last executing test programs: 7.434684549s ago: executing program 2 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 5.477311651s ago: executing program 2 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) read$FUSE(r0, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x20000, {{0xffffffffffffffff, 0x80000, 0x0, 0x0, 0x9, 0x0, {0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0}) 5.286748848s ago: executing program 2 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000230040120c050000000000000109022d00010000000009040081010300000009210000ff0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.91720258s ago: executing program 0 (id=708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e080000000d278863"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.335847191s ago: executing program 4 (id=710): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x10000042, 0xffffffff, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 4.132551259s ago: executing program 3 (id=704): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000002c0)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) 3.854731023s ago: executing program 1 (id=711): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) move_mount(r3, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000200)='.\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 3.707476126s ago: executing program 3 (id=712): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) 3.643458922s ago: executing program 1 (id=713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000ffdbdf2507000000050005004000000008000400040000003800018014000400fc0200000000000000000000000000010800030002000000e42f14977e7b611714998cc5885e81feec3ed451f91bf1925f65c1e4cbd1b43405002d1b8f2e74f59cbc0cce5d128606b61ac36221278c82c54ac99f1c7a87b26b387c2521185f0bb4ba0a9667d748ef981f77dc825e9ecd50c50ab1b999b02060bc86dcbc225ad4be3cff144b36fbd9216031"], 0x44}, 0x1, 0x0, 0x0, 0x8083}, 0x40000) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') preadv(r6, &(0x7f0000000000), 0xc, 0x0, 0x0) 3.542689821s ago: executing program 1 (id=714): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0420000000ce0800490000380000000000069078ac1e0001ac1414008307e3ac1e0001860600"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x280, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1f0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_nat={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x79, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645fc28bd05cca953cb4705ee5fdd6950f43ec843b0e8335d3f2f1e0027"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0xcc, 0x6, [@m_mpls={0x38, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x40, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "25e3c0c965c7f29e5a"}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x280}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.444540709s ago: executing program 3 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) 3.389719954s ago: executing program 2 (id=717): io_setup(0x3, &(0x7f0000000340)) 3.333286689s ago: executing program 4 (id=718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009214000000122050009058103"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x5, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "90027f"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x800, 0xa, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x9, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xce, 0x7f, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0xa, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0xd, 0x4, 0x10, 0x1}, 0x272, &(0x7f0000000500)={0x5, 0xf, 0x272, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x1, 0x890}, @generic={0xbc, 0x10, 0x4, "8bcff4fc2779b7278ef48469a6dd2470f1d62adc9b16b088f300056540684b6dc4739b0a98170137e87164d806ab2b9874db31d9e06ded9e3ac7c0476fd73284aee850150137c69b414d4131a2aa3a3ede663b89ac05fbec12ebf54cbd502db50a8fbfdfd6333dfa3bfee3a1c705c3db50731b01b69061244786713d1a52186aa6e92bb02c95eb809faced12b71e4f2834ca989f5d5c33ef81e7f6e8c36b7192715ca5cb9744a8447c59d44880502976b20ce08627ac217fd2"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x8, 0xd, 0x80, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x36, 0x0, 0x7fffffb, 0xff00, 0x8e}, @generic={0x93, 0x10, 0x4, "0ffc59e29f822c0468c78e2eaa534e6b2212838cedbded8301bbe386b8ab6a0d6125a408e4a946e3cebbae81f7da69cba94b7fb2125e548160e068df6e22ae01d333aa7929b86f35c74e7e91c7081e02387acd203b055bf402db18eff4b7a14a0681d9e5b20f8d56c74b6f3ca6b072f9de1612d93c269266d8e8f3ad5f188f981fe6afdfdea92b5c53ece54ad27e081b"}, @generic={0xfd, 0x10, 0x2, "63d591347dba62d7bc0a6e07c201de2f60c0eb65b392e5e211f145015f25992dab804f2425dd6e8f73fa6c1b1284a68e06053bb53795539b4a472c1dd08bd4caf2efa889c2b21ccfa7eeea25cebe28c931173498580385d351502bef9aa43f528c204548bb3055f296d1ea46ad707be05a47e7dfe4d53c08e46a8a87b7ccd2488db732b71f3c51d04f77a7c7bcc6df4823ec2e8e91534144def6af7be6271ec3b0cd36eb9774e7b77dce75970d92e83c470f30465f77b9028e9e00428a84a6e5273445088c094c4567c449c11d637f131c91d09d599a95c6baf85703c14d253edebb4c75a1e719be66a289ade3d43e949dc15a578565c3bb3193"}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x18, &(0x7f0000000300)=@string={0x18, 0x3, "553a9ff560f6ed746bc519a522d2661f659c159b71a9"}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00070500"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.20644515s ago: executing program 3 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x40fd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r6, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x20048840) 3.131208736s ago: executing program 2 (id=720): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x0, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "9169"}}, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgid(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/253) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 3.125889297s ago: executing program 3 (id=721): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) unshare(0x40600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x47, 0x6, 0xc, 0xc, 0x5, 0x3, 0x81, 0xc87, 0x8000, 0x33b6, 0x1f5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.951662062s ago: executing program 0 (id=722): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000002c0)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) 2.918277465s ago: executing program 0 (id=723): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 2.416929799s ago: executing program 0 (id=724): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r2, 0x0) unshare(0x44000680) 2.253964693s ago: executing program 0 (id=725): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) 1.343074783s ago: executing program 1 (id=715): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) 1.311847346s ago: executing program 1 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 1.15451697s ago: executing program 4 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) 1.053461249s ago: executing program 4 (id=729): io_setup(0x3, &(0x7f0000000340)) 942.558638ms ago: executing program 4 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x40fd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r6, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x20048840) 640.692065ms ago: executing program 4 (id=731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e080000000d278863"], 0x0, 0x0, 0x0, 0x0}, 0x0) 277.161086ms ago: executing program 0 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000230040120c050000000000000109022d00010000000009040081010300000009210000ff0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 38.621827ms ago: executing program 3 (id=732): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000002c0)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) 14.101899ms ago: executing program 2 (id=733): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 0s ago: executing program 1 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): failed [ 140.731588][ T1660] FAT-fs (loop0): Directory bread(block 65) failed [ 140.765507][ T1660] FAT-fs (loop0): Directory bread(block 66) failed [ 140.772246][ T1660] FAT-fs (loop0): Directory bread(block 67) failed [ 140.788961][ T1660] FAT-fs (loop0): Directory bread(block 68) failed [ 140.809145][ T1660] FAT-fs (loop0): Directory bread(block 69) failed [ 140.817101][ T1660] FAT-fs (loop0): Directory bread(block 70) failed [ 140.831598][ T1660] FAT-fs (loop0): Directory bread(block 71) failed [ 140.841936][ T1660] FAT-fs (loop0): Directory bread(block 72) failed [ 140.858601][ T1660] FAT-fs (loop0): Directory bread(block 73) failed [ 141.475847][ T1665] loop0: detected capacity change from 0 to 256 [ 141.546733][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.546782][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.562884][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.573672][ T1665] FAT-fs (loop0): Directory bread(block 64) failed [ 141.592013][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.592088][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.599593][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.607140][ T1665] FAT-fs (loop0): Directory bread(block 65) failed [ 141.620940][ T1471] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 141.622463][ T1665] FAT-fs (loop0): Directory bread(block 66) failed [ 141.637813][ T1665] FAT-fs (loop0): Directory bread(block 67) failed [ 141.681744][ T1665] FAT-fs (loop0): Directory bread(block 68) failed [ 141.688153][ T1665] FAT-fs (loop0): Directory bread(block 69) failed [ 141.723601][ T30] audit: type=1326 audit(1725729187.630:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 141.751797][ T1665] FAT-fs (loop0): Directory bread(block 70) failed [ 141.758526][ T1665] FAT-fs (loop0): Directory bread(block 71) failed [ 141.772302][ T1665] FAT-fs (loop0): Directory bread(block 72) failed [ 141.778729][ T1665] FAT-fs (loop0): Directory bread(block 73) failed [ 141.835137][ T30] audit: type=1326 audit(1725729187.630:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 141.925310][ T30] audit: type=1326 audit(1725729187.630:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3681a70797 code=0x7ffc0000 [ 141.977064][ T1677] loop2: detected capacity change from 0 to 256 [ 142.002064][ T30] audit: type=1326 audit(1725729187.630:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.027310][ T1679] loop0: detected capacity change from 0 to 128 [ 142.041664][ T30] audit: type=1326 audit(1725729187.630:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.119866][ T30] audit: type=1326 audit(1725729187.630:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.163617][ T1679] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.180613][ T30] audit: type=1326 audit(1725729187.630:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.243329][ T1679] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 142.347346][ T30] audit: type=1326 audit(1725729187.630:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.400840][ T30] audit: type=1326 audit(1725729187.630:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.449494][ T30] audit: type=1326 audit(1725729187.630:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 142.574504][ T1687] device syzkaller0 entered promiscuous mode [ 142.631399][ T1695] loop0: detected capacity change from 0 to 1024 [ 142.709200][ T1695] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.792652][ T1702] device pim6reg1 entered promiscuous mode [ 142.805672][ T1704] loop3: detected capacity change from 0 to 512 [ 142.868985][ T1704] EXT4-fs (loop3): Ignoring removed oldalloc option [ 142.889748][ T1704] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.420: Parent and EA inode have the same ino 15 [ 142.935218][ T1704] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.420: Parent and EA inode have the same ino 15 [ 142.973432][ T1704] EXT4-fs (loop3): 1 orphan inode deleted [ 142.990985][ T1704] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 143.272218][ T1711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.902798][ T1722] loop0: detected capacity change from 0 to 256 [ 143.919841][ T1721] loop2: detected capacity change from 0 to 512 [ 144.025116][ T1722] FAT-fs (loop0): Directory bread(block 64) failed [ 144.051601][ T1722] FAT-fs (loop0): Directory bread(block 65) failed [ 144.062075][ T1722] FAT-fs (loop0): Directory bread(block 66) failed [ 144.090171][ T1722] FAT-fs (loop0): Directory bread(block 67) failed [ 144.100786][ T1721] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,i_version,,errors=continue. Quota mode: writeback. [ 144.121646][ T1722] FAT-fs (loop0): Directory bread(block 68) failed [ 144.148543][ T1722] FAT-fs (loop0): Directory bread(block 69) failed [ 144.155451][ T1721] ext4 filesystem being mounted at /90/bus supports timestamps until 2038 (0x7fffffff) [ 144.182556][ T1722] FAT-fs (loop0): Directory bread(block 70) failed [ 144.221957][ T1722] FAT-fs (loop0): Directory bread(block 71) failed [ 144.228649][ T1721] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.427: Failed to acquire dquot type 1 [ 144.231677][ T1722] FAT-fs (loop0): Directory bread(block 72) failed [ 144.289559][ T1722] FAT-fs (loop0): Directory bread(block 73) failed [ 144.642987][ T1734] syz.3.431[1734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.643142][ T1734] syz.3.431[1734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.707062][ T1707] loop1: detected capacity change from 0 to 40427 [ 144.762795][ T1707] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.778203][ T1707] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.794080][ T1707] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.894758][ T1707] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.902008][ T1707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.182241][ T1757] loop4: detected capacity change from 0 to 512 [ 145.399904][ T1757] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.412044][ T1757] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 145.412091][ T1764] loop2: detected capacity change from 0 to 512 [ 145.451676][ T1763] overlayfs: invalid origin (0000007900656d5f63616368655f66726565000000000000000000000000000000000000000000000000000000000000) [ 145.481779][ T1764] EXT4-fs (loop2): Ignoring removed oldalloc option [ 145.542519][ T1764] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.440: Parent and EA inode have the same ino 15 [ 145.555131][ T1764] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.440: Parent and EA inode have the same ino 15 [ 145.569450][ T1764] EXT4-fs (loop2): 1 orphan inode deleted [ 145.575501][ T1764] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 145.649569][ T1774] loop0: detected capacity change from 0 to 256 [ 145.853177][ T1770] loop3: detected capacity change from 0 to 512 [ 145.873166][ T1774] FAT-fs (loop0): Directory bread(block 64) failed [ 145.879762][ T1774] FAT-fs (loop0): Directory bread(block 65) failed [ 145.886838][ T1774] FAT-fs (loop0): Directory bread(block 66) failed [ 145.893482][ T1774] FAT-fs (loop0): Directory bread(block 67) failed [ 145.900628][ T1774] FAT-fs (loop0): Directory bread(block 68) failed [ 145.924628][ T1774] FAT-fs (loop0): Directory bread(block 69) failed [ 145.956116][ T1770] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 145.959221][ T1774] FAT-fs (loop0): Directory bread(block 70) failed [ 146.079810][ T1774] FAT-fs (loop0): Directory bread(block 71) failed [ 146.083709][ T1770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.442: inode #1: comm syz.3.442: iget: illegal inode # [ 146.100599][ T1774] FAT-fs (loop0): Directory bread(block 72) failed [ 146.111170][ T1770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.442: error while reading EA inode 1 err=-117 [ 146.126114][ T1774] FAT-fs (loop0): Directory bread(block 73) failed [ 146.133845][ T1770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.442: inode #1: comm syz.3.442: iget: illegal inode # [ 146.182686][ T1770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.442: error while reading EA inode 1 err=-117 [ 146.392162][ T1770] EXT4-fs (loop3): 1 orphan inode deleted [ 146.397819][ T1770] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000000c,mblk_io_submit,,errors=continue. Quota mode: none. [ 146.786262][ T1790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.825335][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 146.825366][ T30] audit: type=1400 audit(1725729192.730:554): avc: denied { create } for pid=1793 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.921635][ T30] audit: type=1400 audit(1725729192.760:555): avc: denied { connect } for pid=1793 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.970425][ T30] audit: type=1400 audit(1725729192.760:556): avc: denied { write } for pid=1793 comm="syz.4.451" path="socket:[21176]" dev="sockfs" ino=21176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.038924][ T30] audit: type=1326 audit(1725729192.810:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.044345][ T1805] loop3: detected capacity change from 0 to 256 [ 147.064561][ T30] audit: type=1326 audit(1725729192.810:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.094419][ T30] audit: type=1326 audit(1725729192.810:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.117869][ T30] audit: type=1326 audit(1725729192.810:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.154983][ T30] audit: type=1326 audit(1725729192.810:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.191421][ T30] audit: type=1400 audit(1725729192.820:562): avc: denied { sys_module } for pid=1791 comm="syz.3.450" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.253692][ T1805] FAT-fs (loop3): Directory bread(block 64) failed [ 147.270247][ T1805] FAT-fs (loop3): Directory bread(block 65) failed [ 147.284890][ T1805] FAT-fs (loop3): Directory bread(block 66) failed [ 147.292891][ T30] audit: type=1326 audit(1725729193.090:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3681a71ef9 code=0x7ffc0000 [ 147.319136][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.319182][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.328540][ T1805] FAT-fs (loop3): Directory bread(block 67) failed [ 147.342995][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.343042][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.350607][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.401596][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.427147][ T712] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 147.461768][ T1805] FAT-fs (loop3): Directory bread(block 68) failed [ 147.494360][ T1805] FAT-fs (loop3): Directory bread(block 69) failed [ 147.515729][ T1805] FAT-fs (loop3): Directory bread(block 70) failed [ 147.542108][ T1822] loop2: detected capacity change from 0 to 512 [ 147.548369][ T1805] FAT-fs (loop3): Directory bread(block 71) failed [ 147.555437][ T1805] FAT-fs (loop3): Directory bread(block 72) failed [ 147.561956][ T1805] FAT-fs (loop3): Directory bread(block 73) failed [ 147.600320][ T1822] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 147.616381][ T1822] EXT4-fs (loop2): group descriptors corrupted! [ 147.872144][ T1822] loop2: detected capacity change from 0 to 1024 [ 147.976664][ T1822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.236860][ T430] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 148.274931][ T430] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 148.334704][ T430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.334704][ T430] [ 148.367908][ T430] EXT4-fs (loop2): Total free blocks count 0 [ 148.390127][ T430] EXT4-fs (loop2): Free/Dirty block details [ 148.409482][ T430] EXT4-fs (loop2): free_blocks=68451041280 [ 148.447106][ T430] EXT4-fs (loop2): dirty_blocks=64 [ 148.462755][ T430] EXT4-fs (loop2): Block reservation details [ 148.482796][ T430] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 148.667608][ T1849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 148.717751][ T1852] loop3: detected capacity change from 0 to 256 [ 148.833944][ T1852] FAT-fs (loop3): Directory bread(block 64) failed [ 148.846597][ T1852] FAT-fs (loop3): Directory bread(block 65) failed [ 148.862558][ T1852] FAT-fs (loop3): Directory bread(block 66) failed [ 148.875586][ T1852] FAT-fs (loop3): Directory bread(block 67) failed [ 148.880818][ T1869] syz.0.482[1869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.882799][ T1852] FAT-fs (loop3): Directory bread(block 68) failed [ 148.886660][ T1869] syz.0.482[1869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.910187][ T1852] FAT-fs (loop3): Directory bread(block 69) failed [ 148.975804][ T1852] FAT-fs (loop3): Directory bread(block 70) failed [ 148.990210][ T1852] FAT-fs (loop3): Directory bread(block 71) failed [ 148.997824][ T1852] FAT-fs (loop3): Directory bread(block 72) failed [ 149.004958][ T1852] FAT-fs (loop3): Directory bread(block 73) failed [ 149.177747][ T1884] loop0: detected capacity change from 0 to 2048 [ 149.435581][ T1902] loop0: detected capacity change from 0 to 256 [ 149.519893][ T1909] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.567485][ T1912] syz.3.505[1912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.567636][ T1912] syz.3.505[1912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.606872][ T1902] FAT-fs (loop0): Directory bread(block 64) failed [ 149.607001][ T1902] FAT-fs (loop0): Directory bread(block 65) failed [ 149.661643][ T1902] FAT-fs (loop0): Directory bread(block 66) failed [ 149.685254][ T1902] FAT-fs (loop0): Directory bread(block 67) failed [ 149.717511][ T1902] FAT-fs (loop0): Directory bread(block 68) failed [ 149.723439][ T1917] loop1: detected capacity change from 0 to 512 [ 149.730181][ T1902] FAT-fs (loop0): Directory bread(block 69) failed [ 149.770168][ T1902] FAT-fs (loop0): Directory bread(block 70) failed [ 149.778128][ T1902] FAT-fs (loop0): Directory bread(block 71) failed [ 149.785935][ T1902] FAT-fs (loop0): Directory bread(block 72) failed [ 149.799575][ T1902] FAT-fs (loop0): Directory bread(block 73) failed [ 149.934851][ T1917] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.949887][ T1917] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff) [ 149.950401][ T334] device bridge_slave_1 left promiscuous mode [ 149.977251][ T1917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.506: bg 0: block 18: invalid block bitmap [ 149.992202][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.992803][ T1917] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.506: Failed to acquire dquot type 1 [ 150.013919][ T334] device bridge_slave_0 left promiscuous mode [ 150.036848][ T1931] loop2: detected capacity change from 0 to 256 [ 150.049954][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.086673][ T334] device veth1_macvtap left promiscuous mode [ 150.094028][ T334] device veth0_vlan left promiscuous mode [ 150.108812][ T1917] syz.1.506 (1917) used greatest stack depth: 19032 bytes left [ 151.084476][ T368] udevd[368]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 151.573299][ T1938] tipc: Started in network mode [ 151.578178][ T1938] tipc: Node identity 101, cluster identity 4711 [ 151.584964][ T1938] tipc: Node number set to 257 [ 151.590276][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.601657][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.620318][ T1907] device bridge_slave_0 entered promiscuous mode [ 151.644468][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.660352][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.687822][ T1907] device bridge_slave_1 entered promiscuous mode [ 151.718035][ T1961] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 151.833672][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 151.833704][ T30] audit: type=1326 audit(1725729197.740:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 151.867741][ T30] audit: type=1326 audit(1725729197.740:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 151.895592][ T1970] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 151.897834][ T30] audit: type=1326 audit(1725729197.740:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 151.932874][ T30] audit: type=1326 audit(1725729197.760:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 151.979935][ T30] audit: type=1326 audit(1725729197.770:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.047668][ T30] audit: type=1326 audit(1725729197.770:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.096581][ T1974] tipc: New replicast peer: 255.255.255.255 [ 152.106978][ T1974] tipc: Enabled bearer , priority 10 [ 152.129708][ T30] audit: type=1326 audit(1725729197.790:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.180955][ T30] audit: type=1326 audit(1725729197.800:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.223814][ T1983] loop2: detected capacity change from 0 to 256 [ 152.237922][ T1985] capability: warning: `syz.1.531' uses 32-bit capabilities (legacy support in use) [ 152.255118][ T30] audit: type=1326 audit(1725729197.800:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.278834][ T30] audit: type=1326 audit(1725729197.800:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 152.327208][ T1983] FAT-fs (loop2): Directory bread(block 64) failed [ 152.344873][ T1983] FAT-fs (loop2): Directory bread(block 65) failed [ 152.351363][ T1983] FAT-fs (loop2): Directory bread(block 66) failed [ 152.363985][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.372277][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.380035][ T1983] FAT-fs (loop2): Directory bread(block 67) failed [ 152.396996][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.419696][ T1983] FAT-fs (loop2): Directory bread(block 68) failed [ 152.427715][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.436019][ T1983] FAT-fs (loop2): Directory bread(block 69) failed [ 152.443343][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.450445][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.459032][ T1983] FAT-fs (loop2): Directory bread(block 70) failed [ 152.473293][ T1991] loop1: detected capacity change from 0 to 512 [ 152.481657][ T1983] FAT-fs (loop2): Directory bread(block 71) failed [ 152.488440][ T1983] FAT-fs (loop2): Directory bread(block 72) failed [ 152.495623][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.503919][ T1983] FAT-fs (loop2): Directory bread(block 73) failed [ 152.519146][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.532016][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.539389][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.548154][ T1991] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 152.571585][ T1991] EXT4-fs (loop1): group descriptors corrupted! [ 152.594671][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.632881][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.638989][ T1999] syz.0.538[1999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.640932][ T1999] syz.0.538[1999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.643007][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.706650][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.715856][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.728173][ T1991] loop1: detected capacity change from 0 to 1024 [ 152.764248][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.774006][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.803662][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.812682][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.821461][ T1907] device veth0_vlan entered promiscuous mode [ 152.833815][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.834819][ T1991] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.842246][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.870956][ T1907] device veth1_macvtap entered promiscuous mode [ 152.880188][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.889332][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.897996][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.923933][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.933068][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.942173][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.950694][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.995048][ T334] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 152.999210][ T2014] loop4: detected capacity change from 0 to 512 [ 153.011874][ T334] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 153.028768][ T334] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.028768][ T334] [ 153.038955][ T334] EXT4-fs (loop1): Total free blocks count 0 [ 153.045658][ T334] EXT4-fs (loop1): Free/Dirty block details [ 153.046902][ T2014] EXT4-fs (loop4): Ignoring removed bh option [ 153.054438][ T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.058333][ T334] EXT4-fs (loop1): free_blocks=68451041280 [ 153.071299][ T2014] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 153.073730][ T334] EXT4-fs (loop1): dirty_blocks=64 [ 153.085025][ T334] EXT4-fs (loop1): Block reservation details [ 153.085412][ T2014] EXT4-fs (loop4): 1 truncate cleaned up [ 153.090962][ T334] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 153.102760][ T2014] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 153.354154][ T2026] loop4: detected capacity change from 0 to 512 [ 153.421829][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.432998][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.442688][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 153.452443][ T2026] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 153.458742][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.468040][ T60] usb 1-1: config 0 descriptor?? [ 