last executing test programs: 13.395433223s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 10.336139072s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 7.18263547s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 5.580751256s ago: executing program 0 (id=5910): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bind$tipc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 5.509887192s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 3.486851224s ago: executing program 0 (id=5911): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 3.467363985s ago: executing program 0 (id=5915): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.424311489s ago: executing program 1 (id=5917): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x20000000, 0x4) 3.423994499s ago: executing program 0 (id=5918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x0, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x0, "c0750696"}, @local]}}, 0x0}, 0x0) 3.423292429s ago: executing program 1 (id=5920): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x302828a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.382554262s ago: executing program 1 (id=5922): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000080), 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000}) 3.321400437s ago: executing program 4 (id=5923): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 3.216759297s ago: executing program 4 (id=5925): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000300)={0x0, 0x31, 0xd, {0xd, 0x21, "82006cb4bcbc0318349ea9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.693807221s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 670.815803ms ago: executing program 1 (id=5927): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f0000011680)="$eJzs3Au4TtX2MPAx5pyLbefyJrmvMcfiTS6TJMklSS5JkoQj9yQJSZIkscktCUnIdSe5h9zTTtv9fsk9SY4kSUJCkvk9u/R3upyvc86/8znf2eP3POvZc6y15njH2mO/73rnu5+9v+wytFrD6pXrMTP8K/TPA/zpSxIAJADAAADIBgABAJTOXjp72vFMGpP+pQcR/yb1p1/pCsSVJP1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2sw8V8uWfjf5/P//c+p/M1nu//99EH+76++dK/3/b6P/qbOl/+lGht/bKf1PL37/FiD9T9+k/+lZcKULEFeYPP/TN+m/EOnan/6Z8vpzV/ozbdn+iU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPh/4Jy/zADAz+MrXZcQQgghhBBCCCH+PP7tK12BEEIIIYQQQggh/v0QFGgwEEAGyAgJkAkS4SrIDFkgK2SDGFwN2eEayAHXQk7IBbkhD+SFfJAfQiCwwBBBASgIcbgOCsH1UBiKQFEoBg6KQwm4AUrCjVAKboLScDOUgVugLJSD8lABboWKcBtUgtuhMtwBVaAqVIPqcCfUgLugJtwNteAeqA33Qh24D+rC/VAP6kMD+As0hAegETSGJtAUmkFzaPEH85Oz/d78Z6E7PAc9oCckQS/oDc9DH+gL/aA/DIAXYCC8CIPgJRgMQ2AovAzD4BUYDq/CCBgJo+A1GA1jYCyMg/EwAZLhdZgIb8AkePOBLDAFpsI0mA4zYCa8BbNgNsyBt2EuzIP5kJxpISyCxfAOLIF3IQXeg6XwPqTCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsIHsA22ww7YCbtgN+yBD2EvfAT74GPYj5/8k/PP/nI+dEVAQIUKDRrMgBkwARMwERMxM2bGrJgVYxjD7Jgdc2AOzIk5MTfmxryYF/NjfiQkZGQsgAUwjnEshIWwMBbGolgUHTosgSWwJN6IpbAUlsbSWAbLYFksh+WwAlbAilgRK2ElrIyVsQpWwWpYDe/EO/EurIk1sRbWwtpYG+tgHayLdbEe1sMG2AAbYkNshI2wCTbBZtgMW2ALbIktsRW2wtbYGttgG2yLbbE9tscO2AE7YkfshJ2wM3bGLtgFu+Iz+Aw+i8/ic/gc9sQqqhf2xt7YB/tgP+yP/fEFHIgv4ov4Eg7GITgUX8aX8RUcjmdwBI7EUTgKK6oxOBbHIasJmIzJmBEm4iSchJNxCk7BaTgdZ+BMnImzcDbOxrdxLs7DebgAF+AiXIyLcQm+iymYgkvxLKbiMlyOK3AlrsKVuAbX4hpcjxtwPW7CTbgFt+AH+AFux+24E3fibtyNH+KH+BF+hINxP+7HA3gAD+JBPISH8DAexiN4BI/iUTyGx/A4HscTeBJP4Uk8jafxDJ7FcwBwHs/jBbyAF/Fi2pNfpTHKqAwqg0pQCSpRJarMKrPKqrKqmIqp7Cq7yqFyqJwqp8qtcqu8Kq/Kr/IrUqRYRaqAKqDiKq4KqUKqsCqsiqqiyimnSqgSqqQqqUqpUqq0ulmVUbeosqqcethVUBVURdXaVVK3q8qqsqqiqqpqqrqqrmqoGqqmqqlqqVqqtqqt6qj7VF3VC/thfZXWmYZqCDZSQ7GJaqqaqebqFXxQtVTDsZV6WLVWj6iROALbqpauvXpMdVBjsaN6Qo3DJ1VnNQG7qKdVV/WM6qaeVd1VK9dD9VSTsZfqraZhH9VX9VP91SysqtI6Vk29pAarIWqoelktwlfUcPWqGqFGqlHqNTVajVFj1Tg1Xk1Qyep1NVG9oSapN9VkNUVNVdPUdDVDzVRvqVlqtpqj3lZz1Tw1Xy1QC9UitVi9o5aod1WKek8tVe+rVLVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1gdqmtqsdaqfapXarPepDtVd9pPapj9V+9Yk6oP6qDqpP1SH1mTqsPldH1BfqqPpSHVNfqePqa3VCnVSn1DfqtPpWnVFn1Tn1nTqvvlcX1A/qovIKNGqltTY60Bl0Rp2gM+lEfZXOrLPorDqbjumrdXZ9jc6hr9U5dS6d2+TReXU+nV+HmrTVrCNdQBfUcX2dLqSv14V1EV1UF9NOF9cl9A26pL5Rl9I36dL6Zl1G36LL6nK6vAd9q66ob9OV9O26sr5DV9FVdTVdXd+pa+i7dE19t66l79G19b26jr5P19X363q6vm6gM1y6ZzXWTXRT3Uw31y30g7qlfki30g/r1voR3UY/Ckm6nW6vH9Md9OO6o35Cd9JP6s76Kd1FP6276md0N/2Dvqi97qF76iTdS/fWz+s+uq/up/vrAfoFPVC/qAfpl/RgPUQP1S/rYfoVPVy/qkfokXqUfk2P1mP0WD1Oj9cTdLJ+XU/Ub+hJ+k09WU/RU/U0PV3P0P0uZZrzD8x/43fmD/rx0bforfoDvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9nf5Gn9bf6jP6rD6rv9Pn9Xl94dL3AAwaZbQxJjAZTEaTYDKZRHOVyWyymKwmm4mZq012c43JYa41OU0uk9vkMXlNPpPfhIaMNWwiU8AUNHFznSlkrjeFTRFT1BQzzhQ3JcwN/+v5f1RfC9PCtDQtTSvTyrQ2rU0b08a0NW1Ne9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUySSTK9zfOmj+lr+pn+ZoB5wQw0A80gM8gMNoPNUDPUDDPDzHAz3IwwI8woM8qMNqPNWDPWjDfjTbLPZiaaiWaSmWQmm8lm6oBsZrqZbmaamWaWmWXmmDlmrplr5pv5ZqFZaBabxWaJWWJSTIpZapaaVLPMLDMrzAqzyqwya8was86sMxvMBrPJbDKpZqvZaraZbWaH2WF2mV1mj9lj9pq9Zp/ZZ/ab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWaOm+PmhDlhTplT5rQ5bc6YM+acOWfOm/PmgrlgLpqLaW/7AhWowAQmyBBkCBKChCAxSAwyB5mDrEHWIBbEguxB9iBHcG2QM8gV5A7yBHmDfEH+IAwosAEHUVAgKBjEg+uCQsH1QeGgSFA0KBa4oHhQIrghKBncGJQKbgpKBzcHZYJbgrJBuaB8UCG4NagY3BZUCm4PKgd3BFWCqkG1oHpwZ1AjuCuoGdwd1AruCWoH9wZ1gvuCusH9Qb2gftAg+EvQMHggaBQ0DpoETYNmQfOgxZ+a3/szuR5yPcKeYVLYK+wdPh/2CfuG/cL+4YDwhXBg+GI4KHwpHBwOCYeGL4fDwlfC4eGr4YhwZDgqfC0cHY4Jx4bjwvHhhDA5fD2cGL4RTgrfDCeHU8KpwbRwejgjnBm+Fc4KZ4dzwrfDueG8cH64IFwYLgoRf3plSwnfC5eG74ep4bJwebgiXBmuCleHa8K14bpwfbgh3BhuKj3wp1PDbeH2cEe4M9wV7g73hB+Ge8OPwn3hx+H+8JPwQPjX8GD4aXgo/Cw8HH4eHgm/CI+GX4bHwq/C4+HX4YnwZCYIvwlPh9+GZ8Kz4bnwu/B8+H14IfwhvBj6tDf3abd3MmQoA2WgBEqgREqkzJSZslJWilGMslN2ykE5KCflpNyUm/JSXspP+SkNE1MBKkBxilMhKkSFqTAVpaLkyFEJKkElqSSVolJUmkpTGSpDZclSeSpPt9KtdBvdRrfT7XQH3UFVqSpVp+qEWINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oIbUkBpRI2pCTagZNaMW1IJaUktqRa2oNbWmNtSG2lJbak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgJEqi3tSb+lAf6kf9aAANoIE0kAbRIBpMg2koDaVhNIyG03AaQSNpFL1Go2kMjaVxNJ4mUDIl00SaSJNoEk2myTSVptJ0mk4zaSbNolk0h+bQXJpL82k+LaSFtJgW0xJaQimUQktpKaVSKi2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/pAv1AF8lTgs1kE+1VNrPNYrPabPbXcW6bx+a1+Wx+G9qcNtcvYrLWFrZFbFFbzDpb3JawN/wmLmvL2fK2gr3VVrS32Uq2rM0EfxvXsHfZmvZuW8veY6vbO38R17b32jr2AVvXNrb1bFPbwDa3De0DtpFtbJvYpraZbW7b2EdtW9vOtreP2Q728d/ES+y7dq1dZ9fbDXav/cies9/Zo/ZLe95+b3vYnnaAfcEOtC/aQfYlO9gO+WUMYEfZ1+xoO8aOtePseDvhN/FUO81OtzPA2LfsLDv759jOvBQvtu/YuTbFzrcL7EK76Mc4raYU+55dat+3qXaZXW5X2JV2lV1t1/xPrSvsJrvZbrF77Id2m91ud9iddpfd/WOcdh377Md2v/3EHrFf2IP2U3vIHrOH7ec/xmnXd8x+ZY/br+0Je9Kest/Y0/Zbe8ae/fH60679G/uDvWi9BUZWrNlwwBk4IydwJk7kqzgzZ+GsnI1jfDVn52s4B1/LOTkX5+Y8nJfzcX4Omdgyc8QFuCDH+TouxNdzYS7CRbkYOy7OJfgGLsk3cim+iUvzzVyGb+GyXI7LcwW+lSvybVyJb+fKfAdX4apcjavznVyD7+KafDfX4nu4Nt/Ldfg+rsv3cz2uzw34L9yQH+BG3JibcFNuxs0Z+EFuyQ9xK36YW/Mj3IYf5bbcjtvzY9yBH+eO/AR34ie5Mz/FXfhp7srPcDd+lrvzc9yDe3IS9+Le/Dz34b7cj/vzAH6BB/KLPIhf4sE8hIfyyzyMX+Hh/CqP4JE8il/j0TyGx/I4Hs8TOJlf54n8Bk/iN3kyT+GpPI2n8wyeyW/xLJ7Nc/htnsvzeD4v4IW8iBfzO7yE3+UUfo+X8vucyst4Oa/glbyKV/MaXsvreD1v4I28iTfzFt7KH/A23s47eCfv4t28hz/kvfwR7+OPeT9/wgf4r3yQP+VD/Bkf5s/5CH/BR/lLPsZf8XH+mk/wST7F3/Bp/pbP8Fk+x9/xef6eL/APfJE9Q4SRinRkoiDKEGWMEqJMUWJ0VZQ5yhJljbJFsejqKHt0TZQjujbKGeWKckd5orxRvih/FEYU2YijKCoQFYzi0XVRoej6qHBUJCoaFYtcVDwqEd0QlYxujEpFN0Wlo5ujMtEtUdmoXFQ+qhDdGlWMbosqRbdHlaM7oipR1ahaVD26M6oR3RXVjO6OakX3RKWie6M60X1R3ej+qF5UP2oQ/SVqGD0QNYoaR02iplGzqHnUInowahk9FCUAQOvokahN9GjUNmoXtY8eizpEj//P8VZFgp/upr86nhT1ivSl1cbdemF8UXxx/J34kvi78ZT4e/Gl8ffjqfFl8eXxFfGV8VXx1fE18bXxdfH18Q3xjfFN8c3xLXHvq2cEh2kLYTAucBlcRpfgMrlEd5XL7LK4rC6bi7mrXXZ3jcvhrnU5XS6X2+VxeV0+l9+FjtylyqCgi7vrXCF3vSvsiriirphzrrgr4Zq7Fq6Fa+kecq3cw661e8Q94h51j7p2rp17zHVwj7uO7gnXyT3pOrun3FPuadfVPeO6uWddd/ec6+F6uiSX5Hq73q6P6+P6uX5ugBvgBrqBbpAb5Aa7wW6oG+qGuWFuuBvuRrgRbpQb5Ua70W6sG+vGu/Eu2SW7iW6im+Qmucluspvqprrpbrqb6Wa6WW6Wm+PmuLlurpvv5ruFbqFb7Ba7JW6JS3Epbqlb6lJdqlvulruVbqVb7Va7tW6tW+/Wu41uo9vsNrutbqvb5ra5HW6H2+V2uT1uj9vr9rp9bp/b7/a7A+6AO+gOukPuM3fYfe6OuC/cUfelO+a+csfd1+6EO+lOuW/cafetO+POunPuO3fefe8uuB/cReddcuz12MTYG7FJsTdjk2NTYlNj02LTYzNiM2NvxWbFZsfmxN6OzY3Ni82PLYgtjC2KLY69E1sSezeWEnsvtjT2fiw1tiy2PLYitjK2KuZ9vm2RL+AL+ri/zhfy1/vCvogv6ot554v7Ev4GX9Lf6Ev5m3xpf7Mv42/xZX05X9439k18U9/MN/ct/IO+pX/It/IP+9b+Ed/GP+rb+na+vX/Md/CP+47+Cd/JP+k7+6d8F//0vEs/Hr67f8738D19ku/le/vnfR/f1/fz/f0A/4If6F/0g/xLfrAf4of6l/0w/4of7l/1I/xIP8q/5kf7MX6sH+fH+wk+2b/uJ/o3/CT/pp/sp/ipfpqf7mf4mf4tP8vP9nP8236un+fn+wV+oV/kF/t3/BL/rk/x7/ml/n2f6pf55X6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+ozwja/3e/wO/0uv9vv8R/6vf4jv89/7Pf7T/wB/1d/0H/qD/nP/GH/uT/iv/BH/Zf+mP/KH/df+xP+pD/lv/Gn/bf+jD/rz/nv/Hn/vb/gf/AX5W/WhBBCCCH+IfoPjvf6nX3q0mYAoDcAZNme5/Cvc27M+dO4r9rbIQYAj/XsUv/nrX79pKSkS+emGggKLgCA2OX5P/6W51K8DFrDo9AeHoaSv1tfX1Ue+Vf5g785nqohiN8MkAiQ6ed9aWvCRPh1/hv/Tv7G7/w6/y/qT8u/AKBwwctz0h7o5/hy/lJ/J//uNn+QP9OnyQCt/mZOZrgcX85fAh6Cx6H9L84UQgghhBBCCCF+0led7/pH69u09Xlec3lORrgc/9H6/A9U+jOuQQghhBBCCCGEEP93Tz7Trd2D7ds/3Om/cqAA4Jlu7TL+p9RzxQcIAP8BZcjgP39wpV+ZhBBCCCGEEH+2y2/6r3QlQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vWv/4cw9Q+ffKWvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/k8AAAD//8zaSEs=") chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mount(0x0, 0x0, 0x0, 0x20006, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 670.118982ms ago: executing program 2 (id=5928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_setup(0x401, &(0x7f0000000000)) 669.844923ms ago: executing program 4 (id=5929): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$eJzs3ctrXGUbAPDnTG5N2u9LPvhA6yogaKB0YmpsFVxUXIhgoaBr2zCZhjaTTMlMShMCbRHBjaDFhaCb7gQvdefWy1b/CxfSUmwajLiQkTOZaSfNTDppbo35/eC07zvnTJ73OZf3vDPnMCeAfWsw/ScTcTgiPkoi+muvJxHRVS11RpxcWW55cSGXTklUKm//nlSXWVpcyEXDe1IHa5WnI+LH9yOOZNbGLc3NT44VCvmZWn24PHVxuDQ3f/T81NhEfiI/fXxkdPTYiZdOHN+6XP/4Zf7Q7Y/feP6bk3+999TND39K4mQcqs1rzGOrDMZgbZ10patwlde3OtguS9aZd2AH28HGpIdmx8pRHoejPzqqpRZ6d7JlAMB2uRIRFQBgn0mc/wFgn6l/D7C0uJCrT+t8XbDOxYG96c5rKxeolmrXNpfv599Zu2Z3oHodtG8pWZV8EhEDWxB/MCI+/+7dr9Iptuk6JEAzV69FxNmBwbX9f7LmnoWNeqGNZQYfqjf0f92bDA88wvfp+OflZuO/zP3xTzQZ//Q0OXYfxzrHf03m1haEaSkd/73acG/bckP+NQMdtdp/qmO+ruTc+UI+7dv+GxFD0dWT1kfWiTF07+97reY1jv/uXr+Q9nm5u9cvfPlgicytzp7V7xkfK49tJudGd65FPNPZLP96/79yD1uz8e/pNmO8+coHn7Wal+af5luf0vir899elRsRzzXd/g/uaEvWvT9xuLo7DNd3iia+/fXTvlbxG7d/OqXx658FdkK6/fvWz38gabxfs7TxGD/f6P+h1bxH5998/+9O3qmW64OEy2Pl8sxIRHfy1trXjz14b71eXz7Nf+jZ7qbHf73/a7b/p58Jz7aZf+fta18/fv7bK81/fEPbf+OFm8uTHa3it7f9R6ulodor7fR/7TZwM+sOAAAAAAAAAAAAAAAAAAAAAAAAANqViYhDkWSy98uZTDa78gzv/0dfplAslY+cK85Oj0f1WdkD0ZWp/9Rlf8PvoY7Ufg+/Xj/2UP3FiPhfRHzS01utZ3PFwvhuJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQdbPP8/9VvPbrcOANg2B3a7AQDAjnP+B4D9Z2Pn/95tawcAsHN8/geA/cf5HwD2H+d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAttnpU6fSqfLn4kIurY9fmpudLF46Op4vTWanZnPZXHHmYnaiWJwo5LO54lTLP3R15b9CsXhxNKZnLw+X86XycGlu/sxUcXa6fOb81NhE/ky+a8cyAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2lebmJ8cKhfzMnilUKpUrT0Az/g2FjtpO8KS0Z88VMptYdV/sduMfUWjsJXp3p3MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AP+CQAA//+qiiUU") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) 645.037205ms ago: executing program 1 (id=5930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe3b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 577.78689ms ago: executing program 2 (id=5931): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 494.649257ms ago: executing program 4 (id=5932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sysinfo(&(0x7f0000000140)=""/158) 491.096158ms ago: executing program 2 (id=5933): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 485.394678ms ago: executing program 2 (id=5934): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 463.35458ms ago: executing program 4 (id=5935): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) alarm(0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000006f000000ff0f00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x0, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0xc0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r8}, 0x10) fallocate(r4, 0x13, 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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") 457.4492ms ago: executing program 2 (id=5936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 388.051186ms ago: executing program 1 (id=5937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000027000000f2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 387.802226ms ago: executing program 0 (id=5938): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 372.846527ms ago: executing program 2 (id=5939): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000000000000100000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001d6, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) 203.841512ms ago: executing program 4 (id=5940): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$eJzs3c9rHOUbAPBnNkl/pd8mXxT8cQootFC7aZqqFQTr3WJBPddlsw0lm0zJbkoTCrUHz3qoJ0+exZNnQfwfPCh48iK1RYpQvUVmM5tuk910m26y1fl8YLbvO+9s33l25nl5Z2eWBFBYU9lLKeKliPg8iZjoaBuNvHFqY7sH929U/7p/o5rE+voHfySR5Ova2yf5v+N55cWI+OHTiJOl7f02VtcWKvV6bTmvTzcXr043VtdOXVmszNfma0uz52ZfPzszc+bsuYHFWr5ZOXT3i/fv3l7+9dRHnz04nsT5OJq3dcYxKFMxlX8mY3F+S9vMoDsbsmTYO8CujOR5PhbZGDARI3nWA/99NyNiHSioRP5DQbXnAdn1b3sZ7oxkf917d+MCaHv8oxvfjcTEenZtdOTP5JEro+x6d3IA/Wd9nD958fdsiT36HgKgm09uRcTp0dHt41+Sj3+7d7qPbbb2YfyD/fN9Nv95rdv8p5Tn5qHW69b5z3iX3N2Nx+d/6c4Auukpm/+93XX+u3nTanIkr/2vNecbSy5fqdeyse1YRJyIsYNZfaf7OT8dfmuiV1vn/C9bsv7bc8F8P+6MHnz0PXOVZuVpYu5071bEy13nv8nm8U+6HP/s87jYZx/Hnnvj515tj49/b61/FXG86/F/eEcr2fn+5HTrfJhunxXbzY6svdCr/2HHnx3/IzvHP5l03q9tPHkfr34z/mOvtt2e/weSD1vlA/m665Vmc3km4kDy3vb1Zx6+t11vb5/Ff+KVnce/buf/4Yj4uM/4v5v9+pfdx7+3svjnnuj4P3nhy/Tbd3r139/xP9sqncjX9DP+9buDT/PZAQAAAAAAwLOmFBFHIymVN8ulUrm88XzH83GkVE8bzZOX05WluWj9VnYyxkrtO90THc9DzOTPw7brZ7bUZyPi/xFxe+Rwq16upvW5YQcPAAAAAAAAAAAAAAAAAAAAz4jxHr//z/w2Muy9A/acP/kNxSX/objkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf8BAAAAAAAAAAAAAAAAAAAAAAAAAABgoC5euJAt63/fv1HN6nPXVlcW0mun5mqNhfLiSrVcTZevlufTdL5eK1fTxcf9f/U0vfpmLK1cn27WGs3pxurapcV0Zal56cpiZb52qTa2L1EBAAAAAAAAAAAAAAAAAADAv0tjdW2hUq/XlhUUFBQ2C8MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoX8CAAD//z8IGNY=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) 67.169784ms ago: executing program 0 (id=5941): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0), 0x2, 0x47d, &(0x7f0000001300)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1ec) 0s ago: executing program 3 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x8005, 0x9, 0x1, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): T19] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1195.402398][T20340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5505'. [ 1195.414042][T20340] loop3: detected capacity change from 0 to 512 [ 1195.422240][T20340] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5505: invalid indirect mapped block 256 (level 2) [ 1195.435696][T20340] EXT4-fs (loop3): 2 truncates cleaned up [ 1195.441336][T20340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1195.462203][T18747] EXT4-fs (loop3): unmounting filesystem. [ 1195.499224][ T7191] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1195.515209][T17880] usb 2-1: USB disconnect, device number 63 [ 1195.529262][ C1] usblp0: nonzero read bulk status received: -108 [ 1195.598646][T20353] netlink: 'syz.0.5511': attribute type 4 has an invalid length. [ 1195.609195][T20353] netlink: 'syz.0.5511': attribute type 4 has an invalid length. [ 1195.622161][T20351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1195.634804][T20351] loop3: detected capacity change from 0 to 512 [ 1195.646085][T20355] loop0: detected capacity change from 0 to 