last executing test programs: 10.839700724s ago: executing program 4 (id=9372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x80000f}) fcntl$lock(r0, 0x25, &(0x7f0000000180)) 10.781506549s ago: executing program 4 (id=9374): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4ea3, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000001040)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 10.781341169s ago: executing program 4 (id=9375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 10.773568709s ago: executing program 4 (id=9376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='itimer_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 10.753901811s ago: executing program 4 (id=9377): socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a844a0db63175395be37ff4d1a86411304db8a78538a1231f3d662a445b877d05c3e6f7a0c0e33020e4c9d9cae810938f8fa4fd9c5237343572a5d9aaa1bf1514ed339e00e6101255b6019ca6d7684801c7fde6433", 0x55}, {0x0}], 0x2}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) 10.675847078s ago: executing program 4 (id=9380): socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000402, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) ptrace(0x11, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) 2.632418965s ago: executing program 2 (id=9486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0x1, 0x4000000, 0x0, 0x0) 2.614306816s ago: executing program 2 (id=9487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.559494751s ago: executing program 2 (id=9489): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f0100000000000000000006240700000009058103400000000009058202080000000009050302"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 2.397217465s ago: executing program 1 (id=9491): socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2.238064528s ago: executing program 1 (id=9495): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9}]}}, 0x0}, 0x0) 2.237658969s ago: executing program 0 (id=9496): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/29, 0x1d}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.152343776s ago: executing program 0 (id=9497): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000680), &(0x7f0000000400)='%pS \x00'}, 0x1a) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.136248317s ago: executing program 0 (id=9498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x800, 0x0, 0x2, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r6) 1.363503554s ago: executing program 3 (id=9505): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 953.731068ms ago: executing program 0 (id=9507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r5) 952.898998ms ago: executing program 2 (id=9508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) 952.701669ms ago: executing program 3 (id=9509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[]) 478.972489ms ago: executing program 2 (id=9510): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) 478.204069ms ago: executing program 3 (id=9511): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30006841}, 0x4000c81) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/115, 0x73}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x2100) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 321.533472ms ago: executing program 1 (id=9512): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 320.086363ms ago: executing program 2 (id=9513): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x64}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) r0 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000002140)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 315.239223ms ago: executing program 3 (id=9514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 181.374005ms ago: executing program 3 (id=9515): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8}}) 180.698134ms ago: executing program 3 (id=9516): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r0, r1, 0x0) 152.699827ms ago: executing program 1 (id=9517): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1) 118.12314ms ago: executing program 0 (id=9518): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setfsgid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 77.352863ms ago: executing program 0 (id=9519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r1, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 52.487426ms ago: executing program 1 (id=9520): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 1 (id=9522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x1}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.249143][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.251159][ T4570] loop4: detected capacity change from 0 to 512 [ 2269.256981][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.269658][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.276834][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.284038][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.291224][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.298465][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.305669][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.312863][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.320159][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.327385][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.334854][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.342092][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.349255][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.356458][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.363694][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.371075][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.378298][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.385505][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.392685][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.399920][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.407098][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.414789][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.422100][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.429376][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.436714][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.444086][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.451583][T15308] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2269.461259][T15308] hid-generic 0000:0000:0000.00C1: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2269.506402][ T812] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2269.878868][ T812] usb 4-1: config 0 has no interfaces? [ 2269.884530][ T812] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2269.954919][ T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.989299][ T812] usb 4-1: config 0 descriptor?? [ 2270.094513][ T4580] loop0: detected capacity change from 0 to 40427 [ 2270.113610][ T4580] F2FS-fs (loop0): invalid crc value [ 2270.120372][ T4580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2270.151294][ T4580] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2270.166412][ T4580] attempt to access beyond end of device [ 2270.166412][ T4580] loop0: rw=2049, want=45104, limit=40427 [ 2270.179863][ T4580] attempt to access beyond end of device [ 2270.179863][ T4580] loop0: rw=2049, want=45232, limit=40427 [ 2270.210685][ T4580] attempt to access beyond end of device [ 2270.210685][ T4580] loop0: rw=2049, want=53384, limit=40427 [ 2270.321371][ T812] usb 4-1: USB disconnect, device number 4 [ 2270.336166][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 2270.343069][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.350514][ T4587] device bridge_slave_0 entered promiscuous mode [ 2270.357778][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.364891][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.372215][ T4587] device bridge_slave_1 entered promiscuous mode [ 2270.380655][ T4592] loop0: detected capacity change from 0 to 512 [ 2270.410877][ T4592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2270.424639][ T4592] EXT4-fs (loop0): 1 truncate cleaned up [ 2270.430416][ T4592] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 2270.462410][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.469290][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2270.476396][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 2270.483138][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2270.517562][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2270.525773][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.533605][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.553604][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2270.561081][ T4602] loop0: detected capacity change from 0 to 512 [ 2270.565528][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2270.567533][ T30] audit: type=1400 audit(2000000913.919:5064): avc: denied { associate } for pid=4597 comm="syz.1.8878" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2270.574379][T12057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2270.575541][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2270.611445][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.618302][T12057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2270.629324][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2270.639551][ T4602] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.8879: bad orphan inode 17 [ 2270.649620][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2270.654355][ T4602] ext4_test_bit(bit=16, block=4) = 1 [ 2270.658003][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2270.671154][ T4602] is_bad_inode(inode)=0 [ 2270.675375][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2270.682896][ T4602] NEXT_ORPHAN(inode)=0 [ 2270.682908][ T4602] max_ino=32 [ 2270.682916][ T4602] i_nlink=1 [ 2270.682953][ T4602] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2270.704151][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2270.711568][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2270.713498][ T4602] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.8879: bg 0: block 7: invalid block bitmap [ 2270.732145][ T4587] device veth0_vlan entered promiscuous mode [ 2270.746358][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2270.787022][ T4587] device veth1_macvtap entered promiscuous mode [ 2270.809897][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2270.831860][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2270.848567][T15308] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 2270.938946][ T4610] loop2: detected capacity change from 0 to 1024 [ 2271.103964][ T4610] EXT4-fs (loop2): Ignoring removed oldalloc option [ 2271.218042][ T4610] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 2271.245103][ T4610] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 2271.249530][ T30] audit: type=1400 audit(2000000914.649:5065): avc: denied { remount } for pid=4609 comm="syz.2.8875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2271.374505][T12057] device bridge_slave_1 left promiscuous mode [ 2271.380616][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.388260][T12057] device bridge_slave_0 left promiscuous mode [ 2271.394733][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.403310][T12057] device veth1_macvtap left promiscuous mode [ 2271.409229][T12057] device veth0_vlan left promiscuous mode [ 2271.444639][T15308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2271.458510][T15308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2271.468590][T15308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2271.478366][T15308] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2271.501000][T19277] Bluetooth: hci1: command 0x1003 tx timeout [ 2271.506847][ T6960] Bluetooth: hci1: sending frame failed (-49) [ 2271.532765][ T4605] loop0: detected capacity change from 0 to 131072 [ 2271.565696][T15308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2271.568389][ T4605] F2FS-fs (loop0): invalid crc value [ 2271.574708][T15308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2271.582225][ T4605] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 2271.587879][T15308] usb 2-1: SerialNumber: syz [ 2271.644492][ T4605] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 2271.651983][ T30] audit: type=1400 audit(2000000915.078:5066): avc: denied { write } for pid=4619 comm="syz.3.8882" name="raw" dev="proc" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2271.697182][T15308] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 2271.705001][T15308] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 2271.730748][ T30] audit: type=1400 audit(2000000915.175:5067): avc: denied { ioctl } for pid=4623 comm="syz.3.8885" path="socket:[201434]" dev="sockfs" ino=201434 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2271.812475][ T4632] loop2: detected capacity change from 0 to 512 [ 2271.842078][ T30] audit: type=1400 audit(2000000915.293:5068): avc: denied { mounton } for pid=4633 comm="syz.3.8890" path="/51/bus" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2271.882795][ T4632] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2271.893791][ T4632] ext4 filesystem being mounted at /1/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 2271.896959][ T3369] usb 2-1: USB disconnect, device number 118 [ 2271.913343][ T4632] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.8887: Directory hole found for htree leaf block 0 [ 2272.144002][ T4638] tipc: Started in network mode [ 2272.148759][ T4638] tipc: Node identity 1, cluster identity 4711 [ 2272.154826][ T4638] tipc: Node number set to 1 [ 2272.183797][ T4646] loop0: detected capacity change from 0 to 512 [ 2272.224421][ T4646] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.8893: bad orphan inode 17 [ 2272.235170][ T4646] ext4_test_bit(bit=16, block=4) = 1 [ 2272.246650][ T4646] is_bad_inode(inode)=0 [ 2272.250770][ T4646] NEXT_ORPHAN(inode)=0 [ 2272.263368][ T4646] max_ino=32 [ 2272.266690][ T4646] i_nlink=1 [ 2272.269845][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2272.284456][ T4646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.8893: bg 0: block 7: invalid block bitmap [ 2272.375312][ T4672] loop0: detected capacity change from 0 to 8192 [ 2272.572623][ T812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2272.629540][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2272.629559][ T30] audit: type=1400 audit(2000000916.140:5093): avc: denied { mounton } for pid=4686 comm="syz.3.8911" path="/proc/127/task" dev="proc" ino=202041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2272.665537][ T4689] syz.3.8912[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2272.665607][ T4689] syz.3.8912[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2272.768342][ T8524] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2272.805487][ T812] usb 3-1: Using ep0 maxpacket: 16 [ 2272.926499][T19277] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2273.066959][ T812] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2273.076064][ T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.083849][ T812] usb 3-1: Product: syz [ 2273.087868][ T812] usb 3-1: Manufacturer: syz [ 2273.092269][ T812] usb 3-1: SerialNumber: syz [ 2273.097514][ T812] usb 3-1: config 0 descriptor?? [ 2273.113693][ T8524] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2273.124567][ T8524] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 2273.136226][ T812] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2273.144382][ T8524] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 2273.156397][ T812] usb 3-1: Detected FT232H [ 2273.160708][ T8524] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2273.169557][ T8524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.197144][ T4684] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2273.262191][T19277] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2273.271055][T19277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.279667][T19277] usb 4-1: config 0 descriptor?? [ 2273.327620][ T812] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2273.405699][ T3369] usb 2-1: USB disconnect, device number 119 [ 2273.439537][ T8524] Bluetooth: hci1: command 0x1001 tx timeout [ 2273.445469][ T6960] Bluetooth: hci1: sending frame failed (-49) [ 2273.570199][ T812] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2273.577120][ T812] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2273.585715][ T812] usb 3-1: USB disconnect, device number 4 [ 2273.592001][ T812] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2273.601358][ T812] ftdi_sio 3-1:0.0: device disconnected [ 2273.896906][ T30] audit: type=1400 audit(2000000917.503:5094): avc: denied { create } for pid=4691 comm="syz.1.8913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2273.916753][T19277] usb 4-1: Cannot set autoneg [ 2273.921537][T19277] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 2273.925331][ T30] audit: type=1400 audit(2000000917.503:5095): avc: denied { write } for pid=4691 comm="syz.1.8913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2273.931247][T19277] usb 4-1: USB disconnect, device number 5 [ 2274.045349][ T4698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4698 comm=syz.2.8916 [ 2274.213243][T32423] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2274.315244][T15308] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 2274.455448][T32423] usb 2-1: Using ep0 maxpacket: 16 [ 2274.576984][T32423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2274.588085][T32423] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2274.597149][T32423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.605722][T32423] usb 2-1: config 0 descriptor?? [ 2274.669861][T15308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2274.680652][T15308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2274.690197][T15308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2274.699651][T15308] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2274.781761][T15308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2274.790634][T15308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2274.798472][T15308] usb 3-1: SerialNumber: syz [ 2274.838234][T15308] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2274.845995][T15308] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 2275.024576][ T4694] UDC core: couldn't find an available UDC or it's busy: -16 [ 2275.025744][T19277] usb 3-1: USB disconnect, device number 5 [ 2275.031835][ T4694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2275.062920][T32423] hid (null): unknown global tag 0x83 [ 2275.068200][T32423] hid (null): unknown global tag 0xc [ 2275.074386][T32423] hid-sensor-hub 0003:0158:0100.00C2: unknown main item tag 0x1 [ 2275.081871][T32423] hid-sensor-hub 0003:0158:0100.00C2: unexpected long global item [ 2275.089886][T32423] hid-sensor-hub 0003:0158:0100.00C2: parse failed [ 2275.096197][T32423] hid-sensor-hub: probe of 0003:0158:0100.00C2 failed with error -22 [ 2275.249500][T32423] usb 2-1: USB disconnect, device number 120 [ 2275.314861][ T4718] loop0: detected capacity change from 0 to 128 [ 2275.325832][ T30] audit: type=1326 audit(2000000919.037:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.349192][ T30] audit: type=1326 audit(2000000919.037:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.373436][ T30] audit: type=1326 audit(2000000919.037:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.393000][T19277] Bluetooth: hci1: command 0x1009 tx timeout [ 2275.397824][ T30] audit: type=1326 audit(2000000919.037:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.430352][ T30] audit: type=1326 audit(2000000919.037:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.454248][ T30] audit: type=1326 audit(2000000919.037:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.454933][ T4718] attempt to access beyond end of device [ 2275.454933][ T4718] loop0: rw=0, want=240, limit=128 [ 2275.478452][ T30] audit: type=1326 audit(2000000919.037:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c8916ff9 code=0x7ffc0000 [ 2275.571832][T12057] attempt to access beyond end of device [ 2275.571832][T12057] loop0: rw=1, want=1041, limit=128 [ 2275.656518][ T4742] loop0: detected capacity change from 0 to 16 [ 2275.677089][ T4742] erofs: (device loop0): mounted with root inode @ nid 36. [ 2275.684808][ T4742] attempt to access beyond end of device [ 2275.684808][ T4742] loop0: rw=0, want=14552337264, limit=16 [ 2275.758469][ T4747] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2275.936577][ T4759] loop1: detected capacity change from 0 to 128 [ 2275.967220][ T4759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2275.978007][ T4759] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2276.015174][ T4733] loop2: detected capacity change from 0 to 131072 [ 2276.059322][ T4733] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 2276.068574][ T4733] F2FS-fs (loop2): invalid crc value [ 2276.075356][ T4733] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 2276.106360][ T4733] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 2276.559903][ T4779] syz.2.8947[4779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2276.559987][ T4779] syz.2.8947[4779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2276.583583][ T4763] loop1: detected capacity change from 0 to 131072 [ 2276.618796][ T4763] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 2276.627822][ T4763] F2FS-fs (loop1): invalid crc value [ 2276.641610][ T4763] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 2276.674278][ T4763] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 2276.687143][ T4763] syz.1.8942[4763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2276.687221][ T4763] syz.1.8942[4763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2276.712076][ T4763] incfs: ino conflict with backing FS 4 [ 2276.731100][ T4763] incfs: ino conflict with backing FS 5 [ 2277.050385][ T4816] loop1: detected capacity change from 0 to 40427 [ 2277.103165][ T4816] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 2277.109360][ T4816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2277.120476][ T4816] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2277.144276][ T4816] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 2277.151205][ T4816] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2277.169626][ T4816] attempt to access beyond end of device [ 2277.169626][ T4816] loop1: rw=2049, want=53256, limit=40427 [ 2277.180718][ T3369] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2277.181402][ T4816] attempt to access beyond end of device [ 2277.181402][ T4816] loop1: rw=2049, want=53264, limit=40427 [ 2277.202506][ T4816] attempt to access beyond end of device [ 2277.202506][ T4816] loop1: rw=2049, want=53328, limit=40427 [ 2277.219066][ T4459] attempt to access beyond end of device [ 2277.219066][ T4459] loop1: rw=2049, want=45104, limit=40427 [ 2277.549569][ T3369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.560314][ T3369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.569887][ T3369] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2277.578761][ T3369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.587392][ T3369] usb 4-1: config 0 descriptor?? [ 2278.044270][ T3369] arvo 0003:1E7D:30D4.00C3: item fetching failed at offset 3/5 [ 2278.051758][ T3369] arvo 0003:1E7D:30D4.00C3: parse failed [ 2278.057158][ T3369] arvo: probe of 0003:1E7D:30D4.00C3 failed with error -22 [ 2278.231569][ T8524] usb 4-1: USB disconnect, device number 6 [ 2278.350556][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2278.350571][ T30] audit: type=1400 audit(2000000922.277:5124): avc: denied { read } for pid=4836 comm="syz.1.8969" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=202453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2278.688211][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.695137][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.702595][ T4843] device bridge_slave_0 entered promiscuous mode [ 2278.709807][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.716705][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.723942][ T4843] device bridge_slave_1 entered promiscuous mode [ 2278.783155][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.790057][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.797170][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.804027][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.827797][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.835007][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.842890][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2278.850466][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2278.860053][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2278.868212][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.875058][T12057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.883696][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2278.891704][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.898626][T12057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.911791][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2278.921119][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2278.935904][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2278.947792][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2278.955622][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2278.963110][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2278.971728][ T4843] device veth0_vlan entered promiscuous mode [ 2278.982576][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2278.991764][ T4843] device veth1_macvtap entered promiscuous mode [ 2278.997869][T15308] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2279.005210][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2279.013493][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2279.036976][ T4853] loop4: detected capacity change from 0 to 16 [ 2279.069841][ T4853] erofs: (device loop4): mounted with root inode @ nid 36. [ 2279.084392][ T4853] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 2279.093393][ T4853] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 2279.102464][ T4853] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 2279.111577][ T4853] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 2279.120829][ T4853] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 2279.138586][ T4853] attempt to access beyond end of device [ 2279.138586][ T4853] loop4: rw=524288, want=6536, limit=16 [ 2279.150822][ T4569] bridge0: port 3(syz_tun) entered disabled state [ 2279.151670][ T4853] attempt to access beyond end of device [ 2279.151670][ T4853] loop4: rw=524288, want=34359736344, limit=16 [ 2279.169898][ T4569] device syz_tun left promiscuous mode [ 2279.176359][ T4569] bridge0: port 3(syz_tun) entered disabled state [ 2279.182380][ T4853] attempt to access beyond end of device [ 2279.182380][ T4853] loop4: rw=524288, want=736, limit=16 [ 2279.210396][ T4855] loop1: detected capacity