153.546058][ T2028] loop2: detected capacity change from 0 to 256 [ 153.688285][ T299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.799766][ T2031] loop3: detected capacity change from 0 to 256 [ 153.813513][ T2032] netlink: 165 bytes leftover after parsing attributes in process `syz.4.547'. [ 153.867075][ T2031] FAT-fs (loop3): Directory bread(block 64) failed [ 153.876231][ T2031] FAT-fs (loop3): Directory bread(block 65) failed [ 153.883634][ T2031] FAT-fs (loop3): Directory bread(block 66) failed [ 153.890240][ T2031] FAT-fs (loop3): Directory bread(block 67) failed [ 153.896848][ T2031] FAT-fs (loop3): Directory bread(block 68) failed [ 153.903896][ T2031] FAT-fs (loop3): Directory bread(block 69) failed [ 153.910959][ T2031] FAT-fs (loop3): Directory bread(block 70) failed [ 153.917503][ T2031] FAT-fs (loop3): Directory bread(block 71) failed [ 153.924722][ T2031] FAT-fs (loop3): Directory bread(block 72) failed [ 153.931557][ T2031] FAT-fs (loop3): Directory bread(block 73) failed [ 154.202259][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.289475][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.588726][ T299] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 154.611584][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.685552][ T299] usb 2-1: config 0 descriptor?? [ 154.740988][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.749737][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.759815][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.768403][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.776441][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.784453][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.795373][ T60] logitech-djreceiver 0003:046D:C71B.0011: unknown main item tag 0x0 [ 154.808340][ T60] usb 1-1: USB disconnect, device number 9 [ 155.164625][ T299] logitech-djreceiver 0003:046D:C71B.0012: item fetching failed at offset 3/7 [ 155.180394][ T299] logitech-djreceiver 0003:046D:C71B.0012: logi_dj_probe: parse failed [ 155.199265][ T299] logitech-djreceiver: probe of 0003:046D:C71B.0012 failed with error -22 [ 155.367129][ T299] usb 2-1: USB disconnect, device number 6 [ 155.501724][ T2047] loop3: detected capacity change from 0 to 512 [ 155.537758][ T2047] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.551129][ T2047] EXT4-fs (loop3): group descriptors corrupted! [ 155.615060][ T2047] loop3: detected capacity change from 0 to 1024 [ 155.754564][ T2047] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.878518][ T334] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.894238][ T316] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.902602][ T334] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 155.915325][ T334] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.915325][ T334] [ 155.925547][ T334] EXT4-fs (loop3): Total free blocks count 0 [ 155.931460][ T334] EXT4-fs (loop3): Free/Dirty block details [ 155.937712][ T334] EXT4-fs (loop3): free_blocks=68451041280 [ 155.943471][ T334] EXT4-fs (loop3): dirty_blocks=64 [ 155.948536][ T334] EXT4-fs (loop3): Block reservation details [ 155.954770][ T334] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 155.964134][ T2060] bridge0: port 3(syz_tun) entered blocking state [ 155.988887][ T2060] bridge0: port 3(syz_tun) entered disabled state [ 156.005706][ T2060] device syz_tun entered promiscuous mode [ 156.018355][ T2060] bridge0: port 3(syz_tun) entered blocking state [ 156.024841][ T2060] bridge0: port 3(syz_tun) entered forwarding state [ 156.151565][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 156.271733][ T316] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 156.282880][ T316] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.292050][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.303773][ T316] usb 5-1: config 0 descriptor?? [ 156.331705][ T2049] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.354145][ T316] hub 5-1:0.0: bad descriptor, ignoring hub [ 156.360745][ T316] hub: probe of 5-1:0.0 failed with error -5 [ 156.401989][ T316] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 156.681605][ T533] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.840113][ T2084] loop2: detected capacity change from 0 to 256 [ 156.924162][ T2084] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.053471][ T533] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.069340][ T533] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.087876][ T2088] loop1: detected capacity change from 0 to 256 [ 157.094920][ T533] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.168447][ T2088] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3973511e, utbl_chksum : 0xe619d30d) [ 157.336719][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 157.336885][ T30] audit: type=1400 audit(1725729203.150:626): avc: denied { mounton } for pid=2083 comm="syz.2.567" path="/126/file2/file0" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.035506][ T2094] syz.2.569[2094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.035669][ T2094] syz.2.569[2094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.047252][ T533] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.048834][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 158.058874][ T533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.089483][ T30] audit: type=1400 audit(1725729203.990:627): avc: denied { remove_name } for pid=2087 comm="syz.1.568" name="file0" dev="loop1" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.093268][ T533] usb 1-1: Product: syz [ 158.126168][ T30] audit: type=1400 audit(1725729203.990:628): avc: denied { rename } for pid=2087 comm="syz.1.568" name="file0" dev="loop1" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.141596][ T533] usb 1-1: Manufacturer: syz [ 158.163040][ T533] usb 1-1: SerialNumber: syz [ 158.168876][ T30] audit: type=1400 audit(1725729203.990:629): avc: denied { rmdir } for pid=2087 comm="syz.1.568" name="bus" dev="loop1" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.235999][ T2101] loop1: detected capacity change from 0 to 256 [ 158.243601][ T533] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 158.250270][ T533] cdc_ncm 1-1:1.0: bind() failure [ 158.269684][ T2097] device syzkaller0 entered promiscuous mode [ 158.323491][ T2101] FAT-fs (loop1): Directory bread(block 64) failed [ 158.330509][ T2101] FAT-fs (loop1): Directory bread(block 65) failed [ 158.339502][ T2101] FAT-fs (loop1): Directory bread(block 66) failed [ 158.353251][ T2101] FAT-fs (loop1): Directory bread(block 67) failed [ 158.359938][ T2101] FAT-fs (loop1): Directory bread(block 68) failed [ 158.367052][ T2101] FAT-fs (loop1): Directory bread(block 69) failed [ 158.374066][ T2101] FAT-fs (loop1): Directory bread(block 70) failed [ 158.380589][ T2101] FAT-fs (loop1): Directory bread(block 71) failed [ 158.388044][ T2101] FAT-fs (loop1): Directory bread(block 72) failed [ 158.394782][ T2101] FAT-fs (loop1): Directory bread(block 73) failed [ 158.458331][ T2108] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 158.536156][ T2110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 158.691746][ T533] usb 5-1: USB disconnect, device number 12 [ 159.221660][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.631850][ T329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.674259][ T329] usb 3-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.791462][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.821663][ T329] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 159.841469][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.872671][ T329] usb 3-1: config 0 descriptor?? [ 159.951731][ T533] usb 1-1: USB disconnect, device number 10 [ 160.072920][ T329] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 160.088243][ T30] audit: type=1326 audit(1725729205.990:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 160.125586][ T30] audit: type=1326 audit(1725729206.030:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 160.277481][ T30] audit: type=1326 audit(1725729206.060:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 160.330323][ T30] audit: type=1326 audit(1725729206.060:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 160.418221][ T30] audit: type=1326 audit(1725729206.060:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b78c0ef9 code=0x7ffc0000 [ 161.392211][ T2147] tipc: Started in network mode [ 161.406920][ T2147] tipc: Node identity 101, cluster identity 4711 [ 161.428813][ T2147] tipc: Node number set to 257 [ 161.852338][ T30] audit: type=1400 audit(1725729207.760:635): avc: denied { mount } for pid=2149 comm="syz.0.588" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 161.876370][ T2150] xt_TCPMSS: Only works on TCP SYN packets [ 162.825291][ T60] usb 3-1: USB disconnect, device number 5 [ 162.859552][ T30] audit: type=1400 audit(1725729208.740:636): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 162.943986][ T2166] loop2: detected capacity change from 0 to 256 [ 163.081543][ T30] audit: type=1400 audit(1725729208.980:637): avc: denied { mount } for pid=2161 comm="syz.4.592" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 163.115394][ T30] audit: type=1400 audit(1725729209.020:638): avc: denied { unmount } for pid=1907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 163.135409][ T2166] FAT-fs (loop2): Directory bread(block 64) failed [ 163.154786][ T2166] FAT-fs (loop2): Directory bread(block 65) failed [ 163.163918][ T2166] FAT-fs (loop2): Directory bread(block 66) failed [ 163.188155][ T2166] FAT-fs (loop2): Directory bread(block 67) failed [ 163.195736][ T2166] FAT-fs (loop2): Directory bread(block 68) failed [ 163.202700][ T2166] FAT-fs (loop2): Directory bread(block 69) failed [ 163.209155][ T2166] FAT-fs (loop2): Directory bread(block 70) failed [ 163.216290][ T2166] FAT-fs (loop2): Directory bread(block 71) failed [ 163.224046][ T2166] FAT-fs (loop2): Directory bread(block 72) failed [ 163.233611][ T2166] FAT-fs (loop2): Directory bread(block 73) failed [ 163.252718][ T334] tipc: Left network mode [ 163.501613][ T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.639401][ T2176] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.647808][ T2176] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.656198][ T2176] device bridge_slave_0 entered promiscuous mode [ 163.670540][ T2176] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.678253][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.687236][ T2176] device bridge_slave_1 entered promiscuous mode [ 163.923976][ T2186] tipc: Started in network mode [ 163.928897][ T2186] tipc: Node identity 101, cluster identity 4711 [ 163.936551][ T2186] tipc: Node number set to 257 [ 163.941939][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.979450][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.012124][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 164.038410][ T334] device bridge_slave_1 left promiscuous mode [ 164.046756][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.061661][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.153489][ T334] device bridge_slave_0 left promiscuous mode [ 164.168852][ T60] usb 4-1: config 0 descriptor?? [ 164.174628][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.193334][ T334] device veth1_macvtap left promiscuous mode [ 164.200021][ T334] device veth0_vlan left promiscuous mode [ 164.951242][ T60] logitech-djreceiver 0003:046D:C71B.0013: item fetching failed at offset 3/7 [ 164.962677][ T60] logitech-djreceiver 0003:046D:C71B.0013: logi_dj_probe: parse failed [ 164.991724][ T60] logitech-djreceiver: probe of 0003:046D:C71B.0013 failed with error -22 [ 165.001729][ T329] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.147823][ T39] usb 4-1: USB disconnect, device number 11 [ 165.239128][ T712] bridge0: port 3(syz_tun) entered disabled state [ 165.249006][ T712] device syz_tun left promiscuous mode [ 165.255083][ T712] bridge0: port 3(syz_tun) entered disabled state [ 165.288820][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.297554][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.318030][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.328537][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.337661][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.344637][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.352626][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.361257][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.369942][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.376871][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.386711][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.422325][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.432319][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.440668][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.450592][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.451888][ T329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.484936][ T329] usb 3-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.498203][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.504748][ T334] tipc: Left network mode [ 165.511838][ T329] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 165.521016][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.533891][ T334] tipc: Disabling bearer [ 165.539060][ T334] tipc: Left network mode [ 165.553893][ T329] usb 3-1: config 0 descriptor?? [ 165.563980][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.573412][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.593048][ T329] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 165.607700][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.621834][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.629728][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.644566][ T2176] device veth0_vlan entered promiscuous mode [ 165.754992][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.766754][ T2176] device veth1_macvtap entered promiscuous mode [ 165.784635][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.793789][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.813905][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.822699][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.945828][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.953075][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.961241][ T2200] device bridge_slave_0 entered promiscuous mode [ 165.969876][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.977604][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.986358][ T2200] device bridge_slave_1 entered promiscuous mode [ 