last executing test programs: 9.893982217s ago: executing program 3 (id=75): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b4}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@noinit_itable}]}, 0x1, 0x556, &(0x7f0000001100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 9.783815617s ago: executing program 3 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x1000, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 9.741224321s ago: executing program 3 (id=77): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x4, "b808a529"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xfe, &(0x7f0000000500)="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") 7.573418532s ago: executing program 1 (id=83): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r1, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 7.550907424s ago: executing program 1 (id=84): syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x44018, &(0x7f0000000100), 0x3, 0x540, &(0x7f0000000980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x20000800) bind$packet(r1, &(0x7f0000001a40)={0x11, 0xf5, 0x0, 0x1, 0x2, 0x6, @remote}, 0x6f) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="bb36bbbbbbaaaaebde77049eb3e6aaaaaaaa0010"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0xfeeb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() keyctl$dh_compute(0x17, 0x0, &(0x7f0000001000)=""/49, 0x31, &(0x7f0000001080)={0x0}) process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xffffff3b}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000000)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f000060e000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.970330985s ago: executing program 3 (id=86): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0) 6.661876032s ago: executing program 1 (id=88): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x2, "ca24"}, @main=@item_4={0x3, 0x0, 0xb, "7366a215"}]}}, 0x0}, 0x0) 5.090051101s ago: executing program 3 (id=101): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="0000e35a4a381ff7") 4.770199339s ago: executing program 1 (id=102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "58f9bca2"}, @main=@item_4={0x3, 0x0, 0x0, "775cb096"}]}}, 0x0}, 0x0) 3.610708811s ago: executing program 2 (id=109): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 3.408935999s ago: executing program 2 (id=110): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) 3.382461072s ago: executing program 2 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) 3.293078629s ago: executing program 2 (id=112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000680)=0x0) timer_getoverrun(r2) 3.233218335s ago: executing program 2 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x140c543, &(0x7f0000000700)={[{@data_ordered}, {@dax}, {@max_batch_time={'max_batch_time', 0x3d, 0xc23}}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x9c52}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x7768e9ec}}, {@stripe={'stripe', 0x3d, 0x9}}, {@nogrpid}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@noauto_da_alloc}]}, 0x12, 0x4c5, &(0x7f0000000ec0)="$eJzs3d9rHFsdAPDvTLL9mZpUfagF22IradHuJo1tgw+1gtinglrfa0w2IWSTDdlN24QiKf4BgogKPvnki+AfIEj/BBEK+i4qimh778N9uPfuZTezvWm6e7Olm0zJfj5wMufMzO73ewg7O2fm7G4AA+tCRNyOiKGIuBIRo9n6NCt3mo2t7f1ePH882yxJNBr3/pdEkq1rP1ey4zm3IuJYRPzgTsSPk9fj1jY2l2YqlfJa1i7Vl1dLtY3Nq4vLMwvlhfLK1NTkjemb09enJ/rSz7GIuPWdf/3yZ7/77q0/ff3h3+//5/JPmmmNZNt39qOftrteeGXdcESs7UewHAxly0LOeQAA0JvmOf7nI+IrrfP/0RhqnZ0CAAAAh0njWyPxYRLR6M3RHvcDAAAA3iFpaw5skhazuQAjkabFYsTJiPhinEgr1Vr9a/PV9ZW57bmyY1FI5xcr5YlsrvBYFJJmezKbY9tuX9vVnoqI0xHxi9HjrXZxtlqZy/viBwAAAAyIk7vG/++Pbo//AQAAgENmLO8EAAAAgH1n/A8AAACHn/E/AAAAHGrfu3u3WRrt37+ee7CxvlR9cHWuXFsqLq/PFmera6vFhWp1ofWdfct7PV+lWl39RqysPyrVy7V6qbaxeX+5ur5Sv7/Y+jlwAAAAIAenzz/9WxIRW9883irA4EjeZOd/7l8ewMEbyjsBIDfDeScA5KaQdwJA7va6DtB18s6f+58LAACwP8a/9Pr9/yPZNtcG4HBL804AADhw7v/D4CqYAQgD73N7bO92/7/3Tww1Gm+UEAAA0HcjrZKkxexe4EikabEYcar1swCFZH6xUp7Ixgd/HS0cbbYnW49M3uyzwwAAAAAAAAAAAAAAAAAAAAAAAAAwwBqNJBoAAADAoRaR/jtpfZt/xPjopZHd1weOJB+MtpYR8fA39371aKZeX5tsrv//y/X1X2frr+VxBQMAAADYrT1Ob4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCfXjx/PNsuBxn3v9+OiLGO8c8fay2ORSEiTryXxPCOxyURMdSH+FtPIuJMp/hJM60Yi+0sOsU/nmP8NCJO9iE+DLKnzePP7U6vvzQutJadX3/DWXlb3Y9/abSPf0Ndjj+neoxx9tkfSl3jP4k4O9z5+NOOn3SJf7HH+D/64eZmt22N30aMd3z/SV6JVaovr5ZqG5tXF5dnFsoL5ZWpqckb0zenr09PlOYXK+Xsb8cYP//yHz9+2Rh6vf8nusQf26P/l3rs/0fPHj3/wna1sHtbM/7li53ff890iZ9m3fhqVm9uH2/Xt7brO537/V/OdcutGX+uS//3+v9f7rH/V77/03/0uCsAcABqG5tLM5VKeU1FpU+V5nniO5CGyltV8j4yAQAA/fbpSX/emQAAAAAAAAAAAAAAAAAAAMDgOoivE9sdcyufrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKZPAgAA//8EmdGl") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "860e0a31"}]}}, 0x0}, 0x0) 2.730245279s ago: executing program 1 (id=114): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856b340da0b53813de2010203010902"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000200)}, 0x20) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000004000000228b155e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.566987413s ago: executing program 3 (id=118): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.185319827s ago: executing program 4 (id=121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}) 1.272293397s ago: executing program 2 (id=122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b4d, &(0x7f00000000c0)) 929.355298ms ago: executing program 1 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x3, 0x0, 0x1000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b"], 0x0) 456.62698ms ago: executing program 0 (id=127): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8442a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deb200000000000000000000ac1d00", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 401.311604ms ago: executing program 0 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 400.919034ms ago: executing program 0 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 397.294525ms ago: executing program 0 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001"], 0xfe44, 0x0) 390.814565ms ago: executing program 4 (id=131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) unshare(0x22020400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x80045432, &(0x7f0000000000)) 350.625499ms ago: executing program 4 (id=132): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000240)='7', 0x1}], 0x1) 350.321639ms ago: executing program 0 (id=133): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfe, 0x1213, &(0x7f0000003680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) 329.10518ms ago: executing program 4 (id=134): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 134.016128ms ago: executing program 4 (id=135): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/315], 0xfd, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02ca"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 32.823476ms ago: executing program 0 (id=136): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000000100)=""/160, 0xa0) 0s ago: executing program 4 (id=137): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x5c3e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/15, 0xf}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 21.439938][ T30] audit: type=1400 audit(1726252604.455:66): avc: denied { integrity } for pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 21.464066][ T30] audit: type=1400 audit(1726252604.475:67): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.465453][ T279] cgroup: Unknown subsys name 'net' [ 21.486883][ T30] audit: type=1400 audit(1726252604.475:68): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.514099][ T279] cgroup: Unknown subsys name 'devices' [ 21.514151][ T30] audit: type=1400 audit(1726252604.505:69): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.719034][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.724471][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.979880][ T30] audit: type=1400 audit(1726252604.995:70): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.003755][ T30] audit: type=1400 audit(1726252604.995:71): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.028816][ T30] audit: type=1400 audit(1726252604.995:72): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.037806][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.061085][ T30] audit: type=1400 audit(1726252605.075:73): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.087185][ T30] audit: type=1400 audit(1726252605.075:74): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.117377][ T30] audit: type=1400 audit(1726252605.135:75): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.143602][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.392762][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.400037][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.407678][ T290] device bridge_slave_0 entered promiscuous mode [ 23.415695][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.422643][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.429850][ T290] device bridge_slave_1 entered promiscuous mode [ 23.479988][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.486979][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.494244][ T291] device bridge_slave_0 entered promiscuous mode [ 23.501155][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.508252][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.515443][ T291] device bridge_slave_1 entered promiscuous mode [ 23.552909][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.559885][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.567446][ T292] device bridge_slave_0 entered promiscuous mode [ 23.592146][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.599564][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.607056][ T292] device