last executing test programs: 19.25479856s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') 16.217100194s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') 14.474219185s ago: executing program 1 (id=1187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x8c}}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0xbea}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x81}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x800) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220500000003dda794755148d97da99befe122591eee813c1b9c750a9eff03191f56df4a5970dd0b03c1ec8175b00bc5bb68415e36352bb1b8000100"/73], 0x0}, 0x0) 10.923556981s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') 9.085255099s ago: executing program 1 (id=1211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x4, {0x0, 0xfe}}]}, 0x1c}}, 0x0) 9.075009089s ago: executing program 1 (id=1214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.022629663s ago: executing program 1 (id=1216): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffffffffffff67) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) 8.108399297s ago: executing program 1 (id=1222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x8c}}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0xbea}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x81}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x800) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220500000003dda794755148d97da99befe122591eee813c1b9c750a9eff03191f56df4a5970dd0b03c1ec8175b00bc5bb68415e36352bb1b8000100"/73], 0x0}, 0x0) 7.396295904s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') 5.478225389s ago: executing program 1 (id=1224): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000, 0x5}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 5.066887292s ago: executing program 3 (id=1234): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001400)=0x81, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0), 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'ipvs\x00'}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40000600) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @private1, @private1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000007c40)=[{{&(0x7f0000001400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000053c0)=[@dstopts={{0x14}}, @flowinfo={{0x10}}], 0x24}}], 0x1, 0x0) socket$inet(0x2, 0x80003, 0x8001) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x0, 0x5, 0xffff}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sigaltstack(&(0x7f00000003c0)={&(0x7f00000004c0)=""/162, 0x80000001, 0xa2}, &(0x7f0000000700)={&(0x7f0000000600)=""/199, 0x0, 0xc7}) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xefe}}, {@data_ordered}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@noinit_itable}]}, 0x1, 0x5de, &(0x7f0000001200)="$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") 4.727088049s ago: executing program 3 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 4.605032729s ago: executing program 3 (id=1236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x248, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x150, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0xf4, 0x9, 0x0, 0x1, [@m_mpls={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6}]}, {0x51, 0x6, "3d9e7b85fe99f9084b7b94ede7126b06176bbc4ccbaaa643d56006b1f9931be936646d9fffe39acc130c24b23a3ffcee4b0d2b0059ff6df2e8d87a9cc401c606de2d9bd73715a19132db406723"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x7c, 0x2, [@TCA_ROUTE4_ACT={0x78, 0x6, [@m_sample={0x74, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x1d, 0x6, "845cd14d6348c08dbdb762af165861ac63450de3ca8bd1f96b"}, {0xc}, {0xc}}}]}]}}]}, 0x248}}, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xc1, 0x86, &(0x7f0000000880)="f48089e824d81442eed341b6e0b38ffc07090a7b20209358bc297b4acea11d1bae896d1a784732f0ed67211ba672e3371ee1ba2b1eb49d732111490485595cfb9235fc86fc46986cbf9ea331d100dd3b0b5e97003caea4fd839185c0f25d383d534332fece8986c3e7c0d5d8d6aaa5c26afe358ee24ce6d4a35462104c8279f7b056938ead46a2716ed9f6f156dba0c6577bd30ec52f13152c22c4ab5b577487d1d797e279a185b206fa9054e51d0c7e89a8143c669699e601c396e854940c1b0c", &(0x7f0000000080)=""/134, 0x101, 0x0, 0x6e, 0xc5, &(0x7f0000000300)="be03f4a4e19a12632103eb4c4b639d873a7c29537dc01f115e01f9a666bae29a17555c54d90f74349233b97aa76bc8b284b9b19de6786646880ab2db5beac53c81a29e5686709371b0b27190c598543c432101e0ca0811c17ede54d53d054aff7ada31a57ed38024125d8f144027", &(0x7f0000000a00)="697bc8466f8d24d0ec45e6c908c182d4eb03734e553b9e2389077824540e24258ba953a6e412ebcaf97d58ac13e90a647aae42956da29692a46294fa2a5e50c4f6411b0d851c9ff41b5420e81308af7051e3cc276c3c7daca3c83013ebd6d8dc6c9efe314272dd00e6bda1972d9c37f0d20b6b1f59375afaab3f8550e5c4239054bc97ba9d6316ad50fc5b2bca04f9a402f812b7ffd15666fe83551828126e22f411bb4aab55bec2973eaea893c90877129abd077d02ca88e80c5afe688156128127701d08", 0x1, 0x0, 0x6f34}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.405741785s ago: executing program 0 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) 4.384878957s ago: executing program 0 (id=1238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80841, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c00), 0x6e, 0x0, 0x0, &(0x7f0000000c80), 0x150}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) close(0xffffffffffffffff) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1d, 0x2, &(0x7f00000014c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="a17f3e6a4def3f7cc0cb22f31aeaea5c07002c08bbd08d96dea6782b46fc11043ab13f98cb2fe7ff68ffd54e297cfacba5c99f8a4efce8c6d51aaa87b70ffabd7f4d0ef6c3ceecacbe87df02c7e4f03421e93eb046203e6c60ed04680600000020a34fd2e9002acf0456d731c28099055790fe0567a4c975b93d6392d88f82ed923b33b0961e6f0a0aeecc604a5deb0f8b72fef76c18296bf058f39b0586cfcd406ee5178d65eef534d14db0eed7c9373964cb1b7302cc65f9a3dc4b4f997553de29e807d7c38f90a9f9c9dea8fb12382c9fe7bf22f56fe071c22d13ec106e0009df8c1aa477eeb9fc3dbbbc1fff91af37be992ecbcaf450a3c83fbe5552530003cf071c4670b3181ef74a07b3ace636203387febe85103c7be5839fee00719ff0999c3d916d879d5ac274ead976330e34615d91803394cb8ad0628f9d09ebda07a1e79822f91425f318bec2f78ab073020dfef6fc8563a8e47bf766f71c0b8ba367c24767536059ed45adce360b6c6abf84df7dc5f31c877c36dde44e49469e69665857a58959863e54db3978f8198cbfd6f532295de930a1c247fd25083f5b54f1078b53e2653e0c2adf1effa72e443e2d84045be7d2fe9921a4d55afd8c525dacdfd26c83e7b74a0e36aefb94ed9e4d41e055fa01920955cafa56f5c9365fa51b005071ba23f4dac001ff48c2220c914f1ff87131092d", @ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES8=0x0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r10}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="532700000000000000001f"], 