last executing test programs: 7.763225593s ago: executing program 1 (id=272): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000240)={0x6, 'nr0\x00', {0x3a}, 0x3}) 7.701660149s ago: executing program 1 (id=273): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x3, 0x0, @void}, 0x62) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 7.68522399s ago: executing program 1 (id=274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.6105616s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 6.049047832s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 5.42051077s ago: executing program 1 (id=289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) eventfd2(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="4014d00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x19, 0x2, "1469"}, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1f}}) 4.818738025s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 3.603591868s ago: executing program 4 (id=312): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3e8, 0x178, 0x178, 0x3e8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x200, 0x220, 0xc, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller1\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.57977913s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 3.106785603s ago: executing program 4 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) setresuid(0x0, 0x0, 0xee00) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x7c, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="0000130000006b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.804841651s ago: executing program 1 (id=322): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000940)=ANY=[], 0x6, 0x35d, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 2.595383131s ago: executing program 1 (id=323): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x3, 0xfffd, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x1a00) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x87, 0x2}, 0x0}) 1.704628122s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 965.356561ms ago: executing program 4 (id=324): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 943.110173ms ago: executing program 4 (id=326): socket$unix(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 925.014285ms ago: executing program 4 (id=328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 801.279066ms ago: executing program 4 (id=330): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 719.497604ms ago: executing program 0 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r2, r1) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 690.088576ms ago: executing program 0 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 662.980279ms ago: executing program 0 (id=334): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) unshare(0x2040400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0xd}, 0x0) 512.788283ms ago: executing program 0 (id=336): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b", @ANYBLOB='\x00'/12, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 511.930663ms ago: executing program 2 (id=337): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f00000014c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 432.1528ms ago: executing program 0 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f00000002c0)={[{@grpid}, {@resgid}, {@data_writeback}]}, 0x9, 0x61c, &(0x7f0000000700)="$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") futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xa5023fff) 303.685152ms ago: executing program 2 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 290.411493ms ago: executing program 0 (id=340): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) close(r1) 173.586074ms ago: executing program 2 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 132.908728ms ago: executing program 2 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="150003ef000000a001010000074eb43ce570a4380300000090ade69283"], 0x19c}}, 0x4040) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001480)='\xfb+\x7f-\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 105.50636ms ago: executing program 2 (id=343): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) close(r0) 49.995345ms ago: executing program 2 (id=344): sync_file_range(0xffffffffffffffff, 0x7fffffffffffffff, 0x2, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120008ff6000000002000020d3"]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) kernel console output (not intermixed with test programs): r at page 149 @ nid 36 [ 26.109957][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 26.118966][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 26.127922][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 26.137082][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 26.146011][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 26.154900][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 26.163864][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 26.172913][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 26.181777][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 26.190899][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 26.199744][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 26.208606][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 26.217663][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 26.226577][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 26.235399][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 26.244285][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 26.254303][ T297] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input4 [ 26.265781][ T492] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 26.275735][ T297] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input5 [ 26.289858][ T297] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input6 [ 26.304329][ T297] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input7 [ 26.321858][ T297] uclogic 0003:256C:006D.0002: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 26.331207][ T28] audit: type=1400 audit(1727969365.445:204): avc: denied { mounton } for pid=493 comm="syz.3.68" path="/proc/21/task" dev="proc" ino=16454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 26.356429][ T28] audit: type=1400 audit(1727969365.465:205): avc: denied { mount } for pid=493 comm="syz.3.68" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.400879][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 26.410484][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 26.472465][ T24] usb 2-1: USB disconnect, device number 2 [ 26.525528][ T504] loop4: detected capacity change from 0 to 512 [ 26.546172][ T504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 26.555024][ T504] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 26.569161][ T28] audit: type=1400 audit(1727969365.695:206): avc: denied { mounton } for pid=503 comm="syz.4.72" path="/7/file1/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.591760][ T28] audit: type=1400 audit(1727969365.695:207): avc: denied { map } for pid=503 comm="syz.4.72" path="/7/file1/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.620954][ T39] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 26.629899][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.631975][ T28] audit: type=1400 audit(1727969365.755:208): avc: denied { ioctl } for pid=503 comm="syz.4.72" path="/7/file1/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.640481][ T39] usb 3-1: Product: syz [ 26.665863][ T39] usb 3-1: Manufacturer: syz [ 26.667309][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.670253][ T39] usb 3-1: SerialNumber: syz [ 26.670864][ T39] usb 3-1: config 0 descriptor?? [ 26.686043][ T504] syz.4.72 (504) used greatest stack depth: 22024 bytes left [ 26.701465][ T292] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 33 [ 26.706145][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 26.713936][ T484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.731235][ T484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.732911][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 26.738271][ T292] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 26.755781][ T292] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 33 [ 26.768988][ T292] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 26.778123][ T292] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 33 [ 26.790195][ T292] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 26.799056][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.814372][ T292] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor: corrupted xattr block 33 [ 26.826693][ T292] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -74) [ 26.835703][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.851135][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 0 [ 26.865620][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.881027][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 2048 [ 26.895917][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.911344][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 4096 [ 26.926104][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.941567][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 6144 [ 26.956635][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 26.970152][ T484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.972255][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 8192 [ 26.993953][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 27.009694][ T484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.014841][ T292] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /7/file1/lost+found: directory fails checksum at offset 10240 [ 27.035751][ T292] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 27.060846][ T315] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.222579][ T292] EXT4-fs (loop4): unmounting filesystem. [ 27.230549][ T292] syz-executor (292) used greatest stack depth: 20360 bytes left [ 27.334797][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.341804][ T531] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.348943][ T531] device bridge_slave_0 entered promiscuous mode [ 27.355987][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.363401][ T531] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.371369][ T531] device bridge_slave_1 entered promiscuous mode [ 27.442826][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.449709][ T531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.456791][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.463590][ T531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.470911][ T315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.490923][ T39] dm9601: No valid MAC address in EEPROM, using 06:91:4e:75:40:03 [ 27.504330][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.512175][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.519288][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.520873][ T315] usb 4-1: not running at top speed; connect to a high speed hub [ 27.544918][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.553226][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.560099][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.567567][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.575895][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.576449][ T547] syz.1.91[547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.582780][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.583310][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.594612][ T547] syz.1.91[547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.602508][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.627483][ T315] usb 4-1: config 180 has an invalid interface number: 90 but max is 1 [ 27.635861][ T315] usb 4-1: config 180 has an invalid interface number: 3 but max is 1 [ 27.643906][ T315] usb 4-1: config 180 has no interface number 0 [ 27.651204][ T315] usb 4-1: config 180 has no interface number 1 [ 27.653502][ T549] loop1: detected capacity change from 0 to 128 [ 27.658425][ T315] usb 4-1: config 180 interface 90 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 27.665360][ T549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.682452][ T315] usb 4-1: config 180 interface 90 has no altsetting 0 [ 27.683060][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.689198][ T315] usb 4-1: config 180 interface 3 has no altsetting 0 [ 27.701237][ T531] device veth0_vlan entered promiscuous mode [ 27.709756][ T549] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 27.710385][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.741310][ T39] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 27.749274][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.764634][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.766652][ T39] usb 3-1: USB disconnect, device number 2 [ 27.785376][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.795086][ T549] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 27.802391][ T531] device veth1_macvtap entered promiscuous mode [ 27.812737][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.836390][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.863359][ T293] EXT4-fs (loop1): unmounting filesystem. [ 27.911792][ T330] device bridge_slave_1 left promiscuous mode [ 27.917709][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.926179][ T330] device bridge_slave_0 left promiscuous mode [ 27.937300][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.940905][ T315] usb 4-1: New USB device found, idVendor=0403, idProduct=f3c0, bcdDevice= 1.3a [ 27.953311][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.961200][ T315] usb 4-1: Product: syz [ 27.961334][ T330] device veth1_macvtap left promiscuous mode [ 27.965166][ T315] usb 4-1: Manufacturer: syz [ 27.975713][ T315] usb 4-1: SerialNumber: syz [ 27.976019][ T330] device veth0_vlan left promiscuous mode [ 28.076530][ T563] device syzkaller0 entered promiscuous mode [ 28.251275][ T315] ftdi_sio 4-1:180.90: FTDI USB Serial Device converter detected [ 28.259107][ T315] usb 4-1: Detected SIO [ 28.263830][ T315] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.311318][ T315] ftdi_sio 4-1:180.3: FTDI USB Serial Device converter detected [ 28.319230][ T315] usb 4-1: Detected SIO [ 28.323713][ T315] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 28.334471][ T315] usb 4-1: USB disconnect, device number 3 [ 