change from 0 to 128 [ 2279.217590][T24375] tipc: Disabling bearer [ 2279.223422][T24375] tipc: Left network mode [ 2279.237089][T15308] usb 4-1: Using ep0 maxpacket: 16 [ 2279.262990][ T4859] loop4: detected capacity change from 0 to 512 [ 2279.667915][T15308] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2279.676829][T15308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.685200][T15308] usb 4-1: Product: syz [ 2279.689178][T15308] usb 4-1: Manufacturer: syz [ 2279.693610][T15308] usb 4-1: SerialNumber: syz [ 2279.699152][T15308] usb 4-1: config 0 descriptor?? [ 2279.732357][T24375] device bridge_slave_1 left promiscuous mode [ 2279.738353][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.745895][T15308] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2279.753714][T15308] usb 4-1: Detected FT232H [ 2279.758222][T24375] device bridge_slave_0 left promiscuous mode [ 2279.764231][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.772014][T24375] device veth1_macvtap left promiscuous mode [ 2279.778083][T24375] device veth0_vlan left promiscuous mode [ 2279.936145][T15308] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2280.197094][T15308] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2280.205485][T15308] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2280.223885][T15308] usb 4-1: USB disconnect, device number 7 [ 2280.232629][T15308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2280.241945][T32423] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2280.250059][T15308] ftdi_sio 4-1:0.0: device disconnected [ 2280.301973][ T4875] loop2: detected capacity change from 0 to 131072 [ 2280.330319][ T4875] F2FS-fs (loop2): invalid crc value [ 2280.337243][ T4875] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 2280.365928][ T4875] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 2280.377289][ T4906] loop1: detected capacity change from 0 to 256 [ 2280.410737][ T4906] exfat: Deprecated parameter 'utf8' [ 2280.416757][ T4906] exfat: Deprecated parameter 'namecase' [ 2280.422345][ T4906] exfat: Deprecated parameter 'namecase' [ 2280.427843][ T4906] exfat: Deprecated parameter 'utf8' [ 2280.441370][ T4906] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 2280.457244][ T30] audit: type=1400 audit(2000000924.541:5125): avc: denied { append } for pid=4905 comm="syz.1.8994" path=2F33362FE91F7189591E9233614B2F626C6B696F2E6266712E696F5F717565756564 dev="loop1" ino=1050324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2280.485482][T32423] usb 5-1: Using ep0 maxpacket: 16 [ 2280.597935][T32423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.608978][T32423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.625649][T32423] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2280.650508][T32423] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2280.659444][T32423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.668021][T32423] usb 5-1: config 0 descriptor?? [ 2281.093990][ T30] audit: type=1400 audit(2000000925.217:5126): avc: denied { write } for pid=4939 comm="syz.2.9007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2281.147479][T15308] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2281.196842][ T4945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9009'. [ 2281.205814][ T4945] tipc: Invalid UDP bearer configuration [ 2281.205853][ T4945] tipc: Enabling of bearer rejected, failed to enable media [ 2281.222836][T32423] koneplus 0003:1E7D:2E22.00C4: unknown main item tag 0x0 [ 2281.230447][T32423] koneplus 0003:1E7D:2E22.00C4: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 2281.370871][T15308] usb 4-1: Using ep0 maxpacket: 16 [ 2281.605518][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9014'. [ 2281.619434][T32423] usb 5-1: USB disconnect, device number 119 [ 2281.632254][T15308] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2281.641309][T15308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.649899][T15308] usb 4-1: Product: syz [ 2281.654091][T15308] usb 4-1: Manufacturer: syz [ 2281.658510][T15308] usb 4-1: SerialNumber: syz [ 2281.663982][T15308] usb 4-1: config 0 descriptor?? [ 2281.670002][ T4958] loop1: detected capacity change from 0 to 512 [ 2281.690786][ T4958] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.9015: bad orphan inode 17 [ 2281.700794][ T4958] ext4_test_bit(bit=16, block=4) = 1 [ 2281.701398][T15308] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2281.705990][ T4958] is_bad_inode(inode)=0 [ 2281.714037][T15308] usb 4-1: Detected FT232H [ 2281.717464][ T4958] NEXT_ORPHAN(inode)=0 [ 2281.725387][ T4958] max_ino=32 [ 2281.728468][ T4958] i_nlink=1 [ 2281.731373][ T4958] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2281.748314][ T30] audit: type=1400 audit(2000000925.925:5127): avc: denied { mounton } for pid=4957 comm="syz.1.9015" path="/46/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2281.748648][ T4958] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.9015: bg 0: block 7: invalid block bitmap [ 2281.783662][ T4958] incfs: Can't find or create .index dir in ./file0 [ 2281.790105][ T4958] incfs: mount failed -28 [ 2281.892815][T15308] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2281.934107][ T4962] syz.2.9016[4962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2281.934195][ T4962] syz.2.9016[4962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2282.005890][ T4971] loop0: detected capacity change from 0 to 512 [ 2282.062691][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2282.073814][ T4971] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 2282.106083][ T30] audit: type=1326 audit(2000000926.301:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2282.135601][ T30] audit: type=1326 audit(2000000926.333:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2282.159147][ T30] audit: type=1326 audit(2000000926.333:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2282.183338][ T30] audit: type=1326 audit(2000000926.354:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2282.210587][ T30] audit: type=1326 audit(2000000926.408:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2282.907453][ T4983] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.9020: Directory hole found for htree leaf block 0 [ 2283.174560][T15308] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2283.183866][T15308] usb 4-1: USB disconnect, device number 8 [ 2283.190981][T15308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2283.194402][ T30] audit: type=1326 audit(2000000927.234:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.200584][T15308] ftdi_sio 4-1:0.0: device disconnected [ 2283.228572][ T4987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9023'. [ 2283.230949][ T30] audit: type=1326 audit(2000000927.470:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.261183][ T30] audit: type=1326 audit(2000000927.470:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.285355][ T30] audit: type=1326 audit(2000000927.470:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.308810][ T30] audit: type=1326 audit(2000000927.524:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.332686][ T30] audit: type=1400 audit(2000000927.524:5138): avc: denied { mount } for pid=4977 comm="syz.4.9022" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2283.354717][ T30] audit: type=1326 audit(2000000927.524:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.378464][ T30] audit: type=1326 audit(2000000927.524:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.402233][ T30] audit: type=1326 audit(2000000927.524:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.426371][ T30] audit: type=1326 audit(2000000927.524:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.9022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5f5a3ff9 code=0x7ffc0000 [ 2283.755357][T28849] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2283.943844][T32423] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2284.008555][T28849] usb 3-1: Using ep0 maxpacket: 16 [ 2284.148435][T28849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2284.157288][T28849] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2284.166743][T28849] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2284.166987][T32423] usb 2-1: Using ep0 maxpacket: 16 [ 2284.176219][T28849] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2284.181306][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2284.191038][T28849] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2284.207534][T28849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2284.213945][T28849] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2284.222772][T28849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.270060][T28849] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 2284.306996][T32423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.318016][T32423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.327996][T32423] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2284.344622][T32423] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2284.353484][T32423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.362142][T32423] usb 2-1: config 0 descriptor?? [ 2284.429938][ T5028] syz.4.9038[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2284.430007][ T5028] syz.4.9038[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2284.475372][T28849] scsi host1: usb-storage 3-1:1.0 [ 2284.536308][ T5039] serio: Serial port ptm1 [ 2284.540268][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.551535][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.562086][ T20] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2284.573345][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.582220][ T20] usb 4-1: config 0 descriptor?? [ 2284.667840][ T3369] usb 3-1: USB disconnect, device number 6 [ 2284.782208][T28849] Bluetooth: hci0: command 0x1003 tx timeout [ 2284.788507][ T6960] Bluetooth: hci0: sending frame failed (-49) [ 2284.997917][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.005146][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.012192][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.019221][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.026435][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.033459][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.040514][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.047542][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.054801][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.061744][T32423] microsoft 0003:045E:07DA.00C5: unknown main item tag 0x0 [ 2285.073347][T32423] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00C5/input/input220 [ 2285.085688][T32423] microsoft 0003:045E:07DA.00C5: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2285.103997][ T5011] UDC core: couldn't find an available UDC or it's busy: -16 [ 2285.111205][ T5011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2285.128503][ T20] sony 0003:054C:024B.00C6: unknown main item tag 0x0 [ 2285.135087][ T20] sony 0003:054C:024B.00C6: unknown main item tag 0x0 [ 2285.141755][ T20] sony 0003:054C:024B.00C6: unexpected long global item [ 2285.148769][ T20] sony 0003:054C:024B.00C6: parse failed [ 2285.154239][ T20] sony: probe of 0003:054C:024B.00C6 failed with error -22 [ 2285.187610][T28849] usb 2-1: USB disconnect, device number 121 [ 2285.191081][ T5050] loop2: detected capacity change from 0 to 128 [ 2285.287123][T24375] tipc: Left network mode [ 2285.323230][ T20] usb 4-1: USB disconnect, device number 9 [ 2285.381076][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.388012][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.395197][ T5052] device bridge_slave_0 entered promiscuous mode [ 2285.402364][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.409351][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.417052][ T5052] device bridge_slave_1 entered promiscuous mode [ 2285.511309][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.518165][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2285.525326][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.532175][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2285.566623][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2285.574093][T26015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.581374][T26015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.590851][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2285.599106][T26015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.605952][T26015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2285.860657][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2285.875057][T26015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.881951][T26015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2285.903510][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2285.911606][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2285.934268][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2285.948606][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2285.957720][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2285.969241][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2285.992012][ T5052] device veth0_vlan entered promiscuous mode [ 2286.008695][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2286.018789][T24375] device bridge_slave_1 left promiscuous mode [ 2286.026483][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.037910][T24375] device bridge_slave_0 left promiscuous mode [ 2286.044295][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.059291][T24375] device