1024 [ 1195.653583][T20351] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5510: invalid indirect mapped block 256 (level 2) [ 1195.667061][T20355] EXT4-fs: Ignoring removed orlov option [ 1195.672652][T20351] EXT4-fs (loop3): 2 truncates cleaned up [ 1195.673269][T20355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1195.678275][T20351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1195.701123][T20355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1195.713186][T18747] EXT4-fs (loop3): unmounting filesystem. [ 1195.719747][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1195.725991][T20271] usblp0: removed [ 1195.791800][ T7191] usb 5-1: Using ep0 maxpacket: 16 [ 1195.943744][ T7191] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1196.106381][T20363] loop0: detected capacity change from 0 to 40427 [ 1196.125549][ T7191] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1196.139474][T20363] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1196.139792][ T7191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.147136][T20363] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1196.154843][ T7191] usb 5-1: Product: syz [ 1196.163540][T20363] F2FS-fs (loop0): invalid crc value [ 1196.173512][T20363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1196.180802][ T7191] usb 5-1: Manufacturer: syz [ 1196.185887][ T7191] usb 5-1: SerialNumber: syz [ 1196.194388][ T7191] usb 5-1: config 0 descriptor?? [ 1196.210927][T20363] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1196.218134][T20363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1196.234626][T19827] syz-executor: attempt to access beyond end of device [ 1196.234626][T19827] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1196.249040][ T7191] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1196.261806][ T7191] usb 5-1: Detected FT232R [ 1196.287143][T20376] syz.1.5518[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.287207][T20376] syz.1.5518[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.309887][T20378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1196.330290][T20378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1196.351408][T20378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1196.462025][ T7191] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1196.508290][T20393] tun0: tun_chr_ioctl cmd 1074025675 [ 1196.522111][T20393] tun0: persist enabled [ 1196.530637][T20393] tun0: tun_chr_ioctl cmd 1074025675 [ 1196.539579][T20393] tun0: persist disabled [ 1196.544064][T20393] tun0: tun_chr_ioctl cmd 1342215226 [ 1196.561505][T20389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5523'. [ 1196.574715][T20389] loop0: detected capacity change from 0 to 512 [ 1196.584172][T20389] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5523: invalid indirect mapped block 256 (level 2) [ 1196.597666][T20389] EXT4-fs (loop0): 2 truncates cleaned up [ 1196.603365][T20389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1196.634205][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1196.646144][T20399] syz.0.5527[20399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.646215][T20399] syz.0.5527[20399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.687713][T20399] loop0: detected capacity change from 0 to 4096 [ 1196.717758][T20399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1196.728373][ T7191] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1196.750769][T20397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1196.780773][T20406] loop3: detected capacity change from 0 to 128 [ 1196.799090][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1196.801990][T20406] syz.3.5529: attempt to access beyond end of device [ 1196.801990][T20406] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1196.991434][T20416] loop0: detected capacity change from 0 to 40427 [ 1197.000355][ T19] usb 5-1: USB disconnect, device number 61 [ 1197.014818][T20416] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1197.021572][T20416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1197.030140][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1197.042284][T20416] F2FS-fs (loop0): fault_injection options not supported [ 1197.046849][ T19] ftdi_sio 5-1:0.0: device disconnected [ 1197.059261][T20416] F2FS-fs (loop0): invalid crc value [ 1197.084343][T20416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1197.113700][ T7191] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1197.184079][T20416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1197.191023][T20416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1197.214861][T20424] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5538'. [ 1197.246742][T20416] syz.0.5534: attempt to access beyond end of device [ 1197.246742][T20416] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1197.307290][T20437] tipc: Started in network mode [ 1197.312058][T20437] tipc: Node identity 7f000001, cluster identity 4711 [ 1197.318655][T20437] tipc: Enabling of bearer rejected, failed to enable media [ 1197.354695][ T7191] usb 4-1: Using ep0 maxpacket: 8 [ 1197.475034][ T7191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.521236][ T7191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.611666][ T7191] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 1197.626775][ T7191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.637089][ T7191] usb 4-1: config 0 descriptor?? [ 1197.667550][T20448] loop4: detected capacity change from 0 to 1024 [ 1197.680376][T20448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1197.704105][T19895] EXT4-fs (loop4): unmounting filesystem. [ 1198.118531][ T7191] wacom 0003:056A:0090.0057: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 1198.130018][T20460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5549'. [ 1198.265052][T20467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5552'. [ 1198.320861][ T19] usb 4-1: USB disconnect, device number 57 [ 1198.432455][T20472] overlayfs: failed to resolve './file0/../file0': -2 [ 1198.447158][ T7191] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1198.787899][ T60] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1198.807946][ T7191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.818801][ T7191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.824803][T20479] loop4: detected capacity change from 0 to 40427 [ 1198.842328][ T7191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.855548][ T7191] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.858918][T20481] loop3: detected capacity change from 0 to 4096 [ 1198.864617][ T7191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.881156][T20479] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1198.885205][ T7191] usb 2-1: config 0 descriptor?? [ 1198.888383][T20481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1198.920650][T18747] EXT4-fs (loop3): unmounting filesystem. [ 1198.926582][T20479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1199.028427][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 1199.048077][ T28] audit: type=1400 audit(2000000110.788:1475): avc: denied { map } for pid=20492 comm="syz.3.5561" path="socket:[89423]" dev="sockfs" ino=89423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1199.259071][ T803] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1199.269248][ T60] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1199.282418][ T60] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1199.293360][ T60] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1199.303661][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.369791][ T7191] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1199.377163][ T7191] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1199.384472][ T7191] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1199.391745][ T7191] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1199.398889][ T7191] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1199.406316][ T7191] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 1199.414958][ T7191] plantronics 0003:047F:FFFF.0058: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1199.599789][ T60] usb 3-1: string descriptor 0 read error: -71 [ 1199.606034][ T60] hub 3-1:32.0: USB hub found [ 1199.619780][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 1199.630695][ T803] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1199.640529][ T803] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1199.669972][ T60] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 1199.700109][ T60] usb 3-1: USB disconnect, device number 63 [ 1199.730039][ T803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.738935][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1199.746887][ T803] usb 5-1: SerialNumber: syz [ 1199.770144][T20491] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1199.992525][T20491] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1200.025219][T20500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1200.037037][T20500] loop3: detected capacity change from 0 to 512 [ 1200.045214][T20500] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5563: invalid indirect mapped block 256 (level 2) [ 1200.058761][T20500] EXT4-fs (loop3): 2 truncates cleaned up [ 1200.064413][T20500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1200.081513][T20504] Source file dentry negative [ 1200.092463][T18747] EXT4-fs (loop3): unmounting filesystem. [ 1200.107197][T20508] syz.2.5567[20508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1200.107263][T20508] syz.2.5567[20508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1200.107305][ T28] audit: type=1400 audit(2000000111.845:1476): avc: denied { create } for pid=20509 comm="syz.3.5566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1200.226972][T20514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5569'. [ 1200.322966][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.329801][T20520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.337587][T20520] device bridge_slave_0 entered promiscuous mode [ 1200.345806][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.352689][T20520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.359984][T20520] device bridge_slave_1 entered promiscuous mode [ 1200.410174][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.417055][T20520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.424156][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.430909][T20520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.451208][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1200.458732][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.466424][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.475342][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1200.483329][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.490150][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.508607][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1200.516737][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.523603][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.530729][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1200.538539][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1200.554591][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1200.564662][T20520] device veth0_vlan entered promiscuous mode [ 1200.571972][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1200.582074][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1200.589229][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1200.600828][T20520] device veth1_macvtap entered promiscuous mode [ 1200.607491][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1200.618624][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1200.637506][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1200.793917][ T803] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1200.905959][ T4849] device bridge_slave_1 left promiscuous mode [ 1200.911908][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.923555][ T4849] device bridge_slave_0 left promiscuous mode [ 1200.929775][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.940993][ T4849] device veth1_macvtap left promiscuous mode [ 1200.947365][ T4849] device veth0_vlan left promiscuous mode [ 1201.241540][T20548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.249139][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.256695][T20548] device bridge_slave_0 entered promiscuous mode [ 1201.269521][T20548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.282590][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.291429][T20548] device bridge_slave_1 entered promiscuous mode [ 1201.304856][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1201.375526][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1201.383001][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.398843][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1201.408739][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.416933][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.423796][T17880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.431219][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1201.439674][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.447967][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.454819][T17880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.465484][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1201.473066][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.482667][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.493507][T17880] usb 5-1: USB disconnect, device number 62 [ 1201.504401][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.504765][T17880] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 1201.517377][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.530883][ T19] usb 2-1: USB disconnect, device number 64 [ 1201.540352][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.555362][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.562741][T20548] device veth0_vlan entered promiscuous mode [ 1201.580478][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.592960][T20548] device veth1_macvtap entered promiscuous mode [ 1201.609131][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1201.623617][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1201.821120][T20598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5590'. [ 1201.991158][T20616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.998196][T20616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.005702][T20616] device bridge_slave_0 entered promiscuous mode [ 1202.028327][T20616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.035429][T20616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.042583][T20616] device bridge_slave_1 entered promiscuous mode [ 1202.084867][ T19] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1202.129379][T20616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.136268][T20616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.143334][T20616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.150152][T20616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.175295][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1202.182924][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.191544][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.199342][ T4849] device bridge_slave_1 left promiscuous mode [ 1202.205509][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.212765][ T4849] device bridge_slave_0 left promiscuous mode [ 1202.221827][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.238397][ T4849] device veth1_macvtap left promiscuous mode [ 1202.244309][ T4849] device veth0_vlan left promiscuous mode [ 1202.341309][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1202.349535][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1202.354773][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1202.362859][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.369693][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.376887][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1202.384913][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1202.393282][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.400138][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.413768][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1202.424368][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1202.452702][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1202.461284][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1202.473046][T20616] device veth0_vlan entered promiscuous mode [ 1202.485385][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1202.493527][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1202.501565][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.512076][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1202.519567][ T19] usb 2-1: config 0 has no interfaces? [ 1202.525049][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1202.533267][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1202.541249][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1202.549246][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1202.556538][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1202.567048][T20616] device veth1_macvtap entered promiscuous mode [ 1202.586629][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1202.594149][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1202.603533][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1202.624571][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1202.633216][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1202.696224][ T19] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1202.705341][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.713387][ T19] usb 2-1: Product: syz [ 1202.717438][ T19] usb 2-1: Manufacturer: syz [ 1202.726274][ T19] usb 2-1: SerialNumber: syz [ 1202.735334][ T19] r8152-cfgselector 2-1: config 0 descriptor?? [ 1203.198337][ T5690] usb 2-1: USB disconnect, device number 65 [ 1203.224024][ T4849] device bridge_slave_1 left promiscuous mode [ 1203.230384][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.238214][ T4849] device bridge_slave_0 left promiscuous mode [ 1203.244240][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.252334][ T4849] device veth1_macvtap left promiscuous mode [ 1203.258446][ T4849] device veth0_vlan left promiscuous mode [ 1203.290600][T20686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5618'. [ 1203.303813][T20686] loop4: detected capacity change from 0 to 512 [ 1203.313791][T20686] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5618: invalid indirect mapped block 256 (level 2) [ 1203.327493][T20686] EXT4-fs (loop4): 2 truncates cleaned up [ 1203.333478][T20686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1203.357488][T19895] EXT4-fs (loop4): unmounting filesystem. [ 1203.386759][T20694] loop4: detected capacity change from 0 to 512 [ 1203.398167][T20694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1203.413957][T20694] EXT4-fs (loop4): 1 truncate cleaned up [ 1203.426571][T20694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1203.441214][T20687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.448134][T20687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.455391][T20687] device bridge_slave_0 entered promiscuous mode [ 1203.462944][T20687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.469851][T20687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.475321][T19895] EXT4-fs (loop4): unmounting filesystem. [ 1203.477070][T20687] device bridge_slave_1 entered promiscuous mode [ 1203.497326][T20703] loop4: detected capacity change from 0 to 256 [ 1203.506670][T20703] exfat: Deprecated parameter 'namecase' [ 1203.512234][T20703] exfat: Deprecated parameter 'namecase' [ 1203.523487][T20703] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 1203.543408][ T28] audit: type=1400 audit(2000000115.279:1477): avc: denied { mounton } for pid=20702 comm="syz.4.5621" path="/57/file0/bus" dev="loop4" ino=1049287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1203.572539][T19895] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 1203.581813][T19895] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 1203.620679][T20687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.627535][T20687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.632753][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.634668][T20687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.642701][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.648640][T20687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.655919][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.676603][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.685189][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1203.693180][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1203.701543][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1203.704122][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.718996][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.726349][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.734029][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.741615][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.749365][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.756594][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.764661][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.767971][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.788423][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1203.797948][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.804089][T20687] device veth0_vlan entered promiscuous mode [ 1203.811163][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.825956][ T28] audit: type=1400 audit(2000000115.558:1478): avc: denied { setopt } for pid=20711 comm="syz.0.5627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1203.831793][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.871558][T20687] device veth1_macvtap entered promiscuous mode [ 1203.883609][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.891234][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1203.896488][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.899974][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1203.913863][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.921324][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.921504][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1203.928689][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.943451][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.943518][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1203.950813][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.965154][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.968558][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1203.972520][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1203.987422][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.005143][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.005149][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.018657][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.020803][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.035537][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.053547][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.065290][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.072745][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.080194][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.097690][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.110259][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.117458][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.136837][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.144304][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.155846][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.175566][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.183415][T20717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.192950][T20717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.200034][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.207701][T20717] device bridge_slave_0 entered promiscuous mode [ 1204.214064][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.225373][T20717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.232521][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.239831][T20717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.246747][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.254525][T20717] device bridge_slave_1 entered promiscuous mode [ 1204.260875][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.268064][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.283967][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.291485][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.298704][T13091] hid-generic 0000:0000:0003.0059: unknown main item tag 0x0 [ 1204.322295][T13091] hid-generic 0000:0000:0003.0059: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1204.404595][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1204.411842][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1204.429176][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1204.437252][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1204.446808][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1204.454819][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.461733][ T7193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.468850][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1204.476949][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1204.484874][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.491706][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.498830][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1204.506594][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1204.514263][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1204.522151][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1204.536052][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1204.544885][T20717] device veth0_vlan entered promiscuous mode [ 1204.551292][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1204.560306][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1204.567443][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1204.578349][T20717] device veth1_macvtap entered promiscuous mode [ 1204.590302][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1204.601117][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.609128][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.620617][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1204.628630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.679466][ T7193] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1204.687479][ T4849] device bridge_slave_1 left promiscuous mode [ 1204.693589][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.700804][ T4849] device bridge_slave_0 left promiscuous mode [ 1204.706721][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.714556][ T4849] device bridge_slave_1 left promiscuous mode [ 1204.727522][T20727] syz.0.5630[20727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.727586][T20727] syz.0.5630[20727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.727742][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.761626][ T4849] device bridge_slave_0 left promiscuous mode [ 1204.767626][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.775976][ T4849] device veth1_macvtap left promiscuous mode [ 1204.781970][ T4849] device veth0_vlan left promiscuous mode [ 1204.787902][ T4849] device veth1_macvtap left promiscuous mode [ 1204.794398][ T4849] device veth0_vlan left promiscuous mode [ 1204.820118][T20727] syz.0.5630[20727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.820189][T20727] syz.0.5630[20727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1205.510848][ T7193] usb 3-1: config 0 has no interfaces? [ 1205.536337][ T7193] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1205.553451][ T7193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.568594][ T7193] usb 3-1: config 0 descriptor?? [ 1205.586692][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.593883][T20732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.601632][T20732] device bridge_slave_0 entered promiscuous mode [ 1205.618230][T20732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.626401][T20732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.682479][T20732] device bridge_slave_1 entered promiscuous mode [ 1205.717980][T20763] xt_hashlimit: size too large, truncated to 1048576 [ 1205.900331][ T7193] usb 3-1: USB disconnect, device number 64 [ 1205.912128][T20732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.918998][T20732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.926098][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.932876][T20732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.943079][T20768] loop4: detected capacity change from 0 to 512 [ 1205.956933][T20768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1205.989620][T20768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1205.999956][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1206.008742][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.015935][T20768] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 1206.026022][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.052777][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1206.062450][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1206.072632][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.079474][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.111687][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1206.120311][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.127188][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.157261][ T28] audit: type=1400 audit(2000000117.884:1479): avc: denied { lock } for pid=20774 comm="syz.1.5648" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1206.194445][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1206.202881][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1206.209779][T20780] IPv4: Oversized IP packet from 127.202.26.0 [ 1206.210646][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1206.228734][T20732] device veth0_vlan entered promiscuous mode [ 1206.236324][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1206.244384][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1206.254521][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1206.268695][T20732] device veth1_macvtap entered