28.341052][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.350430][ T315] ftdi_sio 4-1:180.90: device disconnected [ 28.356890][ T315] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 28.366285][ T315] ftdi_sio 4-1:180.3: device disconnected [ 28.444234][ T582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 28.550844][ T297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.559509][ T587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=587 comm=syz.1.106 [ 28.656826][ T594] loop4: detected capacity change from 0 to 512 [ 28.664023][ T594] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.672943][ T594] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.673449][ T596] loop1: detected capacity change from 0 to 512 [ 28.689600][ T596] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.109: bad orphan inode 17 [ 28.693493][ T594] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 28.709710][ T596] ext4_test_bit(bit=16, block=4) = 1 [ 28.714895][ T596] is_bad_inode(inode)=0 [ 28.716413][ T594] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.110: iget: bogus i_mode (5) [ 28.718877][ T596] NEXT_ORPHAN(inode)=0 [ 28.718887][ T596] max_ino=32 [ 28.730401][ T594] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.110: couldn't read orphan inode 16 (err -117) [ 28.733715][ T596] i_nlink=1 [ 28.737034][ T594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.748855][ T596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.770397][ T594] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #18: block 43: comm syz.4.110: lblock 1 mapped to illegal pblock 43 (length 1) [ 28.789972][ T531] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 28.810832][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 28.817111][ T596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.109: bg 0: block 7: invalid block bitmap [ 28.829591][ T531] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 28.839453][ T531] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 28.853113][ T330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 28.867204][ T330] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm kworker/u4:4: mark_inode_dirty error [ 28.867323][ T293] EXT4-fs (loop1): unmounting filesystem. [ 28.878989][ T330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 28.894262][ T330] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm kworker/u4:4: mark_inode_dirty error [ 28.908766][ T330] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 28.921293][ T330] EXT4-fs (loop4): This should not happen!! Data will be lost [ 28.921293][ T330] [ 28.932941][ T531] EXT4-fs (loop4): unmounting filesystem. [ 28.970941][ T531] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 28.980427][ T531] EXT4-fs error (device loop4): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 29.017931][ T622] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 29.034457][ T619] device pim6reg1 entered promiscuous mode [ 29.085945][ T294] syz-executor (294) used greatest stack depth: 20232 bytes left [ 29.130879][ T297] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 29.143112][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.169965][ T297] usb 3-1: Product: syz [ 29.181814][ T297] usb 3-1: Manufacturer: syz [ 29.196395][ T297] usb 3-1: SerialNumber: syz [ 29.211889][ T297] usb 3-1: config 0 descriptor?? [ 29.581466][ T330] device bridge_slave_1 left promiscuous mode [ 29.587432][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.616540][ T330] device bridge_slave_0 left promiscuous mode [ 29.622972][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.631427][ T330] device veth1_macvtap left promiscuous mode [ 29.637376][ T330] device veth0_vlan left promiscuous mode [ 29.892005][ T574] syz.2.100[574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.892079][ T574] syz.2.100[574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.952899][ T297] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 30.060874][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.067777][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.075041][ T662] device bridge_slave_0 entered promiscuous mode [ 30.082196][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.089297][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.097188][ T662] device bridge_slave_1 entered promiscuous mode [ 30.156945][ T297] usb 3-1: USB disconnect, device number 3 [ 30.173390][ T663] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.181164][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.188554][ T663] device bridge_slave_0 entered promiscuous mode [ 30.207238][ T663] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.214230][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.221680][ T663] device bridge_slave_1 entered promiscuous mode [ 30.261714][ T664] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.270946][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.278272][ T664] device bridge_slave_0 entered promiscuous mode [ 30.295230][ T664] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.302147][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.309538][ T664] device bridge_slave_1 entered promiscuous mode [ 30.311990][ T672] loop3: detected capacity change from 0 to 40427 [ 30.322463][ T672] request_module fs- succeeded, but still no fs? [ 30.470093][ T680] loop3: detected capacity change from 0 to 4096 [ 30.485444][ T680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.494872][ T680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.509411][ T680] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.147: corrupted inode contents [ 30.521348][ T680] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz.3.147: mark_inode_dirty error [ 30.532676][ T680] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.147: corrupted inode contents [ 30.532866][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.544646][ T680] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.147: mark_inode_dirty error [ 30.552510][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.562813][ T680] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.147: corrupted inode contents [ 30.571461][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.581183][ T680] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.147: mark_inode_dirty error [ 30.589413][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.600013][ T680] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.147: corrupted inode contents [ 30.608090][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.619470][ T680] EXT4-fs error (device loop3): ext4_truncate:4302: inode #15: comm syz.3.147: mark_inode_dirty error [ 30.625960][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.643925][ T680] EXT4-fs error (device loop3) in ext4_setattr:5613: Corrupt filesystem [ 30.643933][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.644202][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.668394][ T682] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.147: corrupted inode contents [ 30.684835][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.691748][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.701759][ T684] syz.2.148[684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.701830][ T684] syz.2.148[684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.713152][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.713715][ T296] EXT4-fs (loop3): unmounting filesystem. [ 30.737621][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.746909][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 30.746922][ T28] audit: type=1400 audit(1727969369.875:242): avc: denied { ioctl } for pid=683 comm="syz.2.148" path="socket:[17148]" dev="sockfs" ino=17148 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.791784][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.801511][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.809114][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.818795][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.826732][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.834929][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.842944][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.849774][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.857321][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.865417][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.873425][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.880251][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.887467][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.895328][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.903292][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.910643][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.918439][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.928476][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.939413][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.946582][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.953911][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.962220][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.970292][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.977435][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.987469][ T662] device veth0_vlan entered promiscuous mode [ 31.001910][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.009685][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.017372][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.025583][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.033159][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.052189][ T330] device bridge_slave_1 left promiscuous mode [ 31.058652][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.067102][ T330] device bridge_slave_0 left promiscuous mode [ 31.073693][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.083554][ T330] device bridge_slave_1 left promiscuous mode [ 31.089522][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.097427][ T330] device bridge_slave_0 left promiscuous mode [ 31.103497][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.111873][ T330] device veth1_macvtap left promiscuous mode [ 31.118878][ T330] device veth0_vlan left promiscuous mode [ 31.124929][ T330] device veth1_macvtap left promiscuous mode [ 31.130971][ T330] device veth0_vlan left promiscuous mode [ 31.219015][ T28] audit: type=1400 audit(1727969370.335:243): avc: denied { create } for pid=705 comm="syz.2.157" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.240322][ T28] audit: type=1400 audit(1727969370.345:244): avc: denied { ioctl } for pid=705 comm="syz.2.157" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17306 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.335474][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.343380][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.351183][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.358923][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.374781][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.383177][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.391881][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.403099][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.414554][ T662] device veth1_macvtap entered promiscuous mode [ 31.426397][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.434875][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.443372][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.455926][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.464865][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.474635][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.482047][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.492253][ T664] device veth0_vlan entered promiscuous mode [ 31.504597][ T664] device veth1_macvtap entered promiscuous mode [ 31.511434][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.519080][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.526907][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.534840][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.542838][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.550891][ T663] device veth0_vlan entered promiscuous mode [ 31.562974][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.570370][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.578078][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.586271][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.594431][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.602531][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.611214][ T663] device veth1_macvtap entered promiscuous mode [ 31.620144][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.627690][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.635803][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.653268][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.661329][ T325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.668973][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.677232][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.685507][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.695907][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.704458][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.712765][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.722305][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.005383][ T739] syz.0.170 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.020881][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.028225][ T743] loop0: detected capacity change from 0 to 1024 [ 32.040818][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.050691][ T325] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 32.070815][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.071331][ T743] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.087310][ T325] usb 3-1: config 0 descriptor?? [ 32.120032][ T10] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.135284][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 32.147709][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.147709][ T10] [ 32.157501][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 32.164004][ T10] EXT4-fs (loop0): Free/Dirty block details [ 32.169756][ T10] EXT4-fs (loop0): free_blocks=68451041280 [ 32.175694][ T10] EXT4-fs (loop0): dirty_blocks=64 [ 32.180653][ T10] EXT4-fs (loop0): Block reservation details [ 32.187119][ T10] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 32.194183][ T663] EXT4-fs (loop0): unmounting filesystem. [ 