veth1_macvtap left promiscuous mode [ 2286.065305][T24375] device veth0_vlan left promiscuous mode [ 2286.169154][ T5052] device veth1_macvtap entered promiscuous mode [ 2286.181246][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2286.197490][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2286.205733][T26015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2286.234729][ T5098] incfs: Options parsing error. -22 [ 2286.240759][ T5098] incfs: mount failed -22 [ 2286.441675][T28849] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2286.484576][ T5107] loop4: detected capacity change from 0 to 40427 [ 2286.497501][T15308] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2286.497787][T10164] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2286.695095][ T5115] loop4: detected capacity change from 0 to 512 [ 2286.711821][ T812] Bluetooth: hci0: command 0x1001 tx timeout [ 2286.717698][ T6960] Bluetooth: hci0: sending frame failed (-49) [ 2286.730721][T10164] usb 3-1: Using ep0 maxpacket: 8 [ 2286.749045][T15308] usb 4-1: Using ep0 maxpacket: 16 [ 2286.777113][T28849] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2286.787938][T28849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.798658][T28849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.808341][T28849] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2286.821220][T28849] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 2286.830276][T28849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.839042][T28849] usb 2-1: config 0 descriptor?? [ 2286.843989][T10164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.854846][T10164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.864715][T10164] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2286.871295][T15308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.877664][T10164] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 2286.898229][T10164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.903293][T15308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.906875][T10164] usb 3-1: config 0 descriptor?? [ 2286.925779][T15308] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2286.935045][T15308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.952156][T15308] usb 4-1: config 0 descriptor?? [ 2287.007146][ T5122] bridge: RTM_NEWNEIGH with invalid ether address [ 2287.202751][ T5131] loop4: detected capacity change from 0 to 40427 [ 2287.253924][ T5131] F2FS-fs (loop4): invalid crc value [ 2287.260573][ T5131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2287.290660][ T5131] F2FS-fs (loop4): write access unavailable, skipping recovery [ 2287.298187][ T5131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2287.310227][T28849] thrustmaster 0003:044F:B653.00C7: unbalanced delimiter at end of report description [ 2287.319862][T28849] thrustmaster 0003:044F:B653.00C7: parse failed [ 2287.326019][T28849] thrustmaster: probe of 0003:044F:B653.00C7 failed with error -22 [ 2287.365413][T10164] ntrig 0003:1B96:0010.00C8: item fetching failed at offset 5/7 [ 2287.373060][T10164] ntrig 0003:1B96:0010.00C8: parse failed [ 2287.380808][T10164] ntrig: probe of 0003:1B96:0010.00C8 failed with error -22 [ 2287.402362][T15308] savu 0003:1E7D:2D5A.00C9: item fetching failed at offset 2/5 [ 2287.410038][T15308] savu 0003:1E7D:2D5A.00C9: parse failed [ 2287.415845][T15308] savu: probe of 0003:1E7D:2D5A.00C9 failed with error -22 [ 2287.498158][T10164] usb 2-1: USB disconnect, device number 122 [ 2287.569940][ T20] usb 3-1: USB disconnect, device number 7 [ 2287.590073][T32423] usb 4-1: USB disconnect, device number 10 [ 2287.755571][T15308] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2288.046035][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2288.046051][ T30] audit: type=1326 audit(2000000932.684:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.1.9085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06ac595ff9 code=0x0 [ 2288.128638][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.147419][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.165527][T15308] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2288.184900][T15308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.198581][T15308] usb 5-1: config 0 descriptor?? [ 2288.650399][ T8524] Bluetooth: hci0: command 0x1009 tx timeout [ 2288.717707][ T5171] loop2: detected capacity change from 0 to 2048 [ 2288.899975][ T5173] loop2: detected capacity change from 0 to 40427 [ 2288.941205][ T5173] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2288.948876][ T5173] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2288.958780][ T5173] F2FS-fs (loop2): invalid crc value [ 2288.965299][ T5173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2288.994709][ T5173] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2289.001611][ T5173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2289.013258][ T5173] handle_bad_sector: 5 callbacks suppressed [ 2289.013269][ T5173] attempt to access beyond end of device [ 2289.013269][ T5173] loop2: rw=2049, want=45104, limit=40427 [ 2289.148871][ T30] audit: type=1326 audit(2000000933.865:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.174362][ T5187] syz.2.9099[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2289.174445][ T5187] syz.2.9099[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2289.185655][ T30] audit: type=1326 audit(2000000933.897:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.221176][ T30] audit: type=1326 audit(2000000933.897:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.245793][ T30] audit: type=1326 audit(2000000933.897:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.269684][ T30] audit: type=1326 audit(2000000933.897:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.293059][ T30] audit: type=1326 audit(2000000933.897:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.316442][ T30] audit: type=1326 audit(2000000933.897:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.339987][ T30] audit: type=1326 audit(2000000933.897:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.341374][T15308] hid-led 0003:27B8:01ED.00CA: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 2289.363419][ T30] audit: type=1326 audit(2000000933.897:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88314d7ff9 code=0x7ffc0000 [ 2289.399783][T15308] hid-led 0003:27B8:01ED.00CA: ThingM blink(1) initialized [ 2289.554598][T15308] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2289.661738][ T8524] usb 5-1: USB disconnect, device number 120 [ 2289.712792][T10164] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2289.936487][T10164] usb 2-1: Using ep0 maxpacket: 32 [ 2290.048281][T10164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.058258][T10164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2290.123405][T15308] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2290.136272][T15308] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2290.145343][T15308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.157917][T15308] usb 4-1: config 0 descriptor?? [ 2290.198383][T15308] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2290.216073][T10164] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2290.225080][T10164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.233031][T10164] usb 2-1: Product: syz [ 2290.237094][T10164] usb 2-1: Manufacturer: syz [ 2290.241562][T10164] usb 2-1: SerialNumber: syz [ 2290.297423][ T5217] : renamed from vlan0 [ 2290.387753][T15308] usb 4-1: USB disconnect, device number 11 [ 2290.579878][T32423] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2290.711029][T10164] usb 2-1: cannot find UAC_HEADER [ 2290.715978][T10164] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2290.723305][T10164] usb 2-1: USB disconnect, device number 123 [ 2290.822089][T32423] usb 3-1: Using ep0 maxpacket: 16 [ 2290.961993][T32423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.973226][T32423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.983198][T32423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2290.996103][T32423] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2291.005161][T32423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.014385][T32423] usb 3-1: config 0 descriptor?? [ 2291.172123][ T5234] loop1: detected capacity change from 0 to 256 [ 2291.207580][ T5234] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2291.278337][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.285226][ T5236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.437677][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.444603][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.452015][ T5240] device bridge_slave_0 entered promiscuous mode [ 2291.459185][T32423] microsoft 0003:045E:07DA.00CB: ignoring exceeding usage max [ 2291.467433][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.478012][T32423] microsoft 0003:045E:07DA.00CB: No inputs registered, leaving [ 2291.485728][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.493185][T32423] microsoft 0003:045E:07DA.00CB: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2291.504898][ T5240] device bridge_slave_1 entered promiscuous mode [ 2291.515031][T32423] microsoft 0003:045E:07DA.00CB: no inputs found [ 2291.527718][T32423] microsoft 0003:045E:07DA.00CB: could not initialize ff, continuing anyway [ 2291.558172][T15308] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2291.598308][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.605205][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2291.612310][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.619107][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.647617][ T20] usb 3-1: USB disconnect, device number 8 [ 2291.658337][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.665578][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.673872][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2291.681813][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2291.699741][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2291.707947][T24375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.714787][T24375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.722226][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2291.730906][T24375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.737776][T24375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2291.745365][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2291.770589][ T5240] device veth0_vlan entered promiscuous mode [ 2291.783812][ T5240] device veth1_macvtap entered promiscuous mode [ 2291.793463][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2291.802008][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2291.809773][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2291.817181][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2291.824852][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2291.833503][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2292.072588][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2292.082315][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2292.136589][T15308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.147578][T15308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.157699][T15308] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2292.167220][T15308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.176005][T15308] usb 2-1: config 0 descriptor?? [ 2292.783672][ T5280] overlayfs: failed to resolve './file0': -2 [ 2292.799229][T15308] pantherlord 0003:0F30:0111.00CC: item fetching failed at offset 6/7 [ 2292.807543][T15308] pantherlord 0003:0F30:0111.00CC: parse failed [ 2292.813743][T15308] pantherlord: probe of 0003:0F30:0111.00CC failed with error -22 [ 2292.967190][ T45] device bridge_slave_1 left promiscuous mode [ 2292.973170][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.981347][ T45] device bridge_slave_0 left promiscuous mode [ 2292.987450][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.996202][ T45] device veth1_macvtap left promiscuous mode [ 2293.002160][ T45] device veth0_vlan left promiscuous mode [ 2293.008257][T10164] usb 2-1: USB disconnect, device number 124 [ 2293.105686][T15308] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2293.593720][T24375] Bluetooth: hci0: Frame reassembly failed (-84) [ 2293.600101][ T45] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 2293.655983][T15308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2293.666662][T15308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2293.676317][T15308] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 2293.685143][T15308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.693791][T15308] usb 4-1: config 0 descriptor?? [ 2294.013811][ T5311] loop4: detected capacity change from 0 to 512 [ 2294.131269][ T20] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2294.149801][ T5315] loop4: detected capacity change from 0 to 512 [ 2294.150375][T15308] saitek 0003:06A3:0621.00CD: unbalanced collection at end of report description [ 2294.165079][T15308] saitek 0003:06A3:0621.00CD: parse failed [ 2294.170953][T15308] saitek: probe of 0003:06A3:0621.00CD failed with error -22 [ 2294.266166][ T5315] loop4: detected capacity change from 0 to 512 [ 2294.340396][T32423] usb 4-1: USB disconnect, device number 12 [ 2294.383727][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2294.383743][ T30] audit: type=1400 audit(2000000939.487:5184): avc: denied { map } for pid=5316 