bridge_slave_1 entered promiscuous mode [ 23.681142][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.688147][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.695340][ T293] device bridge_slave_0 entered promiscuous mode [ 23.705699][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.712618][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.720099][ T294] device bridge_slave_0 entered promiscuous mode [ 23.735254][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742247][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.749546][ T293] device bridge_slave_1 entered promiscuous mode [ 23.763132][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.770022][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.777355][ T294] device bridge_slave_1 entered promiscuous mode [ 23.872142][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.879374][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.943860][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.950831][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.957962][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.964732][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.976646][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.983716][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.990919][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.997973][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.041337][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.048475][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.055575][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.062692][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.078261][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.085746][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.093101][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.100328][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.107868][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.115619][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.123164][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.131276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.138772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.147905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.156091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.164543][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.171395][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.197241][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.205326][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.212188][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.238192][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.245710][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.253923][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.262506][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.269649][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.276799][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.284845][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.291699][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.299103][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.307128][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.314045][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.321479][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.329552][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.336470][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.385462][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.394085][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.420962][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.429177][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.436092][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.443909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.452022][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.458957][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.466230][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.474305][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.481163][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.488528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.496312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.504211][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.511980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.519790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.527563][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.535347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.543331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.551357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.559604][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.567654][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.574575][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.581782][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.589716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.597659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.605787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.614043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.621969][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.633672][ T290] device veth0_vlan entered promiscuous mode [ 24.648114][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.658769][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.666233][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.674044][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.688939][ T291] device veth0_vlan entered promiscuous mode [ 24.696143][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.703563][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.710888][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.719245][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.727684][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.735340][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.750718][ T294] device veth0_vlan entered promiscuous mode [ 24.761612][ T293] device veth0_vlan entered promiscuous mode [ 24.769410][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.777843][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.785632][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.793334][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.800669][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.808093][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.815498][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.823709][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.831261][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.843199][ T290] device veth1_macvtap entered promiscuous mode [ 24.854874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.863045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.871464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.879818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.894484][ T292] device veth0_vlan entered promiscuous mode [ 24.903344][ T294] device veth1_macvtap entered promiscuous mode [ 24.910893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.919218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.927591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.935408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.943559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.951673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.959834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.967331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.992865][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.001227][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.009651][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.017805][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.026458][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.034662][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.042864][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.050927][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.059148][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.067718][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.078915][ T293] device veth1_macvtap entered promiscuous mode [ 25.091099][ T291] device veth1_macvtap entered promiscuous mode [ 25.105058][ T292] device veth1_macvtap entered promiscuous mode [ 25.132907][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.145314][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.159666][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.168262][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.196227][ T322] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 25.216705][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.232966][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.247389][ T324] loop0: detected capacity change from 0 to 256 [ 25.255372][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.263798][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.274218][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.282837][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.295130][ T324] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.295726][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.317438][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.617231][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.674241][ T351] loop3: detected capacity change from 0 to 512 [ 25.681464][ T353] syz.4.16[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.681538][ T353] syz.4.16[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.698293][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 25.717229][ T351] ======================================================= [ 25.717229][ T351] WARNING: The mand mount option has been deprecated and [ 25.717229][ T351] and is ignored by this kernel. Remove the mand [ 25.717229][ T351] option from the mount to silence this warning. [ 25.717229][ T351] ======================================================= [ 25.717378][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.760162][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.767586][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.774848][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.782251][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.789992][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.800471][ T351] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.815387][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 25.823798][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.832122][ T351] EXT4-fs (loop3): orphan cleanup on readonly fs [ 25.837326][ T338] loop0: detected capacity change from 0 to 40427 [ 25.840065][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.845301][ T351] EXT4-fs (loop3): 1 truncate cleaned up [ 25.853652][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.858884][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6210: comm kworker/u4:0: Failed to release dquot type 1 [ 25.865535][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.880965][ T351] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 25.884269][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 25.917993][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.925608][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.927079][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.933338][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.948026][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.956121][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.963987][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.971825][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.976747][ T338] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 25.979358][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.993353][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.994213][ T338] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.000989][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.011267][ T338] F2FS-fs (loop0): invalid crc value [ 26.016467][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.023560][ T338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.028780][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.035494][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.042064][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.060720][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.067276][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.068317][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.085252][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.087131][ T6] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 26.092686][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.109002][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.114772][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.116384][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.128411][ T338] F2FS-fs (loop0): Start checkpoint disabled! [ 26.131947][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.145079][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.149075][ T6] usb 3-1: config 0 descriptor?? [ 26.152922][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.164650][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.169584][ T338] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 26.172054][ T313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.178982][ T338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.187263][ T313] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 26.232648][ T338] attempt to access beyond end of device [ 26.232648][ T338] loop0: rw=2049, want=53384, limit=40427 [ 26.246608][ T338] attempt to access beyond end of device [ 26.246608][ T338] loop0: rw=0, want=53384, limit=40427 [ 26.276780][ T321] attempt to access beyond end of device [ 26.276780][ T321] loop0: rw=2049, want=40992, limit=40427 [ 26.317786][ T365] process 'syz.3.20' launched './file2' with NULL argv: empty string added [ 26.327198][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.338534][ T56] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.347779][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.359104][ T56] usb 2-1: config 0 descriptor?? [ 26.533638][ T365] loop3: detected capacity change from 0 to 40427 [ 26.547070][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.617882][ T365] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 26.626861][ T365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.629117][ T6] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 26.636550][ T365] F2FS-fs (loop3): invalid crc value [ 26.645709][ T6] itetech 0003:06CB:73F5.0002: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 26.655608][ T365] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.691438][ T365] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 26.698580][ T365] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.705587][ T365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 26.787059][ T311] usb 5-1: Using ep0 maxpacket: 8 [ 26.806957][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.809991][ T378] xt_hashlimit: size too large, truncated to 1048576 [ 26.814332][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 26.814348][ T30] audit: type=1400 audit(1726252609.825:143): avc: denied { create } for pid=377 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.847462][ T56] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 26.857904][ T56] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input4 [ 26.872594][ T30] audit: type=1400 audit(1726252609.825:144): avc: denied { setopt } for pid=377 comm="syz.3.23" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.907267][ T39] usb 3-1: USB disconnect, device number 2 [ 26.939916][ T56] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 26.952013][ T311] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.960141][ T311] usb 5-1: config 179 has no interface number 0 [ 26.966476][ T311] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.992152][ T311] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 27.003423][ T311] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 27.014889][ T311] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 27.026357][ T311] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 27.040325][ T311] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 27.049331][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.077022][ T361] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.085593][ T361] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.099329][ T311] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 27.227072][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.238224][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.248054][ T6] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 27.257464][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.266471][ T6] usb 1-1: config 0 descriptor?? [ 27.301096][ T56] usb 5-1: USB disconnect, device number 2 [ 27.317309][ T56] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 27.417243][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.451022][ T30] audit: type=1400 audit(1726252610.465:145): avc: denied { confidentiality } for pid=388 comm="syz.2.26" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 27.483623][ T30] audit: type=1400 audit(1726252610.495:146): avc: denied { create } for pid=388 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.504375][ T30] audit: type=1400 audit(1726252610.505:147): avc: denied { ioctl } for pid=388 comm="syz.2.26" path="socket:[15492]" dev="sockfs" ino=15492 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.748317][ T6] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 27.756191][ T6] itetech 0003:258A:6A88.0004: hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 27.787144][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.798358][ T362] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.806040][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.816013][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.832208][ T311] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 27.838241][ T393] loop4: detected capacity change from 0 to 1024 [ 27.841690][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.856395][ T311] usb 4-1: config 0 descriptor?? [ 27.912620][ T313] usb 2-1: USB disconnect, device number 2 [ 27.918987][ T393] EXT4-fs (loop4): Ignoring removed oldalloc option [ 27.925534][ T393] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 27.935411][ T393] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 27.944327][ T393] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.955322][ T6] usb 1-1: USB disconnect, device number 2 [ 27.959913][ T393] EXT4-fs error (device loop4): ext4_free_blocks:6224: comm syz.4.28: Freeing blocks not in datazone - block = 0, count = 4096 [ 27.974539][ T393] EXT4-fs (loop4): Remounting filesystem read-only [ 27.981241][ T393] EXT4-fs (loop4): 1 orphan inode deleted [ 27.987095][ T393] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000400,lazytime,oldalloc,jqfmt=vfsv0,. Quota mode: writeback. [ 28.046990][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 28.167029][ T362] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 28.327049][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.334601][ T362] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 28.344637][ T311] betop 0003:11C2:2208.0005: nested delimiters [ 28.350891][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.358744][ T311] betop 0003:11C2:2208.0005: item 0 1 2 10 parsing failed [ 28.365845][ T311] betop 0003:11C2:2208.0005: parse failed [ 28.371591][ T362] usb 3-1: Product: syz [ 28.375652][ T362] usb 3-1: Manufacturer: syz [ 28.380299][ T311] betop: probe of 0003:11C2:2208.0005 failed with error -22 [ 28.387448][ T362] usb 3-1: SerialNumber: syz [ 28.393698][ T362] usb 3-1: config 0 descriptor?? [ 28.438072][ T362] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 28.448140][ T30] audit: type=1400 audit(1726252611.465:148): avc: denied { setopt } for pid=400 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.453148][ T362] usb 3-1: Detected FT232RL [ 28.508226][ T30] audit: type=1400 audit(1726252611.525:149): avc: denied { ioctl } for pid=406 comm="syz.0.34" path="/dev/usbmon0" dev="devtmpfs" ino=135 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 28.557555][ T39] usb 4-1: USB disconnect, device number 2 [ 28.563764][ T409] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 28.565811][ T30] audit: type=1400 audit(1726252611.575:150): avc: denied { create } for pid=408 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.591631][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 28.598427][ T30] audit: type=1400 audit(1726252611.575:151): avc: denied { write } for pid=408 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.647069][ T362] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 28.667175][ T362] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 28.687029][ T362] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 28.695133][ T362] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.706992][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 28.727249][ T362] usb 3-1: USB disconnect, device number 3 [ 28.733202][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 28.743845][ T362] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.753139][ T56] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 28.762077][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.770286][ T362] ftdi_sio 3-1:0.0: device disconnected [ 28.775829][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.797391][ T56] usb 5-1: config 0 descriptor?? [ 29.006974][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 29.038624][ T396] UDC core: couldn't find an available UDC or it's busy: -16 [ 29.045974][ T396] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.127021][ T20] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 29.135934][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.147749][ T20] usb 2-1: config 0 descriptor?? [ 29.277224][ T56] hid (null): bogus close delimiter [ 29.282577][ T56] hid (null): invalid report_size 59136 [ 29.291868][ T56] hid (null): report_id 48035 is invalid [ 29.299450][ T56] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 29.307322][ T56] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 29.315011][ T56] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 29.322283][ T56] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 29.330423][ T56] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 29.361757][ T362] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.407093][ T20] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 29.486997][ T39] usb 5-1: USB disconnect, device number 3 [ 29.568043][ T426] loop0: detected capacity change from 0 to 40427 [ 29.637149][ T56] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.667310][ T426] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 29.674972][ T426] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 29.684066][ T426] F2FS-fs (loop0): invalid crc value [ 29.690796][ T426] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.723260][ T426] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 29.730371][ T426] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.737117][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.748555][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.758533][ T362] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 29.759874][ T30] audit: type=1400 audit(1726252612.775:152): avc: denied { append } for pid=425 comm="syz.0.42" path="/13/bus/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.767690][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.802900][ T362] usb 4-1: config 0 descriptor?? [ 29.876956][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 29.905455][ T434] loop0: detected capacity change from 0 to 512 [ 29.997030][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.007875][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.017782][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 30.018155][ T434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.028060][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.044135][ T434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.065931][ T434] EXT4-fs (loop0): 1 truncate cleaned up [ 30.071774][ T434] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.109533][ T434] syz.0.44 (434) used greatest stack depth: 21424 bytes left [ 30.157089][ T56] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.166570][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.174891][ T56] usb 3-1: SerialNumber: syz [ 30.197306][ T420] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 30.204508][ T420] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 30.206528][ T293] syz-executor (293) used greatest stack depth: 20880 bytes left [ 30.276994][ T20] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 30.287690][ T20] asix: probe of 2-1:0.0 failed with error -71 [ 30.296471][ T20] usb 2-1: USB disconnect, device number 3 [ 30.308504][ T362] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 30.316258][ T362] hid-steam 0003:28DE:1142.0007: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 30.330890][ T362] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 30.338868][ T362] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 30.342238][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.357147][ T372] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 30.357871][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.372553][ T441] device bridge_slave_0 entered promiscuous mode [ 30.380171][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.387429][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.394838][ T441] device bridge_slave_1 entered promiscuous mode [ 30.416937][ T362] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 30.439712][ T420] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 30.447344][ T420] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 30.471005][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.478044][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.485348][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.492325][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.520004][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.527936][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.535217][ T39] usb 4-1: USB disconnect, device number 3 [ 30.541260][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.547030][ T39] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 30.567526][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.576640][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.583505][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.591898][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.599820][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 30.605585][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.612719][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.634150][ T441] device veth0_vlan entered promiscuous mode [ 30.640829][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.649791][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.658093][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.665496][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.673545][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.681766][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.697982][ T441] device veth1_macvtap entered promiscuous mode [ 30.707537][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.716005][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.723886][ T372] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 30.734474][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.748289][ T320] device bridge_slave_1 left promiscuous mode [ 30.754262][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.762006][ T320] device bridge_slave_0 left promiscuous mode [ 30.768156][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.776235][ T320] device veth1_macvtap left promiscuous mode [ 30.782401][ T320] device veth0_vlan left promiscuous mode [ 30.887004][ T372] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 30.896087][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.906806][ T56] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 30.916853][ T451] loop1: detected capacity change from 0 to 512 [ 30.920931][ T372] usb 5-1: Product: syz [ 30.929172][ T372] usb 5-1: Manufacturer: syz [ 30.934661][ T372] usb 5-1: SerialNumber: syz [ 30.940025][ T372] usb 5-1: config 0 descriptor?? [ 30.961505][ T451] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.50: inode #1: comm syz.1.50: iget: illegal inode # [ 30.977844][ T372] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 30.985504][ T451] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.50: error while reading EA inode 1 err=-117 [ 30.998461][ T372] usb 5-1: Detected FT232RL [ 31.013624][ T451] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.029187][ T451] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.50: inode #1: comm syz.1.50: iget: illegal inode # [ 31.044067][ T451] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.50: error while