167.125482][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.151735][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.175615][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.188541][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.201941][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.263846][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.277805][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.290980][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.305356][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.318310][ T2219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2219 comm=syz.4.613 [ 167.332814][ T334] device bridge_slave_1 left promiscuous mode [ 167.340067][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.349189][ T334] device bridge_slave_0 left promiscuous mode [ 167.356120][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.367495][ T334] device bridge_slave_1 left promiscuous mode [ 167.373955][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.383409][ T334] device bridge_slave_0 left promiscuous mode [ 167.390402][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.405844][ T334] device veth1_macvtap left promiscuous mode [ 167.412049][ T334] device veth0_vlan left promiscuous mode [ 167.418693][ T334] device veth1_macvtap left promiscuous mode [ 167.426426][ T334] device veth0_vlan left promiscuous mode [ 167.726837][ T596] usb 3-1: USB disconnect, device number 6 [ 168.008283][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.026140][ T2202] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.071892][ T2202] device bridge_slave_0 entered promiscuous mode [ 168.082702][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.089836][ T2202] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.100006][ T2202] device bridge_slave_1 entered promiscuous mode [ 168.615164][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.624027][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.632091][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.640827][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.649702][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.656680][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.702785][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.710688][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.732319][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.740769][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.748015][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.809504][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.818288][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.829272][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.853201][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.009928][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.022282][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.041774][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.060045][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.212126][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.220786][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.232920][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.239821][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.286489][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.329628][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.369486][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.409303][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.416383][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.007919][ T2250] loop4: detected capacity change from 0 to 256 [ 170.048667][ T2250] FAT-fs (loop4): Directory bread(block 64) failed [ 170.056587][ T2250] FAT-fs (loop4): Directory bread(block 65) failed [ 170.063696][ T2250] FAT-fs (loop4): Directory bread(block 66) failed [ 170.070393][ T2200] device veth0_vlan entered promiscuous mode [ 170.087139][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.095942][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.105244][ T2250] FAT-fs (loop4): Directory bread(block 67) failed [ 170.105811][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.119852][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.122898][ T2250] FAT-fs (loop4): Directory bread(block 68) failed [ 170.134932][ T2250] FAT-fs (loop4): Directory bread(block 69) failed [ 170.142163][ T2250] FAT-fs (loop4): Directory bread(block 70) failed [ 170.148731][ T2250] FAT-fs (loop4): Directory bread(block 71) failed [ 170.155214][ T2250] FAT-fs (loop4): Directory bread(block 72) failed [ 170.161655][ T2250] FAT-fs (loop4): Directory bread(block 73) failed [ 170.213180][ T2202] device veth0_vlan entered promiscuous mode [ 170.235525][ T2202] device veth1_macvtap entered promiscuous mode [ 170.338345][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.364593][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.389505][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.408716][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.427731][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.456902][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.468959][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.481289][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.496189][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.506534][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.518311][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.529113][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.552647][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.564894][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.575934][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.603510][ T334] tipc: Left network mode [ 170.608152][ T2256] tipc: Started in network mode [ 170.614449][ T2256] tipc: Node identity 101, cluster identity 4711 [ 170.632086][ T2256] tipc: Node number set to 257 [ 170.657288][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.673054][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.934783][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.955135][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.025108][ T2200] device veth1_macvtap entered promiscuous mode [ 171.037823][ T2264] loop1: detected capacity change from 0 to 256 [ 171.123885][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.133888][ T2264] FAT-fs (loop1): Directory bread(block 64) failed [ 171.140487][ T2264] FAT-fs (loop1): Directory bread(block 65) failed [ 171.148110][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.158335][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.166792][ T2264] FAT-fs (loop1): Directory bread(block 66) failed [ 171.177855][ T2264] FAT-fs (loop1): Directory bread(block 67) failed [ 171.184674][ T2264] FAT-fs (loop1): Directory bread(block 68) failed [ 171.191123][ T2264] FAT-fs (loop1): Directory bread(block 69) failed [ 171.199273][ T2264] FAT-fs (loop1): Directory bread(block 70) failed [ 171.206517][ T2264] FAT-fs (loop1): Directory bread(block 71) failed [ 171.213897][ T2264] FAT-fs (loop1): Directory bread(block 72) failed [ 171.220532][ T2264] FAT-fs (loop1): Directory bread(block 73) failed [ 171.289866][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.299359][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.424818][ T2246] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.471832][ T2246] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.536709][ T2246] device bridge_slave_0 entered promiscuous mode [ 171.672659][ T2246] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.680101][ T2246] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.699512][ T2246] device bridge_slave_1 entered promiscuous mode [ 172.467462][ T30] audit: type=1400 audit(1725729218.370:639): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.715788][ T334] device bridge_slave_1 left promiscuous mode [ 172.722636][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.733090][ T334] device bridge_slave_0 left promiscuous mode [ 172.739487][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.749932][ T334] device veth1_macvtap left promiscuous mode [ 172.755998][ T334] device veth0_vlan left promiscuous mode [ 172.881552][ T533] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.251658][ T533] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.271828][ T533] usb 2-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.295145][ T533] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.311599][ T533] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 173.341656][ T533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.373846][ T533] usb 2-1: config 0 descriptor?? [ 173.412968][ T533] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 173.459684][ T2290] tipc: Started in network mode [ 173.465285][ T2290] tipc: Node identity 101, cluster identity 4711 [ 173.478307][ T2290] tipc: Node number set to 257 [ 173.483224][ T2275] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.490155][ T2275] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.507663][ T2275] device bridge_slave_0 entered promiscuous mode [ 173.516024][ T2275] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.523539][ T2275] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.532327][ T2275] device bridge_slave_1 entered promiscuous mode [ 173.587897][ T30] audit: type=1326 audit(1725729219.490:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2292 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba13a2ef9 code=0x7ffc0000 [ 173.661672][ T30] audit: type=1326 audit(1725729219.490:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2292 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f5ba13a2ef9 code=0x7ffc0000 [ 173.687664][ T30] audit: type=1326 audit(1725729219.490:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2292 comm="syz.4.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba13a2ef9 code=0x7ffc0000 [ 174.174116][ T2275] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.181099][ T2275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.188493][ T2275] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.195441][ T2275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.262277][ T533] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.270567][ T533] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.344163][ T2301] FAULT_INJECTION: forcing a failure. [ 174.344163][ T2301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.357512][ T2301] CPU: 1 PID: 2301 Comm: syz.0.637 Not tainted 5.15.157-syzkaller-00897-g53be7c8abe11 #0 [ 174.367220][ T2301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.377214][ T2301] Call Trace: [ 174.380328][ T2301] [ 174.383125][ T2301] dump_stack_lvl+0x151/0x1c0 [ 174.387621][ T2301] ? io_uring_drop_tctx_refs+0x190/0x190 [ 174.393095][ T2301] ? release_firmware_map_entry+0x190/0x190 [ 174.399017][ T2301] dump_stack+0x15/0x20 [ 174.403194][ T2301] should_fail+0x3c6/0x510 [ 174.407439][ T2301] should_fail_usercopy+0x1a/0x20 [ 174.412470][ T2301] _copy_from_user+0x20/0xd0 [ 174.417256][ T2301] kstrtouint_from_user+0xca/0x2a0 [ 174.422196][ T2301] ? kstrtol_from_user+0x310/0x310 [ 174.427221][ T2301] ? irqentry_exit_cond_resched+0x2a/0x30 [ 174.432957][ T2301] ? irqentry_exit+0x30/0x40 [ 174.437383][ T2301] ? sysvec_reschedule_ipi+0x7d/0x150 [ 174.442605][ T2301] ? __kprobes_text_end+0x1a1120/0x1a1120 [ 174.448241][ T2301] ? selinux_file_permission+0x190/0x570 [ 174.453706][ T2301] ? selinux_file_permission+0x19e/0x570 [ 174.459347][ T2301] proc_fail_nth_write+0xa6/0x290 [ 174.464289][ T2301] ? selinux_file_permission+0x2c4/0x570 [ 174.469753][ T2301] ? proc_fail_nth_read+0x210/0x210 [ 174.474794][ T2301] ? fsnotify_perm+0x6a/0x5d0 [ 174.479391][ T2301] ? security_file_permission+0x86/0xb0 [ 174.484773][ T2301] ? proc_fail_nth_read+0x210/0x210 [ 174.489813][ T2301] vfs_write+0x406/0x1110 [ 174.493987][ T2301] ? file_end_write+0x1c0/0x1c0 [ 174.498672][ T2301] ? __kasan_check_write+0x14/0x20 [ 174.503618][ T2301] ? mutex_lock+0xb6/0x1e0 [ 174.507948][ T2301] ? wait_for_completion_killable_timeout+0x10/0x10 [ 174.514381][ T2301] ? __fdget_pos+0x2e7/0x3a0 [ 174.518792][ T2301] ? ksys_write+0x77/0x2c0 [ 174.523058][ T2301] ksys_write+0x199/0x2c0 [ 174.527231][ T2301] ? __kasan_check_write+0x14/0x20 [ 174.532255][ T2301] ? __ia32_sys_read+0x90/0x90 [ 174.536855][ T2301] ? __kasan_check_read+0x11/0x20 [ 174.541715][ T2301] __x64_sys_write+0x7b/0x90 [ 174.546144][ T2301] x64_sys_call+0x2f/0x9a0 [ 174.550391][ T2301] do_syscall_64+0x3b/0xb0 [ 174.554656][ T2301] ? clear_bhb_loop+0x35/0x90 [ 174.559855][ T2301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.565592][ T2301] RIP: 0033:0x7f558a7269df [ 174.569947][ T2301] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 174.589903][ T2301] RSP: 002b:00007f5589360030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.598237][ T2301] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f558a7269df [ 174.606147][ T2301] RDX: 0000000000000001 RSI: 00007f55893600a0 RDI: 0000000000000009 [ 174.614471][ T2301] RBP: 00007f5589360090 R08: 0000000000000000 R09: 0000000000000000 [ 174.622463][ T2301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 174.630347][ T2301] R13: 0000000000000000 R14: 00007f558a8e1130 R15: 00007ffd42cc6388 [ 174.638262][ T2301] [ 174.842701][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.850580][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.859666][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.868554][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.877006][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.883917][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.892205][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.904052][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.913461][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.924373][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.931439][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.965267][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.973491][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.991763][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.000763][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.010492][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.017671][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.041749][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.058532][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.080132][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.087123][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.144384][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.154188][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.163147][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.171997][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.194985][ T2308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 