promiscuous mode [ 1206.282160][T20748] loop0: detected capacity change from 0 to 131072 [ 1206.292584][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1206.305663][T20748] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1206.316684][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.325322][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1206.363436][T20748] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1206.383702][T20748] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 1206.391306][T20748] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 1206.677081][ T4849] device bridge_slave_1 left promiscuous mode [ 1206.697014][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.717648][ T4849] device bridge_slave_0 left promiscuous mode [ 1206.723746][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.731949][ T4849] device veth1_macvtap left promiscuous mode [ 1206.738588][ T4849] device veth0_vlan left promiscuous mode [ 1207.200945][T20802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1207.282320][T20811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.291218][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.299380][T20810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1207.299500][T20811] device bridge_slave_0 entered promiscuous mode [ 1207.318365][T20811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.328342][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.335742][T20811] device bridge_slave_1 entered promiscuous mode [ 1207.398571][T20811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.405438][T20811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.412500][T20811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.419324][T20811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.440232][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1207.447733][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.455319][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.471860][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1207.480942][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.487906][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.508442][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.520425][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.528697][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.535551][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.553889][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1207.561785][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1207.575634][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1207.583550][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1207.644112][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1207.672124][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1207.689846][T20811] device veth0_vlan entered promiscuous mode [ 1207.692747][T20843] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5670'. [ 1207.700333][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1207.722388][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1207.742311][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1207.751844][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1207.781601][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1207.791930][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1207.809496][ T4849] device bridge_slave_1 left promiscuous mode [ 1207.816589][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.824088][ T4849] device bridge_slave_0 left promiscuous mode [ 1207.830081][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.838191][ T4849] device veth1_macvtap left promiscuous mode [ 1207.844259][ T4849] device veth0_vlan left promiscuous mode [ 1207.845383][T20852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5674'. [ 1207.864236][T20852] loop4: detected capacity change from 0 to 512 [ 1207.885877][T20852] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5674: invalid indirect mapped block 256 (level 2) [ 1207.899545][T20852] EXT4-fs (loop4): 2 truncates cleaned up [ 1207.905777][T20852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1207.939365][T20811] device veth1_macvtap entered promiscuous mode [ 1207.954972][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1207.972627][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1207.980652][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1207.995702][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1208.028638][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1208.044493][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1208.905901][ T4849] device bridge_slave_1 left promiscuous mode [ 1208.911851][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.919179][ T4849] device bridge_slave_0 left promiscuous mode [ 1208.925496][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.933117][ T4849] device veth1_macvtap left promiscuous mode [ 1208.938997][ T4849] device veth0_vlan left promiscuous mode [ 1209.392187][T20889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5687'. [ 1209.538443][T20884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5685'. [ 1209.563615][T20901] input: syz1 as /devices/virtual/input/input68 [ 1209.573341][T20884] loop0: detected capacity change from 0 to 512 [ 1209.582217][T20903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5692'. [ 1209.593075][T20884] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5685: invalid indirect mapped block 256 (level 2) [ 1209.607833][T20884] EXT4-fs (loop0): 2 truncates cleaned up [ 1209.613410][T20884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1209.657717][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1209.698905][T20905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.705769][T20905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.717347][T20905] device bridge_slave_0 entered promiscuous mode [ 1209.727566][T20905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.735298][T20905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.742591][T20905] device bridge_slave_1 entered promiscuous mode [ 1209.832500][ T28] audit: type=1400 audit(2000000121.550:1480): avc: denied { bind } for pid=20926 comm="syz.2.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1209.867426][T20905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.874313][T20905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.881429][T20905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.888190][T20905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.929268][T20915] loop0: detected capacity change from 0 to 40427 [ 1209.951244][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1209.958763][T20915] F2FS-fs (loop0): invalid crc value [ 1209.964138][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.967441][T20915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1209.979543][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.008477][T20915] F2FS-fs (loop0): Start checkpoint disabled! [ 1210.019935][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1210.026769][T20915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1210.030755][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.041936][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.058157][T20929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1210.082460][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1210.114614][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.115880][ T4193] kworker/u4:13: attempt to access beyond end of device [ 1210.115880][ T4193] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1210.121487][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.177706][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1210.188578][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1210.205197][T20905] device veth0_vlan entered promiscuous mode [ 1210.213070][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1210.222266][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1210.230710][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1210.238301][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1210.251965][T20905] device veth1_macvtap entered promiscuous mode [ 1210.260961][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1210.273630][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1210.301731][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1210.393641][T20945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1210.848208][ T402] device bridge_slave_1 left promiscuous mode [ 1210.854154][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.861381][ T402] device bridge_slave_0 left promiscuous mode [ 1210.867352][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.875009][ T402] device veth1_macvtap left promiscuous mode [ 1210.880876][ T402] device veth0_vlan left promiscuous mode [ 1211.313320][T20968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.320238][T20968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.327282][T20968] device bridge_slave_0 entered promiscuous mode [ 1211.334320][T20968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.341387][T20968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.349221][T20968] device bridge_slave_1 entered promiscuous mode [ 1211.380134][T20977] syz.1.5716[20977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1211.380206][T20977] syz.1.5716[20977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1211.439833][T20968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.457909][T20968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.465025][T20968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.471797][T20968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.525243][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1211.608857][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5717'. [ 1211.736642][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.743796][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.754898][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1211.756746][T20981] loop4: detected capacity change from 0 to 512 [ 1211.763607][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1211.777050][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.783917][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.792476][T20981] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5717: invalid indirect mapped block 256 (level 2) [ 1211.806098][T20981] EXT4-fs (loop4): 2 truncates cleaned up [ 1211.806158][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1211.811698][T20981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1211.833938][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1211.841971][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.848815][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.856031][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1211.856633][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1211.864054][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1211.877147][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1211.893706][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1211.901347][ T7193] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1211.909184][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1211.917350][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1211.929162][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1211.936987][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1211.945329][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1211.952876][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1211.960886][T20968] device veth0_vlan entered promiscuous mode [ 1211.972408][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1211.975053][T20995] loop4: detected capacity change from 0 to 512 [ 1211.980637][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1211.995782][T20995] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5721: invalid indirect mapped block 256 (level 2) [ 1211.996323][T20968] device veth1_macvtap entered promiscuous mode [ 1212.015383][T20995] EXT4-fs (loop4): 2 truncates cleaned up [ 1212.020950][T20995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1212.034452][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1212.043097][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1212.051588][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1212.060292][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1212.068688][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1212.080264][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1212.318178][ T7193] usb 2-1: config 0 has no interfaces? [ 1212.489378][ T7193] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1212.498366][ T7193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.506257][ T7193] usb 2-1: Product: syz [ 1212.510365][ T7193] usb 2-1: Manufacturer: syz [ 1212.514788][ T7193] usb 2-1: SerialNumber: syz [ 1212.520628][ T7193] r8152-cfgselector 2-1: config 0 descriptor?? [ 1212.659960][ T4193] device bridge_slave_1 left promiscuous mode [ 1212.665933][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.673144][ T4193] device bridge_slave_0 left promiscuous mode [ 1212.679076][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.686784][ T4193] device veth1_macvtap left promiscuous mode [ 1212.692712][ T4193] device veth0_vlan left promiscuous mode [ 1212.991682][T13091] usb 2-1: USB disconnect, device number 66 [ 1213.175042][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.182069][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.189208][T21010] device bridge_slave_0 entered promiscuous mode [ 1213.196456][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.203660][T21010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.211036][T21010] device bridge_slave_1 entered promiscuous mode [ 1213.269222][T21021] loop0: detected capacity change from 0 to 256 [ 1213.289899][T21021] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1213.372919][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.379771][T21010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.386908][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.393680][T21010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.420680][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1213.428358][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.449537][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.478349][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1213.489077][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.495954][ T7193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.509302][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1213.517543][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.524425][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.531811][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1213.546905][T21010] device veth0_vlan entered promiscuous mode [ 1213.553259][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1213.561483][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1213.569117][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1213.576386][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1213.583633][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1213.597671][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1213.608348][T21010] device veth1_macvtap entered promiscuous mode [ 