reading EA inode 1 err=-117 [ 31.062373][ T451] EXT4-fs (loop1): 1 orphan inode deleted [ 31.070354][ T451] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 31.126130][ T451] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.50: invalid indirect mapped block 234881024 (level 0) [ 31.182912][ T478] loop1: detected capacity change from 0 to 512 [ 31.197402][ T372] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 31.218586][ T478] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.56: corrupted inode contents [ 31.231025][ T478] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #16: comm syz.1.56: mark_inode_dirty error [ 31.237080][ T372] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 31.250031][ T478] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.56: corrupted inode contents [ 31.262295][ T478] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.56: mark_inode_dirty error [ 31.273685][ T478] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.56: corrupted inode contents [ 31.285609][ T372] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 31.286039][ T478] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 31.293893][ T372] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 31.303166][ T478] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.56: corrupted inode contents [ 31.321633][ T478] EXT4-fs error (device loop1): ext4_truncate:4292: inode #16: comm syz.1.56: mark_inode_dirty error [ 31.334535][ T478] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 31.336973][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.345105][ T478] EXT4-fs (loop1): 1 truncate cleaned up [ 31.355196][ T372] usb 5-1: USB disconnect, device number 4 [ 31.357376][ T478] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.366002][ T372] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.373886][ T478] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 31.386853][ T372] ftdi_sio 5-1:0.0: device disconnected [ 31.425247][ T20] usb 3-1: USB disconnect, device number 4 [ 31.437085][ T20] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 31.614810][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.621879][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.629420][ T515] device bridge_slave_0 entered promiscuous mode [ 31.638718][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.645583][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.653120][ T515] device bridge_slave_1 entered promiscuous mode [ 31.704088][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.711074][ T515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.718282][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.725123][ T515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.737384][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.750959][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.757637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.769992][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.777278][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.784208][ T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.797432][ T56] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.806495][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.816952][ T362] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.837282][ T56] usb 4-1: config 0 descriptor?? [ 31.845083][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.855845][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.863082][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.874444][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 31.874459][ T30] audit: type=1400 audit(1726252614.885:199): avc: denied { name_bind } for pid=531 comm="syz.4.68" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.893288][ T532] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 31.905325][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.921523][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.928645][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.936011][ T30] audit: type=1400 audit(1726252614.895:200): avc: denied { node_bind } for pid=531 comm="syz.4.68" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.959103][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.967164][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.973271][ T30] audit: type=1400 audit(1726252614.985:201): avc: denied { unlink } for pid=535 comm="syz.4.70" name="#3" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.994117][ T515] device veth0_vlan entered promiscuous mode [ 32.005769][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.014382][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.023101][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.035232][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.043770][ T540] loop4: detected capacity change from 0 to 512 [ 32.058305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.067694][ T515] device veth1_macvtap entered promiscuous mode [ 32.077058][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 32.078200][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.101388][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.101877][ T540] EXT4-fs (loop4): 1 orphan inode deleted [ 32.115290][ T540] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,errors=continue,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 32.134068][ T540] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 32.148263][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.166325][ T30] audit: type=1400 audit(1726252615.175:202): avc: denied { map } for pid=539 comm="syz.4.72" path="/14/file1/bus" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.190235][ T30] audit: type=1400 audit(1726252615.175:203): avc: denied { execute } for pid=539 comm="syz.4.72" path="/14/file1/bus" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.212567][ T362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.227742][ T320] device bridge_slave_1 left promiscuous mode [ 32.233780][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.241437][ T320] device bridge_slave_0 left promiscuous mode [ 32.247717][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.259746][ T320] device veth1_macvtap left promiscuous mode [ 32.265617][ T320] device veth0_vlan left promiscuous mode [ 32.328056][ T56] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 32.336233][ T56] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 32.351733][ T56] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.367075][ T362] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 32.376037][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.384396][ T362] usb 2-1: Product: syz [ 32.388785][ T362] usb 2-1: Manufacturer: syz [ 32.393457][ T362] usb 2-1: SerialNumber: syz [ 32.399122][ T362] usb 2-1: config 0 descriptor?? [ 32.426998][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.557149][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.568262][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.581337][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.590845][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.602642][ T39] usb 3-1: config 0 descriptor?? [ 32.610412][ T56] usb 4-1: USB disconnect, device number 4 [ 32.637006][ T295] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 32.787035][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.797301][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 32.805996][ T20] usb 1-1: config 1 has no interface number 0 [ 32.812175][ T20] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.823559][ T20] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 32.897032][ T362] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 32.903446][ T362] usb 2-1: No valid video chain found. [ 32.909754][ T362] usb 2-1: USB disconnect, device number 4 [ 32.987267][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.996192][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.004008][ T20] usb 1-1: Product: syz [ 33.008053][ T20] usb 1-1: Manufacturer: syz [ 33.012450][ T20] usb 1-1: SerialNumber: syz [ 33.047061][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 33.058162][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 33.070437][ T39] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 33.078126][ T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.091535][ T295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.100966][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.109100][ T39] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.123843][ T295] usb 5-1: config 0 descriptor?? [ 33.140001][ T553] loop3: detected capacity change from 0 to 1024 [ 33.147679][ T551] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 33.168244][ T553] EXT4-fs (loop3): Ignoring removed nobh option [ 33.175321][ T553] EXT4-fs (loop3): Ignoring removed orlov option [ 33.188696][ T553] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b4,nobh,block_validity,orlov,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 33.219464][ T553] EXT4-fs error (device loop3): ext4_remount:5845: comm syz.3.75: Abort forced by user [ 33.229290][ T553] EXT4-fs (loop3): Remounting filesystem read-only [ 33.347428][ T439] usb 3-1: USB disconnect, device number 5 [ 33.556971][ T56] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.598042][ T295] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 33.606357][ T295] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 33.615995][ T295] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 33.647017][ T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.867938][ T439] usb 5-1: USB disconnect, device number 5 [ 33.917031][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.928057][ T56] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.937406][ T20] cdc_ncm 1-1:1.1: bind() failure [ 