175.222739][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.231429][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.239966][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.249478][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.281775][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.290792][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.343323][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.352338][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.362950][ T2246] device veth0_vlan entered promiscuous mode [ 175.373996][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.382746][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.406033][ T334] device bridge_slave_1 left promiscuous mode [ 175.412915][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.421273][ T334] device bridge_slave_0 left promiscuous mode [ 175.427666][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.436884][ T334] device veth1_macvtap left promiscuous mode [ 175.442819][ T334] device veth0_vlan left promiscuous mode [ 175.609286][ T320] usb 2-1: USB disconnect, device number 7 [ 175.639944][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.657810][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.669638][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.678428][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.701644][ T2246] device veth1_macvtap entered promiscuous mode [ 175.728764][ T30] audit: type=1326 audit(1725729221.630:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 175.754797][ T30] audit: type=1326 audit(1725729221.640:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 175.830521][ T2317] loop1: detected capacity change from 0 to 256 [ 175.845388][ T30] audit: type=1326 audit(1725729221.640:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 175.903888][ T30] audit: type=1326 audit(1725729221.640:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 175.958789][ T2275] device veth0_vlan entered promiscuous mode [ 175.980953][ T2317] FAT-fs (loop1): Directory bread(block 64) failed [ 175.996858][ T2317] FAT-fs (loop1): Directory bread(block 65) failed [ 176.080747][ T2317] FAT-fs (loop1): Directory bread(block 66) failed [ 176.089963][ T2275] device veth1_macvtap entered promiscuous mode [ 176.099350][ T2317] FAT-fs (loop1): Directory bread(block 67) failed [ 176.106420][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.113823][ T2317] FAT-fs (loop1): Directory bread(block 68) failed [ 176.120485][ T2317] FAT-fs (loop1): Directory bread(block 69) failed [ 176.122388][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.127818][ T2317] FAT-fs (loop1): Directory bread(block 70) failed [ 176.141921][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.143403][ T2317] FAT-fs (loop1): Directory bread(block 71) failed [ 176.150639][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.157933][ T2317] FAT-fs (loop1): Directory bread(block 72) failed [ 176.165495][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.170699][ T2317] FAT-fs (loop1): Directory bread(block 73) failed [ 176.180162][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.195244][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.204591][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.222330][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.230809][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.259486][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.267164][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.330077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.341112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.350213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.358818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.367652][ T2309] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.379126][ T2309] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.388226][ T2309] device bridge_slave_0 entered promiscuous mode [ 176.396607][ T2309] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.403646][ T2309] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.412025][ T2309] device bridge_slave_1 entered promiscuous mode [ 176.927448][ T30] audit: type=1326 audit(1725729222.830:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2340 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 177.013694][ T30] audit: type=1326 audit(1725729222.860:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2340 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 177.124609][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.131759][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.139882][ T2335] device bridge_slave_0 entered promiscuous mode [ 177.152189][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.159235][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.167829][ T2335] device bridge_slave_1 entered promiscuous mode [ 177.231547][ T329] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.235876][ T334] tipc: Left network mode [ 177.379119][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.387622][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.422595][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.431136][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.440550][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.447520][ T596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.456048][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.457015][ T320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.483250][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.494310][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.501244][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.553970][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.696298][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.706888][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.741862][ T329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.752808][ T329] usb 4-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.772853][ T329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.780680][ T329] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 177.788006][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.790558][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.798658][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.818009][ T329] usb 4-1: config 0 descriptor?? [ 177.845921][ T320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.857897][ T320] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.870368][ T320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.878190][ T320] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 177.887963][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.913940][ T329] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 177.934451][ T320] usb 2-1: config 0 descriptor?? [ 177.977544][ T320] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 178.043697][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.052664][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.079542][ T2309] device veth0_vlan entered promiscuous mode [ 178.086331][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.095401][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.104627][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.112502][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.135990][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.144940][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.210220][ T2309] device veth1_macvtap entered promiscuous mode [ 178.252716][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.260659][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.276893][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.285884][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.294733][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.334594][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.343379][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.350975][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.360394][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.368868][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.375805][ T596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.383696][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.392212][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.400813][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.408712][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.416169][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.431799][ T334] device bridge_slave_1 left promiscuous mode [ 178.437875][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.447177][ T334] device bridge_slave_0 left promiscuous mode [ 178.453451][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.463303][ T334] device bridge_slave_1 left promiscuous mode [ 178.469431][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.477705][ T334] device bridge_slave_0 left promiscuous mode [ 178.483809][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.494328][ T334] device veth1_macvtap left promiscuous mode [ 178.500225][ T334] device veth0_vlan left promiscuous mode [ 178.506660][ T334] device veth1_macvtap left promiscuous mode [ 178.512586][ T334] device veth0_vlan left promiscuous mode [ 178.861761][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.873300][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.022619][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.033564][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.120522][ T2335] device veth0_vlan entered promiscuous mode [ 179.150356][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.159178][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.169088][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.177503][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.186897][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.195191][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.214165][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 179.214198][ T30] audit: type=1400 audit(1725729225.120:650): avc: denied { bind } for pid=2361 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.234200][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.249812][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.275368][ T2335] device veth1_macvtap entered promiscuous mode [ 179.285767][ T2362] loop4: detected capacity change from 0 to 1024 [ 179.316903][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.325250][ T2362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c02c, mo2=0003] [ 179.333894][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.334519][ T2362] System zones: 0-1 [ 179.342499][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.342500][ T2362] , 3-36 [ 179.362334][ T2362] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,delalloc,nodelalloc,errors=remount-ro,bsddf,debug,. Quota mode: writeback. [ 179.392999][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.401808][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.410461][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.418182][ T2354] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.427011][ T2354] device bridge_slave_0 entered promiscuous mode [ 179.436239][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.443975][ T2354] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.453085][ T2354] device bridge_slave_1 entered promiscuous mode [ 179.527042][ T30] audit: type=1326 audit(1725729225.430:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff888ef9 code=0x7ffc0000 [ 179.590834][ T30] audit: type=1326 audit(1725729225.460:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4eff888ef9 code=0x7ffc0000 [ 179.625535][ T30] audit: type=1326 audit(1725729225.460:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff888ef9 code=0x7ffc0000 [ 179.653848][ T30] audit: type=1400 audit(1725729225.560:654): avc: denied { read } for pid=2361 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.879916][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.888787][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.288484][ T359] usb 4-1: USB disconnect, device number 12 [ 181.323775][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.365425][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.386387][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.393528][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.419589][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.456784][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.476993][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.483987][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.494963][ T6] usb 2-1: USB disconnect, device number 8 [ 181.510904][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.519727][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.530540][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.562710][ T2379] tipc: Started in network mode [ 181.567438][ T2379] tipc: Node identity 101, cluster identity 4711 [ 181.584184][ T2379] tipc: Node number set to 257 [ 181.589469][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.010797][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.242872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.263464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.333496][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.355806][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.386586][ T2354] device veth0_vlan entered promiscuous mode [ 182.401309][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.413538][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.483734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.496725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.518134][ T2354] device veth1_macvtap entered promiscuous mode [ 182.550490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.584322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.596837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.611557][ T320] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.634320][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.648483][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.654120][ T2397] loop1: detected capacity change from 0 to 1024 [ 182.714188][ T2397] EXT4-fs (loop1): Ignoring removed orlov option [ 182.720462][ T2397] EXT4-fs (loop1): Mount option "noload" incompatible with ext2 [ 182.825574][ T2398] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.833266][ T2398] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.850009][ T2398] device bridge_slave_0 entered promiscuous mode [ 182.890343][ T2398] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.898295][ T2398] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.944541][ T2398] device bridge_slave_1 entered promiscuous mode [ 183.049009][ T30] audit: type=1400 audit(1725729228.950:655): avc: denied { create } for pid=2408 comm="syz.4.672" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 