0x14}}, 0x0) 4.184883523s ago: executing program 0 (id=1242): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 4.000230018s ago: executing program 0 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) 3.999863008s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') 1.963776672s ago: executing program 0 (id=1244): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x6, 0x2be, &(0x7f0000000300)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) ftruncate(r3, 0x7fff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x4400) dup3(r4, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r5, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1.961133502s ago: executing program 3 (id=1246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d6, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 1.934697624s ago: executing program 3 (id=1247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 1.792500755s ago: executing program 2 (id=1248): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000002c0)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 1.691970083s ago: executing program 0 (id=1249): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1000508004000a000500020007000000"], 0x2c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2}}}]}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000a9000070900be0083000000000b09007a150b5d8c3dda2c1d1148b8a1b6c2fe3112e012bba578619bde8dff581665e08bd4be91a8aadf0da93c6076b12a5b5d6a389318d54b6bba5d0e1637704a3fc286a7efff8aedbe9c22c4325a09d2e9ef1cf5df98e9205c2dfa377b9815109fc9fb207251abeb162b93787bdc0e6b765672af7ba4c7abbc40b4ed8b5dacbe5b12b9dabd4b07219f98bc7e3a2b54058d4301e88867a1e7d82b0b6e022b03563ee816de80d065cd743d15166c64b0ef803854af0e420a05bbc6c7ba8b4977171a89"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r8, 0x81, 0x1, &(0x7f0000000000)='B') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x7) close_range(r7, 0xffffffffffffffff, 0x0) 1.627802718s ago: executing program 3 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x2d}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 900.814607ms ago: executing program 2 (id=1251): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000e80)={&(0x7f0000000600)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) 860.47072ms ago: executing program 2 (id=1252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) close(r2) 826.421783ms ago: executing program 2 (id=1253): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d00000008000200", @ANYRES32=r4, @ANYBLOB="08002f000000000005002b00820000000c000500000000000000000005002e"], 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000040) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r8) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x64000001}, 0x4008004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.throttle.io_service_bytes_recursive\x00', 0x7a05, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x23}, @empty}, 0x10) 676.390845ms ago: executing program 2 (id=1254): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 529.161997ms ago: executing program 2 (id=1256): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) readv(r2, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/119, 0x77}], 0x1) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x4da, 0x0) 0s ago: executing program 4 (id=929): chdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000140)='./file1\x00') kernel console output (not intermixed with test programs): ridge_slave_0) entered disabled state [ 134.578800][ T1636] device veth1_macvtap left promiscuous mode [ 134.584716][ T1636] device veth0_vlan left promiscuous mode [ 134.590873][ T1636] device veth1_macvtap left promiscuous mode [ 134.596831][ T1636] device veth0_vlan left promiscuous mode [ 134.783259][ T3195] device veth0_vlan entered promiscuous mode [ 134.791678][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.799434][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.806883][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.814786][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.844090][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.851625][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.866057][ T3196] device veth1_macvtap entered promiscuous mode [ 134.878042][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.887108][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.895254][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.918613][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.926838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.936072][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.944671][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.975273][ T3195] device veth1_macvtap entered promiscuous mode [ 134.994251][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.008068][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.024719][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.048184][ T3252] loop0: detected capacity change from 0 to 256 [ 135.077212][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.085823][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.109704][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.118570][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.155403][ T3261] loop1: detected capacity change from 0 to 1024 [ 135.228751][ T3263] loop0: detected capacity change from 0 to 256 [ 135.235306][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.242760][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.259274][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.269124][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.277811][ T3261] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.288544][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.295519][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.303051][ T3263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 135.306078][ T3261] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.329993][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.338044][ T3261] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 135.338297][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.358270][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.365132][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.386635][ T3261] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.386635][ T3261] [ 135.402921][ T3256] loop3: detected capacity change from 0 to 40427 [ 135.411459][ T3261] EXT4-fs (loop1): Total free blocks count 0 [ 