33.944260][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.952782][ T56] usb 4-1: config 0 descriptor?? [ 34.037027][ T313] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 34.048010][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.058746][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.068299][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 34.081212][ T313] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 34.090356][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.098968][ T313] usb 2-1: config 0 descriptor?? [ 34.140618][ T295] usb 1-1: USB disconnect, device number 3 [ 34.427714][ T56] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 34.437647][ T56] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input7 [ 34.521101][ T56] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 34.578166][ T313] thrustmaster 0003:044F:B653.000D: collection stack underflow [ 34.585784][ T313] thrustmaster 0003:044F:B653.000D: item 0 4 0 12 parsing failed [ 34.593621][ T313] thrustmaster 0003:044F:B653.000D: parse failed [ 34.599999][ T313] thrustmaster: probe of 0003:044F:B653.000D failed with error -22 [ 34.647697][ T439] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 34.650506][ T295] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.663677][ T30] audit: type=1400 audit(1726252617.675:204): avc: denied { read } for pid=569 comm="syz.0.80" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.665446][ T570] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.688148][ T30] audit: type=1400 audit(1726252617.675:205): avc: denied { open } for pid=569 comm="syz.0.80" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.726377][ T30] audit: type=1400 audit(1726252617.675:206): avc: denied { ioctl } for pid=569 comm="syz.0.80" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.780349][ T541] usb 2-1: USB disconnect, device number 5 [ 34.896987][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 34.926991][ T439] usb 5-1: Using ep0 maxpacket: 32 [ 35.017063][ T295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.028227][ T295] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 35.038064][ T295] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 35.047312][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.051242][ T295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.067481][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.077407][ T439] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.089979][ T439] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.097098][ T568] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 35.100595][ T439] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 35.116257][ T439] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.120015][ T295] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 35.207435][ T439] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.216638][ T439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.224722][ T439] usb 5-1: SerialNumber: syz [ 35.247086][ T567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.254033][ T567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.302006][ T576] loop1: detected capacity change from 0 to 256 [ 35.337870][ T295] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 35.345018][ T295] usb 3-1: USB disconnect, device number 6 [ 35.369715][ T576] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 35.381976][ T576] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 35.393681][ T30] audit: type=1400 audit(1726252618.405:207): avc: denied { write } for pid=575 comm="syz.1.82" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.415615][ T30] audit: type=1400 audit(1726252618.405:208): avc: denied { add_name } for pid=575 comm="syz.1.82" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.467032][ T56] usb 1-1: config 0 has no interfaces? [ 35.474004][ T567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.479383][ T56] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 35.483101][ T567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.492024][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.502925][ T581] loop1: detected capacity change from 0 to 512 [ 35.510158][ T56] usb 1-1: config 0 descriptor?? [ 35.542218][ T313] usb 4-1: USB disconnect, device number 5 [ 35.767222][ T313] usb 1-1: USB disconnect, device number 4 [ 35.958713][ T439] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 36.166956][ T295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.326995][ T439] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.365471][ T39] usb 5-1: USB disconnect, device number 6 [ 36.387331][ T39] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 36.557093][ T295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.567187][ T541] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.574866][ T295] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 36.584144][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.593209][ T295] usb 3-1: config 0 descriptor?? [ 36.637077][ T362] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.687045][ T439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.697774][ T439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.707420][ T439] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 36.716396][ T439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.724905][ T439] usb 4-1: config 0 descriptor?? [ 36.867142][ T295] usb 3-1: string descriptor 0 read error: -71 [ 36.873608][ T295] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 36.882784][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 36.882800][ T30] audit: type=1400 audit(1726252619.895:213): avc: denied { create } for pid=635 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.886767][ T295] usb 3-1: No valid video chain found. [ 36.917700][ T295] usb 3-1: USB disconnect, device number 7 [ 36.925010][ T30] audit: type=1400 audit(1726252619.935:214): avc: denied { write } for pid=635 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.976987][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.989959][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.995512][ T640] loop4: detected capacity change from 0 to 1024 [ 37.000610][ T541] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.019570][ T541] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.027101][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.028760][ T541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.039341][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.057331][ T362] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 37.057694][ T541] usb 1-1: config 0 descriptor?? [ 37.066193][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.079975][ T362] usb 2-1: config 0 descriptor?? [ 37.120721][ T640] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 37.208411][ T439] wacom 0003:056A:00D0.000E: unknown main item tag 0x0 [ 37.215488][ T439] wacom 0003:056A:00D0.000E: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 37.226225][ T439] wacom 0003:056A:00D0.000E: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 37.238097][ T439] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.000E/input/input8 [ 37.383346][ T30] audit: type=1400 audit(1726252620.395:215): avc: denied { create } for pid=652 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.404317][ T30] audit: type=1400 audit(1726252620.415:216): avc: denied { read } for pid=652 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.428546][ T39] usb 4-1: USB disconnect, device number 6 [ 37.455568][ T30] audit: type=1400 audit(1726252620.465:217): avc: denied { write } for pid=652 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.459804][ T650] loop4: detected capacity change from 0 to 40427 [ 37.537891][ T362] isku 0003:1E7D:319C.000F: item fetching failed at offset 3/7 [ 37.545409][ T362] isku 0003:1E7D:319C.000F: parse failed [ 37.548219][ T541] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 37.560706][ T541] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 37.561665][ T362] isku: probe of 0003:1E7D:319C.000F failed with error -22 [ 37.570240][ T541] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 37.594082][ T650] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.626800][ T650] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.645630][ T650] attempt to access beyond end of device [ 37.645630][ T650] loop4: rw=2049, want=53256, limit=40427 [ 37.659530][ T650] attempt to access beyond end of device [ 37.659530][ T650] loop4: rw=0, want=53256, limit=40427 [ 37.677776][ T291] attempt to access beyond end of device [ 37.677776][ T291] loop4: rw=2049, want=45104, limit=40427 [ 37.746837][ T20] usb 2-1: USB disconnect, device number 6 [ 37.776927][ T439] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 37.812388][ T30] audit: type=1400 audit(1726252620.825:218): avc: denied { write } for pid=661 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.857740][ T295] usb 1-1: USB disconnect, device number 5 [ 38.027062][ T439] usb 3-1: Using ep0 maxpacket: 16 [ 38.157119][ T439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.227003][ T362] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.367052][ T439] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 38.376721][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.387332][ T439] usb 3-1: Product: syz [ 38.391472][ T439] usb 3-1: Manufacturer: syz [ 38.395972][ T439] usb 3-1: SerialNumber: syz [ 38.405329][ T439] usb 3-1: config 0 descriptor?? [ 38.497024][ T362] usb 4-1: Using ep0 maxpacket: 32 [ 38.577034][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.627065][ T362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.638285][ T362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 38.648644][ T362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 