1213.619768][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1213.628856][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1213.650182][T21033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21033 comm=syz.4.5734 [ 1214.231451][ T4193] device bridge_slave_1 left promiscuous mode [ 1214.237377][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.244820][ T4193] device bridge_slave_0 left promiscuous mode [ 1214.251034][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.258494][ T4193] device veth1_macvtap left promiscuous mode [ 1214.264380][ T4193] device veth0_vlan left promiscuous mode [ 1214.997650][T21090] __nla_validate_parse: 1 callbacks suppressed [ 1214.997679][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5752'. [ 1215.039483][T21081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.046874][ T5690] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1215.081463][T21081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.111128][T21081] device bridge_slave_0 entered promiscuous mode [ 1215.122376][T21081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.129396][T21081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.136321][ T28] audit: type=1400 audit(2000000126.844:1481): avc: denied { name_bind } for pid=21095 comm="syz.4.5759" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1215.157870][T21081] device bridge_slave_1 entered promiscuous mode [ 1215.283390][T21081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.290264][T21081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.297375][T21081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.304152][T21081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.311381][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 1215.335100][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1215.343406][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.350530][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.367589][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1215.375721][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.382582][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.389987][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.401416][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.408291][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.424125][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.432059][ T5690] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1215.440932][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.448526][ T5690] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1215.466322][T21081] device veth0_vlan entered promiscuous mode [ 1215.472691][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1215.488423][T21081] device veth1_macvtap entered promiscuous mode [ 1215.496763][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1215.505838][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1215.514569][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1215.521848][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1215.529696][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1215.542129][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.556711][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.652169][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1215.661105][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.669166][ T5690] usb 2-1: Product: syz [ 1215.673402][ T5690] usb 2-1: Manufacturer: syz [ 1215.677828][ T5690] usb 2-1: SerialNumber: syz [ 1215.762235][ T7191] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1216.002521][ T5690] usb 2-1: 0:2 : does not exist [ 1216.007669][ T7191] usb 3-1: Using ep0 maxpacket: 32 [ 1216.015652][ T5690] usb 2-1: USB disconnect, device number 67 [ 1216.132988][ T402] device bridge_slave_1 left promiscuous mode [ 1216.138959][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.146209][ T402] device bridge_slave_0 left promiscuous mode [ 1216.152133][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.159644][ T402] device veth1_macvtap left promiscuous mode [ 1216.165492][ T402] device veth0_vlan left promiscuous mode [ 1216.295618][ T7191] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1216.304525][ T7191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.312270][ T7191] usb 3-1: Product: syz [ 1216.316488][ T7191] usb 3-1: Manufacturer: syz [ 1216.320899][ T7191] usb 3-1: SerialNumber: syz [ 1216.326192][ T7191] usb 3-1: config 0 descriptor?? [ 1216.761323][T21116] loop4: detected capacity change from 0 to 512 [ 1216.782856][T21116] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.5767: bad orphan inode 15 [ 1216.795449][T21116] ext4_test_bit(bit=14, block=5) = 0 [ 1216.800564][T21116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1216.824811][T21116] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1216.839424][T21116] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.5767: bit already cleared for inode 13 [ 1216.866478][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1216.942539][T21123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1216.955629][T21123] loop0: detected capacity change from 0 to 512 [ 1216.962166][T21124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.969394][T21124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.977149][T21124] device bridge_slave_0 entered promiscuous mode [ 1216.977361][T21123] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5769: invalid indirect mapped block 256 (level 2) [ 1216.984197][T21124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.003538][T21124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.003626][T21123] EXT4-fs (loop0): 2 truncates cleaned up [ 1217.010762][T21124] device bridge_slave_1 entered promiscuous mode [ 1217.016287][T21123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1217.043178][T13091] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1217.057554][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1217.063235][ T7191] (unnamed net_device) (uninitialized): Assigned a random MAC address: ca:ce:68:69:33:39 [ 1217.065065][T21126] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1217.089033][ T28] audit: type=1400 audit(2000000128.803:1482): avc: denied { name_bind } for pid=21133 comm="syz.0.5771" src=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1217.111998][ T7191] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 1217.123700][T21126] loop4: detected capacity change from 0 to 512 [ 1217.141327][T21126] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5770: invalid indirect mapped block 256 (level 2) [ 1217.154771][T21126] EXT4-fs (loop4): 2 truncates cleaned up [ 1217.160326][T21126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1217.194920][ T7191] usb 3-1: USB disconnect, device number 65 [ 1217.198982][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1217.234731][T21124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.241620][T21124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.248724][T21124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.255500][T21124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.310450][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1217.329674][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1217.338125][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1217.355179][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1217.363205][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1217.547281][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.555208][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1217.569456][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1217.578193][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1217.585585][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1217.593384][T21124] device veth0_vlan entered promiscuous mode [ 1217.602781][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.603952][ T5690] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1217.610727][T13091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1217.629167][T13091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1217.630340][T21124] device veth1_macvtap entered promiscuous mode [ 1217.640502][T13091] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1217.650608][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.659095][T13091] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1217.675659][T13091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.685712][T13091] usb 2-1: config 0 descriptor?? [ 1217.691638][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1217.703702][T21119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1217.843753][ T7191] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1217.863877][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 1217.983877][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.994767][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.004290][ T5690] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1218.013095][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.021422][ T5690] usb 5-1: config 0 descriptor?? [ 1218.083928][ T7191] usb 3-1: Using ep0 maxpacket: 16 [ 1218.154628][T13091] plantronics 0003:047F:FFFF.005A: unknown main item tag 0xd [ 1218.162517][T13091] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 1218.171459][T13091] plantronics 0003:047F:FFFF.005A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1218.204140][ T7191] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1218.211944][ T7191] usb 3-1: config 0 has no interface number 0 [ 1218.217888][ T7191] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1218.227470][ T7191] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1218.334520][ T402] device bridge_slave_1 left promiscuous mode [ 1218.340430][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.347792][ T402] device bridge_slave_0 left promiscuous mode [ 1218.353696][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.360825][ T7191] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1218.370623][ T402] device veth1_macvtap left promiscuous mode [ 1218.376538][ T402] device veth0_vlan left promiscuous mode [ 1218.382156][ T7191] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1218.390022][ T7191] usb 3-1: Product: syz [ 1218.393966][ T7191] usb 3-1: SerialNumber: syz [ 1218.401847][ T7191] usb 3-1: config 0 descriptor?? [ 1218.466892][T13091] usb 2-1: USB disconnect, device number 68 [ 1218.504902][ T5690] steelseries_srws1 0003:1038:1410.005B: unknown main item tag 0xd [ 1218.513086][ T5690] steelseries_srws1 0003:1038:1410.005B: item fetching failed at offset 6/7 [ 1218.521781][ T5690] steelseries_srws1 0003:1038:1410.005B: parse failed [ 1218.528436][ T5690] steelseries_srws1: probe of 0003:1038:1410.005B failed with error -22 [ 1218.686654][ T7191] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 1218.694682][ T7191] usb 3-1: USB disconnect, device number 66 [ 1218.697237][T10574] udevd[10574]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1218.745197][T13091] usb 5-1: USB disconnect, device number 63 [ 1218.984556][T21160] hub 2-0:1.0: USB hub found [ 1218.989307][T21160] hub 2-0:1.0: 1 port detected [ 1219.070925][T21172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1219.079831][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.087018][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.094344][T21165] device bridge_slave_0 entered promiscuous mode [ 1219.101583][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.108569][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.115884][T21165] device bridge_slave_1 entered promiscuous mode [ 1219.195101][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.201984][T21165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.209099][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.215863][T21165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.222723][T21176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1219.235978][T21176] loop0: detected capacity change from 0 to 512 [ 1219.242006][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1219.250337][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.266650][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.277208][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1219.285679][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.285816][T21176] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5785: invalid indirect mapped block 256 (level 2) [ 1219.292516][ T7193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.312978][T21176] EXT4-fs (loop0): 2 truncates cleaned up [ 1219.318721][T21176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1219.327776][T13091] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1219.349656][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1219.357713][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.358220][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1219.364559][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.381604][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1219.391224][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.408574][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1219.421173][T21165] device veth0_vlan entered promiscuous mode [ 1219.427732][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1219.440829][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1219.448353][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1219.461695][T21165] device veth1_macvtap entered promiscuous mode [ 1219.469193][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1219.489066][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1219.505280][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1219.534834][ T5690] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1219.594859][T13091] usb 2-1: Using ep0 maxpacket: 16 [ 1219.744994][T13091] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.895162][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.908066][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.917851][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1219.930656][ T5690] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1219.939669][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.945120][T13091] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1219.956588][T13091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.959451][ T5690] usb 3-1: config 0 descriptor?? [ 1219.964430][T13091] usb 2-1: Product: syz [ 1219.973506][T13091] usb 2-1: Manufacturer: syz [ 1219.978064][T13091] usb 2-1: SerialNumber: syz [ 1219.986103][T13091] usb 2-1: config 0 descriptor?? [ 1220.006051][ T4193] device bridge_slave_1 left promiscuous mode [ 1220.012001][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.019527][ T4193] device bridge_slave_0 left promiscuous mode [ 1220.026194][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.034089][ T4193] device veth1_macvtap left promiscuous mode [ 1220.040139][ T4193] device veth0_vlan left promiscuous mode [ 1220.466047][ T5690] logitech 0003:046D:C293.005C: item fetching failed at offset 5/7 [ 1220.473887][ T5690] logitech 0003:046D:C293.005C: parse failed [ 1220.479742][ T5690] logitech: probe of 0003:046D:C293.005C failed with error -22 [ 1220.485444][T13091] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 1220.493360][T13091] usb 2-1: No valid video chain