135.418297][ T3261] EXT4-fs (loop1): Free/Dirty block details [ 135.424435][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.427296][ T3261] EXT4-fs (loop1): free_blocks=68451041280 [ 135.432870][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.445583][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.453530][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.466899][ T3226] device veth0_vlan entered promiscuous mode [ 135.473969][ T3261] EXT4-fs (loop1): dirty_blocks=32 [ 135.480079][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.483006][ T3261] EXT4-fs (loop1): Block reservation details [ 135.492314][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.494035][ T3261] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 135.502379][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.508311][ T3256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.521269][ T3256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.538234][ T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.550561][ T8] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.550561][ T8] [ 135.552396][ T3256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.568702][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.578730][ T3226] device veth1_macvtap entered promiscuous mode [ 135.590086][ T1636] tipc: Left network mode [ 135.596946][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.611693][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.622041][ T3256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.629020][ T3256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.733119][ T1088] hid-generic 0000:0000:0000.001F: unknown main item tag 0x4 [ 135.755397][ T3275] loop2: detected capacity change from 0 to 512 [ 135.767236][ T1088] hid-generic 0000:0000:0000.001F: unknown main item tag 0x2 [ 135.774483][ T1088] hid-generic 0000:0000:0000.001F: unknown main item tag 0x3 [ 135.792785][ T3275] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 135.814640][ T1088] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.827470][ T3275] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.996: invalid indirect mapped block 2683928664 (level 1) [ 135.864971][ T3275] EXT4-fs (loop2): Remounting filesystem read-only [ 135.877524][ T3275] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 135.907637][ T3275] EXT4-fs (loop2): 1 truncate cleaned up [ 135.913145][ T3275] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 136.085740][ T3277] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.102842][ T3277] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.140888][ T3277] device bridge_slave_0 entered promiscuous mode [ 136.169448][ T1636] bridge0: port 1(gretap0) entered disabled state [ 136.180954][ T3304] loop1: detected capacity change from 0 to 256 [ 136.193013][ T1636] device gretap0 left promiscuous mode [ 136.207338][ T1636] bridge0: port 1(gretap0) entered disabled state [ 136.265106][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.273633][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.281539][ T3278] device bridge_slave_0 entered promiscuous mode [ 136.288432][ T3277] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.295624][ T3277] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.303499][ T3277] device bridge_slave_1 entered promiscuous mode [ 136.382972][ T3308] loop2: detected capacity change from 0 to 256 [ 136.390244][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.400720][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.430896][ T3278] device bridge_slave_1 entered promiscuous mode [ 136.478747][ T3308] FAT-fs (loop2): Unrecognized mount option "184467440737095516150xffffffffffffffffÿ" or missing value [ 136.513723][ T3304] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 136.641470][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 136.752138][ T1636] device bridge_slave_1 left promiscuous mode [ 136.758677][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.766123][ T1636] device bridge_slave_0 left promiscuous mode [ 136.772515][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.780936][ T1636] device bridge_slave_1 left promiscuous mode [ 136.786921][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.795601][ T1636] device veth1_macvtap left promiscuous mode [ 136.801680][ T1636] device veth0_vlan left promiscuous mode [ 136.807872][ T1636] device veth1_macvtap left promiscuous mode [ 136.813742][ T1636] device veth0_vlan left promiscuous mode [ 137.080046][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 137.080062][ T30] audit: type=1400 audit(1721248702.002:29018): avc: denied { setopt } for pid=3309 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.090604][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.113354][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.120492][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.127472][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.153772][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.167820][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.278833][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.286136][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.321523][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.333802][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.347450][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.354329][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.370054][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.379016][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.387457][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.394400][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.412128][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.420107][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.428602][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.436498][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.467215][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.474588][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.487976][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.496232][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.505764][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.512664][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.520624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.531016][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.539668][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.546518][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.561612][ T3278] device veth0_vlan entered