32.303003][ T28] audit: type=1400 audit(1727969371.425:245): avc: denied { read } for pid=767 comm="syz.0.181" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.328397][ T715] loop4: detected capacity change from 0 to 131072 [ 32.337928][ T715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.363626][ T715] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 32.383062][ T28] audit: type=1400 audit(1727969371.505:246): avc: denied { write } for pid=714 comm="syz.4.141" name="encrypted_dir" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.383960][ T715] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.406156][ T28] audit: type=1400 audit(1727969371.505:247): avc: denied { add_name } for pid=714 comm="syz.4.141" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.414901][ T715] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.510821][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.571701][ T325] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.578672][ T325] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.600840][ T325] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.615120][ T28] audit: type=1400 audit(1727969371.735:248): avc: denied { ioctl } for pid=778 comm="syz.4.182" path="socket:[18114]" dev="sockfs" ino=18114 ioctlcmd=0xae8f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.652172][ T781] loop4: detected capacity change from 0 to 2048 [ 32.662145][ T781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.673689][ T28] audit: type=1400 audit(1727969371.795:249): avc: denied { append } for pid=780 comm="syz.4.183" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.709896][ T28] audit: type=1400 audit(1727969371.825:250): avc: denied { setattr } for pid=780 comm="syz.4.183" path="/2/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.732833][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.732903][ T28] audit: type=1400 audit(1727969371.835:251): avc: denied { unmount } for pid=662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.748884][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.784300][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.800249][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 32.800407][ T662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz-executor: bg 0: bad block bitmap checksum [ 32.817495][ T662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Filesystem failed CRC [ 32.826779][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.844718][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.861222][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 0 [ 32.876355][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.892246][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 2048 [ 32.907244][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.923253][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 4096 [ 32.939327][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.954996][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 6144 [ 32.969725][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 32.970194][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 32.984340][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 33.001576][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 8192 [ 33.023056][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.024254][ T662] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 33.032360][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.050903][ T325] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 33.058388][ T60] usb 2-1: config 0 descriptor?? [ 33.067578][ T325] usb 3-1: USB disconnect, device number 4 [ 33.071415][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 10240 [ 33.088138][ T760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.095429][ T662] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /2/file0/lost+found: directory fails checksum at offset 12288 [ 33.111637][ T662] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 33.120945][ T60] hub 2-1:0.0: USB hub found [ 33.183691][ T794] loop3: detected capacity change from 0 to 512 [ 33.190123][ T794] EXT4-fs: Ignoring removed bh option [ 33.195891][ T794] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 33.205248][ T794] EXT4-fs (loop3): 1 truncate cleaned up [ 33.210962][ T794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.263159][ T662] EXT4-fs (loop4): unmounting filesystem. [ 33.274086][ T794] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 33.316668][ T296] EXT4-fs (loop3): unmounting filesystem. [ 33.331156][ T60] hub 2-1:0.0: 2 ports detected [ 33.398446][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.405528][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.413933][ T801] device bridge_slave_0 entered promiscuous mode [ 33.420857][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.430752][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.437811][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.445536][ T801] device bridge_slave_1 entered promiscuous mode [ 33.492824][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.499685][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.506814][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.513590][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.553513][ T809] incfs: ino conflict with backing FS 1 [ 33.565281][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.574091][ T809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 33.583288][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.591535][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.600595][ T809] incfs: ino conflict with backing FS 3 [ 33.613676][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.621060][ T809] incfs: ino conflict with backing FS 2 [ 33.621853][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.634145][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.641662][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.649774][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.656760][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.680336][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.700357][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.728571][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.735976][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.743564][ T810] device bridge_slave_0 entered promiscuous mode [ 33.751158][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.758088][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.765309][ T810] device bridge_slave_1 entered promiscuous mode [ 33.797517][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.811388][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.822162][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.832157][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.835573][ T801] device veth0_vlan entered promiscuous mode [ 33.847016][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.856620][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.864609][ T19] usb 1-1: config 0 descriptor?? [ 33.864906][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.876688][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.902152][ T551] device bridge_slave_1 left promiscuous mode [ 33.908193][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.915868][ T551] device bridge_slave_0 left promiscuous mode [ 33.921875][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.929712][ T551] device veth1_macvtap left promiscuous mode [ 33.935970][ T551] device veth0_vlan left promiscuous mode [ 33.999245][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.009963][ T801] device veth1_macvtap entered promiscuous mode [ 34.021513][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.032245][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.061050][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.069069][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.078349][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.085244][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.093253][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.102629][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.109474][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.123285][ T60] usb 2-1: USB disconnect, device number 3 [ 34.130592][ T810] device veth0_vlan entered promiscuous mode [ 34.139098][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.148351][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.156837][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.164805][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.172512][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.179818][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.188800][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.215225][ T810] device veth1_macvtap entered promiscuous mode [ 34.224453][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.239286][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.255323][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.331001][ T19] hid (null): bogus close delimiter [ 34.390535][ T833] syz.2.204[833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.390607][ T833] syz.2.204[833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.402932][ T833] syz.2.204[833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.417692][ T833] syz.2.204[833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.499916][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.517904][ T841] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.525214][ T841] device bridge_slave_0 entered promiscuous mode [ 34.532213][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.539366][ T841] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.547383][ T841] device bridge_slave_1 entered promiscuous mode [ 34.553662][ T19] usb 1-1: language id specifier not provided by device, defaulting to English [ 34.599114][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.606142][ T841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.613243][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.619994][ T841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.639319][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.647857][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.655730][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.681831][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.692287][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.699142][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.706698][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.715116][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.721990][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.729250][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.730926][ T315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.737408][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.760227][ T841] device veth0_vlan entered promiscuous mode [ 34.773902][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.782354][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.790215][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.798391][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.814770][ T841] device veth1_macvtap entered promiscuous mode [ 34.822246][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.834445][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.844336][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.001720][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.008817][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.017640][ T857] device bridge_slave_0 entered promiscuous mode [ 35.024288][ T19] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 35.032044][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.038972][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.046139][ T857] device bridge_slave_1 entered promiscuous mode [ 35.119749][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.126622][ T857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.130855][ T315] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 35.133742][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.145586][ T315] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 35.151541][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.162865][ T315] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 35.179010][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.194556][ T867] tipc: Started in network mode [ 35.199420][ T867] tipc: Node identity 1, cluster identity 4711 [ 35.205561][ T867] tipc: Node number set to 1 [ 35.205658][ T840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.217784][ T551] device bridge_slave_1 left promiscuous mode [ 35.224287][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.231478][ T60] usb 1-1: USB disconnect, device number 2 [ 35.237455][ T551] device bridge_slave_0 left promiscuous mode [ 35.243900][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.252182][ T551] device veth1_macvtap left promiscuous mode [ 35.258080][ T551] device veth0_vlan left promiscuous mode [ 35.341388][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.348920][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.356262][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.371046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.379707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.387767][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.394626][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.402120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.410205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.418240][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.425480][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.432973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.440925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.448695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.456386][ T315] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 35.463403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.471378][ T315] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8 [ 35.484586][ T315] usb 3-1: USB disconnect, device number 5 [ 35.488314][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.498798][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.510608][ T857] device veth0_vlan entered promiscuous mode [ 35.517397][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.525767][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.539876][ T857] device veth1_macvtap