found. [ 1220.685856][ T5690] usb 3-1: USB disconnect, device number 67 [ 1220.701687][T17880] usb 2-1: USB disconnect, device number 69 [ 1221.010683][T21206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.017593][T21206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.024734][T21206] device bridge_slave_0 entered promiscuous mode [ 1221.031431][T21206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.038365][T21206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.046778][T21206] device bridge_slave_1 entered promiscuous mode [ 1221.138836][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5794'. [ 1221.308106][T21216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5797'. [ 1221.319216][T21217] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1221.406246][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1221.413510][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1221.416984][T21221] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1221.429685][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1221.437947][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1221.446038][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.452899][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.460339][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.477449][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1221.486615][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.493466][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.502820][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1221.511641][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.528081][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.536349][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1221.544025][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1221.551349][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1221.558928][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1221.567702][T21206] device veth0_vlan entered promiscuous mode [ 1221.576146][ T19] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1221.578575][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1221.592427][T21206] device veth1_macvtap entered promiscuous mode [ 1221.601752][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1221.612123][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1221.736130][ T7191] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1221.756184][T17880] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1221.816255][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1222.096364][ T19] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1222.105222][ T19] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1222.113251][ T19] usb 2-1: Product: syz [ 1222.117215][ T19] usb 2-1: Manufacturer: syz [ 1222.121607][ T19] usb 2-1: SerialNumber: syz [ 1222.126814][ T7191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.129255][ T19] usb 2-1: config 0 descriptor?? [ 1222.137591][T17880] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1222.150336][ T7191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.159857][T17880] usb 5-1: config 0 has no interface number 1 [ 1222.165750][T17880] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1222.175534][ T7191] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1222.177895][ T19] usb 2-1: selecting invalid altsetting 1 [ 1222.184398][T17880] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1222.194431][ T19] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1222.200718][ T7191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.201028][T17880] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1222.209766][T10576] udevd[10576]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1222.217778][T17880] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1222.250599][ T7191] usb 3-1: config 0 descriptor?? [ 1222.250809][ T4193] device bridge_slave_1 left promiscuous mode [ 1222.255417][T17880] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1222.261735][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.270216][T17880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.284968][ T4193] device bridge_slave_0 left promiscuous mode [ 1222.285719][T17880] usb 5-1: config 0 descriptor?? [ 1222.295765][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.303391][ T4193] device veth1_macvtap left promiscuous mode [ 1222.309227][ T4193] device veth0_vlan left promiscuous mode [ 1222.337498][T17880] usb 5-1: MIDIStreaming interface descriptor not found [ 1222.382104][T17880] usb 2-1: USB disconnect, device number 70 [ 1222.559752][ T19] usb 5-1: USB disconnect, device number 64 [ 1222.737281][ T7191] dragonrise 0003:0079:0006.005D: unknown main item tag 0x0 [ 1222.744427][ T7191] dragonrise 0003:0079:0006.005D: unknown main item tag 0x0 [ 1222.751573][ T7191] dragonrise 0003:0079:0006.005D: item fetching failed at offset 3/5 [ 1222.759524][ T7191] dragonrise 0003:0079:0006.005D: parse failed [ 1222.765389][ T7191] dragonrise: probe of 0003:0079:0006.005D failed with error -22 [ 1222.940023][ T19] usb 3-1: USB disconnect, device number 68 [ 1223.176367][T21245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.183292][T21245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.190886][T21245] device bridge_slave_0 entered promiscuous mode [ 1223.197968][T21245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.209269][T21245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.218613][T21245] device bridge_slave_1 entered promiscuous mode [ 1223.349329][T21245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.356228][T21245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.363338][T21245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.370102][T21245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.395787][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1223.403507][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.415633][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.442837][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.450365][T21261] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5812'. [ 1223.454032][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.466300][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.474143][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.491529][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.498411][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.535754][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.545232][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.553388][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1223.606827][T21245] device veth0_vlan entered promiscuous mode [ 1223.613097][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.621549][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.629002][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.644136][T21245] device veth1_macvtap entered promiscuous mode [ 1223.652971][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1223.682187][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1223.724649][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1223.740081][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1224.448214][ T4849] device bridge_slave_1 left promiscuous mode [ 1224.454132][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.461474][ T4849] device bridge_slave_0 left promiscuous mode [ 1224.467821][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.476219][ T4849] device veth1_macvtap left promiscuous mode [ 1224.482091][ T4849] device veth0_vlan left promiscuous mode [ 1225.585593][T21314] loop0: detected capacity change from 0 to 2048 [ 1225.625160][T21304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1225.634331][T21314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1225.647327][T21310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.663124][T21310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.672756][T21314] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1225.688587][T21310] device bridge_slave_0 entered promiscuous mode [ 1225.696726][T21310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.709006][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1225.714625][T21310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.738386][T21310] device bridge_slave_1 entered promiscuous mode [ 1225.909021][T21310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.910843][T21354] loop4: detected capacity change from 0 to 1024 [ 1225.915882][T21310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.915964][T21310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.936023][T21310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.391528][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1226.450706][T21354] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1226.489063][T21354] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1226.546250][T21354] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.5845: Freeing blocks not in datazone - block = 0, count = 4096 [ 1226.588366][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.596204][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.597905][T21354] EXT4-fs (loop4): 1 orphan inode deleted [ 1226.609150][T21354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1226.611401][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.648128][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.656623][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.664878][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.671735][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.680764][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.692790][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1226.749955][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.758976][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.765823][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.773040][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1226.781396][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1226.789232][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1226.797149][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1226.819663][T21310] device veth0_vlan entered promiscuous mode [ 1226.829005][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1226.837261][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1226.846922][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1226.855799][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1226.867059][T21310] device veth1_macvtap entered promiscuous mode [ 1226.875805][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1226.883470][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1226.891039][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.903323][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.911510][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.929980][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1226.938343][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.947706][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1226.955974][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.048773][T13091] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1227.258663][T17880] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1227.418693][T13091] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1227.429507][T13091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.441478][T13091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.451044][T13091] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1227.463781][T13091] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1227.472841][T13091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.481906][T13091] usb 5-1: config 0 descriptor?? [ 1227.519250][ T4849] device bridge_slave_1 left promiscuous mode [ 1227.525199][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.532594][ T4849] device bridge_slave_0 left promiscuous mode [ 1227.538543][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.546189][ T4849] device veth1_macvtap left promiscuous mode [ 1227.552113][ T4849] device veth0_vlan left promiscuous mode [ 1227.618771][T17880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.628766][T17880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1227.708897][T17880] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1227.717803][T17880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1227.725666][T17880] usb 3-1: SerialNumber: syz [ 1227.960026][T13091] nintendo 0003:057E:2009.005E: collection stack underflow [ 1227.967263][T13091] nintendo 0003:057E:2009.005E: item 0 4 0 12 parsing failed [ 1227.975348][T13091] nintendo 0003:057E:2009.005E: HID parse failed [ 1227.982189][T13091] nintendo 0003:057E:2009.005E: probe - fail = -22 [ 1227.988512][T13091] nintendo: probe of 0003:057E:2009.005E failed with error -22 [ 1227.999521][T17880] usb 3-1: 0:2 : does not exist [ 1228.006763][T17880] usb 3-1: USB disconnect, device number 69 [ 1228.160334][T13091] usb 5-1: USB disconnect, device number 65 [ 1228.725078][T21393] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1228.763951][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.770946][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.780864][T21392] device bridge_slave_0 entered promiscuous mode [ 1228.787717][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.794779][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.801998][T21392] device bridge_slave_1 entered promiscuous mode [ 1229.325823][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 1229.638725][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.645605][T21392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.652708][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.659478][T21392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.684993][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.694016][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.701838][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1229.709203][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1229.732045][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1229.740332][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.747200][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.755254][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1229.763539][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.770379][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.777506][T13091] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1229.784908][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1229.793337][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1229.811690][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1229.821831][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1229.876467][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1229.885939][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1229.900640][T21392] device veth0_vlan entered promiscuous mode [ 1229.909116][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1229.920227][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1229.957245][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1229.967604][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1229.977148][T21392] device veth1_macvtap entered promiscuous mode [ 