comm="syz.4.9151" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2294.412724][ T20] usb 3-1: device descriptor read/64, error -71 [ 2294.432814][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9152'. [ 2294.484708][ T30] audit: type=1400 audit(2000000939.583:5185): avc: denied { create } for pid=5325 comm="syz.4.9155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2294.504724][ T30] audit: type=1400 audit(2000000939.583:5186): avc: denied { setopt } for pid=5325 comm="syz.4.9155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2294.524662][ T30] audit: type=1400 audit(2000000939.583:5187): avc: denied { write } for pid=5325 comm="syz.4.9155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2295.570524][ T812] Bluetooth: hci0: command 0x1003 tx timeout [ 2295.580216][ T6960] Bluetooth: hci0: sending frame failed (-49) [ 2295.849507][ T30] audit: type=1400 audit(2000000941.053:5188): avc: denied { append } for pid=5350 comm="syz.0.9164" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2295.883454][ T20] usb 3-1: device descriptor read/64, error -71 [ 2295.962873][ T5360] loop4: detected capacity change from 0 to 256 [ 2295.986632][ T5360] FAT-fs (loop4): bogus number of FAT sectors [ 2295.992557][ T5360] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2296.153255][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2296.593009][ T20] usb 3-1: device descriptor read/64, error -71 [ 2297.132925][ T20] usb 3-1: device descriptor read/64, error -71 [ 2297.243798][ T20] usb usb3-port1: attempt power cycle [ 2297.523332][ T8524] Bluetooth: hci0: command 0x1001 tx timeout [ 2297.529383][ T6960] Bluetooth: hci0: sending frame failed (-49) [ 2297.821606][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2297.980129][ T20] usb 3-1: device descriptor read/8, error -71 [ 2297.983147][ T30] audit: type=1400 audit(2000000943.338:5189): avc: denied { bind } for pid=5391 comm="syz.4.9178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2298.231756][ T20] usb 3-1: device descriptor read/8, error -71 [ 2298.278284][T28849] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2298.402146][ T30] audit: type=1400 audit(2000000943.789:5190): avc: denied { map } for pid=5395 comm="syz.3.9180" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2298.426476][ T30] audit: type=1400 audit(2000000943.789:5191): avc: denied { execute } for pid=5395 comm="syz.3.9180" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2298.492695][ T20] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2298.651335][T28849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2298.664653][T28849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2298.674772][T28849] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2298.683861][T28849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.712156][T28849] usb 5-1: config 0 descriptor?? [ 2298.884409][ T20] usb 3-1: device descriptor read/8, error -71 [ 2299.111667][ T5414] loop0: detected capacity change from 0 to 128 [ 2299.156944][ T5414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2299.167428][ T5414] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 2299.182529][ T20] usb 3-1: device descriptor read/8, error -71 [ 2299.182650][T28849] hid (null): bogus close delimiter [ 2299.244606][ T5418] loop0: detected capacity change from 0 to 512 [ 2299.266942][ T5418] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2299.280562][ T5418] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 2299.295036][ T5418] EXT4-fs (loop0): Remounting filesystem read-only [ 2299.301393][ T5418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9187: invalid indirect mapped block 1 (level 1) [ 2299.303691][ T20] usb usb3-port1: unable to enumerate USB device [ 2299.314667][ T5418] EXT4-fs (loop0): 1 truncate cleaned up [ 2299.325939][ T5418] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 2299.352396][ T5418] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 2299.361823][ T5418] EXT4-fs (loop0): Remounting filesystem read-only [ 2299.368130][ T5418] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #12: comm syz.0.9187: mark_inode_dirty error [ 2299.383506][ T5240] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 2299.462595][ T812] Bluetooth: hci0: command 0x1009 tx timeout [ 2299.549865][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.556732][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.563919][ T5421] device bridge_slave_0 entered promiscuous mode [ 2299.570737][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.577768][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.585011][ T5421] device bridge_slave_1 entered promiscuous mode [ 2299.639617][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.646500][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.653629][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.660393][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2299.676914][T28849] usb 5-1: string descriptor 0 read error: -71 [ 2299.692537][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2299.700158][T28849] uclogic 0003:256C:006D.00CE: failed retrieving string descriptor #200: -71 [ 2299.708782][T28849] uclogic 0003:256C:006D.00CE: failed retrieving pen parameters: -71 [ 2299.708881][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.716844][T28849] uclogic 0003:256C:006D.00CE: failed probing pen v2 parameters: -71 [ 2299.731531][T28849] uclogic 0003:256C:006D.00CE: failed probing parameters: -71 [ 2299.731615][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.738882][T28849] uclogic: probe of 0003:256C:006D.00CE failed with error -71 [ 2299.754373][T28849] usb 5-1: USB disconnect, device number 121 [ 2299.765626][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2299.773677][T24375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.780530][T24375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2299.787756][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2299.796411][T24375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.803249][T24375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.813962][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2299.824889][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2299.840031][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2299.854652][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2299.862520][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2299.870149][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2299.878986][ T5421] device veth0_vlan entered promiscuous mode [ 2299.892268][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2299.901775][ T5421] device veth1_macvtap entered promiscuous mode [ 2299.913907][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2299.923902][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2299.950787][ T5427] loop0: detected capacity change from 0 to 512 [ 2299.985455][ T45] device bridge_slave_1 left promiscuous mode [ 2299.991475][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.998961][ T45] device bridge_slave_0 left promiscuous mode [ 2300.004933][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.007280][ T5427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2300.022658][ T5427] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 2300.032440][ T45] device veth1_macvtap left promiscuous mode [ 2300.038322][ T45] device veth0_vlan left promiscuous mode [ 2300.041327][ T5427] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.9190: Directory hole found for htree leaf block 0 [ 2300.135942][ T30] audit: type=1326 audit(2000000945.656:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.0.9193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2300.159468][ T30] audit: type=1326 audit(2000000945.656:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.0.9193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2300.183103][ T30] audit: type=1326 audit(2000000945.666:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.0.9193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2300.210345][ T30] audit: type=1326 audit(2000000945.666:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.0.9193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2300.234348][ T30] audit: type=1326 audit(2000000945.666:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.0.9193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2300.286009][ T5441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5441 comm=syz.0.9196 [ 2300.506540][T28849] Bluetooth: hci1: command 0x1003 tx timeout [ 2300.515653][T26258] Bluetooth: hci1: sending frame failed (-49) [ 2301.020613][ T30] audit: type=1400 audit(2000000946.600:5197): avc: denied { ioctl } for pid=5458 comm="syz.4.9202" path="socket:[207000]" dev="sockfs" ino=207000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2301.063237][ T5461] xt_hashlimit: size too large, truncated to 1048576 [ 2301.513186][ T5482] loop4: detected capacity change from 0 to 40427 [ 2301.803383][ T5482] overlayfs: invalid origin (0000) [ 2302.099738][ T812] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2302.318094][ T30] audit: type=1326 audit(2000000947.995:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.0.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2302.341316][ T812] usb 5-1: Using ep0 maxpacket: 16 [ 2302.346355][ T30] audit: type=1326 audit(2000000947.995:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.0.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2302.369804][ T30] audit: type=1326 audit(2000000947.995:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.0.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2302.393689][ T30] audit: type=1326 audit(2000000947.995:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.0.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2302.440230][ T5507] loop0: detected capacity change from 0 to 2048 [ 2302.445256][T10164] Bluetooth: hci1: command 0x1001 tx timeout [ 2302.452537][T26258] Bluetooth: hci1: sending frame failed (-49) [ 2302.472869][ T812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.483695][ T812] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2302.496345][ T812] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2302.505227][ T812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.512041][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 2302.513764][ T812] usb 5-1: config 0 descriptor?? [ 2302.529161][ T5507] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2302.982159][ T812] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00CF/input/input222 [ 2303.059707][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.066782][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.074708][ T5521] device bridge_slave_0 entered promiscuous mode [ 2303.074909][ T812] microsoft 0003:045E:07DA.00CF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2303.082003][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.099620][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.106819][ T5521] device bridge_slave_1 entered promiscuous mode [ 2303.161860][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.168819][ T5521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.175938][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.182697][ T5521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.208031][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2303.215582][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.222873][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.234679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2303.242983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.249852][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.259841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2303.267960][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.274807][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.292726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2303.302405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2303.319617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2303.331640][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2303.340025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2303.347296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2303.357281][ T5521] device veth0_vlan entered promiscuous mode [ 2303.367719][ T812] usb 5-1: USB disconnect, device number 122 [ 2303.371437][ T5521] device veth1_macvtap entered promiscuous mode [ 2303.388960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2303.414921][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2303.434438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2303.485135][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.492032][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.499320][ T5527] device bridge_slave_0 entered promiscuous mode [ 2303.506167][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.513034][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.520204][ T5527] device bridge_slave_1 entered promiscuous mode [ 2303.600857][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2303.608187][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2303.617195][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2303.625356][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2303.633452][T20059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.640300][T20059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.650057][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2303.658526][T24375] device bridge_slave_1 left promiscuous mode [ 2303.664468][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.671958][T24375] device