183.155732][ T334] device bridge_slave_1 left promiscuous mode [ 183.161882][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.170173][ T334] device bridge_slave_0 left promiscuous mode [ 183.176787][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.186573][ T334] device veth1_macvtap left promiscuous mode [ 183.192606][ T334] device veth0_vlan left promiscuous mode [ 183.201710][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.213034][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.221933][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.222890][ T320] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 183.239252][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.250002][ T320] usb 1-1: config 0 descriptor?? [ 183.495452][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.506022][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.525666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.535084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.549973][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.558262][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.565802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.576084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.584728][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.591740][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.600075][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.618392][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.626799][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.637771][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.646772][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.676656][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.686105][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.695229][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.707457][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.717887][ T6] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 183.727534][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.741797][ T6] usb 3-1: config 0 descriptor?? [ 183.742132][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.762810][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.770749][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.784411][ T2398] device veth0_vlan entered promiscuous mode [ 183.800218][ T320] logitech-djreceiver 0003:046D:C71B.0014: item fetching failed at offset 3/7 [ 183.809556][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.810629][ T320] logitech-djreceiver 0003:046D:C71B.0014: logi_dj_probe: parse failed [ 183.822122][ T2398] device veth1_macvtap entered promiscuous mode [ 183.826592][ T320] logitech-djreceiver: probe of 0003:046D:C71B.0014 failed with error -22 [ 183.844539][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.855094][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.871759][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.880416][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.932857][ T30] audit: type=1326 audit(1725729229.840:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 183.950664][ T2415] loop4: detected capacity change from 0 to 256 [ 183.966543][ T30] audit: type=1326 audit(1725729229.840:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 184.030093][ T30] audit: type=1400 audit(1725729229.870:658): avc: denied { listen } for pid=2414 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.054479][ T30] audit: type=1400 audit(1725729229.870:659): avc: denied { accept } for pid=2414 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.081147][ T533] usb 1-1: USB disconnect, device number 11 [ 184.237063][ T6] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 184.244557][ T6] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 184.252498][ T6] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 184.259777][ T6] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 184.267832][ T6] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 184.277295][ T6] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 184.454499][ T2058] usb 3-1: USB disconnect, device number 7 [ 184.471561][ T6] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 184.594602][ T334] device bridge_slave_1 left promiscuous mode [ 184.611684][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.630796][ T334] device bridge_slave_0 left promiscuous mode [ 184.647042][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.679226][ T334] device veth1_macvtap left promiscuous mode [ 184.697125][ T334] device veth0_vlan left promiscuous mode [ 184.842031][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.879659][ T6] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.933011][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.968080][ T6] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 185.044067][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.132895][ T2429] loop1: detected capacity change from 0 to 256 [ 185.142344][ T6] usb 4-1: config 0 descriptor?? [ 185.209306][ T6] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 185.283390][ T2429] FAT-fs (loop1): Directory bread(block 64) failed [ 185.307029][ T2429] FAT-fs (loop1): Directory bread(block 65) failed [ 185.324093][ T2429] FAT-fs (loop1): Directory bread(block 66) failed [ 185.330504][ T2429] FAT-fs (loop1): Directory bread(block 67) failed [ 185.357476][ T2429] FAT-fs (loop1): Directory bread(block 68) failed [ 185.369990][ T2429] FAT-fs (loop1): Directory bread(block 69) failed [ 185.387771][ T2429] FAT-fs (loop1): Directory bread(block 70) failed [ 185.403120][ T2429] FAT-fs (loop1): Directory bread(block 71) failed [ 185.419941][ T2429] FAT-fs (loop1): Directory bread(block 72) failed [ 185.430001][ T2429] FAT-fs (loop1): Directory bread(block 73) failed [ 185.491698][ T2431] tipc: Started in network mode [ 185.496945][ T2431] tipc: Node identity 101, cluster identity 4711 [ 185.511619][ T2431] tipc: Node number set to 257 [ 185.861807][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 185.861838][ T30] audit: type=1326 audit(1725729231.750:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2440 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 185.939909][ T30] audit: type=1326 audit(1725729231.770:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2440 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 185.983449][ T334] tipc: Left network mode [ 185.994878][ T30] audit: type=1326 audit(1725729231.820:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2440 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 186.021533][ T30] audit: type=1326 audit(1725729231.820:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2440 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 186.044893][ T30] audit: type=1326 audit(1725729231.820:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2440 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafc63aef9 code=0x7ffc0000 [ 186.068366][ T30] audit: type=1400 audit(1725729231.900:668): avc: denied { mounton } for pid=2446 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 186.181646][ T2446] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.188626][ T2446] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.196847][ T2446] device bridge_slave_0 entered promiscuous mode [ 186.204722][ T2446] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.211771][ T594] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.212621][ T2446] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.227282][ T2446] device bridge_slave_1 entered promiscuous mode [ 186.281588][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.387278][ T2446] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.394389][ T2446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.401637][ T2446] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.408748][ T2446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.470100][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.485224][ T533] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.494239][ T533] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.514028][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.523919][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.531616][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.541840][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.551230][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.558291][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.574166][ T334] device bridge_slave_1 left promiscuous mode [ 186.592735][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.601287][ T334] device bridge_slave_0 left promiscuous mode [ 186.609147][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.619609][ T334] device veth1_macvtap left promiscuous mode [ 186.626406][ T334] device veth0_vlan left promiscuous mode [ 186.641894][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.661739][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.673012][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 186.682670][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.700665][ T6] usb 2-1: config 0 descriptor?? [ 186.715844][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.741532][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.764039][ T594] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 186.776142][ T594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.789086][ T594] usb 5-1: config 0 descriptor?? [ 187.020298][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.031261][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.064590][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.075335][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.148545][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.164780][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.172695][ T2058] usb 4-1: USB disconnect, device number 13 [ 187.247032][ T6] logitech-djreceiver 0003:046D:C71B.0016: item fetching failed at offset 3/7 [ 187.274251][ T6] logitech-djreceiver 0003:046D:C71B.0016: logi_dj_probe: parse failed [ 187.284997][ T2446] device veth0_vlan entered promiscuous mode [ 187.292459][ T6] logitech-djreceiver: probe of 0003:046D:C71B.0016 failed with error -22 [ 187.295565][ T594] logitech-djreceiver 0003:046D:C71B.0017: item fetching failed at offset 3/7 [ 187.318999][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.330472][ T594] logitech-djreceiver 0003:046D:C71B.0017: logi_dj_probe: parse failed [ 187.333026][ T2459] loop3: detected capacity change from 0 to 256 [ 187.341038][ T594] logitech-djreceiver: probe of 0003:046D:C71B.0017 failed with error -22 [ 187.354483][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.385731][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.398868][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.403851][ T594] usb 2-1: USB disconnect, device number 9 [ 187.408378][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.426421][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.436813][ T2459] FAT-fs (loop3): Directory bread(block 64) failed [ 187.443424][ T2459] FAT-fs (loop3): Directory bread(block 65) failed [ 187.450618][ T2459] FAT-fs (loop3): Directory bread(block 66) failed [ 187.457843][ T2459] FAT-fs (loop3): Directory bread(block 67) failed [ 187.465461][ T2459] FAT-fs (loop3): Directory bread(block 68) failed [ 187.472486][ T2459] FAT-fs (loop3): Directory bread(block 69) failed [ 187.475408][ T2446] device veth1_macvtap entered promiscuous mode [ 187.479015][ T2459] FAT-fs (loop3): Directory bread(block 70) failed [ 187.492928][ T2459] FAT-fs (loop3): Directory bread(block 71) failed [ 187.499389][ T2459] FAT-fs (loop3): Directory bread(block 72) failed [ 187.505915][ T2459] FAT-fs (loop3): Directory bread(block 73) failed [ 187.526704][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.544125][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.552734][ T6] usb 5-1: USB disconnect, device number 13 [ 187.560038][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.600963][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.609858][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.633040][ T334] tipc: Left network mode [ 187.704534][ T2463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 187.828354][ T30] audit: type=1326 audit(1725729233.730:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 187.865161][ T30] audit: type=1326 audit(1725729233.730:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 187.892119][ T30] audit: type=1326 audit(1725729233.730:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 187.917025][ T30] audit: type=1326 audit(1725729233.760:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b15c3ef9 code=0x7ffc0000 [ 188.087178][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.094535][ T2466] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.103061][ T2466] device bridge_slave_0 entered promiscuous mode [ 188.121596][ T594] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.134146][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.141126][ T2466] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.149431][ T2466] device bridge_slave_1 entered promiscuous mode [ 188.291581][ T533] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.307195][ T334] device bridge_slave_1 left promiscuous mode [ 188.313972][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.322371][ T334] device bridge_slave_0 left promiscuous mode [ 188.328906][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.339531][ T334] device veth1_macvtap left promiscuous mode [ 188.346200][ T334] device veth0_vlan left promiscuous mode [ 188.391650][ T594] usb 1-1: Using ep0 maxpacket: 8 [ 188.461707][ T39] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.511758][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.523809][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.534475][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.534475][ T594] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 188.534539][ T594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.541943][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.542192][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.570759][ T594] usb 1-1: config 0 descriptor?? [ 188.574855][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.621469][ T2058] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.632803][ T2058] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.641241][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.649834][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.666599][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.671975][ T533] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.675229][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.685239][ T533] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.692029][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.714004][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.724367][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.731419][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.862016][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.873794][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.881875][ T533] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.896674][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.906749][ T533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.935821][ T533] usb 2-1: SerialNumber: syz [ 188.946559][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.973386][ T39] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.009015][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.011031][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.020992][ T39] usb 5-1: SerialNumber: syz [ 189.030138][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.077047][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.088593][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.109196][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.118854][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.130274][ T2466] device veth0_vlan entered promiscuous mode [ 189.179089][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.188819][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.206302][ T533] usb 2-1: 0:2 : does not exist [ 189.251132][ T2466] device veth1_macvtap entered promiscuous mode [ 189.303512][ T2463] UDC core: couldn't find an available UDC or it's busy: -16 [ 189.306478][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.311675][ T2463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.322621][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.353077][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.387101][ T39] usb 5-1: 0:2 : does not exist [ 189.411940][ T594] usbhid 1-1:0.0: can't add hid device: -71 [ 189.418518][ T594] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.433226][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.450870][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.453024][ T2473] loop1: detected capacity change from 0 to 512 [ 189.468493][ T594] usb 1-1: USB disconnect, device number 12 [ 189.545077][ T2473] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.698: corrupted in-inode xattr [ 189.563357][ T2473] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.698: couldn't read orphan inode 15 (err -117) [ 189.584201][ T2480] loop4: detected capacity change from 0 to 512 [ 189.601822][ T2473] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 189.631007][ T2480] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.700: corrupted in-inode xattr [ 189.653423][ T2480] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.700: couldn't read orphan inode 15 (err -117) [ 189.671994][ T2480] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 189.907074][ T2494] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.914922][ T2494] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.923777][ T2494] device bridge_slave_0 entered promiscuous mode [ 189.933473][ T2494] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.941116][ T2494] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.950219][ T2494] device bridge_slave_1 entered promiscuous mode [ 190.005306][ T39] usb 5-1: USB disconnect, device number 14 [ 190.023660][ T320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.114223][ T334] device bridge_slave_1 left promiscuous mode [ 190.120528][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.129400][ T334] device bridge_slave_0 left promiscuous mode [ 190.136699][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.147217][ T334] device veth1_macvtap left promiscuous mode [ 190.153645][ T334] device veth0_vlan left promiscuous mode [ 190.351690][ T533] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 190.395947][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.404895][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.421936][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.430407][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.439248][ T320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.451117][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.458391][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.466274][ T320] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.477761][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.485917][ T320] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.497354][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.505289][ T320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.512394][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.519649][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.527310][ T320] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 190.547085][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.563919][ T320] usb 3-1: config 0 descriptor?? [ 190.571416][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.591439][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.600894][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.624001][ T2506] tipc: Started in network mode [ 190.628823][ T2506] tipc: Node identity 101, cluster identity 4711 [ 190.635550][ T2506] tipc: Node number set to 257 [ 190.671421][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.711699][ T533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.728265][ T533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.740762][ T2494] device veth0_vlan entered promiscuous mode [ 190.750189][ T533] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 190.770511][ T533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.783933][ T2494] device veth1_macvtap entered promiscuous mode [ 190.802587][ T533] usb 1-1: config 0 descriptor?? [ 190.886493][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.898419][ T2511] loop3: detected capacity change from 0 to 256 [ 190.907189][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.918101][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.927076][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.935967][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.944070][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.989524][ T2511] FAT-fs (loop3): Directory bread(block 64) failed [ 190.996915][ T2511] FAT-fs (loop3): Directory bread(block 65) failed [ 191.004593][ T2511] FAT-fs (loop3): Directory bread(block 66) failed [ 191.011335][ T2511] FAT-fs (loop3): Directory bread(block 67) failed [ 191.019340][ T2511] FAT-fs (loop3): Directory bread(block 68) failed [ 191.030166][ T2511] FAT-fs (loop3): Directory bread(block 69) failed [ 191.037321][ T2511] FAT-fs (loop3): Directory bread(block 70) failed [ 191.046972][ T2511] FAT-fs (loop3): Directory bread(block 71) failed [ 191.068083][ T2511] FAT-fs (loop3): Directory bread(block 72) failed [ 191.083611][ T60] usb 2-1: USB disconnect, device number 10 [ 191.102589][ T2511] FAT-fs (loop3): Directory bread(block 73) failed [ 191.298788][ T533] logitech-djreceiver 0003:046D:C71B.0018: item fetching failed at offset 3/7 [ 191.319702][ T533] logitech-djreceiver 0003:046D:C71B.0018: logi_dj_probe: parse failed [ 191.340206][ T533] logitech-djreceiver: probe of 0003:046D:C71B.0018 failed with error -22 [ 191.372098][ T320] usbhid 3-1:0.0: can't add hid device: -71 [ 191.378703][ T320] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.393135][ T320] usb 3-1: USB disconnect, device number 8 [ 191.407731][ T334] tipc: Left network mode [ 191.421801][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 191.421833][ T30] audit: type=1326 audit(1725729237.320:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.482476][ T30] audit: type=1326 audit(1725729237.360:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.494699][ T60] usb 1-1: USB disconnect, device number 13 [ 191.508149][ T30] audit: type=1326 audit(1725729237.360:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.671087][ T30] audit: type=1326 audit(1725729237.570:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.694971][ T30] audit: type=1326 audit(1725729237.570:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.724295][ T30] audit: type=1326 audit(1725729237.580:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.748203][ T30] audit: type=1326 audit(1725729237.630:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb216517ef9 code=0x7ffc0000 [ 191.820291][ T2528] tipc: Started in network mode [ 191.826556][ T2528] tipc: Node identity 101, cluster identity 4711 [ 191.832962][ T2528] tipc: Node number set to 257 [ 191.971231][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.978757][ T2526] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.987130][ T2526] device bridge_slave_0 entered promiscuous mode [ 191.995089][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.002966][ T2526] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.011913][ T320] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.013968][ T2526] device bridge_slave_1 entered promiscuous mode [ 192.151663][ T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.159614][ T533] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 192.197751][ T334] device bridge_slave_1 left promiscuous mode [ 192.204635][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.214473][ T334] device bridge_slave_0 left promiscuous mode [ 192.222712][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.236403][ T334] device veth1_macvtap left promiscuous mode [ 192.244109][ T334] device veth0_vlan left promiscuous mode [ 192.391951][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.401701][ T533] usb 4-1: Using ep0 maxpacket: 8 [ 192.403310][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.422759][ T320] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 192.434503][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.462180][ T320] usb 5-1: config 0 descriptor?? [ 192.522490][ T533] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.534999][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.557244][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.641967][ T60] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.651001][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.659788][ T60] usb 3-1: SerialNumber: syz [ 192.721991][ T533] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.731282][ T533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.751550][ T533] usb 4-1: Product: syz [ 192.755619][ T533] usb 4-1: Manufacturer: syz [ 192.760033][ T533] usb 4-1: SerialNumber: syz [ 192.819142][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.832891][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.852483][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.861276][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.869939][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.876959][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.884629][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.893442][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.902724][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.909731][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.918064][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.927723][ T60] usb 3-1: 0:2 : does not exist [ 192.932914][ T60] usb 3-1: unit 5 not found! [ 192.970028][ T320] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 192.980608][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.991779][ T320] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 192.998947][ T320] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 193.007868][ T320] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 193.045559][ T320] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 193.066673][ T320] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 193.093155][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.103901][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.141773][ T2532] UDC core: couldn't find an available UDC or it's busy: -16 [ 193.149142][ T2532] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.161604][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.169966][ T30] audit: type=1326 audit(1725729239.070:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2529 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f4fa9ef9 code=0x7ffc0000 [ 193.180634][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.204054][ T2526] device veth0_vlan entered promiscuous mode [ 193.214683][ T359] usb 5-1: USB disconnect, device number 15 [ 193.229046][ T30] audit: type=1326 audit(1725729239.110:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2529 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f4fa9ef9 code=0x7ffc0000 [ 193.255968][ T30] audit: type=1326 audit(1725729239.150:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2529 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fc4f4fa9ef9 code=0x7ffc0000 [ 193.260366][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.290082][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.327453][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.336307][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.366177][ T2526] device veth1_macvtap entered promiscuous mode [ 193.389142][ T2543] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.396596][ T2543] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.405348][ T2543] device bridge_slave_0 entered promiscuous mode [ 193.415599][ T2543] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.422597][ T2543] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.430730][ T2543] device bridge_slave_1 entered promiscuous mode [ 193.494319][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.502578][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.511233][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.543490][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.552179][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.687071][ T2543] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.694220][ T2543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.702151][ T2543] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.709951][ T2543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.769930][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.779985][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.788821][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.809500][ T334] device bridge_slave_1 left promiscuous mode [ 193.820205][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.863253][ T334] device bridge_slave_0 left promiscuous mode [ 193.877209][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.895361][ T334] device veth1_macvtap left promiscuous mode [ 193.901428][ T334] device