_lvl+0x151/0x1b7 [ 64.273338][ T24] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 64.278629][ T24] ? _printk+0xd1/0x111 [ 64.282619][ T24] ? __virt_addr_valid+0x242/0x2f0 [ 64.287586][ T24] print_report+0x158/0x4e0 [ 64.291911][ T24] ? __virt_addr_valid+0x242/0x2f0 [ 64.296862][ T24] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 64.302926][ T24] ? worker_thread+0xa36/0x1260 [ 64.307611][ T24] kasan_report+0x13c/0x170 [ 64.311966][ T24] ? worker_thread+0xa36/0x1260 [ 64.316643][ T24] __asan_report_load8_noabort+0x14/0x20 [ 64.322111][ T24] worker_thread+0xa36/0x1260 [ 64.326652][ T24] kthread+0x26d/0x300 [ 64.330523][ T24] ? worker_clr_flags+0x1a0/0x1a0 [ 64.335384][ T24] ? kthread_blkcg+0xd0/0xd0 [ 64.339841][ T24] ret_from_fork+0x1f/0x30 [ 64.344068][ T24] [ 64.346929][ T24] [ 64.349130][ T24] Allocated by task 39: [ 64.353186][ T24] kasan_set_track+0x4b/0x70 [ 64.357605][ T24] kasan_save_alloc_info+0x1f/0x30 [ 64.362553][ T24] __kasan_kmalloc+0x9c/0xb0 [ 64.367106][ T24] __kmalloc_node+0xb4/0x1e0 [ 64.371529][ T24] kvmalloc_node+0x221/0x640 [ 64.375960][ T24] alloc_netdev_mqs+0x8c/0xf90 [ 64.380545][ T24] alloc_etherdev_mqs+0x36/0x40 [ 64.385235][ T24] usbnet_probe+0x207/0x27c0 [ 64.389660][ T24] usb_probe_interface+0x5b6/0xa90 [ 64.394615][ T24] really_probe+0x2b8/0x920 [ 64.398953][ T24] __driver_probe_device+0x1a0/0x310 [ 64.404078][ T24] driver_probe_device+0x54/0x3d0 [ 64.408930][ T24] __device_attach_driver+0x2e3/0x490 [ 64.414138][ T24] bus_for_each_drv+0x183/0x200 [ 64.418832][ T24] __device_attach+0x312/0x510 [ 64.423421][ T24] device_initial_probe+0x1a/0x20 [ 64.428292][ T24] bus_probe_device+0xbe/0x1e0 [ 64.432893][ T24] device_add+0xb60/0xf10 [ 64.437050][ T24] usb_set_configuration+0x190f/0x1e80 [ 64.442343][ T24] usb_generic_driver_probe+0x8b/0x150 [ 64.447652][ T24] usb_probe_device+0x144/0x260 [ 64.452413][ T24] really_probe+0x2b8/0x920 [ 64.456762][ T24] __driver_probe_device+0x1a0/0x310 [ 64.461872][ T24] driver_probe_device+0x54/0x3d0 [ 64.466829][ T24] __device_attach_driver+0x2e3/0x490 [ 64.472026][ T24] bus_for_each_drv+0x183/0x200 [ 64.476715][ T24] __device_attach+0x312/0x510 [ 64.481317][ T24] device_initial_probe+0x1a/0x20 [ 64.486174][ T24] bus_probe_device+0xbe/0x1e0 [ 64.490786][ T24] device_add+0xb60/0xf10 [ 64.495026][ T24] usb_new_device+0xf2f/0x1820 [ 64.499634][ T24] hub_event+0x2db1/0x4830 [ 64.503882][ T24] process_one_work+0x73d/0xcb0 [ 64.508587][ T24] worker_thread+0xa60/0x1260 [ 64.513081][ T24] kthread+0x26d/0x300 [ 64.516986][ T24] ret_from_fork+0x1f/0x30 [ 64.521246][ T24] [ 64.523408][ T24] Freed by task 39: [ 64.527059][ T24] kasan_set_track+0x4b/0x70 [ 64.531499][ T24] kasan_save_free_info+0x2b/0x40 [ 64.536524][ T24] ____kasan_slab_free+0x131/0x180 [ 64.541465][ T24] __kasan_slab_free+0x11/0x20 [ 64.546066][ T24] __kmem_cache_free+0x218/0x3b0 [ 64.550837][ T24] kfree+0x7a/0xf0 [ 64.554401][ T24] kvfree+0x35/0x40 [ 64.558039][ T24] netdev_freemem+0x3f/0x60 [ 64.562380][ T24] netdev_release+0x7f/0xb0 [ 64.566726][ T24] device_release+0x95/0x1c0 [ 64.571153][ T24] kobject_put+0x178/0x260 [ 64.575530][ T24] put_device+0x1f/0x30 [ 64.579512][ T24] free_netdev+0x393/0x480 [ 64.583768][ T24] usbnet_disconnect+0x245/0x390 [ 64.588541][ T24] usb_unbind_interface+0x1fa/0x8c0 [ 64.593574][ T24] device_release_driver_internal+0x53e/0x870 [ 64.599475][ T24] device_release_driver+0x19/0x20 [ 64.604434][ T24] bus_remove_device+0x2fa/0x360 [ 64.609195][ T24] device_del+0x663/0xe90 [ 64.613361][ T24] usb_disable_device+0x380/0x720 [ 64.618234][ T24] usb_disconnect+0x32a/0x890 [ 64.622738][ T24] hub_event+0x1ed8/0x4830 [ 64.626988][ T24] process_one_work+0x73d/0xcb0 [ 64.631686][ T24] worker_thread+0xd71/0x1260 [ 64.636193][ T24] kthread+0x26d/0x300 [ 64.640104][ T24] ret_from_fork+0x1f/0x30 [ 64.644350][ T24] [ 64.646519][ T24] Last potentially related work creation: [ 64.652075][ T24] kasan_save_stack+0x3b/0x60 [ 64.656587][ T24] __kasan_record_aux_stack+0xb4/0xc0 [ 64.661796][ T24] kasan_record_aux_stack_noalloc+0xb/0x10 [ 64.667435][ T24] insert_work+0x56/0x310 [ 64.671601][ T24] __queue_work+0x9b6/0xd70 [ 64.675941][ T24] queue_work_on+0x105/0x170 [ 64.680368][ T24] usbnet_link_change+0xeb/0x100 [ 64.685144][ T24] usbnet_probe+0x1dbe/0x27c0 [ 64.689667][ T24] usb_probe_interface+0x5b6/0xa90 [ 64.694763][ T24] really_probe+0x2b8/0x920 [ 64.699096][ T24] __driver_probe_device+0x1a0/0x310 [ 64.704219][ T24] driver_probe_device+0x54/0x3d0 [ 64.709085][ T24] __device_attach_driver+0x2e3/0x490 [ 64.714292][ T24] bus_for_each_drv+0x183/0x200 [ 64.718972][ T24] __device_attach+0x312/0x510 [ 64.723575][ T24] device_initial_probe+0x1a/0x20 [ 64.728453][ T24] bus_probe_device+0xbe/0x1e0 [ 64.733029][ T24] device_add+0xb60/0xf10 [ 64.737203][ T24] usb_set_configuration+0x190f/0x1e80 [ 64.742618][ T24] usb_generic_driver_probe+0x8b/0x150 [ 64.747911][ T24] usb_probe_device+0x144/0x260 [ 64.752601][ T24] really_probe+0x2b8/0x920 [ 64.756928][ T24] __driver_probe_device+0x1a0/0x310 [ 64.762048][ T24] driver_probe_device+0x54/0x3d0 [ 64.767004][ T24] __device_attach_driver+0x2e3/0x490 [ 64.772215][ T24] bus_for_each_drv+0x183/0x200 [ 64.776892][ T24] __device_attach+0x312/0x510 [ 64.781515][ T24] device_initial_probe+0x1a/0x20 [ 64.786353][ T24] bus_probe_device+0xbe/0x1e0 [ 64.790964][ T24] device_add+0xb60/0xf10 [ 64.795118][ T24] usb_new_device+0xf2f/0x1820 [ 64.799729][ T24] hub_event+0x2db1/0x4830 [ 64.803970][ T24] process_one_work+0x73d/0xcb0 [ 64.808657][ T24] worker_thread+0xa60/0x1260 [ 64.813170][ T24] kthread+0x26d/0x300 [ 64.817075][ T24] ret_from_fork+0x1f/0x30 [ 64.821328][ T24] [ 64.823510][ T24] The buggy address belongs to the object at ffff88812d018000 [ 64.823510][ T24] which belongs to the cache kmalloc-4k of size 4096 [ 64.837402][ T24] The buggy address is located 3296 bytes inside of [ 64.837402][ T24] 4096-byte region [ffff88812d018000, ffff88812d019000) [ 64.850805][ T24] [ 64.852951][ T24] The buggy address belongs to the physical page: [ 64.859214][ T24] page:ffffea0004b40600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d018 [ 64.869271][ T24] head:ffffea0004b40600 order:3 compound_mapcount:0 compound_pincount:0 [ 64.877422][ T24] flags: 0x4000000000010200(slab|head|zone=1) [ 64.883324][ T24] raw: 4000000000010200 ffffea0004b40c00 dead000000000002 ffff888100043380 [ 64.891745][ T24] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 64.900161][ T24] page dumped because: kasan: bad access detected [ 64.906414][ T24] page_owner tracks the page as allocated [ 64.911965][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 20059890119, free_ts 0 [ 64.932108][ T24] post_alloc_hook+0x213/0x220 [ 