38.658798][ T362] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.706953][ T295] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.777007][ T362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.786402][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.800060][ T362] usb 4-1: SerialNumber: syz [ 38.827379][ T668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 38.834203][ T668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 38.867026][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 38.937058][ T439] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 38.943279][ T439] usb 3-1: No valid video chain found. [ 38.950027][ T439] usb 3-1: USB disconnect, device number 8 [ 39.007038][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.017875][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.027749][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.040857][ T20] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 39.051054][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.051116][ T668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.060160][ T20] usb 2-1: config 0 descriptor?? [ 39.067702][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.072095][ T668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.085131][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.096075][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.106204][ T295] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 39.115483][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.124252][ T295] usb 1-1: config 0 descriptor?? [ 39.417954][ T30] audit: type=1400 audit(1726252622.435:219): avc: denied { read } for pid=686 comm="syz.2.109" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.440830][ T30] audit: type=1400 audit(1726252622.435:220): avc: denied { open } for pid=686 comm="syz.2.109" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.464024][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.474970][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.485025][ T30] audit: type=1400 audit(1726252622.485:221): avc: denied { ioctl } for pid=686 comm="syz.2.109" path="/dev/ppp" dev="devtmpfs" ino=134 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.510258][ T39] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 39.519926][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.532243][ T39] usb 5-1: config 0 descriptor?? [ 39.538787][ T362] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 39.578055][ T20] ntrig 0003:1B96:0010.0011: item fetching failed at offset 5/7 [ 39.591474][ T30] audit: type=1326 audit(1726252622.605:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399c3bdef9 code=0x7ffc0000 [ 39.612775][ T295] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 39.615031][ T20] ntrig 0003:1B96:0010.0011: parse failed [ 39.648909][ T20] ntrig: probe of 0003:1B96:0010.0011 failed with error -22 [ 39.787363][ T56] usb 2-1: USB disconnect, device number 7 [ 39.816494][ T295] usb 1-1: USB disconnect, device number 6 [ 39.942822][ T439] usb 4-1: USB disconnect, device number 7 [ 39.949184][ T439] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 40.018201][ T39] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 40.027029][ T362] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.027866][ T39] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 40.042103][ T39] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 40.049757][ T39] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 40.056578][ T39] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 40.072053][ T39] sony 0003:054C:0268.0013: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 40.083905][ T39] sony 0003:054C:0268.0013: failed to claim input [ 40.219552][ T439] usb 5-1: USB disconnect, device number 7 [ 40.341101][ T743] syz.0.116[743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.341166][ T743] syz.0.116[743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.365730][ T745] loop0: detected capacity change from 0 to 256 [ 40.427050][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.438400][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.448298][ T362] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 40.457337][ T745] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.469385][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.478348][ T362] usb 3-1: config 0 descriptor?? [ 40.567020][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.736985][ T295] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.781545][ T752] raw_sendmsg: syz.4.120 forgot to set AF_INET. Fix it! [ 40.797055][ T313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.927015][ T39] usb 2-1: config 0 has no interfaces? [ 40.931284][ T710] loop2: detected capacity change from 0 to 512 [ 41.027397][ T710] EXT4-fs (loop2): dax option not supported [ 41.037258][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 41.038406][ T362] itetech 0003:258A:6A88.0014: unknown main item tag 0x0 [ 41.049695][ T362] itetech 0003:258A:6A88.0014: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 41.066917][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 41.087046][ T39] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 41.096047][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.104151][ T295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.116008][ T39] usb 2-1: Product: syz [ 41.120277][ T39] usb 2-1: Manufacturer: syz [ 41.124787][ T39] usb 2-1: SerialNumber: syz [ 41.130317][ T39] r8152-cfgselector 2-1: config 0 descriptor?? [ 41.157061][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.168074][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.177627][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.190638][ T313] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.199521][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.208240][ T313] usb 1-1: config 0 descriptor?? [ 41.244650][ T362] usb 3-1: USB disconnect, device number 9 [ 41.287114][ T295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.296571][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.304800][ T295] usb 4-1: Product: syz [ 41.308875][ T295] usb 4-1: Manufacturer: syz [ 41.313328][ T295] usb 4-1: SerialNumber: syz [ 41.316942][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 41.447032][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.457189][ T20] usb 5-1: config 0 has no interfaces? [ 41.588358][ T362] usb 2-1: USB disconnect, device number 8 [ 41.617069][ T20] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.626071][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.634155][ T20] usb 5-1: Product: syz [ 41.638320][ T20] usb 5-1: Manufacturer: syz [ 41.642669][ T20] usb 5-1: SerialNumber: syz [ 41.647885][ T20] r8152-cfgselector 5-1: config 0 descriptor?? [ 41.687831][ T313] microsoft 0003:045E:07DA.0015: invalid report_size 33886 [ 41.695443][ T313] microsoft 0003:045E:07DA.0015: item 0 4 1 7 parsing failed [ 41.703824][ T313] microsoft 0003:045E:07DA.0015: parse failed [ 41.709792][ T313] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 41.888834][ T362] usb 1-1: USB disconnect, device number 7 [ 41.907028][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 42.036982][ T56] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.108051][ T20] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 42.286991][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 42.367016][ T313] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.406976][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.418852][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.425615][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 42.425637][ T30] audit: type=1400 audit(1726252625.435:243): avc: denied { create } for pid=764 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.429476][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.434880][ T30] audit: type=1400 audit(1726252625.435:244): avc: denied { connect } for pid=764 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.455031][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.496222][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.498936][ T30] audit: type=1400 audit(1726252625.435:245): avc: denied { read } for pid=764 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.523659][ T295] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 42.530168][ T295] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 42.530429][ T56] usb 3-1: config 0 descriptor?? [ 42.541025][ T295] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 42.551075][ T767] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 42.667599][ T30] audit: type=1400 audit(1726252625.685:246): avc: denied { ioctl } for pid=758 comm="syz.1.123" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.706619][ T30] audit: type=1400 audit(1726252625.685:247): avc: denied { read write } for pid=291 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.737442][ T30] audit: type=1400 audit(1726252625.685:248): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.747132][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.773560][ T295] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 42.780304][ T30] audit: type=1400 audit(1726252625.685:249): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.790058][ T295] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 42.820401][ T781] loop0: detected capacity change from 0 to 8192 [ 42.829299][ T30] audit: type=1400 audit(1726252625.685:250): avc: denied { read } for pid=782 comm="syz.4.134" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.854065][ T30] audit: type=1400 audit(1726252625.685:251): avc: denied { open } for pid=782 comm="syz.4.134" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.854352][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.880086][ T785] loop4: detected capacity change from 0 to 256 [ 42.896711][ T295] usb 4-1: USB disconnect, device number 8 [ 42.903006][ T30] audit: type=1400 audit(1726252625.685:252): avc: denied { ioctl } for pid=782 comm="syz.4.134" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.929579][ T295] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 42.942915][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.967320][ T313] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.014435][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.028767][ T313] usb 2-1: config 0 descriptor?? [ 43.033883][ T39] ================================================================== [ 43.041770][ T39] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 43.049397][ T39] Read of size 8 at addr ffff888129f28c70 by task kworker/1:1/39 [ 43.056950][ T39] [ 43.059145][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 43.068930][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.078922][ T39] Workqueue: events linkwatch_event [ 43.083961][ T39] Call Trace: [ 43.087158][ T39] [ 43.089933][ T39] dump_stack_lvl+0x151/0x1c0 [ 43.094450][ T39] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.096076][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input11 [ 43.099911][ T39] ? panic+0x760/0x760 [ 43.099940][ T39] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 43.099966][ T39] print_address_description+0x87/0x3b0 [ 43.126555][ T39] kasan_report+0x179/0x1c0 [ 43.131076][ T39] ? __kasan_check_write+0x14/0x20 [ 43.136115][ T39] ? __list_del_entry_valid+0xa6/0x120 [ 43.141404][ T39] ? __list_del_entry_valid+0xa6/0x120 [ 43.146702][ T39] __asan_report_load8_noabort+0x14/0x20 [ 43.152339][ T39] __list_del_entry_valid+0xa6/0x120 [ 43.157460][ T39] process_one_work+0x458/0xc10 [ 43.162161][ T39] worker_thread+0xad5/0x12a0 [ 43.166749][ T39] ? _raw_spin_lock+0x1b0/0x1b0 [ 43.171613][ T39] kthread+0x421/0x510 [ 43.175512][ T39] ? worker_clr_flags+0x180/0x180 [ 43.180373][ T39] ? kthread_blkcg+0xd0/0xd0 [ 43.184898][ T39] ret_from_fork+0x1f/0x30 [ 43.189147][ T39] [ 43.192002][ T39] [ 43.194174][ T39] Allocated by task 295: [ 43.198250][ T39] ____kasan_kmalloc+0xdb/0x110 [ 43.202827][ T56] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 43.202937][ T39] __kasan_kmalloc+0x9/0x10 [ 43.218993][ T39] __kmalloc+0x13a/0x270 [ 43.223472][ T39] kvmalloc_node+0x1f0/0x4d0 [ 43.227984][ T39] alloc_netdev_mqs+0x8c/0xc90 [ 43.232586][ T39] alloc_etherdev_mqs+0x33/0x40 [ 43.237270][ T39] usbnet_probe+0x1ff/0x2830 [ 43.241779][ T39] usb_probe_interface+0x5b6/0xa90 [ 43.246900][ T39] really_probe+0x28d/0x970 [ 43.251238][ T39] __driver_probe_device+0x1a0/0x310 [ 43.256542][ T39] driver_probe_device+0x54/0x3d0 [ 43.261585][ T39] __device_attach_driver+0x2c5/0x470 [ 43.267390][ T39] bus_for_each_drv+0x183/0x200 [ 43.272186][ T39] __device_attach+0x312/0x510 [ 43.276811][ T39] device_initial_probe+0x1a/0x20 [ 43.281655][ T39] bus_probe_device+0xbe/0x1e0 [ 43.286330][ T39] device_add+0xb60/0xf10 [ 43.290596][ T39] usb_set_configuration+0x190f/0x1e80 [ 43.295789][ T39] usb_generic_driver_probe+0x8b/0x150 [ 43.302620][ T39] usb_probe_device+0x144/0x260 [ 43.308088][ T39] really_probe+0x28d/0x970 [ 43.313186][ T39] __driver_probe_device+0x1a0/0x310 [ 43.318741][ T39] driver_probe_device+0x54/0x3d0 [ 43.324024][ T39] __device_attach_driver+0x2c5/0x470 [ 43.330319][ T39] bus_for_each_drv+0x183/0x200 [ 43.335658][ T39] __device_attach+0x312/0x510 [ 43.340243][ T39] device_initial_probe+0x1a/0x20 [ 43.345101][ T39] bus_probe_device+0xbe/0x1e0 [ 43.349837][ T39] device_add+0xb60/0xf10 [ 43.354076][ T39] usb_new_device+0x1038/0x1c00 [ 43.358754][ T39] hub_event+0x2def/0x4770 [ 43.363034][ T39] process_one_work+0x6bb/0xc10 [ 43.367696][ T39] worker_thread+0xad5/0x12a0 [ 43.372212][ T39] kthread+0x421/0x510 [ 43.376121][ T39] ret_from_fork+0x1f/0x30 [ 43.380373][ T39] [ 43.382549][ T39] Freed by task 295: [ 43.386629][ T39] kasan_set_track+0x4b/0x70 [ 43.391248][ T39] kasan_set_free_info+0x23/0x40 [ 43.395997][ T39] ____kasan_slab_free+0x126/0x160 [ 43.401032][ T39] __kasan_slab_free+0x11/0x20 [ 43.405824][ T39] slab_free_freelist_hook+0xbd/0x190 [ 43.411452][ T39] kfree+0xc8/0x220 [ 43.415093][ T39] kvfree+0x35/0x40 [ 43.418791][ T39] netdev_freemem+0x3f/0x60 [ 43.423260][ T39] netdev_release+0x7f/0xb0 [ 43.427601][ T39] device_release+0x95/0x1c0 [ 43.432107][ T39] kobject_put+0x178/0x260 [ 43.436357][ T39] put_device+0x1f/0x30 [ 43.440676][ T39] free_netdev+0x34f/0x440 [ 43.445012][ T39] usbnet_disconnect+0x245/0x390 [ 43.449794][ T39] usb_unbind_interface+0x1fa/0x8c0 [ 43.454820][ T39] device_release_driver_internal+0x50b/0x7d0 [ 43.460726][ T39] device_release_driver+0x19/0x20 [ 43.465885][ T39] bus_remove_device+0x2f8/0x360 [ 43.470676][ T39] device_del+0x663/0xe90 [ 43.474819][ T39] usb_disable_device+0x380/0x720 [ 43.479676][ T39] usb_disconnect+0x32a/0x890 [ 43.484200][ T39] hub_event+0x1d42/0x4770 [ 43.488799][ T39] process_one_work+0x6bb/0xc10 [ 43.493476][ T39] worker_thread+0xe02/0x12a0 [ 43.497994][ T39] kthread+0x421/0x510 [ 43.501933][ T39] ret_from_fork+0x1f/0x30 [ 43.506265][ T39] [ 43.508435][ T39] Last potentially related work creation: [ 43.514096][ T39] kasan_save_stack+0x3b/0x60 [ 43.518612][ T39] __kasan_record_aux_stack+0xd3/0xf0 [ 43.523817][ T39] kasan_record_aux_stack_noalloc+0xb/0x10 [ 43.529452][ T39] insert_work+0x56/0x320 [ 43.533719][ T39] __queue_work+0x92a/0xcd0 [ 43.538048][ T39] queue_work_on+0x105/0x170 [ 43.542672][ T39] usbnet_link_change+0xeb/0x100 [ 43.547628][ T39] usbnet_probe+0x1dd3/0x2830 [ 43.552144][ T39] usb_probe_interface+0x5b6/0xa90 [ 43.557099][ T39] really_probe+0x28d/0x970 [ 43.561565][ T39] __driver_probe_device+0x1a0/0x310 [ 43.566931][ T39] driver_probe_device+0x54/0x3d0 [ 43.571799][ T39] __device_attach_driver+0x2c5/0x470 [ 43.577161][ T39] bus_for_each_drv+0x183/0x200 [ 43.581937][ T39] __device_attach+0x312/0x510 [ 43.586527][ T39] device_initial_probe+0x1a/0x20 [ 43.591390][ T39] bus_probe_device+0xbe/0x1e0 [ 43.595992][ T39] device_add+0xb60/0xf10 [ 43.600152][ T39] usb_set_configuration+0x190f/0x1e80 [ 43.605708][ T39] usb_generic_driver_probe+0x8b/0x150 [ 43.611002][ T39] usb_probe_device+0x144/0x260 [ 43.615861][ T39] really_probe+0x28d/0x970 [ 43.620202][ T39] __driver_probe_device+0x1a0/0x310 [ 43.625347][ T39] driver_probe_device+0x54/0x3d0 [ 43.630183][ T39] __device_attach_driver+0x2c5/0x470 [ 43.635544][ T39] bus_for_each_drv+0x183/0x200 [ 43.640249][ T39] __device_attach+0x312/0x510 [ 43.644839][ T39] device_initial_probe+0x1a/0x20 [ 43.649679][ T39] bus_probe_device+0xbe/0x1e0 [ 43.654300][ T39] device_add+0xb60/0xf10 [ 43.658553][ T39] usb_new_device+0x1038/0x1c00 [ 43.663328][ T39] hub_event+0x2def/0x4770 [ 43.667558][ T39] process_one_work+0x6bb/0xc10 [ 43.672334][ T39] worker_thread+0xad5/0x12a0 [ 43.677023][ T39] kthread+0x421/0x510 [ 43.680950][ T39] ret_from_fork+0x1f/0x30 [ 43.685187][ T39] [ 43.687346][ T39] The buggy address belongs to the object at ffff888129f28000 [ 43.687346][ T39] which belongs to the cache kmalloc-4k of size 4096 [ 43.701896][ T39] The buggy address is located 3184 bytes inside of [ 43.701896][ T39] 4096-byte region [ffff888129f28000, ffff888129f29000) [ 43.715177][ T39] The buggy address belongs to the page: [ 43.720653][ T39] page:ffffea0004a7ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129f28 [ 43.730702][ T39] head:ffffea0004a7ca00 order:3 compound_mapcount:0 compound_pincount:0 [ 43.738878][ T39] flags: 0x4000000000010200(slab|head|zone=1) [ 43.744787][ T39] raw: 4000000000010200 ffffea000444f200 0000000200000002 ffff888100043380 [ 43.753189][ T39] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 43.761655][ T39] page dumped because: kasan: bad access detected [ 43.767874][ T39] page_owner tracks the page as allocated [ 43.773500][ T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 100, ts 29080622457, free_ts 0 [ 43.793022][ T39] post_alloc_hook+0x1a3/0x1b0 [ 43.797634][ T39] prep_new_page+0x1b/0x110 [ 43.801960][ T39] get_page_from_freelist+0x3550/0x35d0 [ 43.807340][ T39] __alloc_pages+0x27e/0x8f0 [ 43.811942][ T39] new_slab+0x9a/0x4e0 [ 43.816139][ T39] ___slab_alloc+0x39e/0x830 [ 43.820564][ T39] __slab_alloc+0x4a/0x90 [ 43.824905][ T39] kmem_cache_alloc_trace+0x142/0x210 [ 43.830196][ T39] kobject_uevent_env+0x269/0x700 [ 43.835139][ T39] kobject_synth_uevent+0x4eb/0xae0 [ 43.840179][ T39] uevent_store+0x25/0x60 [ 43.844351][ T39] dev_attr_store+0x5c/0x80 [ 43.848696][ T39] sysfs_kf_write+0x123/0x140 [ 43.853687][ T39] kernfs_fop_write_iter+0x2c4/0x410 [ 43.858985][ T39] vfs_write+0xd5d/0x1110 [ 43.863524][ T39] ksys_write+0x199/0x2c0 [ 43.867769][ T39] page_owner free stack trace missing [ 43.873308][ T39] [ 43.875469][ T39] Memory state around the buggy address: [ 43.881393][ T39] ffff888129f28b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.890206][ T39] ffff888129f28b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.898229][ T39] >ffff888129f28c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.906331][ T39] ^ [ 43.914154][ T39] ffff888129f28c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.922019][ T39] ffff888129f28d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.930003][ T39] ================================================================== [ 43.937992][ T39] Disabling lock debugging due to kernel taint [ 43.959023][ T541] usb 3-1: USB disconnect, device number 10 [ 43.981697][ T819] loop0: detected capacity change from 0 to 256 [ 44.468117][ T313] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 44.478489][ T313] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 44.788657][ T822] UDC core: couldn't find an available UDC or it's busy: -16 [ 44.796450][ T822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.607388][ T20] usb 2-1: USB disconnect, device number 9