promiscuous mode [ 137.571791][ T30] audit: type=1400 audit(1721248702.492:29019): avc: denied { ioctl } for pid=3325 comm="syz.2.1029" path="socket:[28572]" dev="sockfs" ino=28572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.594908][ T3278] device veth1_macvtap entered promiscuous mode [ 137.609502][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.617037][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.636498][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.648223][ T30] audit: type=1400 audit(1721248702.522:29020): avc: denied { bind } for pid=3325 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.668406][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.676320][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.684908][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.693079][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.701387][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.709593][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.721851][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.730137][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.737553][ T3329] loop2: detected capacity change from 0 to 512 [ 137.764443][ T3328] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.779801][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.790834][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.791340][ T3329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.798305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.815167][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.824070][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.832665][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.840816][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.851159][ T3329] EXT4-fs (loop2): 1 truncate cleaned up [ 137.856802][ T3329] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 137.875345][ T3277] device veth0_vlan entered promiscuous mode [ 137.898094][ T30] audit: type=1400 audit(1721248702.822:29021): avc: denied { read write } for pid=3327 comm="syz.2.1030" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.932369][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.940562][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.948204][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.955275][ T30] audit: type=1400 audit(1721248702.842:29022): avc: denied { open } for pid=3327 comm="syz.2.1030" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.987061][ T3277] device veth1_macvtap entered promiscuous mode [ 138.002000][ T30] audit: type=1400 audit(1721248702.842:29023): avc: denied { ioctl } for pid=3327 comm="syz.2.1030" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.032380][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.042715][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.050579][ T3315] device bridge_slave_0 entered promiscuous mode [ 138.059704][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.080742][ T3336] mmap: syz.0.1018 (3336) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 138.092562][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.100202][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.108890][ T3315] device bridge_slave_1 entered promiscuous mode [ 138.115917][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.124471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.132939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.141453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.188097][ T20] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 138.300617][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.310089][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.330545][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.339214][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.347307][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.354188][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.362178][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.370593][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.378752][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.385593][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.392884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.400775][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.438466][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.446713][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.457340][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 138.460760][ T3315] device veth0_vlan entered promiscuous mode [ 138.471208][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.480059][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.487381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.511683][ T3315] device veth1_macvtap entered promiscuous mode [ 138.519429][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.536470][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.545585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.607325][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.618210][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.628196][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.641065][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.650285][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.669964][ T20] usb 3-1: config 0 descriptor?? [ 138.790844][ T1636] bridge0: port 1(gretap0) entered disabled state [ 138.800610][ T1636] device gretap0 left promiscuous mode [ 138.805894][ T1636] bridge0: port 1(gretap0) entered disabled state [ 138.928173][ T1636] device bridge_slave_1 left promiscuous mode [ 138.934141][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.942189][ T1636] device bridge_slave_0 left promiscuous mode [ 138.948243][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.956270][ T1636] device bridge_slave_1 left promiscuous mode [ 138.962568][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.970216][ T1636] device bridge_slave_0 left promiscuous mode [ 138.976154][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.984563][ T1636] device bridge_slave_1 left promiscuous mode [ 138.990530][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.999280][ T1636] device veth1_macvtap left promiscuous mode [ 139.005112][ T1636] device veth0_vlan left promiscuous mode [ 139.011153][ T1636] device veth1_macvtap left promiscuous mode [ 139.016979][ T1636] device veth0_vlan left promiscuous mode [ 139.023197][ T1636] device veth1_macvtap left promiscuous mode [ 139.029152][ T1636] device veth0_vlan left promiscuous mode [ 139.158546][ T20] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 139.176105][ T20] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 139.189893][ T20] microsoft 0003:045E:07DA.0020: no inputs found [ 139.200809][ T20] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 139.270124][ T3350] loop0: detected capacity change from 0 to 256 [ 139.298886][ T3350] FAT-fs (loop0): Unrecognized mount option "184467440737095516150xffffffffffffffffÿ" or missing value [ 139.510358][ T20] usb 3-1: USB disconnect, device number 21 [ 139.739825][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 139.799718][ T30] audit: type=1400 audit(1721248704.722:29024): avc: denied { read } for pid=3352 comm="syz.0.1032" name="event2" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.832489][ T3353] input: syz0 as /devices/virtual/input/input32 [ 139.861678][ T30] audit: type=1400 audit(1721248704.722:29025): avc: denied { open } for pid=3352 comm="syz.0.1032" path="/dev/input/event2" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.888150][ T30] audit: type=1400 audit(1721248704.752:29026): avc: denied { write } for pid=3352 comm="syz.0.1032" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.911856][ T30] audit: type=1400 audit(1721248704.752:29027): avc: denied { ioctl } for pid=3352 comm="syz.0.1032" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.973480][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.002805][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.025388][ T3347] device bridge_slave_0 entered promiscuous mode [ 140.043200][ T3362] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1035'. [ 140.059428][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.066287][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.081341][ T3347] device bridge_slave_1 entered promiscuous mode [ 140.129813][ T3364] loop2: detected capacity change from 0 to 256 [ 140.160282][ T3364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 140.569761][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.576634][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.583789][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.590746][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.644830][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.668349][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.677568][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.709411][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.717747][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.724598][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.732025][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.740242][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.747093][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.755947][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.763938][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.818896][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.830347][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.862371][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.870543][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.883729][ T3347] device veth0_vlan entered promiscuous mode [ 140.895722][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.902968][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.910601][ T3371] device bridge_slave_0 entered promiscuous mode [ 140.917508][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.924951][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.934426][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.941535][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.948906][ T3371] device bridge_slave_1 entered promiscuous mode [ 140.949227][ T3256] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 140.966140][ T3256] attempt to access beyond end of device [ 140.966140][ T3256] loop3: rw=524288, want=57352, limit=40427 [ 140.970855][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.977819][ T3256] attempt to access beyond end of device [ 140.977819][ T3256] loop3: rw=524288, want=57360, limit=40427 [ 140.986322][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.013936][ T3347] device veth1_macvtap entered promiscuous mode [ 141.024558][ T3256] attempt to access beyond end of device [ 141.024558][ T3256] loop3: rw=524288, want=57368, limit=40427 [ 141.045464][ T3256] attempt to access beyond end of device [ 141.045464][ T3256] loop3: rw=524288, want=57376, limit=40427 [ 141.057507][ T3256] attempt to access beyond end of device [ 141.057507][ T3256] loop3: rw=524288, want=57384, limit=40427 [ 141.069130][ T3256] attempt to access beyond end of device [ 141.069130][ T3256] loop3: rw=524288, want=57392, limit=40427 [ 141.080677][ T3256] attempt to access beyond end of device [ 141.080677][ T3256] loop3: rw=524288, want=57400, limit=40427 [ 141.092406][ T3256] attempt to access beyond end of device [ 141.092406][ T3256] loop3: rw=524288, want=57408, limit=40427 [ 141.116390][ T3256] attempt to access beyond end of device [ 141.116390][ T3256] loop3: rw=524288, want=57416, limit=40427 [ 141.127919][ T3256] attempt to access beyond end of device [ 141.127919][ T3256] loop3: rw=524288, want=57424, limit=40427 [ 141.167767][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.175873][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.184923][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.193985][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.194933][ T3378] loop1: detected capacity change from 0 to 2048 [ 141.202234][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.259148][ T3378] loop1: p1 < > p4 [ 141.268121][ T3378] loop1: p4 size 8388608 extends beyond EOD, truncated [ 141.349573][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.367866][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.376940][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.383843][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.393262][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.405019][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.411912][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.420280][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.441273][ T100] loop1: p1 < > p4 [ 141.449019][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 141.457693][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.465546][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.487242][ T100] loop1: p1 < > p4 [ 141.487348][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.491593][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 141.523058][ T3371] device