bridge_slave_0 left promiscuous mode [ 2303.678074][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.686482][T24375] device veth1_macvtap left promiscuous mode [ 2303.692308][T24375] device veth0_vlan left promiscuous mode [ 2303.780417][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2303.788653][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2303.796605][T20059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.803462][T20059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.820539][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2303.829301][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2303.837921][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2303.846306][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2303.865606][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2303.879058][ T5527] device veth0_vlan entered promiscuous mode [ 2303.885690][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2303.895039][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2303.902800][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2303.915672][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2303.924975][ T5527] device veth1_macvtap entered promiscuous mode [ 2303.934769][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2303.942953][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2303.953006][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2303.961400][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2304.014219][ T5561] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154 [ 2304.675650][T32423] Bluetooth: hci1: command 0x1009 tx timeout [ 2304.775321][T28849] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2305.130275][T24375] device bridge_slave_1 left promiscuous mode [ 2305.136266][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2305.176569][T24375] device bridge_slave_0 left promiscuous mode [ 2305.182531][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.224154][T24375] device veth1_macvtap left promiscuous mode [ 2305.229991][T24375] device veth0_vlan left promiscuous mode [ 2309.240425][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2309.240440][ T30] audit: type=1326 audit(2000000955.419:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.295582][ T5580] loop1: detected capacity change from 0 to 512 [ 2309.318170][ T30] audit: type=1326 audit(2000000955.419:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.347360][ T30] audit: type=1326 audit(2000000955.419:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.380617][ T30] audit: type=1326 audit(2000000955.419:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.404171][ T30] audit: type=1326 audit(2000000955.419:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.427743][ T30] audit: type=1326 audit(2000000955.419:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.429742][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2309.450942][ T30] audit: type=1326 audit(2000000955.419:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.462394][ T5580] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 2309.653834][T24375] tipc: Disabling bearer [ 2309.656271][ T30] audit: type=1326 audit(2000000955.419:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.703266][ T30] audit: type=1326 audit(2000000955.419:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.728524][T24375] tipc: Left network mode [ 2309.754428][ T30] audit: type=1326 audit(2000000955.419:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b93a3ff9 code=0x7ffc0000 [ 2309.788368][ T5593] device syzkaller0 entered promiscuous mode [ 2309.872941][ T5598] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.9244: Directory hole found for htree leaf block 0 [ 2310.114652][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.121858][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 2310.129449][ T5583] device bridge_slave_0 entered promiscuous mode [ 2310.136643][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.147294][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 2310.154795][ T5583] device bridge_slave_1 entered promiscuous mode [ 2310.627054][ T5616] loop4: detected capacity change from 0 to 512 [ 2310.649900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2310.657671][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2310.669296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2310.677636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2310.685911][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.692788][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2310.700527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2310.712738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2310.721103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2310.729587][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.736494][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2310.744796][T24375] device bridge_slave_1 left promiscuous mode [ 2310.750900][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2310.758421][T24375] device bridge_slave_0 left promiscuous mode [ 2310.764601][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2310.773986][T24375] device veth1_macvtap left promiscuous mode [ 2310.780058][T24375] device veth0_vlan left promiscuous mode [ 2310.852856][ T5629] loop4: detected capacity change from 0 to 2048 [ 2310.916979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2310.934650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2310.949947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2310.963467][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2310.979070][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2310.987483][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2310.999806][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2311.008999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2311.019385][ T5583] device veth0_vlan entered promiscuous mode [ 2311.027269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2311.034988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2311.058330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2311.070673][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2311.082716][ T5583] device veth1_macvtap entered promiscuous mode [ 2311.104207][ T5654] syz.2.9270[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.104276][ T5654] syz.2.9270[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.108148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2311.139830][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2311.148242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2311.203620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2311.211908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2311.597685][T32423] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2311.728152][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2311.737371][T15308] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2311.765377][T28849] Bluetooth: hci0: command 0x1003 tx timeout [ 2311.771323][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2311.830371][T32423] usb 5-1: Using ep0 maxpacket: 16 [ 2311.951683][T32423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2311.962574][T32423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.973717][T32423] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2311.986713][T15308] usb 4-1: Using ep0 maxpacket: 16 [ 2311.992137][T32423] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2311.996307][ T5681] loop0: detected capacity change from 0 to 256 [ 2312.001417][T32423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.015996][T32423] usb 5-1: config 0 descriptor?? [ 2312.029000][ T5681] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2312.064117][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2312.074049][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2312.100825][T15308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.111812][T15308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2312.124693][T15308] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2312.133772][T15308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.142768][T15308] usb 4-1: config 0 descriptor?? [ 2312.156858][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2312.165908][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2312.173817][ T20] usb 3-1: SerialNumber: syz [ 2312.418631][ T20] usb 3-1: 0:2 : does not exist [ 2312.465390][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.472501][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.479813][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.486886][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.493901][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.500923][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.508004][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.515495][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.522587][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.529554][T32423] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 2312.540961][T32423] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00D0/input/input223 [ 2312.553271][T32423] microsoft 0003:045E:07DA.00D0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2312.600417][T15308] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00D1/input/input224 [ 2312.608787][ T5674] loop2: detected capacity change from 0 to 512 [ 2312.654447][ T5674] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.9277: corrupted in-inode xattr [ 2312.667074][ T5674] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.9277: couldn't read orphan inode 15 (err -117) [ 2312.670593][T15308] microsoft 0003:045E:07DA.00D1: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2312.690813][ T5674] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 2312.704271][T15308] usb 5-1: USB disconnect, device number 124 [ 2312.977744][T15308] usb 4-1: USB disconnect, device number 13 [ 2313.026407][ T20] usb 3-1: USB disconnect, device number 13 [ 2313.248559][ T5699] loop4: detected capacity change from 0 to 1024 [ 2313.750404][T28849] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2313.984734][T15308] Bluetooth: hci0: command 0x1001 tx timeout [ 2313.990713][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2314.002075][T28849] usb 4-1: Using ep0 maxpacket: 16 [ 2314.143200][T28849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.154289][T28849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.163915][T28849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2314.176492][T28849] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2314.185301][T28849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.193855][T28849] usb 4-1: config 0 descriptor?? [ 2314.309769][T15308] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2314.395169][ T5732] loop2: detected capacity change from 0 to 1024 [ 2314.432450][ T5732] EXT4-fs (loop2): Ignoring removed orlov option [ 2314.442018][ T5732] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,norecovery,max_dir_size_kb=0x00000000004007b1,orlov,bsdgroups,max_batch_time=0x0000000000000002,min_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 2314.522567][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2314.522583][ T30] audit: type=1400 audit(2000000961.084:5255): avc: denied { validate_trans } for pid=5735 comm="syz.2.9301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2314.552101][T15308] usb 5-1: Using ep0 maxpacket: 8 [ 2314.655995][T28849] koneplus 0003:1E7D:2E22.00D2: unknown main item tag 0x0 [ 2314.662985][T28849] koneplus 0003:1E7D:2E22.00D2: unknown main item tag 0x0 [ 2314.670625][T28849] koneplus 0003:1E7D:2E22.00D2: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 2314.683027][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.693812][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.703524][T15308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2314.716663][T15308] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2314.725932][T15308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.734844][T15308] usb 5-1: config 0 descriptor?? [ 2314.860077][T28849] koneplus 0003:1E7D:2E22.00D2: couldn't init struct koneplus_device [ 2314.868558][T28849] koneplus 0003:1E7D:2E22.00D2: couldn't install mouse [ 2314.880419][T28849] koneplus: probe of 0003:1E7D:2E22.00D2 failed with error -71 [ 2314.921382][T28849] usb 4-1: USB disconnect, device number 14 [ 2315.195976][T15308] apple 0003:05AC:0274.00D3: unexpected long global item [ 2315.203000][T15308] apple 0003:05AC:0274.00D3: parse failed [ 2315.208582][T15308] apple: probe of 0003:05AC:0274.00D3 failed with error -22 [ 2315.382762][T28849] usb 5-1: USB disconnect, device number 125 [ 2315.587234][ T5761] loop2: detected capacity change from 0 to 2048 [ 2315.625445][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2315.641022][ T30] audit: type=1400 audit(2000000962.286:5256): avc: denied { execute } for pid=5760 comm="syz.2.9311" path="/27/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2315.699263][ T5773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2315.721111][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9317'. [ 2315.732789][ T5777] device ip6gretap0 entered promiscuous mode [ 2315.751900][ T5782] loop2: detected capacity change from 0 to 128 [ 2315.770585][ T5782] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000656) [ 2315.778428][ T5782] FAT-fs (loop2): Filesystem has been set read-only [ 2315.789830][ T5527] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a) [ 2315.800449][ T5527] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a) [ 2315.869747][ T3369] Bluetooth: hci0: command 0x1009 tx timeout [ 2315.920292][ T30] audit: type=1326 audit(2000000962.586:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2315.960353][ T30] audit: type=1326 audit(2000000962.586:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.008153][ T30] audit: type=1326 audit(2000000962.586:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.033029][ T30] audit: type=1326 audit(2000000962.586:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.056572][ T30] audit: type=1326 audit(2000000962.586:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.080153][ T30] audit: type=1326 audit(2000000962.586:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.104448][ T30] audit: type=1326 audit(2000000962.586:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.128184][ T3369] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2316.129282][ T30] audit: type=1326 audit(2000000962.586:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a1ffcff9 code=0x7ffc0000 [ 2316.172871][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.180016][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.187737][ T5794] device bridge_slave_0 entered promiscuous mode [ 2316.197357][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.204317][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.211723][ T5794] device bridge_slave_1 entered promiscuous mode [ 2316.280696][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.287560][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.294735][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.301532][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2316.338027][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2316.346227][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.351231][ T3369] usb 5-1: Using ep0 maxpacket: 16 [ 2316.358496][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.378050][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2316.386560][T24375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.393459][T24375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2316.401439][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2316.410238][T24375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.417101][T24375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.434251][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2316.442241][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2316.461554][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2316.472672][ T3369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.491412][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2316.493089][ T3369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.504769][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2316.510621][ T3369] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2316.528790][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2316.528996][ T3369] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2316.546004][ T45] device bridge_slave_1 left promiscuous mode [ 2316.552253][ T3369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.560331][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.561666][ T3369] usb 5-1: config 0 descriptor?? [ 2316.572907][ T45] device bridge_slave_0 left promiscuous mode [ 2316.578998][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.587363][ T45] device veth1_macvtap left promiscuous mode [ 2316.593201][ T45] device veth0_vlan left promiscuous mode [ 2316.663350][ T5794] device veth0_vlan entered promiscuous mode [ 2316.674749][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2316.684098][ T5794] device veth1_macvtap entered promiscuous mode [ 2316.695372][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2316.703603][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2316.714625][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2316.722767][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2317.012568][T28849] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2317.013564][ T3369] koneplus 0003:1E7D:2E22.00D4: unknown main item tag 0x0 [ 2317.027002][ T3369] koneplus 0003:1E7D:2E22.00D4: unknown main item tag 0x0 [ 2317.034425][ T3369] koneplus 0003:1E7D:2E22.00D4: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 2317.208757][ T3369] koneplus 0003:1E7D:2E22.00D4: couldn't init struct koneplus_device [ 2317.216760][ T3369] koneplus 0003:1E7D:2E22.00D4: couldn't install mouse [ 2317.224027][ T3369] koneplus: probe of 0003:1E7D:2E22.00D4 failed with error -71 [ 2317.233118][ T3369] usb 5-1: USB disconnect, device number 126 [ 2317.255182][T28849] usb 3-1: Using ep0 maxpacket: 16 [ 2317.329438][ T5835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9342'. [ 2317.367619][T28849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.378888][T28849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2317.388664][T28849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2317.401389][T28849] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2317.410247][T28849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.418723][T28849] usb 3-1: config 0 descriptor?? [ 2317.915835][T28849] ryos 0003:1E7D:31CE.00D5: ignoring exceeding usage max [ 2317.924524][T28849] ryos 0003:1E7D:31CE.00D5: ignoring exceeding usage max [ 2317.931432][T28849] ryos 0003:1E7D:31CE.00D5: usage index exceeded [ 2317.937551][T28849] ryos 0003:1E7D:31CE.00D5: item 0 0 2 2 parsing failed [ 2317.944524][T28849] ryos 0003:1E7D:31CE.00D5: parse failed [ 2317.950024][T28849] ryos: probe of 0003:1E7D:31CE.00D5 failed with error -22 [ 2318.120401][T28849] usb 3-1: USB disconnect, device number 14 [ 2318.292524][ T5878] syz.3.9360[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2318.292584][ T5878] syz.3.9360[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2318.683698][ T5903] loop2: detected capacity change from 0 to 128 [ 2318.784357][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.793749][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.801184][ T5909] device bridge_slave_0 entered promiscuous mode [ 2318.808687][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.809562][ T5924] loop4: detected capacity change from 0 to 512 [ 2318.815680][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.816286][ T5909] device bridge_slave_1 entered promiscuous mode [ 2318.916095][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.923011][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2318.930131][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.936980][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2318.964782][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2318.972714][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.981150][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.911910][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2319.920808][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2319.930047][ T5942] loop0: detected capacity change from 0 to 128 [ 2319.937421][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 2319.937435][ T30] audit: type=1400 audit(2000000966.899:5347): avc: denied { watch } for pid=5940 comm="syz.2.9383" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2319.937729][T20059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.972160][T20059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2319.984334][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2319.992648][T20059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.999540][T20059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2320.012612][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2320.019556][ T5942] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2320.020868][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2320.039707][ T5942] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038 (0x7fffffff) [ 2320.057288][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2320.065826][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2320.075125][ T5909] device veth0_vlan entered promiscuous mode [ 2320.082113][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2320.089683][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2320.096868][ T5942] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 2320.140629][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2320.148760][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2320.158055][ T5909] device veth1_macvtap entered promiscuous mode [ 2320.174978][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2320.183548][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2320.191791][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2320.202146][ T30] audit: type=1326 audit(2000000967.178:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.225565][ T30] audit: type=1326 audit(2000000967.178:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.248924][T28849] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2320.250206][ T30] audit: type=1326 audit(2000000967.178:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.280041][ T30] audit: type=1326 audit(2000000967.200:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.304095][ T30] audit: type=1326 audit(2000000967.210:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.327256][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2320.327830][ T30] audit: type=1326 audit(2000000967.210:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff34672b0e5 code=0x7ffc0000 [ 2320.335720][T24375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2320.372593][ T30] audit: type=1326 audit(2000000967.361:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.403559][ T30] audit: type=1326 audit(2000000967.393:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.437990][ T30] audit: type=1326 audit(2000000967.393:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2320.582491][T28849] usb 3-1: Using ep0 maxpacket: 32 [ 2320.805145][T20059] device bridge_slave_1 left promiscuous mode [ 2320.811430][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.819114][T20059] device bridge_slave_0 left promiscuous mode [ 2320.825110][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.832864][T20059] device veth1_macvtap left promiscuous mode [ 2320.838870][T20059] device veth0_vlan left promiscuous mode [ 2320.871639][T28849] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.882774][T28849] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.892441][T28849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2320.898838][T28849] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2320.907879][T28849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.918740][T28849] usb 3-1: config 0 descriptor?? [ 2321.010900][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9398'. [ 2321.020845][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9398'. [ 2321.140219][ T5991] loop1: detected capacity change from 0 to 1024 [ 2321.181877][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2321.225430][ T5991] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2321.366356][T28849] hkems 0003:2006:0118.00D6: unbalanced delimiter at end of report description [ 2321.394414][T28849] hkems 0003:2006:0118.00D6: parse failed [ 2321.403156][T28849] hkems: probe of 0003:2006:0118.00D6 failed with error -22 [ 2321.412300][T28849] Bluetooth: hci1: command 0x1003 tx timeout [ 2321.418159][ T6960] Bluetooth: hci1: sending frame failed (-49) [ 2321.443096][ T6019] loop1: detected capacity change from 0 to 512 [ 2321.474107][ T6019] EXT4-fs (loop1): Ignoring removed nobh option [ 2321.475609][ T6026] syz.3.9418[6026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2321.480459][ T6019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2321.480567][ T6026] syz.3.9418[6026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2321.503566][ T6019] EXT4-fs (loop1): 1 truncate cleaned up [ 2321.520712][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 2321.547639][ T6026] input: syz0 as /devices/virtual/input/input225 [ 2321.568449][T28849] usb 3-1: USB disconnect, device number 15 [ 2322.063581][ T6037] loop2: detected capacity change from 0 to 128 [ 2322.087100][ T6037] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2322.097630][ T6037] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2322.222736][ T6044] loop2: detected capacity change from 0 to 2048 [ 2322.261566][ T6044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2322.361811][ T6059] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2322.440939][ T6070] device pim6reg1 entered promiscuous mode [ 2322.657946][ T6092] loop2: detected capacity change from 0 to 8192 [ 2322.689432][ T8524] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2322.718691][ T6092] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2322.727248][ T6092] FAT-fs (loop2): Filesystem has been set read-only [ 2322.792647][ T6099] loop2: detected capacity change from 0 to 16 [ 2322.829478][ T6099] erofs: Unknown parameter '' [ 2322.881453][ T6099] picdev_write: 73 callbacks suppressed [ 2322.881465][ T6099] kvm: pic: non byte write [ 2323.061797][ T8524] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.087626][ T8524] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.116731][ T8524] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2323.130001][ T8524] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2323.130497][ T6106] loop2: detected capacity change from 0 to 512 [ 2323.137272][ T8524] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2323.152372][ T8524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.161191][ T8524] usb 2-1: config 0 descriptor?? [ 2323.165139][ T6106] FAT-fs (loop2): bogus sectors per cluster 69 [ 2323.172053][ T6106] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2323.323087][T32423] Bluetooth: hci1: command 0x1001 tx timeout [ 2323.329002][ T6960] Bluetooth: hci1: sending frame failed (-49) [ 2323.509550][ T20] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2323.621713][ T8524] zeroplus 0003:0C12:0005.00D7: item fetching failed at offset 1/5 [ 2323.629651][ T8524] zeroplus 0003:0C12:0005.00D7: parse failed [ 2323.635900][ T8524] zeroplus: probe of 0003:0C12:0005.00D7 failed with error -22 [ 2323.809234][ T3369] usb 2-1: USB disconnect, device number 125 [ 2323.845122][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2323.863918][T32423] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2324.003534][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2324.012505][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.020290][ T20] usb 3-1: Product: syz [ 2324.024306][ T20] usb 3-1: Manufacturer: syz [ 2324.028709][ T20] usb 3-1: SerialNumber: syz [ 2324.033800][ T20] usb 3-1: config 0 descriptor?? [ 2324.087232][T32423] usb 4-1: Using ep0 maxpacket: 16 [ 2324.255202][T32423] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2324.275053][ T20] usb 3-1: USB disconnect, device number 16 [ 2324.329609][T32423] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 2324.337733][T32423] usb 4-1: config 4 has no interface number 0 [ 2324.343672][T32423] usb 4-1: config 4 interface 38 has no altsetting 0 [ 2324.497101][T32423] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 2324.506094][T32423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.513881][T32423] usb 4-1: Product: syz [ 2324.517875][T32423] usb 4-1: Manufacturer: syz [ 2324.522274][T32423] usb 4-1: SerialNumber: syz [ 2324.534732][ T438] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2324.860910][T32423] usb 4-1: Found UVC 0.00 device syz (19ab:1000) [ 2324.867220][T32423] usb 4-1: No valid video chain found. [ 2324.872672][ T438] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 2324.881107][T32423] usb 4-1: USB disconnect, device number 15 [ 2324.887215][ T438] usb 2-1: config 0 has no interface number 0 [ 2324.893907][ T438] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.904699][ T438] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.914310][ T438] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2324.923181][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.931687][ T438] usb 2-1: config 0 descriptor?? [ 2325.084134][T28849] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2325.261586][T15308] Bluetooth: hci1: command 0x1009 tx timeout [ 2325.375175][ T438] logitech-djreceiver 0003:046D:C71B.00D8: unknown main item tag 0x6 [ 2325.392431][ T438] logitech-djreceiver 0003:046D:C71B.00D8: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input32 [ 2325.420345][T28849] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 2325.428263][T28849] usb 3-1: config 0 has no interface number 0 [ 2325.434221][T28849] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.444944][T28849] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.454596][T28849] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2325.463427][T28849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.472081][T28849] usb 3-1: config 0 descriptor?? [ 2325.561765][ T438] usb 2-1: USB disconnect, device number 126 [ 2325.924620][T28849] logitech-djreceiver 0003:046D:C71B.00D9: item fetching failed at offset 5/7 [ 2325.933582][T28849] logitech-djreceiver 0003:046D:C71B.00D9: logi_dj_probe: parse failed [ 2325.941670][T28849] logitech-djreceiver: probe of 0003:046D:C71B.00D9 failed with error -22 [ 2326.047813][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9463'. [ 2326.114303][T15308] usb 3-1: USB disconnect, device number 17 [ 2326.328915][ T6156] xt_hashlimit: size too large, truncated to 1048576 [ 2326.583170][ T6150] loop1: detected capacity change from 0 to 131072 [ 2326.601516][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2326.601530][ T30] audit: type=1400 audit(2000000974.045:5373): avc: denied { getopt } for pid=6162 comm="syz.2.9472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2326.633135][ T6150] F2FS-fs (loop1): Test dummy encryption mode enabled [ 2326.643798][ T6150] F2FS-fs (loop1): invalid crc value [ 2326.659188][ T6150] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2326.713619][ T6150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2326.748390][ T30] audit: type=1400 audit(2000000974.206:5374): avc: denied { create } for pid=6184 comm="syz.2.9481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2326.780342][ T30] audit: type=1400 audit(2000000974.238:5375): avc: denied { setopt } for pid=6184 comm="syz.2.9481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2326.818362][ T30] audit: type=1400 audit(2000000974.270:5376): avc: denied { bind } for pid=6184 comm="syz.2.9481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2326.891976][ T6195] bridge0: port 3(veth0_macvtap) entered blocking state [ 2326.900480][ T6195] bridge0: port 3(veth0_macvtap) entered disabled state [ 2326.908480][ T6195] device veth0_macvtap entered promiscuous mode [ 2326.914837][ T6195] bridge0: port 3(veth0_macvtap) entered blocking state [ 2326.921615][ T6195] bridge0: port 3(veth0_macvtap) entered forwarding state [ 2327.105054][ T30] audit: type=1400 audit(2000000974.581:5377): avc: denied { block_suspend } for pid=6207 comm="syz.1.9491" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2327.191061][T28849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2327.222495][ T30] audit: type=1326 audit(2000000974.710:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.0.9494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2327.247079][ T30] audit: type=1326 audit(2000000974.710:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.0.9494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2327.270695][ T30] audit: type=1326 audit(2000000974.710:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.0.9494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2327.294015][ T30] audit: type=1326 audit(2000000974.710:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.0.9494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2327.317309][ T30] audit: type=1326 audit(2000000974.742:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.0.9494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3466f8ff9 code=0x7ffc0000 [ 2327.452009][T28849] usb 3-1: Using ep0 maxpacket: 16 [ 2327.582513][T28849] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.593571][T28849] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2327.604785][T28849] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 2327.615439][T28849] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2327.632038][ T438] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2327.703337][T28849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2327.712327][T28849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2327.720134][T28849] usb 3-1: SerialNumber: syz [ 2327.740612][ T6199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2327.747530][ T6199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2327.889624][ T438] usb 2-1: Using ep0 maxpacket: 16 [ 2327.964720][T28849] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 2327.971736][T28849] usb 3-1: USB disconnect, device number 18 [ 2328.001693][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.011482][ T438] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 2328.020415][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.030042][ T438] usb 2-1: config 0 descriptor?? [ 2328.460332][ T438] lenovo 0003:17EF:60A3.00DA: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 2328.646342][ T8524] usb 2-1: USB disconnect, device number 127 [ 2329.025705][ T6261] loop2: detected capacity change from 0 to 256 [ 2329.067058][ T6261] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2329.193791][ T6268] loop1: detected capacity change from 0 to 512 [ 2329.200427][ T6270] input: syz0 as /devices/virtual/input/input226 [ 2329.275222][ T6268] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2329.297023][ T6268] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 2329.454838][ T6306] loop0: detected capacity change from 0 to 2048 [ 2329.485399][ T6306] loop0: p1 < > p4 [ 2329.489599][ T6306] loop0: p4 size 8388608 extends beyond EOD, truncated SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=9506 state=1 status=67 (errno 9: Bad file descriptor) [ 2329.505601][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9522'. [ 2329.721883][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.728785][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.736612][ T6320] device bridge_slave_0 entered promiscuous mode [ 2329.743746][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.751485][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.759736][ T6320] device bridge_slave_1 entered promiscuous mode [ 2329.811750][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.818683][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2329.825828][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.832578][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2329.842705][ T45] device veth0_macvtap left promiscuous mode [ 2329.848722][ T45] bridge0: port 3(veth0_macvtap) entered disabled state [ 2329.855895][ T45] device bridge_slave_1 left promiscuous mode [ 2329.861884][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.869493][ T45] device bridge_slave_0 left promiscuous mode [ 2329.875568][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.883488][ T45] device veth1_macvtap left promiscuous mode [ 2329.889567][ T45] device veth0_vlan left promiscuous mode [ 2329.985730][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2329.993146][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2330.000245][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.010325][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2330.018395][T20059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2330.025259][T20059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2330.035044][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2330.043050][T20059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.049902][T20059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2330.062769][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2330.070789][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2330.080084][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2330.088085][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2330.103152][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2330.111426][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2330.122687][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2330.130451][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2330.138604][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2330.145991][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2330.153965][ T6320] device veth0_vlan entered promiscuous mode [ 2330.165397][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2330.173386][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2330.182560][ T6320] device veth1_macvtap entered promiscuous mode [ 2330.192153][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2330.199684][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2330.207990][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2330.223073][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2330.231204][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2331.079874][ T45] device bridge_slave_1 left promiscuous mode [ 2331.085811][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.093292][ T45] device bridge_slave_0 left promiscuous mode [ 2331.099289][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2331.107265][ T45] device bridge_slave_1 left promiscuous mode [ 2331.113170][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.120647][ T45] device bridge_slave_0 left promiscuous mode [ 2331.126660][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2331.134703][ T45] device bridge_slave_1 left promiscuous mode [ 2331.140618][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.148215][ T45] device bridge_slave_0 left promiscuous mode [ 2331.154953][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2331.162863][ T45] device bridge_slave_1 left promiscuous mode [ 2331.168776][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.176164][ T45] device bridge_slave_0 left promiscuous mode [ 2331.182194][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2331.190821][ T45] device veth1_macvtap left promiscuous mode [ 2331.196636][ T45] device veth0_vlan left promiscuous mode [ 2331.202440][ T45] device veth1_macvtap left promiscuous mode [ 2331.208262][ T45] device veth0_vlan left promiscuous mode [ 2331.214103][ T45] device veth1_macvtap left promiscuous mode [ 2331.220068][ T45] device veth1_macvtap left promiscuous mode [ 2333.429629][ T45] device bridge_slave_1 left promiscuous mode [ 2333.435557][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.442992][ T45] device bridge_slave_0 left promiscuous mode [ 2333.449003][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.456904][ T45] device veth1_macvtap left promiscuous mode [ 2333.462715][ T45] device veth0_vlan left promiscuous mode