veth0_vlan left promiscuous mode [ 194.196051][ T533] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 194.205937][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.215751][ T533] cdc_ncm 4-1:1.0: dwNtbInMaxSize=12 is too small. Using 2048 [ 194.224662][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.231876][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.239798][ T533] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 194.247462][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.256976][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.264386][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.348336][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.358527][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.395240][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.408117][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.441044][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.453407][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.484328][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.500857][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.523158][ T2543] device veth0_vlan entered promiscuous mode [ 194.533951][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.543451][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.585911][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.594504][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.608101][ T2543] device veth1_macvtap entered promiscuous mode [ 194.624708][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.634366][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.643386][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.663688][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.671607][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.673885][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.936723][ T533] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 194.961344][ T2567] loop3: detected capacity change from 0 to 256 [ 194.972937][ T320] usb 3-1: USB disconnect, device number 9 [ 195.000801][ T533] usb 4-1: USB disconnect, device number 14 [ 195.011547][ T1238] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 195.024827][ T533] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 195.041711][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.057945][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.084944][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 195.139673][ T2567] FAT-fs (loop3): Directory bread(block 64) failed [ 195.156573][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.226483][ T2567] FAT-fs (loop3): Directory bread(block 65) failed [ 195.233332][ T2567] FAT-fs (loop3): Directory bread(block 66) failed [ 195.240095][ T2567] FAT-fs (loop3): Directory bread(block 67) failed [ 195.247340][ T2567] FAT-fs (loop3): Directory bread(block 68) failed [ 195.268282][ T60] usb 5-1: config 0 descriptor?? [ 195.274621][ T2567] FAT-fs (loop3): Directory bread(block 69) failed [ 195.278480][ T6] ================================================================== [ 195.281087][ T2567] FAT-fs (loop3): Directory bread(block 70) failed [ 195.289010][ T6] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 195.289108][ T6] Read of size 8 at addr ffff8881127e8c70 by task kworker/0:0/6 [ 195.300599][ T2567] FAT-fs (loop3): Directory bread(block 71) failed [ 195.303315][ T6] [ 195.303328][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.15.157-syzkaller-00897-g53be7c8abe11 #0 [ 195.311209][ T2567] FAT-fs (loop3): Directory bread(block 72) failed [ 195.317567][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.317609][ T6] Workqueue: 0x0 [ 195.319785][ T2567] FAT-fs (loop3): Directory bread(block 73) failed [ 195.329458][ T6] (rcu_gp) [ 195.329492][ T6] Call Trace: [ 195.329509][ T6] [ 195.329530][ T6] dump_stack_lvl+0x151/0x1c0 [ 195.369616][ T6] ? io_uring_drop_tctx_refs+0x190/0x190 [ 195.375262][ T6] ? panic+0x760/0x760 [ 195.379344][ T6] ? _raw_spin_lock+0xa4/0x1b0 [ 195.383943][ T6] print_address_description+0x87/0x3b0 [ 195.389317][ T6] kasan_report+0x179/0x1c0 [ 195.393657][ T6] ? __list_del_entry_valid+0xa6/0x120 [ 195.399327][ T6] ? __list_del_entry_valid+0xa6/0x120 [ 195.404795][ T6] __asan_report_load8_noabort+0x14/0x20 [ 195.410632][ T6] __list_del_entry_valid+0xa6/0x120 [ 195.416008][ T6] move_linked_works+0x7c/0x260 [ 195.420694][ T6] ? led_work+0x590/0x590 [ 195.424862][ T6] process_one_work+0x2eb/0xc10 [ 195.429651][ T6] worker_thread+0xad5/0x12a0 [ 195.434165][ T6] kthread+0x421/0x510 [ 195.438053][ T6] ? worker_clr_flags+0x180/0x180 [ 195.443033][ T6] ? kthread_blkcg+0xd0/0xd0 [ 195.447721][ T6] ret_from_fork+0x1f/0x30 [ 195.451972][ T6] [ 195.454832][ T6] [ 195.457339][ T6] Allocated by task 533: [ 195.461579][ T6] ____kasan_kmalloc+0xdb/0x110 [ 195.466335][ T6] __kasan_kmalloc+0x9/0x10 [ 195.470772][ T6] __kmalloc+0x13a/0x270 [ 195.475049][ T6] kvmalloc_node+0x1f0/0x4d0 [ 195.479612][ T6] alloc_netdev_mqs+0x8c/0xc90 [ 195.484447][ T6] alloc_etherdev_mqs+0x33/0x40 [ 195.489209][ T6] usbnet_probe+0x1ff/0x2830 [ 195.493668][ T6] usb_probe_interface+0x5b6/0xa90 [ 195.498689][ T6] really_probe+0x28d/0x970 [ 195.503203][ T6] __driver_probe_device+0x1a0/0x310 [ 195.508367][ T6] driver_probe_device+0x54/0x3d0 [ 195.513192][ T6] __device_attach_driver+0x2c5/0x470 [ 195.518557][ T6] bus_for_each_drv+0x183/0x200 [ 195.523243][ T6] __device_attach+0x312/0x510 [ 195.528048][ T6] device_initial_probe+0x1a/0x20 [ 195.533104][ T6] bus_probe_device+0xbe/0x1e0 [ 195.537931][ T6] device_add+0xb60/0xf10 [ 195.542197][ T6] usb_set_configuration+0x190f/0x1e80 [ 195.547579][ T6] usb_generic_driver_probe+0x8b/0x150 [ 195.552889][ T6] usb_probe_device+0x144/0x260 [ 195.557563][ T6] really_probe+0x28d/0x970 [ 195.562009][ T6] __driver_probe_device+0x1a0/0x310 [ 195.567401][ T6] driver_probe_device+0x54/0x3d0 [ 195.573198][ T6] __device_attach_driver+0x2c5/0x470 [ 195.578406][ T6] bus_for_each_drv+0x183/0x200 [ 195.583490][ T6] __device_attach+0x312/0x510 [ 195.588077][ T6] device_initial_probe+0x1a/0x20 [ 195.593677][ T6] bus_probe_device+0xbe/0x1e0 [ 195.598282][ T6] device_add+0xb60/0xf10 [ 195.602510][ T6] usb_new_device+0x1038/0x1c00 [ 195.607272][ T6] hub_event+0x2def/0x4770 [ 195.611981][ T6] process_one_work+0x6bb/0xc10 [ 195.617031][ T6] worker_thread+0xad5/0x12a0 [ 195.621644][ T6] kthread+0x421/0x510 [ 195.625665][ T6] ret_from_fork+0x1f/0x30 [ 195.629929][ T6] [ 195.632201][ T6] Freed by task 533: [ 195.636024][ T6] kasan_set_track+0x4b/0x70 [ 195.640652][ T6] kasan_set_free_info+0x23/0x40 [ 195.645516][ T6] ____kasan_slab_free+0x126/0x160 [ 195.651156][ T6] __kasan_slab_free+0x11/0x20 [ 195.656016][ T6] slab_free_freelist_hook+0xbd/0x190 [ 195.661335][ T6] kfree+0xc8/0x220 [ 195.665045][ T6] kvfree+0x35/0x40 [ 195.669176][ T6] netdev_freemem+0x3f/0x60 [ 195.674026][ T6] netdev_release+0x7f/0xb0 [ 195.679172][ T6] device_release+0x95/0x1c0 [ 195.683964][ T6] kobject_put+0x178/0x260 [ 195.688686][ T6] put_device+0x1f/0x30 [ 195.692761][ T6] free_netdev+0x34f/0x440 [ 195.697041][ T6] usbnet_disconnect+0x245/0x390 [ 195.702070][ T6] usb_unbind_interface+0x1fa/0x8c0 [ 195.707636][ T6] device_release_driver_internal+0x50b/0x7d0 [ 195.713531][ T6] device_release_driver+0x19/0x20 [ 195.718650][ T6] bus_remove_device+0x2f8/0x360 [ 195.723425][ T6] device_del+0x663/0xe90 [ 195.727596][ T6] usb_disable_device+0x380/0x720 [ 195.732451][ T6] usb_disconnect+0x32a/0x890 [ 195.737062][ T6] hub_event+0x1d42/0x4770 [ 195.742782][ T6] process_one_work+0x6bb/0xc10 [ 195.747748][ T6] worker_thread+0xe02/0x12a0 [ 195.752283][ T6] kthread+0x421/0x510 [ 195.756640][ T6] ret_from_fork+0x1f/0x30 [ 195.761376][ T6] [ 195.763503][ T6] Last potentially related work creation: [ 195.769523][ T6] kasan_save_stack+0x3b/0x60 [ 195.774571][ T6] __kasan_record_aux_stack+0xd3/0xf0 [ 195.779788][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 195.785682][ T6] insert_work+0x56/0x320 [ 195.789895][ T6] __queue_work+0x92a/0xcd0 [ 195.794199][ T6] queue_work_on+0x105/0x170 [ 195.798627][ T6] usbnet_link_change+0xeb/0x100 [ 195.803388][ T6] usbnet_probe+0x1dd3/0x2830 [ 195.808015][ T6] usb_probe_interface+0x5b6/0xa90 [ 195.813044][ T6] really_probe+0x28d/0x970 [ 195.817385][ T6] __driver_probe_device+0x1a0/0x310 [ 195.822505][ T6] driver_probe_device+0x54/0x3d0 [ 195.827369][ T6] __device_attach_driver+0x2c5/0x470 [ 195.832579][ T6] bus_for_each_drv+0x183/0x200 [ 195.837348][ T6] __device_attach+0x312/0x510 [ 195.842032][ T6] device_initial_probe+0x1a/0x20 [ 195.846895][ T6] bus_probe_device+0xbe/0x1e0 [ 195.851743][ T6] device_add+0xb60/0xf10 [ 195.856735][ T6] usb_set_configuration+0x190f/0x1e80 [ 195.862034][ T6] usb_generic_driver_probe+0x8b/0x150 [ 195.867413][ T6] usb_probe_device+0x144/0x260 [ 195.872182][ T6] really_probe+0x28d/0x970 [ 195.876525][ T6] __driver_probe_device+0x1a0/0x310 [ 195.881935][ T6] driver_probe_device+0x54/0x3d0 [ 195.887027][ T6] __device_attach_driver+0x2c5/0x470 [ 195.892320][ T6] bus_for_each_drv+0x183/0x200 [ 195.897176][ T6] __device_attach+0x312/0x510 [ 195.901777][ T6] device_initial_probe+0x1a/0x20 [ 195.906771][ T6] bus_probe_device+0xbe/0x1e0 [ 195.911866][ T6] device_add+0xb60/0xf10 [ 195.916918][ T6] usb_new_device+0x1038/0x1c00 [ 195.921602][ T6] hub_event+0x2def/0x4770 [ 195.925857][ T6] process_one_work+0x6bb/0xc10 [ 195.930676][ T6] worker_thread+0xad5/0x12a0 [ 195.935224][ T6] kthread+0x421/0x510 [ 195.939357][ T6] ret_from_fork+0x1f/0x30 [ 195.943632][ T6] [ 195.945966][ T6] The buggy address belongs to the object at ffff8881127e8000 [ 195.945966][ T6] which belongs to the cache kmalloc-4k of size 4096 [ 195.960382][ T6] The buggy address is located 3184 bytes inside of [ 195.960382][ T6] 4096-byte region [ffff8881127e8000, ffff8881127e9000) [ 195.974020][ T6] The buggy address belongs to the page: [ 195.980454][ T6] page:ffffea000449fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1127e8 [ 195.990755][ T6] head:ffffea000449fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 195.998918][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 196.005030][ T6] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 196.013564][ T6] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 196.023349][ T6] page dumped because: kasan: bad access detected [ 196.029699][ T6] page_owner tracks the page as allocated [ 196.035426][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2335, ts 177209058460, free_ts 177186926956 [ 196.056435][ T6] post_alloc_hook+0x1a3/0x1b0 [ 196.061069][ T6] prep_new_page+0x1b/0x110 [ 196.065609][ T6] get_page_from_freelist+0x3550/0x35d0 [ 196.071134][ T6] __alloc_pages+0x27e/0x8f0 [ 196.077696][ T6] new_slab+0x9a/0x4e0 [ 196.081579][ T6] ___slab_alloc+0x39e/0x830 [ 196.086214][ T6] __slab_alloc+0x4a/0x90 [ 196.090542][ T6] kmem_cache_alloc_trace+0x142/0x210 [ 196.096125][ T6] kobject_uevent_env+0x269/0x700 [ 196.100968][ T6] kobject_uevent+0x1f/0x30 [ 196.105297][ T6] netdev_queue_update_kobjects+0x1c0/0x400 [ 196.111036][ T6] netdev_register_kobject+0x270/0x320 [ 196.116620][ T6] register_netdevice+0xde9/0x1390 [ 196.121559][ T6] veth_newlink+0x72e/0xe20 [ 196.126158][ T6] rtnl_newlink+0x1495/0x2050 [ 196.130895][ T6] rtnetlink_rcv_msg+0x951/0xc40 [ 196.136601][ T6] page last free stack trace: [ 196.141230][ T6] free_unref_page_prepare+0x7c8/0x7d0 [ 196.146876][ T6] free_unref_page+0xe8/0x750 [ 196.151476][ T6] __free_pages+0x61/0xf0 [ 196.155843][ T6] __free_slab+0xec/0x1d0 [ 196.160939][ T6] __unfreeze_partials+0x165/0x1a0 [ 196.166165][ T6] put_cpu_partial+0xc4/0x120 [ 196.170763][ T6] __slab_free+0x1c8/0x290 [ 196.175202][ T6] ___cache_free+0x109/0x120 [ 196.180013][ T6] qlink_free+0x4d/0x90 [ 196.184085][ T6] qlist_free_all+0x44/0xb0 [ 196.188515][ T6] kasan_quarantine_reduce+0x15a/0x180 [ 196.194039][ T6] __kasan_slab_alloc+0x2f/0xe0 [ 196.198721][ T6] slab_post_alloc_hook+0x53/0x2c0 [ 196.203647][ T6] kmem_cache_alloc+0xf5/0x200 [ 196.208342][ T6] __alloc_skb+0xbe/0x550 [ 196.212506][ T6] netlink_ack+0x33c/0xb10 [ 196.216784][ T6] [ 196.218920][ T6] Memory state around the buggy address: [ 196.224663][ T6] ffff8881127e8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.232664][ T6] ffff8881127e8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.240643][ T6] >ffff8881127e8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.248527][ T6] ^ [ 196.256120][ T6] ffff8881127e8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.263982][ T6] ffff8881127e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.271876][ T6] ================================================================== [ 196.279775][ T6] Disabling lock debugging due to kernel taint [ 196.401719][ T1238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.463302][ T1238] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.529914][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 196.529950][ T30] audit: type=1400 audit(1725729242.430:714): avc: denied { create } for pid=2569 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.564495][ T1238] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.606259][ T1238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.628727][ T1238] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 196.656579][ T30] audit: type=1400 audit(1725729242.430:715): avc: denied { write } for pid=2569 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=4597 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.694574][ T1238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.740596][ T1238] usb 1-1: config 0 descriptor?? [ 196.777660][ T30] audit: type=1400 audit(1725729242.430:716): avc: denied { append } for pid=2569 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=4597 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.805619][ T60] logitech-djreceiver 0003:046D:C71B.001A: item fetching failed at offset 3/7 [ 196.850515][ T60] logitech-djreceiver 0003:046D:C71B.001A: logi_dj_probe: parse failed [ 196.872153][ T30] audit: type=1400 audit(1725729242.660:717): avc: denied { unlink } for pid=2588 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=4597 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.885181][ T60] logitech-djreceiver: probe of 0003:046D:C71B.001A failed with error -22 [ 197.043089][ T6] usb 5-1: USB disconnect, device number 16 [ 197.103650][ T430] device bridge_slave_1 left promiscuous mode [ 197.110933][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.130631][ T430] device bridge_slave_0 left promiscuous mode [ 197.142863][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.156963][ T430] device veth1_macvtap left promiscuous mode [ 197.163030][ T430] device veth0_vlan left promiscuous mode [ 197.292351][ T1238] usbhid 1-1:0.0: can't add hid device: -71 [ 197.305259][ T1238] usbhid: probe of 1-1:0.0 failed with error -71 [ 197.334320][ T1238] usb 1-1: USB disconnect, device number 14