entered promiscuous mode [ 35.547207][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.554463][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.562131][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.570022][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.578157][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.590622][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.599016][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.612069][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.620094][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.820983][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.080907][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 36.176503][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 36.176516][ T28] audit: type=1400 audit(1727969375.295:261): avc: denied { read } for pid=881 comm="syz.2.219" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.204746][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.218972][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.228588][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.237429][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.090765][ C0] sched: RT throttling activated [ 38.091431][ T39] usb 5-1: config 0 descriptor?? [ 38.097165][ T28] audit: type=1400 audit(1727969375.295:262): avc: denied { open } for pid=881 comm="syz.2.219" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.156212][ T39] hub 5-1:0.0: USB hub found [ 38.171044][ T315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.188489][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.196792][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.204271][ T880] device bridge_slave_0 entered promiscuous mode [ 38.214387][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.221377][ T28] audit: type=1400 audit(1727969377.335:263): avc: denied { mount } for pid=889 comm="syz.0.221" name="/" dev="ramfs" ino=19196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.227670][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.250573][ T880] device bridge_slave_1 entered promiscuous mode [ 38.251478][ T28] audit: type=1400 audit(1727969377.375:264): avc: denied { unmount } for pid=663 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.287468][ T892] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 38.342434][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.349281][ T880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.356436][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.363338][ T880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.373141][ T551] device bridge_slave_1 left promiscuous mode [ 38.379096][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.391254][ T551] device bridge_slave_0 left promiscuous mode [ 38.397345][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.404914][ T551] device bridge_slave_1 left promiscuous mode [ 38.411145][ T39] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 38.411237][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.426403][ T551] device bridge_slave_0 left promiscuous mode [ 38.430816][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 38.432514][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.445453][ T551] device bridge_slave_1 left promiscuous mode [ 38.450877][ T516] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.453761][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.466923][ T551] device bridge_slave_0 left promiscuous mode [ 38.473088][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.481442][ T551] device veth1_macvtap left promiscuous mode [ 38.487333][ T551] device veth0_vlan left promiscuous mode [ 38.496803][ T551] device veth1_macvtap left promiscuous mode [ 38.502783][ T551] device veth0_vlan left promiscuous mode [ 38.508614][ T551] device veth1_macvtap left promiscuous mode [ 38.514620][ T551] device veth0_vlan left promiscuous mode [ 38.560911][ T315] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.571810][ T315] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.582905][ T315] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.700917][ T516] usb 3-1: Using ep0 maxpacket: 8 [ 38.711472][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 38.717265][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 38.743649][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.751275][ T39] usb 5-1: USB disconnect, device number 3 [ 38.757727][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.766370][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.773517][ T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.783450][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.791779][ T315] usb 2-1: Product: syz [ 38.793550][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.795783][ T315] usb 2-1: Manufacturer: syz [ 38.804401][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.808029][ T315] usb 2-1: SerialNumber: syz [ 38.814912][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.827524][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.835732][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.840888][ T516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.842598][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.853418][ T516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.860887][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.870066][ T516] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 38.878229][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.887186][ T516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.900870][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.906358][ T880] device veth0_vlan entered promiscuous mode [ 38.915782][ T516] usb 3-1: config 0 descriptor?? [ 38.921079][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.929678][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.938034][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.945525][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.954232][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.964487][ T880] device veth1_macvtap entered promiscuous mode [ 38.973695][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.983928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.270960][ T19] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 39.282097][ T19] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 39.293328][ T19] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 39.302420][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.311174][ T315] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 39.331296][ T904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.391480][ T516] kone 0003:1E7D:2CED.0005: collection stack underflow [ 39.398257][ T516] kone 0003:1E7D:2CED.0005: item 0 1 0 12 parsing failed [ 39.405217][ T516] kone 0003:1E7D:2CED.0005: parse failed [ 39.411220][ T516] kone: probe of 0003:1E7D:2CED.0005 failed with error -22 [ 39.651762][ T824] usb 3-1: USB disconnect, device number 6 [ 39.695570][ T912] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.702700][ T912] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.709831][ T912] device bridge_slave_0 entered promiscuous mode [ 39.717029][ T912] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.724260][ T912] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.732060][ T912] device bridge_slave_1 entered promiscuous mode [ 39.776449][ T912] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.783325][ T912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.790380][ T912] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.797210][ T912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.818223][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.825866][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.833130][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.851727][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.859736][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.866612][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.874252][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.882296][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.889409][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.896823][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.905439][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.920150][ T912] device veth0_vlan entered promiscuous mode [ 39.926561][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.935239][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.943324][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.950583][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.961543][ T298] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.963850][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.978269][ T551] device bridge_slave_1 left promiscuous mode [ 39.984339][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.991773][ T551] device bridge_slave_0 left promiscuous mode [ 39.997864][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.005835][ T551] device veth1_macvtap left promiscuous mode [ 40.011765][ T551] device veth0_vlan left promiscuous mode [ 40.084992][ T912] device veth1_macvtap entered promiscuous mode [ 40.094170][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.104321][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.170951][ T315] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 40.193805][ T315] usb 2-1: USB disconnect, device number 4 [ 40.240928][ T298] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 40.250912][ T19] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 40.258319][ T19] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 40.454652][ T19] usb 1-1: USB disconnect, device number 3 [ 40.801471][ T551] device bridge_slave_1 left promiscuous mode [ 40.817621][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.825251][ T551] device bridge_slave_0 left promiscuous mode [ 40.840888][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.849646][ T551] device veth1_macvtap left promiscuous mode [ 40.855833][ T551] device veth0_vlan left promiscuous mode [ 40.880868][ T298] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 40.893016][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.131211][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.138072][ T935] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.145545][ T935] device bridge_slave_0 entered promiscuous mode [ 41.173141][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.180117][ T935] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.190084][ T935] device bridge_slave_1 entered promiscuous mode [ 41.240337][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.247331][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.255286][ T947] device bridge_slave_0 entered promiscuous mode [ 41.263155][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.269995][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.277327][ T947] device bridge_slave_1 entered promiscuous mode [ 41.289674][ T551] tipc: Left network mode [ 41.370152][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.377268][ T948] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.384834][ T948] device bridge_slave_0 entered promiscuous mode [ 41.391105][ T298] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 41.397785][ T298] usb 5-1: No valid video chain found. [ 41.401706][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.409970][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.410245][ T948] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.424469][ T948] device bridge_slave_1 entered promiscuous mode [ 41.500000][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.507339][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.536058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.544280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.552434][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.559260][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.566586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.573842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.581270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.593225][ T298] usb 5-1: USB disconnect, device number 4 [ 41.599466][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.607697][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.615810][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.622666][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.651747][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.660029][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.668277][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.676863][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.683828][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.691064][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.699145][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.707249][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.714098][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.721328][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.729101][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.736989][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.744817][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.753135][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.765889][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.773505][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.783821][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.791377][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.799373][ T935] device veth0_vlan entered promiscuous mode [ 41.815328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.828298][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.836633][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.843929][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.859127][ T947] device veth0_vlan entered promiscuous mode [ 41.870041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.885628][ T935] device veth1_macvtap entered promiscuous mode [ 41.893434][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.917215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.925342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.933368][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.940370][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.947600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.950902][ T19] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 