veth0_vlan entered promiscuous mode [ 141.529863][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.544745][ T3371] device veth1_macvtap entered promiscuous mode [ 141.552306][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.560946][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.568621][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 141.577694][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.580214][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 141.608004][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.608175][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 141.616405][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.626399][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 141.678240][ T1636] device bridge_slave_1 left promiscuous mode [ 141.684212][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.693658][ T1636] device bridge_slave_0 left promiscuous mode [ 141.700254][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.708760][ T1636] device veth1_macvtap left promiscuous mode [ 141.714588][ T1636] device veth0_vlan left promiscuous mode [ 142.243039][ T3394] loop2: detected capacity change from 0 to 256 [ 142.271759][ T3396] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1047'. [ 142.318233][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 142.318249][ T30] audit: type=1400 audit(1721248707.242:29046): avc: denied { bind } for pid=3392 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.502044][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.509164][ T3398] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.516527][ T3398] device bridge_slave_0 entered promiscuous mode [ 142.524949][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.532524][ T3398] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.824626][ T3398] device bridge_slave_1 entered promiscuous mode [ 142.880696][ T3412] loop1: detected capacity change from 0 to 512 [ 142.887257][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 142.948109][ T3412] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 142.948109][ T3412] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 142.948109][ T3412] [ 142.979618][ T3412] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 142.988118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.988578][ T3412] EXT4-fs (loop1): 1 truncate cleaned up [ 142.995546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.001184][ T3412] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 143.042694][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.051289][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.059415][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.066304][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.074024][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.082294][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.090374][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.097239][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.147207][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 143.158116][ T1636] device bridge_slave_1 left promiscuous mode [ 143.170528][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.179622][ T1636] device bridge_slave_0 left promiscuous mode [ 143.185637][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.195339][ T1636] device veth1_macvtap left promiscuous mode [ 143.202052][ T1636] device veth0_vlan left promiscuous mode [ 143.347438][ T20] usb 3-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.367893][ T20] usb 3-1: config 1 interface 0 has no altsetting 0 [ 143.390721][ T30] audit: type=1400 audit(1721248708.312:29047): avc: denied { name_bind } for pid=3419 comm="syz.0.1054" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.414405][ T30] audit: type=1400 audit(1721248708.332:29048): avc: denied { node_bind } for pid=3419 comm="syz.0.1054" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 143.437817][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.446107][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.453657][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.461601][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.469843][ T30] audit: type=1400 audit(1721248708.392:29049): avc: denied { getopt } for pid=3419 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.494587][ T3420] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 143.527304][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.546374][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.561579][ T3398] device veth0_vlan entered promiscuous mode [ 143.584390][ T20] usb 3-1: Product: 樓 [ 143.597204][ T20] usb 3-1: Manufacturer: á Š [ 143.604664][ T3398] device veth1_macvtap entered promiscuous mode [ 143.635936][ T20] usb 3-1: SerialNumber: à “ [ 143.642889][ T30] audit: type=1326 audit(1721248708.562:29050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.669890][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.685242][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.702040][ T3427] loop0: detected capacity change from 0 to 512 [ 143.703167][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.716154][ T30] audit: type=1326 audit(1721248708.562:29051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.726107][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.759104][ T30] audit: type=1326 audit(1721248708.592:29052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.783050][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.791915][ T30] audit: type=1326 audit(1721248708.602:29053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.801780][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.816047][ T30] audit: type=1326 audit(1721248708.602:29054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.847617][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.855531][ T30] audit: type=1326 audit(1721248708.602:29055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.1.