64.936693][ T24] prep_new_page+0x1b/0x110 [ 64.941033][ T24] get_page_from_freelist+0x27ea/0x2870 [ 64.946415][ T24] __alloc_pages+0x3a1/0x780 [ 64.950847][ T24] alloc_slab_page+0x6c/0xf0 [ 64.955269][ T24] new_slab+0x90/0x3e0 [ 64.959172][ T24] ___slab_alloc+0x6f9/0xb80 [ 64.963602][ T24] __slab_alloc+0x5d/0xa0 [ 64.967767][ T24] __kmem_cache_alloc_node+0x1af/0x250 [ 64.973061][ T24] kmalloc_trace+0x2a/0xa0 [ 64.977320][ T24] kobject_uevent_env+0x262/0x720 [ 64.982280][ T24] kobject_uevent+0x1f/0x30 [ 64.986647][ T24] device_add+0xa6e/0xf10 [ 64.990787][ T24] netdev_register_kobject+0x177/0x320 [ 64.996094][ T24] register_netdevice+0xe43/0x1490 [ 65.001027][ T24] br_dev_newlink+0x27/0x110 [ 65.005456][ T24] page_owner free stack trace missing [ 65.010671][ T24] [ 65.012829][ T24] Memory state around the buggy address: [ 65.018302][ T24] ffff88812d018b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.026201][ T24] ffff88812d018c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.034096][ T24] >ffff88812d018c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.041993][ T24] ^ [ 65.049114][ T24] ffff88812d018d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.057008][ T24] ffff88812d018d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.064920][ T24] ================================================================== [ 65.072891][ T24] Disabling lock debugging due to kernel taint [ 65.253640][ T19] usb 2-1: USB disconnect, device number 15 [ 65.460086][ T481] device bridge_slave_1 left promiscuous mode [ 65.466007][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.473314][ T481] device bridge_slave_0 left promiscuous mode [ 65.479221][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.487022][ T481] device veth1_macvtap left promiscuous mode [ 65.492856][ T481] device veth0_vlan left promiscuous mode [ 66.370465][ T481] device bridge_slave_1 left promiscuous mode [ 66.376408][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.383900][ T481] device bridge_slave_0 left promiscuous mode [ 66.389894][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.397228][ T481] device bridge_slave_1 left promiscuous mode [ 66.403217][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.410331][ T481] device bridge_slave_0 left promiscuous mode [ 66.416229][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.423805][ T481] device bridge_slave_1 left promiscuous mode [ 66.429837][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.436926][ T481] device bridge_slave_0 left promiscuous mode [ 66.442969][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.450827][ T481] device bridge_slave_1 left promiscuous mode [ 66.456726][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.464063][ T481] device bridge_slave_0 left promiscuous mode [ 66.470070][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.477854][ T481] device veth1_macvtap left promiscuous mode [ 66.483744][ T481] device veth0_vlan left promiscuous mode [ 66.489389][ T481] device veth1_macvtap left promiscuous mode [ 66.495251][ T481] device veth0_vlan left promiscuous mode [ 66.500957][ T481] device veth1_macvtap left promiscuous mode [ 66.506751][ T481] device veth0_vlan left promiscuous mode [ 66.512630][ T481] device veth1_macvtap left promiscuous mode [ 66.518475][ T481] device veth0_vlan left promiscuous mode