1229.988593][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1229.996234][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1230.004479][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1230.012681][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1230.020870][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1230.049574][T17880] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1230.169611][T13091] usb 3-1: Using ep0 maxpacket: 32 [ 1230.289669][T17880] usb 5-1: Using ep0 maxpacket: 8 [ 1230.300107][T13091] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1230.308302][T13091] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1230.316862][T13091] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1230.325686][T13091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1230.335137][T13091] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1230.344588][T13091] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1230.357354][T13091] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1230.366220][T13091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.374628][T13091] usb 3-1: config 0 descriptor?? [ 1230.409741][T17880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.422112][T17880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.431691][T17880] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1230.440527][T17880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.448832][T17880] usb 5-1: config 0 descriptor?? [ 1230.610535][ T402] device bridge_slave_1 left promiscuous mode [ 1230.616531][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.623851][ T402] device bridge_slave_0 left promiscuous mode [ 1230.630475][T13091] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1230.630841][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.649508][ T402] device veth1_macvtap left promiscuous mode [ 1230.655419][ T402] device veth0_vlan left promiscuous mode [ 1230.833041][ T7191] usb 3-1: USB disconnect, device number 70 [ 1230.849793][ C1] usblp0: nonzero read bulk status received: -108 [ 1230.930542][T17880] kone 0003:1E7D:2CED.005F: report_id 1944628200 is invalid [ 1230.937653][T17880] kone 0003:1E7D:2CED.005F: item 0 4 1 8 parsing failed [ 1230.944663][T17880] kone 0003:1E7D:2CED.005F: parse failed [ 1230.950405][T17880] kone: probe of 0003:1E7D:2CED.005F failed with error -22 [ 1231.033579][T21396] usblp0: removed [ 1231.133067][ T7191] usb 5-1: USB disconnect, device number 66 [ 1231.845724][T21430] loop4: detected capacity change from 0 to 1024 [ 1231.890201][T21430] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.5871: casefold flag without casefold feature [ 1231.907116][T21430] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1231.923364][T21430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1231.954134][T21418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5865'. [ 1231.959722][T21439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5873'. [ 1231.977560][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1231.993694][T21418] loop0: detected capacity change from 0 to 512 [ 1232.014923][T21418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5865: invalid indirect mapped block 256 (level 2) [ 1232.028571][T21418] EXT4-fs (loop0): 2 truncates cleaned up [ 1232.034176][T21418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1232.084806][T19827] EXT4-fs (loop0): unmounting filesystem. [ 1232.122717][T21438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.129567][T21438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.183949][ T28] audit: type=1326 audit(2000000143.896:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21459 comm="syz.2.5881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787db7dff9 code=0x7ffc0000 [ 1232.207982][T21438] device bridge_slave_0 entered promiscuous mode [ 1232.225875][ T28] audit: type=1326 audit(2000000143.926:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21459 comm="syz.2.5881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787db7dff9 code=0x7ffc0000 [ 1232.230935][T21438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.260207][ T28] audit: type=1326 audit(2000000143.926:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21459 comm="syz.2.5881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f787db7dff9 code=0x7ffc0000 [ 1232.292289][T21438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.312142][T21438] device bridge_slave_1 entered promiscuous mode [ 1232.323647][ T28] audit: type=1326 audit(2000000143.976:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21459 comm="syz.2.5881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787db7dff9 code=0x7ffc0000 [ 1232.384808][ T28] audit: type=1326 audit(2000000143.976:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21459 comm="syz.2.5881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787db7dff9 code=0x7ffc0000 [ 1232.419335][T21472] : renamed from ipvlan1 [ 1232.453275][T21438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.460142][T21438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.467268][T21438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.474035][T21438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.485771][T21475] loop4: detected capacity change from 0 to 512 [ 1232.515318][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.528769][T21475] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1232.540661][T21475] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 1232.549679][T21462] loop0: detected capacity change from 0 to 40427 [ 1232.550677][T21475] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.5887: Corrupt directory, running e2fsck is recommended [ 1232.569724][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.570516][T21475] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1232.584875][T21475] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.5887: corrupted in-inode xattr [ 1232.596866][T21475] EXT4-fs (loop4): Remounting filesystem read-only [ 1232.597047][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1232.603227][T21475] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.5887: couldn't read orphan inode 15 (err -117) [ 1232.623314][T21462] F2FS-fs (loop0): fault_type options not supported [ 1232.629624][T21475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1232.632239][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1232.650880][T21462] F2FS-fs (loop0): invalid crc value [ 1232.657867][T21475] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1232.669607][T21475] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 1232.679922][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1232.680175][T21475] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.5887: Corrupt directory, running e2fsck is recommended [ 1232.691276][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.707256][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.720892][T21462] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1232.730721][T21475] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1232.737865][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.760403][T21477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5888'. [ 1232.770314][T21475] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 1232.783527][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.790398][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.791012][T21475] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.5887: Corrupt directory, running e2fsck is recommended [ 1232.820694][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.828975][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1232.829039][T21462] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1232.845060][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1232.852861][T21483] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1232.868684][T21483] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 1232.869156][T21438] device veth0_vlan entered promiscuous mode [ 1232.878748][T21483] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.5887: Corrupt directory, running e2fsck is recommended [ 1232.887487][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.904809][T21487] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1232.917604][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.925322][ T28] audit: type=1400 audit(2000000144.636:1488): avc: denied { mounton } for pid=21461 comm="syz.0.5882" path="/115/file1/bus" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1232.948714][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1232.960442][T19827] syz-executor: attempt to access beyond end of device [ 1232.960442][T19827] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1232.974426][T21475] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #2: block 3: comm syz.4.5887: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1232.998082][T19827] syz-executor: attempt to access beyond end of device [ 1232.998082][T19827] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1233.000331][T21438] device veth1_macvtap entered promiscuous mode [ 1233.013089][T21475] EXT4-fs (loop4): Remounting filesystem read-only [ 1233.030003][T21493] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1233.038405][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1233.053679][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1233.065280][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1233.067467][ T4193] Trying to write to read-only block-device loop0 [ 1233.071464][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1233.078186][ T4193] Trying to write to read-only block-device loop0 [ 1233.091318][ T4193] Trying to write to read-only block-device loop0 [ 1233.107035][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1233.109486][T21498] loop4: detected capacity change from 0 to 512 [ 1233.120274][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1233.129740][ T4193] kworker/u4:13: attempt to access beyond end of device [ 1233.129740][ T4193] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1233.148341][T21498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1233.178950][T21498] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.5893: bad orphan inode 16 [ 1233.189972][T21498] ext4_test_bit(bit=15, block=4) = 0 [ 1233.195895][T21498] EXT4-fs (loop4): 1 orphan inode deleted [ 1233.209009][T21498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1233.226023][ T28] audit: type=1400 audit(2000000144.936:1489): avc: denied { rename } for pid=21497 comm="syz.4.5893" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1233.226056][T21498] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.5893: bit already cleared for inode 14 [ 1233.262455][T21498] incfs: Options parsing error. -22 [ 1233.268956][T21498] incfs: mount failed -22 [ 1233.277864][ T28] audit: type=1400 audit(2000000144.976:1490): avc: denied { mounton } for pid=21497 comm="syz.4.5893" path="/75/bus/file0/file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1233.302525][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1233.450549][ T6] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1233.477370][T21523] loop4: detected capacity change from 0 to 2048 [ 1233.519362][T21523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1233.575773][T21524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.582762][T21524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.590035][T21524] device bridge_slave_0 entered promiscuous mode [ 1233.600853][T21525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.607699][T21525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.615886][T21525] device bridge_slave_0 entered promiscuous mode [ 1233.624300][T21524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.631574][T21524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.638826][T21524] device bridge_slave_1 entered promiscuous mode [ 1233.645610][T21525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.652643][T21525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.660036][T21525] device bridge_slave_1 entered promiscuous mode [ 1233.688226][ T10] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1233.703233][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1233.710760][ T7191] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1233.715731][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1233.715731][ T10] [ 1233.732384][ T10] EXT4-fs (loop4): Total free blocks count 0 [ 1233.738125][ T10] EXT4-fs (loop4): Free/Dirty block details [ 1233.744056][ T10] EXT4-fs (loop4): free_blocks=2415919104 [ 1233.749593][ T10] EXT4-fs (loop4): dirty_blocks=8192 [ 1233.754760][ T10] EXT4-fs (loop4): Block reservation details [ 1233.760525][ T10] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 1233.778487][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 1233.856128][T21525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.863014][T21525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.870089][T21525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.876899][T21525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.884071][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.895327][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.905074][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1233.914276][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.927405][T21524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.934285][T21524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.938734][T21538] loop4: detected capacity change from 0 to 2048 [ 1233.941361][T21524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.954322][T21524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.962123][ T6] usb 2-1: config 0 descriptor?? [ 1233.992445][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.999845][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.007425][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.007907][T21538] Alternate GPT is invalid, using primary GPT. [ 1234.020366][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.022144][T21538] loop4: p1 p2 p3 [ 1234.030951][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.051658][ T402] device bridge_slave_1 left promiscuous mode [ 1234.057702][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.066513][ T402] device bridge_slave_0 left promiscuous mode [ 1234.071600][T20219] udevd[20219]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1234.074309][T13544] udevd[13544]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1234.082324][ T7191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.094176][T10574] udevd[10574]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1234.103222][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.117832][T10575] udevd[10575]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1234.118968][ T7191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.129729][T10574] udevd[10574]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1234.139029][T10941] udevd[10941]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1234.157992][ T7191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.158107][ T402] device veth1_macvtap left promiscuous mode [ 1234.176542][ T7191] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1234.185412][ T7191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.193266][ T402] device veth0_vlan left promiscuous mode [ 1234.199501][ T7191] usb 