41.955643][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.964432][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.971205][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.971712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.979109][ T19] usb 3-1: Product: syz [ 41.987636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.994031][ T19] usb 3-1: Manufacturer: syz [ 41.998395][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.006176][ T19] usb 3-1: SerialNumber: syz [ 42.011431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.021398][ T19] usb 3-1: config 0 descriptor?? [ 42.023185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.045067][ T947] device veth1_macvtap entered promiscuous mode [ 42.061551][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.070571][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.086331][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.094794][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.121996][ T28] audit: type=1400 audit(1727969381.245:265): avc: denied { ioctl } for pid=956 comm="syz.4.245" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.127219][ T948] device veth0_vlan entered promiscuous mode [ 42.155880][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.166895][ T28] audit: type=1400 audit(1727969381.285:266): avc: denied { bind } for pid=958 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.189469][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.203010][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.210398][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.219101][ T551] device bridge_slave_1 left promiscuous mode [ 42.226505][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.241125][ T551] device bridge_slave_0 left promiscuous mode [ 42.250671][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.260236][ T551] device bridge_slave_1 left promiscuous mode [ 42.266506][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.274165][ T551] device bridge_slave_0 left promiscuous mode [ 42.280167][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.288688][ T551] device veth1_macvtap left promiscuous mode [ 42.295447][ T551] device veth0_vlan left promiscuous mode [ 42.301380][ T551] device veth1_macvtap left promiscuous mode [ 42.307510][ T551] device veth0_vlan left promiscuous mode [ 42.312325][ T19] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 42.323661][ T19] usb 3-1: USB disconnect, device number 7 [ 42.466360][ T948] device veth1_macvtap entered promiscuous mode [ 42.473901][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.482467][ T969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 42.507542][ T976] loop4: detected capacity change from 0 to 1024 [ 42.522737][ T976] EXT4-fs: Ignoring removed nobh option [ 42.522846][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.536344][ T28] audit: type=1400 audit(1727969381.645:267): avc: denied { getopt } for pid=977 comm="syz.1.251" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.536614][ T976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.559135][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.572359][ T976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.576700][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.593221][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.621568][ T976] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 42.632876][ T984] loop1: detected capacity change from 0 to 2048 [ 42.636406][ T976] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.636406][ T976] [ 42.650190][ T976] EXT4-fs (loop4): Total free blocks count 0 [ 42.659483][ T976] EXT4-fs (loop4): Free/Dirty block details [ 42.661972][ T984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.667231][ T976] EXT4-fs (loop4): free_blocks=0 [ 42.676539][ T984] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 42.680898][ T976] EXT4-fs (loop4): dirty_blocks=0 [ 42.696022][ T976] EXT4-fs (loop4): Block reservation details [ 42.708637][ T976] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 42.717335][ T28] audit: type=1400 audit(1727969381.835:268): avc: denied { ioctl } for pid=983 comm="syz.1.252" path="/4/file0/file0/file0" dev="loop1" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.717387][ T984] fs-verity: sha512 using implementation "sha512-avx2" [ 42.772457][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.779317][ T970] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.793058][ T984] EXT4-fs (loop1): unmounting filesystem. [ 42.801578][ T970] device bridge_slave_0 entered promiscuous mode [ 42.808447][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.833422][ T801] EXT4-fs (loop4): unmounting filesystem. [ 42.847706][ T970] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.871220][ T1000] loop4: detected capacity change from 0 to 512 [ 42.879321][ T970] device bridge_slave_1 entered promiscuous mode [ 42.908324][ T1000] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.254: bad orphan inode 17 [ 42.923825][ T992] loop0: detected capacity change from 0 to 40427 [ 42.926119][ T1000] ext4_test_bit(bit=16, block=4) = 1 [ 42.941730][ T1000] is_bad_inode(inode)=0 [ 42.949360][ T992] F2FS-fs (loop0): fault_injection options not supported [ 42.949935][ T1000] NEXT_ORPHAN(inode)=0 [ 42.956475][ T992] F2FS-fs (loop0): Image doesn't support compression [ 42.967277][ T1000] max_ino=32 [ 42.970293][ T1000] i_nlink=1 [ 42.973566][ T1000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.982040][ T992] F2FS-fs (loop0): invalid crc value [ 43.008466][ T992] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.048840][ T992] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.049140][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.063016][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.070117][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.076925][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.085452][ T1000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.254: bg 0: block 7: invalid block bitmap [ 43.104573][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.112373][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.124194][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.132023][ T948] bio_check_eod: 59 callbacks suppressed [ 43.132038][ T948] syz-executor: attempt to access beyond end of device [ 43.132038][ T948] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 43.161873][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.169890][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.176784][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.185470][ T1015] loop2: detected capacity change from 0 to 512 [ 43.206784][ T801] EXT4-fs (loop4): unmounting filesystem. [ 43.212711][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.220517][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.234600][ T1015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.263173][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.265108][ T1015] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 43.273658][ T1021] loop4: detected capacity change from 0 to 512 [ 43.305510][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.316647][ T970] device veth0_vlan entered promiscuous mode [ 43.325126][ T1023] syz.1.265[1023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.325251][ T1023] syz.1.265[1023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.341713][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.342873][ T1025] loop0: detected capacity change from 0 to 2048 [ 43.353946][ T1015] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #18: block 44: comm syz.2.262: lblock 0 mapped to illegal pblock 44 (length 4) [ 43.366591][ T1021] EXT4-fs: Ignoring removed i_version option [ 43.382166][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.387360][ T1021] EXT4-fs: Ignoring removed nobh option [ 43.395490][ T28] audit: type=1400 audit(1727969382.525:269): avc: denied { write } for pid=1022 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.399742][ T1021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.424715][ T1015] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.262: Invalid inode table block 0 in block_group 0 [ 43.431858][ T1021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.449469][ T1030] loop1: detected capacity change from 0 to 512 [ 43.455957][ T1015] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.460061][ T1025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.469152][ T1015] EXT4-fs error (device loop2): ext4_alloc_file_blocks:4506: inode #18: comm syz.2.262: mark_inode_dirty error [ 43.490260][ T1021] EXT4-fs (loop4): 1 truncate cleaned up [ 43.495353][ T970] device veth1_macvtap entered promiscuous mode [ 43.500805][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.502401][ T1030] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.527119][ T1030] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.266: inline data xattr refers to an external xattr inode [ 43.548282][ T295] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 43.564946][ T1025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.573441][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.581904][ T1030] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.266: couldn't read orphan inode 12 (err -117) [ 43.607441][ T1030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.607455][ T1025] EXT4-fs (loop0): Remounting filesystem read-only [ 43.620936][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.632537][ T801] EXT4-fs (loop4): unmounting filesystem. [ 43.638897][ T43] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 43.652393][ T948] EXT4-fs (loop0): unmounting filesystem. [ 43.658333][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.668194][ T295] EXT4-fs (loop2): unmounting filesystem. [ 43.674121][ T1034] loop4: detected capacity change from 0 to 512 [ 43.680686][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.689859][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.710534][ T1034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.719544][ T295] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 43.722124][ T1034] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 45.102899][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 45.112292][ T28] audit: type=1400 audit(1727969384.225:270): avc: denied { mounton } for pid=1033 comm="syz.4.268" path="/20/file0/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.134901][ T28] audit: type=1400 audit(1727969384.225:271): avc: denied { setattr } for pid=1033 comm="syz.4.268" name="work" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.135038][ T295] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 45.157032][ T28] audit: type=1400 audit(1727969384.225:272): avc: denied { remove_name } for pid=1033 comm="syz.4.268" name="#d" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.172147][ T295] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 45.189691][ T28] audit: type=1400 audit(1727969384.245:273): avc: denied { append } for pid=1033 comm="syz.4.268" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.226750][ T947] EXT4-fs (loop1): unmounting filesystem. [ 45.228499][ T28] audit: type=1400 audit(1727969384.245:274): avc: denied { open } for pid=1033 comm="syz.4.268" path="/20/file0/bus/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.271062][ T801] EXT4-fs (loop4): unmounting filesystem. [ 45.370831][ T297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.522174][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.529031][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.536701][ T1056] device bridge_slave_0 entered promiscuous mode [ 45.546028][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.552948][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.560112][ T1056] device bridge_slave_1 entered promiscuous mode [ 45.579608][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.586554][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 45.590178][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.601285][ T1057] device bridge_slave_0 entered promiscuous mode [ 45.611021][ T297] usb 1-1: Using ep0 maxpacket: 8 [ 45.619005][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.625976][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.633314][ T1057] device bridge_slave_1 entered promiscuous mode [ 45.693580][ T551] device bridge_slave_1 left promiscuous mode [ 45.699718][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.707082][ T551] device bridge_slave_0 left promiscuous mode [ 45.713209][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.720886][ T551] device veth1_macvtap left promiscuous mode [ 45.726714][ T551] device veth0_vlan left promiscuous mode [ 45.732605][ T297] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 45.741145][ T297] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 45.751102][ T297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.850797][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 45.851925][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.862713][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.869778][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.876607][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.887838][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.894718][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.901783][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.908578][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.930992][ T297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.939861][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.954572][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.961231][ T297] usb 1-1: Product: syz [ 45.962152][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.965593][ T297] usb 1-1: Manufacturer: syz [ 45.965612][ T297] usb 1-1: SerialNumber: syz [ 45.981630][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.988896][ T516] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.995962][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.007106][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.014960][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.024877][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.032721][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.045771][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 46.055010][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.063870][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.071925][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.081057][ T24] usb 2-1: config 0 descriptor?? [ 46.088910][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.097094][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.103966][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.111682][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.119625][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.126576][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.134571][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.150901][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.159059][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.171280][ T1057] device veth0_vlan entered promiscuous mode [ 46.179920][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.189528][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.197518][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.218666][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.227901][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.237797][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.245724][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.253354][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.261237][ T1057] device veth1_macvtap entered promiscuous mode [ 46.268491][ T1056] device veth0_vlan entered promiscuous mode [ 46.285305][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.291208][ T297] usb 1-1: 0:2 : does not exist [ 46.293686][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.299603][ T297] usb 1-1: USB disconnect, device number 4 [ 46.306634][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.320980][ T1056] device veth1_macvtap entered promiscuous mode [ 46.353654][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.361722][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.388667][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.403148][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.483987][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.491754][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.498942][ T1073] device bridge_slave_0 entered promiscuous mode [ 46.508418][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.515418][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.523225][ T1073] device bridge_slave_1 entered promiscuous mode [ 46.570416][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.577288][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.581663][ T24] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 46.584427][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.592268][ T24] koneplus 0003:1E7D:2E22.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 46.598107][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.631500][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.639005][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.646250][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.661658][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.669611][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.676471][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.683627][ T315] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.691246][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.699370][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.706225][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.720621][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.728964][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.744912][ T1073] device veth0_vlan entered promiscuous mode [ 46.751362][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.759049][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.766743][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.774636][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.787153][ T1073] device veth1_macvtap entered promiscuous mode [ 46.795114][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.811648][ T24] koneplus 0003:1E7D:2E22.0006: couldn't init struct koneplus_device [ 46.819697][ T24] koneplus 0003:1E7D:2E22.0006: couldn't install mouse [ 46.826656][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.836165][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.844931][ T24] koneplus: probe of 0003:1E7D:2E22.0006 failed with error -5 [ 46.882316][ T551] device bridge_slave_1 left promiscuous mode [ 46.888317][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.895900][ T551] device bridge_slave_0 left promiscuous mode [ 46.901990][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.909665][ T551] device bridge_slave_1 left promiscuous mode [ 46.915801][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.923171][ T551] device bridge_slave_0 left promiscuous mode [ 46.929126][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.951668][ T551] device veth1_macvtap left promiscuous mode [ 46.958662][ T551] device veth0_vlan left promiscuous mode [ 46.965807][ T551] device veth1_macvtap left promiscuous mode [ 46.978759][ T551] device veth0_vlan left promiscuous mode [ 47.027710][ T24] usb 2-1: USB disconnect, device number 5 [ 47.101189][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.113878][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.123697][ T315] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 47.132778][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.141367][ T315] usb 3-1: config 0 descriptor?? [ 47.413072][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 47.413087][ T28] audit: type=1400 audit(1727969386.535:283): avc: denied { write } for pid=1090 comm="syz.4.284" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.456994][ T28] audit: type=1400 audit(1727969386.575:284): avc: denied { execute } for pid=1093 comm="syz.4.285" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 47.499540][ T1099] loop4: detected capacity change from 0 to 512 [ 47.519509][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.526950][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.534669][ T1095] device bridge_slave_0 entered promiscuous mode [ 47.541863][ T1099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.541908][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.550705][ T1099] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 47.561067][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.574969][ T1095] device bridge_slave_1 entered promiscuous mode [ 47.595109][ T801] EXT4-fs (loop4): unmounting filesystem. [ 47.612410][ T315] hid-multitouch 0003:0EEF:72D0.0007: unknown main item tag 0x0 [ 47.620037][ T315] hid-multitouch 0003:0EEF:72D0.0007: unknown main item tag 0x0 [ 47.627990][ T315] hid-multitouch 0003:0EEF:72D0.0007: unknown main item tag 0x0 [ 47.635696][ T315] hid-multitouch 0003:0EEF:72D0.0007: unknown main item tag 0x0 [ 47.643695][ T315] hid-multitouch 0003:0EEF:72D0.0007: unknown main item tag 0x0 [ 47.652111][ T315] hid-multitouch 0003:0EEF:72D0.0007: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 47.710566][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.717443][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.724534][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.731313][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.746570][ T1115] loop4: detected capacity change from 0 to 1024 [ 47.753302][ T1115] journal_path: Lookup failure for './file0' [ 47.759230][ T1115] EXT4-fs: error: could not find journal device path [ 47.769858][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.777638][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.785233][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.802830][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.811124][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.817961][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.829790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.838051][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.838432][ T1117] loop4: detected capacity change from 0 to 1024 [ 47.844935][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.846182][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.851488][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 47.858516][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.884701][ T19] usb 3-1: USB disconnect, device number 8 [ 47.895710][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.906742][ T1095] device veth0_vlan entered promiscuous mode [ 47.913253][ T1117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.923272][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.931508][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.938803][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.947749][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 47.962136][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 47.965981][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.980491][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 47.992426][ T1095] device veth1_macvtap entered promiscuous mode [ 47.998910][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.003003][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.010997][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.028089][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.038698][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.049377][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.061185][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.072464][ T801] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.073062][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.173518][ T801] EXT4-fs (loop4): unmounting filesystem. [ 48.240865][ T39] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 48.261689][ T39] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 48.261858][ T551] device bridge_slave_1 left promiscuous mode [ 48.282926][ T39] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.300845][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.307865][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.320975][ T551] device bridge_slave_0 left promiscuous mode [ 48.326936][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.351482][ T551] device bridge_slave_1 left promiscuous mode [ 48.357563][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.364791][ T1107] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 48.372482][ T551] device bridge_slave_0 left promiscuous mode [ 48.378472][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.386284][ T551] device veth1_macvtap left promiscuous mode [ 48.392514][ T551] device veth0_vlan left promiscuous mode [ 48.398527][ T551] device veth1_macvtap left promiscuous mode [ 48.404414][ T551] device veth0_vlan left promiscuous mode [ 48.583955][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.591113][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.598418][ T1128] device bridge_slave_0 entered promiscuous mode [ 48.613859][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.620743][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.629050][ T1128] device bridge_slave_1 entered promiscuous mode [ 48.648528][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.655504][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.662968][ T1131] device bridge_slave_0 entered promiscuous mode [ 48.669784][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.676829][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.684322][ T1131] device bridge_slave_1 entered promiscuous mode [ 48.716585][ T1151] loop0: detected capacity change from 0 to 128 [ 48.746479][ T1151] syz.0.304: attempt to access beyond end of device [ 48.746479][ T1151] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 48.787672][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.794538][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.802084][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.808913][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.822231][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.829097][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.836230][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.843008][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.874596][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.881899][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.882289][ T43] kworker/u4:2: attempt to access beyond end of device [ 48.882289][ T43] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 48.888981][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.910789][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.918134][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.931235][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.938845][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.947124][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.954073][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.971713][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.979805][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.986812][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.994105][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.002529][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.009385][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.016722][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.025064][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.031979][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.039087][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.052627][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.063260][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.090211][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.098796][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.106702][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.114128][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.122184][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.132024][ T1128] device veth0_vlan entered promiscuous mode [ 49.142364][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.154297][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.162258][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.169694][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.178065][ T1131] device veth0_vlan entered promiscuous mode [ 49.190412][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.214521][ T1128] device veth1_macvtap entered promiscuous mode [ 49.225525][ T1131] device veth1_macvtap entered promiscuous mode [ 49.243255][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.252252][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.260716][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.268551][ T28] audit: type=1400 audit(1727969388.375:285): avc: denied { map } for pid=1165 comm="syz.2.310" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.268996][ T28] audit: type=1400 audit(1727969388.395:286): avc: denied { execute } for pid=1165 comm="syz.2.310" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.331626][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.339927][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.397162][ T1178] loop2: detected capacity change from 0 to 512 [ 49.430873][ T1180] loop0: detected capacity change from 0 to 1024 [ 49.437558][ T1180] EXT4-fs: Ignoring removed orlov option [ 49.437694][ T1178] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 49.443503][ T1180] EXT4-fs: Ignoring removed nobh option [ 49.456166][ T1178] System zones: 0-2, 18-18, 34-35 [ 49.462561][ T1178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.471627][ T1178] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 49.482831][ T1180] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.490656][ T1178] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.313: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 49.524719][ T948] EXT4-fs (loop0): unmounting filesystem. [ 49.535223][ T28] audit: type=1400 audit(1727969388.655:287): avc: denied { rename } for pid=1176 comm="syz.2.313" name="file1" dev="overlay" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.542803][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 49.578684][ T28] audit: type=1400 audit(1727969388.655:288): avc: denied { reparent } for pid=1176 comm="syz.2.313" name="#13" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.582283][ T39] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 49.607799][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 49.612876][ T39] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input10 [ 49.629715][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 49.641245][ T39] usb 2-1: USB disconnect, device number 6 [ 49.661184][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 49.665145][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 49.686053][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 49.714688][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 49.738421][ T1056] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 49.758988][ T1056] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 49.843938][ T1056] EXT4-fs (loop2): unmounting filesystem. [ 50.028542][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.035703][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.044043][ T1191] device bridge_slave_0 entered promiscuous mode [ 50.052016][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.058891][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.066219][ T1191] device bridge_slave_1 entered promiscuous mode [ 50.114237][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.121408][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.129256][ T1193] device bridge_slave_0 entered promiscuous mode [ 50.149118][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.156003][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.163219][ T1193] device bridge_slave_1 entered promiscuous mode [ 50.172839][ T315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.191614][ T1208] loop1: detected capacity change from 0 to 128 [ 50.202380][ T551] device bridge_slave_1 left promiscuous mode [ 50.208368][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.216198][ T551] device bridge_slave_0 left promiscuous mode [ 50.222333][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.224137][ T1208] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.237665][ T1208] FAT-fs (loop1): Filesystem has been set read-only [ 50.244211][ T1208] syz.1.322: attempt to access beyond end of device [ 50.244211][ T1208] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 50.257875][ T1208] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.258018][ T551] device bridge_slave_1 left promiscuous mode [ 50.266097][ T1208] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.279858][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.279955][ T1208] syz.1.322: attempt to access beyond end of device [ 50.279955][ T1208] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.299791][ T1208] syz.1.322: attempt to access beyond end of device [ 50.299791][ T1208] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.300262][ T551] device bridge_slave_0 left promiscuous mode [ 50.318706][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.326558][ T551] device veth1_macvtap left promiscuous mode [ 50.332420][ T551] device veth0_vlan left promiscuous mode [ 50.338164][ T551] device veth1_macvtap left promiscuous mode [ 50.344014][ T551] device veth0_vlan left promiscuous mode [ 50.370939][ T39] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 50.528084][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.534975][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.542178][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.549123][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.587222][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.594198][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.601310][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.608145][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.616061][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.627196][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.636828][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.643857][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 50.649281][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.657462][ T315] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 50.660866][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.666450][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.680809][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.691123][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.698264][ T315] usb 5-1: config 0 descriptor?? [ 50.703161][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.719237][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.727481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.735484][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.742335][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.760632][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.769244][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.779791][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.787958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.790890][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.806414][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.816254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.825069][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.833479][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.840350][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.847548][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.855837][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.863851][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.870865][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.878122][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.886043][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.893811][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.901690][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.914760][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.922473][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 50.927604][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.940367][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.948377][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 50.948685][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.957457][ T39] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 50.969667][ T1193] device veth0_vlan entered promiscuous mode [ 50.979669][ T39] usb 1-1: Product: syz [ 50.984614][ T39] usb 1-1: Manufacturer: syz [ 50.984775][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.989595][ T39] usb 1-1: config 0 descriptor?? [ 50.996936][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.013507][ T1193] device veth1_macvtap entered promiscuous mode [ 51.023956][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.031231][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.038416][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.046234][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.057550][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.065673][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.076054][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.084420][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.092682][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.100727][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.112446][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.121340][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.131121][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.139404][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.150540][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.159868][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.167893][ T1191] device veth0_vlan entered promiscuous mode [ 51.183473][ T1191] device veth1_macvtap entered promiscuous mode [ 51.190202][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.198283][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.206351][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.218400][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.226336][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.231988][ T315] uclogic 0003:5543:0042.0008: item fetching failed at offset 0/3 [ 51.236079][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.243370][ T315] uclogic 0003:5543:0042.0008: parse failed [ 51.251860][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.265594][ T6] usb 2-1: Product: syz [ 51.269650][ T6] usb 2-1: Manufacturer: syz [ 51.274356][ T6] usb 2-1: SerialNumber: syz [ 51.274423][ T315] uclogic: probe of 0003:5543:0042.0008 failed with error -22 [ 51.298855][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.307632][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.467734][ T315] usb 5-1: USB disconnect, device number 5 [ 51.501643][ T39] kovaplus 0003:1E7D:2D50.0009: item fetching failed at offset 5/7 [ 51.509485][ T39] kovaplus 0003:1E7D:2D50.0009: parse failed [ 51.515421][ T39] kovaplus: probe of 0003:1E7D:2D50.0009 failed with error -22 [ 51.719589][ T39] usb 1-1: USB disconnect, device number 5 [ 51.811890][ T551] device bridge_slave_1 left promiscuous mode [ 51.817846][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.825214][ T551] device bridge_slave_0 left promiscuous mode [ 51.831338][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.838768][ T551] device bridge_slave_1 left promiscuous mode [ 51.844765][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.852044][ T551] device bridge_slave_0 left promiscuous mode [ 51.857953][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.865776][ T551] device veth1_macvtap left promiscuous mode [ 51.871691][ T551] device veth0_vlan left promiscuous mode [ 51.877310][ T551] device veth1_macvtap left promiscuous mode [ 51.883164][ T551] device veth0_vlan left promiscuous mode [ 52.089775][ T1225] xt_hashlimit: size too large, truncated to 1048576 [ 52.134379][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.141750][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.149026][ T1226] device bridge_slave_0 entered promiscuous mode [ 52.155898][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.162797][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.170009][ T1226] device bridge_slave_1 entered promiscuous mode [ 52.331003][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.337865][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.345018][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.351871][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.410885][ T6] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 52.420304][ T6] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 52.428654][ T1242] device erspan0 entered promiscuous mode [ 52.434913][ T1242] device lo entered promiscuous mode [ 52.443141][ T1242] device macsec0 entered promiscuous mode [ 52.450272][ T1241] device macsec0 left promiscuous mode [ 52.456429][ T1241] device lo left promiscuous mode [ 52.461627][ T1241] device erspan0 left promiscuous mode [ 52.478332][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.486607][ T1248] loop2: detected capacity change from 0 to 128 [ 52.486731][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.500811][ T1237] device bridge_slave_0 entered promiscuous mode [ 52.509991][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.516973][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.525151][ T1237] device bridge_slave_1 entered promiscuous mode [ 52.552172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.559881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.560282][ T1248] syz.2.337: attempt to access beyond end of device [ 52.560282][ T1248] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 52.581186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.609013][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.620400][ T1251] loop0: detected capacity change from 0 to 1024 [ 52.629718][ T1251] JBD2: no valid journal superblock found [ 52.636595][ T1251] EXT4-fs (loop0): error loading journal [ 52.647703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.684532][ T1251] futex_wake_op: syz.0.338 tries to shift op by 35; fix this program [ 52.711158][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.719526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.738123][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.746705][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.754935][ T1226] device veth0_vlan entered promiscuous mode [ 52.773634][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.781282][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.793129][ T1226] device veth1_macvtap entered promiscuous mode [ 52.800926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.808945][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.826721][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.842709][ T6] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 52.866511][ T1259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1259 comm=syz.2.342 [ 52.868953][ T6] usb 2-1: USB disconnect, device number 7 [ 52.899866][ T6] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 52.911077][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.919192][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.928593][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.936277][ T1263] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.943957][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.951955][ T28] audit: type=1326 audit(1727969392.065:289): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1262 comm="syz.2.