3-1: config 0 descriptor?? [ 1234.274126][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1234.281367][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1234.289233][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.296025][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.307562][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1234.315714][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1234.323702][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.330432][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.337653][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1234.340775][ T803] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1234.345983][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1234.360858][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.367674][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.374879][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1234.382945][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1234.390894][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.397720][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.411664][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1234.419715][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1234.427581][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1234.435489][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1234.443306][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1234.451584][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1234.460171][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1234.468376][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1234.485495][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1234.493651][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1234.503662][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1234.511930][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1234.525480][T21525] device veth0_vlan entered promiscuous mode [ 1234.531477][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.539441][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.547402][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.555167][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.563431][T21524] device veth0_vlan entered promiscuous mode [ 1234.569985][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.577183][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.584421][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.590808][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 1234.591685][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.610479][T21525] device veth1_macvtap entered promiscuous mode [ 1234.617400][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.625282][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.633311][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.648619][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.656674][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.664781][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.672954][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.681695][ T7191] betop 0003:11C2:2208.0061: item fetching failed at offset 4/5 [ 1234.685486][T21524] device veth1_macvtap entered promiscuous mode [ 1234.695478][ T7191] betop 0003:11C2:2208.0061: parse failed [ 1234.696187][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.701205][ T7191] betop: probe of 0003:11C2:2208.0061 failed with error -22 [ 1234.709191][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.716115][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.724558][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.744385][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.754422][ T803] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1234.764808][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.771376][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.781346][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.781786][ T803] usb 5-1: config 0 descriptor?? [ 1234.794512][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.802548][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.890213][T13091] usb 3-1: USB disconnect, device number 71 [ 1234.900991][ T6] usb 2-1: string descriptor 0 read error: -71 [ 1235.127062][ T6] uclogic 0003:256C:006D.0060: failed retrieving string descriptor #200: -71 [ 1235.136446][ T6] uclogic 0003:256C:006D.0060: failed retrieving pen parameters: -71 [ 1235.144382][ T6] uclogic 0003:256C:006D.0060: failed probing pen v2 parameters: -71 [ 1235.152291][ T6] uclogic 0003:256C:006D.0060: failed probing parameters: -71 [ 1235.159546][ T6] uclogic: probe of 0003:256C:006D.0060 failed with error -71 [ 1235.168064][ T6] usb 2-1: USB disconnect, device number 71 [ 1235.271807][ T803] savu 0003:1E7D:2D5A.0062: item fetching failed at offset 2/5 [ 1235.279347][ T803] savu 0003:1E7D:2D5A.0062: parse failed [ 1235.285002][ T803] savu: probe of 0003:1E7D:2D5A.0062 failed with error -22 [ 1235.477100][T17880] usb 5-1: USB disconnect, device number 67 [ 1235.491616][ T402] device bridge_slave_1 left promiscuous mode [ 1235.497544][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.504941][ T402] device bridge_slave_0 left promiscuous mode [ 1235.510881][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.518609][ T402] device veth1_macvtap left promiscuous mode [ 1235.524500][ T402] device veth0_vlan left promiscuous mode [ 1236.332236][ T402] device bridge_slave_1 left promiscuous mode [ 1236.338176][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.345477][ T402] device bridge_slave_0 left promiscuous mode [ 1236.351485][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.358899][ T402] device veth1_macvtap left promiscuous mode [ 1236.364785][ T402] device veth0_vlan left promiscuous mode [ 1237.008428][T21570] loop4: detected capacity change from 0 to 1024 [ 1237.058283][T21570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1237.087978][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1237.099962][T21574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.106895][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.113209][T21552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1237.114287][T21574] device bridge_slave_0 entered promiscuous mode [ 1237.123995][T21583] syz.4.5923[21583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.128652][T21583] syz.4.5923[21583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.129324][T21574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.158168][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.165490][T21574] device bridge_slave_1 entered promiscuous mode [ 1237.178236][T21587] syz.2.5924[21587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.178303][T21587] syz.2.5924[21587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.245745][T21574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.263825][T21574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.270886][T21574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.277714][T21574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.297358][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1237.305183][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.312602][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.330676][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1237.461481][ T803] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1237.508629][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1237.516628][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.523456][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.530591][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1237.538501][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.545339][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.552518][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1237.560291][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1237.573649][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1237.581273][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1237.589107][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1237.596341][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1237.604553][T21574] device veth0_vlan entered promiscuous mode [ 1237.615428][T21574] device veth1_macvtap entered promiscuous mode [ 1237.621856][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1237.629722][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1237.637728][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.650622][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1237.658685][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1237.666969][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1237.675028][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1237.701497][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 1237.821551][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.832336][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.841865][ T803] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1237.850671][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.859408][ T803] usb 5-1: config 0 descriptor?? [ 1238.231934][ T4849] device bridge_slave_1 left promiscuous mode [ 1238.237847][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.245358][ T4849] device bridge_slave_0 left promiscuous mode [ 1238.251263][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.258872][ T4849] device veth1_macvtap left promiscuous mode [ 1238.264835][ T4849] device veth0_vlan left promiscuous mode [ 1238.342682][ T803] hid-multitouch 0003:1FD2:6007.0063: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1238.542923][ T60] usb 5-1: USB disconnect, device number 68 [ 1239.766695][T21605] loop4: detected capacity change from 0 to 2048 [ 1239.814834][T21605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1239.850751][T21605] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1239.866616][T21609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.874052][T21609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.881337][T21609] device bridge_slave_0 entered promiscuous mode [ 1239.888322][T21609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.888534][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1239.895225][T21609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.908471][T21609] device bridge_slave_1 entered promiscuous mode [ 1240.008486][T21632] loop0: detected capacity change from 0 to 256 [ 1240.048418][T21628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5935'. [ 1240.053512][T21609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.064073][T21609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.071161][T21609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.075892][T21628] loop4: detected capacity change from 0 to 512 [ 1240.077975][T21609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.093079][T21628] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5935: invalid indirect mapped block 256 (level 2) [ 1240.106760][T10576] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1240.116329][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.123394][T21628] EXT4-fs (loop4): 2 truncates cleaned up [ 1240.128949][T21628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1240.137791][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.138338][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.138582][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.158817][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.158995][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.159011][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.159124][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.159289][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.159302][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.159416][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1240.159615][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1240.163112][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.166940][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1240.167252][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1240.167465][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1240.168701][T21609] device veth0_vlan entered promiscuous mode [ 1240.175451][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1240.282864][ T6] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1240.283792][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1240.286422][T21609] device veth1_macvtap entered promiscuous mode [ 1240.301909][ T60] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1240.307408][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1240.329929][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1240.341420][T21639] loop4: detected capacity change from 0 to 1024 [ 1240.356767][T21641] loop0: detected capacity change from 0 to 512 [ 1240.366209][T21641] /dev/loop0: Can't open blockdev [ 1240.369911][T21639] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.5940: casefold flag without casefold feature [ 1240.383918][T21639] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1240.393875][T21639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=5571 state=3 status=67 (errno 9: Bad file descriptor) [ 1240.441287][T20717] EXT4-fs (loop4): unmounting filesystem. [ 1240.459640][ T28] audit: type=1400 audit(2000000152.164:1491): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[13750]" dev="pipefs" ino=13750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1240.553552][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 1240.732007][ T6] usb 2-1: device descriptor read/all, error -71 [ 1240.992081][ T60] usb 3-1: device not accepting address 72, error -71 [ 1241.053174][ T4849] device bridge_slave_1 left promiscuous mode [ 1241.059097][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.066400][ T4849] device bridge_slave_0 left promiscuous mode [ 1241.072388][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.079811][ T4849] device veth1_macvtap left promiscuous mode [ 1241.085673][ T4849] device veth0_vlan left promiscuous mode [ 1241.496989][ T4849] tipc: Left network mode [ 1242.013094][ T4849] device bridge_slave_1 left promiscuous mode [ 1242.019010][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.026285][ T4849] device bridge_slave_0 left promiscuous mode [ 1242.032283][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.039716][ T4849] device bridge_slave_1 left promiscuous mode [ 1242.045990][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.053263][ T4849] device bridge_slave_0 left promiscuous mode [ 1242.059153][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.067360][ T4849] device bridge_slave_1 left promiscuous mode [ 1242.073318][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.080405][ T4849] device bridge_slave_0 left promiscuous mode [ 1242.086391][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.094639][ T4849] device veth1_macvtap left promiscuous mode [ 1242.100439][ T4849] device veth0_vlan left promiscuous mode [ 1242.106175][ T4849] device veth1_macvtap left promiscuous mode [ 1242.111967][ T4849] device veth0_vlan left promiscuous mode [ 1242.117948][ T4849] device veth0_vlan left promiscuous mode [ 1242.124103][ T4849] device veth1_macvtap left promiscuous mode [ 1242.129895][ T4849] device veth0_vlan left promiscuous mode