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb1c37dff9 code=0x0 [ 52.975050][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.984171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.991661][ T19] ================================================================== [ 52.999669][ T19] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 53.006686][ T19] Read of size 8 at addr ffff88811ecdece0 by task kworker/0:1/19 [ 53.014241][ T19] [ 53.016399][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.99-syzkaller-00101-g6f2e0215d71c #0 [ 53.026038][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.035947][ T19] Workqueue: 0x0 (events) [ 53.040183][ T19] Call Trace: [ 53.043398][ T19] [ 53.046169][ T19] dump_stack_lvl+0x151/0x1b7 [ 53.050690][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 53.055976][ T19] ? _printk+0xd1/0x111 [ 53.059976][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 53.064959][ T19] print_report+0x158/0x4e0 [ 53.069261][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 53.074310][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 53.080381][ T19] ? worker_thread+0xa36/0x1260 [ 53.085066][ T19] kasan_report+0x13c/0x170 [ 53.089407][ T19] ? worker_thread+0xa36/0x1260 [ 53.094096][ T19] __asan_report_load8_noabort+0x14/0x20 [ 53.099570][ T19] worker_thread+0xa36/0x1260 [ 53.104074][ T19] kthread+0x26d/0x300 [ 53.107984][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 53.112836][ T19] ? kthread_blkcg+0xd0/0xd0 [ 53.117283][ T19] ret_from_fork+0x1f/0x30 [ 53.121523][ T19] [ 53.124386][ T19] [ 53.126574][ T19] Allocated by task 6: [ 53.130460][ T19] kasan_set_track+0x4b/0x70 [ 53.134912][ T19] kasan_save_alloc_info+0x1f/0x30 [ 53.139830][ T19] __kasan_kmalloc+0x9c/0xb0 [ 53.144255][ T19] __kmalloc_node+0xb4/0x1e0 [ 53.148736][ T19] kvmalloc_node+0x221/0x640 [ 53.153117][ T19] alloc_netdev_mqs+0x8c/0xf90 [ 53.157709][ T19] alloc_etherdev_mqs+0x36/0x40 [ 53.162393][ T19] usbnet_probe+0x207/0x27c0 [ 53.166821][ T19] usb_probe_interface+0x5b6/0xa90 [ 53.171774][ T19] really_probe+0x2b8/0x920 [ 53.176112][ T19] __driver_probe_device+0x1a0/0x310 [ 53.181375][ T19] driver_probe_device+0x54/0x3d0 [ 53.186238][ T19] __device_attach_driver+0x2e3/0x490 [ 53.191552][ T19] bus_for_each_drv+0x183/0x200 [ 53.196236][ T19] __device_attach+0x312/0x510 [ 53.200836][ T19] device_initial_probe+0x1a/0x20 [ 53.205696][ T19] bus_probe_device+0xbe/0x1e0 [ 53.210402][ T19] device_add+0xb60/0xf10 [ 53.214657][ T19] usb_set_configuration+0x190f/0x1e80 [ 53.219946][ T19] usb_generic_driver_probe+0x8b/0x150 [ 53.225237][ T19] usb_probe_device+0x144/0x260 [ 53.229925][ T19] really_probe+0x2b8/0x920 [ 53.234269][ T19] __driver_probe_device+0x1a0/0x310 [ 53.239488][ T19] driver_probe_device+0x54/0x3d0 [ 53.244350][ T19] __device_attach_driver+0x2e3/0x490 [ 53.249556][ T19] bus_for_each_drv+0x183/0x200 [ 53.254250][ T19] __device_attach+0x312/0x510 [ 53.258847][ T19] device_initial_probe+0x1a/0x20 [ 53.263794][ T19] bus_probe_device+0xbe/0x1e0 [ 53.268391][ T19] device_add+0xb60/0xf10 [ 53.272558][ T19] usb_new_device+0xf2f/0x1820 [ 53.277157][ T19] hub_event+0x2db1/0x4830 [ 53.281418][ T19] process_one_work+0x73d/0xcb0 [ 53.286095][ T19] worker_thread+0xa60/0x1260 [ 53.290609][ T19] kthread+0x26d/0x300 [ 53.294515][ T19] ret_from_fork+0x1f/0x30 [ 53.298769][ T19] [ 53.300941][ T19] Freed by task 6: [ 53.304495][ T19] kasan_set_track+0x4b/0x70 [ 53.308924][ T19] kasan_save_free_info+0x2b/0x40 [ 53.314042][ T19] ____kasan_slab_free+0x131/0x180 [ 53.319009][ T19] __kasan_slab_free+0x11/0x20 [ 53.323610][ T19] __kmem_cache_free+0x218/0x3b0 [ 53.328370][ T19] kfree+0x7a/0xf0 [ 53.331924][ T19] kvfree+0x35/0x40 [ 53.335568][ T19] netdev_freemem+0x3f/0x60 [ 53.339916][ T19] netdev_release+0x7f/0xb0 [ 53.344250][ T19] device_release+0x95/0x1c0 [ 53.348673][ T19] kobject_put+0x178/0x260 [ 53.352926][ T19] put_device+0x1f/0x30 [ 53.356918][ T19] free_netdev+0x393/0x480 [ 53.361177][ T19] usbnet_disconnect+0x245/0x390 [ 53.365945][ T19] usb_unbind_interface+0x1fa/0x8c0 [ 53.371088][ T19] device_release_driver_internal+0x53e/0x870 [ 53.376988][ T19] device_release_driver+0x19/0x20 [ 53.381932][ T19] bus_remove_device+0x2fa/0x360 [ 53.386701][ T19] device_del+0x663/0xe90 [ 53.390866][ T19] usb_disable_device+0x380/0x720 [ 53.395727][ T19] usb_disconnect+0x32a/0x890 [ 53.400256][ T19] hub_event+0x1ed8/0x4830 [ 53.404495][ T19] process_one_work+0x73d/0xcb0 [ 53.409182][ T19] worker_thread+0xd71/0x1260 [ 53.413692][ T19] kthread+0x26d/0x300 [ 53.417649][ T19] ret_from_fork+0x1f/0x30 [ 53.421852][ T19] [ 53.424158][ T19] Last potentially related work creation: [ 53.429698][ T19] kasan_save_stack+0x3b/0x60 [ 53.434210][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 53.439504][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.445145][ T19] insert_work+0x56/0x310 [ 53.449312][ T19] __queue_work+0x9b6/0xd70 [ 53.453652][ T19] queue_work_on+0x105/0x170 [ 53.458083][ T19] usbnet_link_change+0xeb/0x100 [ 53.462854][ T19] usbnet_probe+0x1dbe/0x27c0 [ 53.467371][ T19] usb_probe_interface+0x5b6/0xa90 [ 53.472314][ T19] really_probe+0x2b8/0x920 [ 53.476654][ T19] __driver_probe_device+0x1a0/0x310 [ 53.481771][ T19] driver_probe_device+0x54/0x3d0 [ 53.486632][ T19] __device_attach_driver+0x2e3/0x490 [ 53.492221][ T19] bus_for_each_drv+0x183/0x200 [ 53.496897][ T19] __device_attach+0x312/0x510 [ 53.501496][ T19] device_initial_probe+0x1a/0x20 [ 53.506357][ T19] bus_probe_device+0xbe/0x1e0 [ 53.511053][ T19] device_add+0xb60/0xf10 [ 53.515230][ T19] usb_set_configuration+0x190f/0x1e80 [ 53.520517][ T19] usb_generic_driver_probe+0x8b/0x150 [ 53.525825][ T19] usb_probe_device+0x144/0x260 [ 53.530493][ T19] really_probe+0x2b8/0x920 [ 53.534830][ T19] __driver_probe_device+0x1a0/0x310 [ 53.539951][ T19] driver_probe_device+0x54/0x3d0 [ 53.544813][ T19] __device_attach_driver+0x2e3/0x490 [ 53.550019][ T19] bus_for_each_drv+0x183/0x200 [ 53.554705][ T19] __device_attach+0x312/0x510 [ 53.559313][ T19] device_initial_probe+0x1a/0x20 [ 53.564166][ T19] bus_probe_device+0xbe/0x1e0 [ 53.568770][ T19] device_add+0xb60/0xf10 [ 53.572934][ T19] usb_new_device+0xf2f/0x1820 [ 53.577534][ T19] hub_event+0x2db1/0x4830 [ 53.581887][ T19] process_one_work+0x73d/0xcb0 [ 53.586825][ T19] worker_thread+0xa60/0x1260 [ 53.591508][ T19] kthread+0x26d/0x300 [ 53.595541][ T19] ret_from_fork+0x1f/0x30 [ 53.599870][ T19] [ 53.602121][ T19] The buggy address belongs to the object at ffff88811ecde000 [ 53.602121][ T19] which belongs to the cache kmalloc-4k of size 4096 [ 53.616019][ T19] The buggy address is located 3296 bytes inside of [ 53.616019][ T19] 4096-byte region [ffff88811ecde000, ffff88811ecdf000) [ 53.629383][ T19] [ 53.631544][ T19] The buggy address belongs to the physical page: [ 53.637970][ T19] page:ffffea00047b3600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ecd8 [ 53.647970][ T19] head:ffffea00047b3600 order:3 compound_mapcount:0 compound_pincount:0 [ 53.657560][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 53.663461][ T19] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 53.672157][ T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 53.681197][ T19] page dumped because: kasan: bad access detected [ 53.687515][ T19] page_owner tracks the page as allocated [ 53.693406][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 912, tgid 912 (syz-executor), ts 39758714939, free_ts 39302513393 [ 53.715792][ T19] post_alloc_hook+0x213/0x220 [ 53.720390][ T19] prep_new_page+0x1b/0x110 [ 53.724727][ T19] get_page_from_freelist+0x27ea/0x2870 [ 53.730108][ T19] __alloc_pages+0x3a1/0x780 [ 53.734574][ T19] alloc_slab_page+0x6c/0xf0 [ 53.738962][ T19] new_slab+0x90/0x3e0 [ 53.742868][ T19] ___slab_alloc+0x6f9/0xb80 [ 53.747297][ T19] __slab_alloc+0x5d/0xa0 [ 53.751468][ T19] __kmem_cache_alloc_node+0x1af/0x250 [ 53.756770][ T19] kmalloc_trace+0x2a/0xa0 [ 53.761040][ T19] kobject_uevent_env+0x262/0x720 [ 53.765974][ T19] kobject_uevent+0x1f/0x30 [ 53.770302][ T19] netdev_queue_update_kobjects+0x235/0x4a0 [ 53.776024][ T19] netdev_register_kobject+0x270/0x320 [ 53.781316][ T19] register_netdevice+0xe43/0x1490 [ 53.786263][ T19] veth_newlink+0x7fc/0xc70 [ 53.790604][ T19] page last free stack trace: [ 53.795244][ T19] free_unref_page_prepare+0x83d/0x850 [ 53.800534][ T19] free_unref_page+0xb2/0x5c0 [ 53.805044][ T19] __free_pages+0x61/0xf0 [ 53.809207][ T19] free_large_kmalloc+0xa9/0xe0 [ 53.813902][ T19] kfree+0x93/0xf0 [ 53.817454][ T19] kvfree+0x35/0x40 [ 53.821098][ T19] wg_destruct+0x2c0/0x300 [ 53.825353][ T19] netdev_run_todo+0xb43/0xd00 [ 53.829954][ T19] rtnl_unlock+0xe/0x10 [ 53.834037][ T19] default_device_exit_batch+0x97a/0xa00 [ 53.839505][ T19] cleanup_net+0x6c9/0xbf0 [ 53.843909][ T19] process_one_work+0x73d/0xcb0 [ 53.848589][ T19] worker_thread+0xa60/0x1260 [ 53.853189][ T19] kthread+0x26d/0x300 [ 53.857092][ T19] ret_from_fork+0x1f/0x30 [ 53.861347][ T19] [ 53.863515][ T19] Memory state around the buggy address: [ 53.868994][ T19] ffff88811ecdeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.876886][ T19] ffff88811ecdec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.884781][ T19] >ffff88811ecdec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.892852][ T19] ^ [ 53.899901][ T19] ffff88811ecded00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.907916][ T19] ffff88811ecded80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.915796][ T19] ================================================================== [ 53.923694][ T19] Disabling lock debugging due to kernel taint [ 53.960603][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.968778][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.976980][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.983850][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.991003][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.004329][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.012997][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.021097][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.028114][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.041321][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.049416][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.064095][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.072266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.083945][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.092109][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.103694][ T1237] device veth0_vlan entered promiscuous mode [ 54.111307][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.119520][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.128447][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.136220][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.151604][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.159595][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.168847][ T1237] device veth1_macvtap entered promiscuous mode [ 54.177444][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.185124][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.193453][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.205589][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.214025][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.401379][ T551] device bridge_slave_1 left promiscuous mode [ 54.407395][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.415028][ T551] device bridge_slave_0 left promiscuous mode [ 54.421066][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.428570][ T551] device bridge_slave_1 left promiscuous mode [ 54.434920][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.442233][ T551] device bridge_slave_0 left promiscuous mode [ 54.448147][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.456266][ T551] device veth1_macvtap left promiscuous mode [ 54.462358][ T551] device veth0_vlan left promiscuous mode [ 54.468226][ T551] device veth1_macvtap left promiscuous mode [ 54.474092][ T551] device veth0_vlan left promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.672014][ T551] device bridge_slave_1 left promiscuous mode [ 55.678033][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.685352][ T551] device bridge_slave_0 left promiscuous mode [ 55.691667][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.699199][ T551] device bridge_slave_1 left promiscuous mode [ 55.705199][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.712482][ T551] device bridge_slave_0 left promiscuous mode [ 55.718407][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.726069][ T551] device bridge_slave_1 left promiscuous mode [ 55.732314][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.739495][ T551] device bridge_slave_0 left promiscuous mode [ 55.745608][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.753233][ T551] device bridge_slave_1 left promiscuous mode [ 55.759125][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.766469][ T551] device bridge_slave_0 left promiscuous mode [ 55.772468][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.779780][ T551] device bridge_slave_1 left promiscuous mode [ 55.785766][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.792942][ T551] device bridge_slave_0 left promiscuous mode [ 55.798842][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.806976][ T551] device veth1_macvtap left promiscuous mode [ 55.812886][ T551] device veth0_vlan left promiscuous mode [ 55.818467][ T551] device veth1_macvtap left promiscuous mode [ 55.824351][ T551] device veth0_vlan left promiscuous mode [ 55.830089][ T551] device veth1_macvtap left promiscuous mode [ 55.836113][ T551] device veth0_vlan left promiscuous mode [ 55.841847][ T551] device veth1_macvtap left promiscuous mode [ 55.847646][ T551] device veth0_vlan left promiscuous mode [ 55.853655][ T551] device veth1_macvtap left promiscuous mode [ 55.859460][ T551] device veth0_vlan left promiscuous mode