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7189a2fad9 code=0x7ffc0000 [ 143.855876][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.148693][ T20] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 144.160431][ T20] usb 3-1: USB disconnect, device number 22 [ 144.498503][ T1636] device bridge_slave_1 left promiscuous mode [ 144.504666][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.519071][ T1636] device bridge_slave_0 left promiscuous mode [ 144.525151][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.533637][ T1636] device veth1_macvtap left promiscuous mode [ 144.539763][ T1636] device veth0_vlan left promiscuous mode [ 145.013985][ T3447] loop2: detected capacity change from 0 to 512 [ 145.090017][ T3447] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 145.090017][ T3447] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 145.090017][ T3447] [ 145.132799][ T3447] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 145.170475][ T3447] EXT4-fs (loop2): 1 truncate cleaned up [ 145.307794][ T3447] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 145.538073][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.558935][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.566355][ T3453] device bridge_slave_0 entered promiscuous mode [ 145.827242][ T3488] input: syz0 as /devices/virtual/input/input33 [ 145.917392][ T3494] loop2: detected capacity change from 0 to 1024 [ 145.967175][ T3256] handle_bad_sector: 114251 callbacks suppressed [ 145.967196][ T3256] attempt to access beyond end of device [ 145.967196][ T3256] loop3: rw=524288, want=58032, limit=40427 [ 145.988988][ T3494] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 145.998424][ T3256] attempt to access beyond end of device [ 145.998424][ T3256] loop3: rw=524288, want=58040, limit=40427 [ 146.007225][ T3494] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 146.009907][ T3256] attempt to access beyond end of device [ 146.009907][ T3256] loop3: rw=524288, want=58048, limit=40427 [ 146.023540][ T3494] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.028353][ T3256] attempt to access beyond end of device [ 146.028353][ T3256] loop3: rw=524288, want=58056, limit=40427 [ 146.042418][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.051196][ T3256] attempt to access beyond end of device [ 146.051196][ T3256] loop3: rw=524288, want=58064, limit=40427 [ 146.069643][ T3256] attempt to access beyond end of device [ 146.069643][ T3256] loop3: rw=524288, want=58072, limit=40427 [ 146.070433][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.080940][ T3256] attempt to access beyond end of device [ 146.080940][ T3256] loop3: rw=524288, want=58080, limit=40427 [ 146.099297][ T3256] attempt to access beyond end of device [ 146.099297][ T3256] loop3: rw=524288, want=58088, limit=40427 [ 146.102462][ T3494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 146.110696][ T3256] attempt to access beyond end of device [ 146.110696][ T3256] loop3: rw=524288, want=58096, limit=40427 [ 146.126697][ T3486] device bridge_slave_0 entered promiscuous mode [ 146.129805][ T3256] attempt to access beyond end of device [ 146.129805][ T3256] loop3: rw=524288, want=58104, limit=40427 [ 146.146159][ T3494] System zones: 0-1, 3-36 [ 146.160251][ T3494] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 146.187224][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.194126][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.205845][ T3486] device bridge_slave_1 entered promiscuous mode [ 146.214131][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.221307][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.228884][ T3484] device bridge_slave_0 entered promiscuous mode [ 146.247997][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.258968][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.279904][ T3484] device bridge_slave_1 entered promiscuous mode [ 146.331220][ T329] device bridge_slave_0 left promiscuous mode [ 146.338527][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.651785][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.658732][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.665790][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.672570][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.738113][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.746109][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.769362][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.776732][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.808651][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.816672][ T3521] loop0: detected capacity change from 0 to 512 [ 146.816928][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.851266][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.858173][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.886663][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.894839][ T3521] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 146.894839][ T3521] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 146.894839][ T3521] [ 146.896383][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.947445][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.954359][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.968541][ T3521] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 146.984563][ T3521] EXT4-fs (loop0): 1 truncate cleaned up [ 146.991413][ T3521] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 147.015282][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.051372][ T3515] loop2: detected capacity change from 0 to 40427 [ 147.060374][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.069577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.085450][ T3519] loop1: detected capacity change from 0 to 40427 [ 147.087682][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.104126][ T3515] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 147.111855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.119752][ T3515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 147.120261][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.135479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.148032][ T3519] F2FS-fs (loop1): invalid crc value [ 147.167817][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.176250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.185628][ T3519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.194781][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.201675][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.218077][ T3515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.244577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.262624][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.273803][ T3519] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 147.287534][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.294426][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.297302][ T3519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.338096][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 147.338112][ T30] audit: type=1400 audit(1721248712.262:29124): avc: denied { create } for pid=3518 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.371196][ T3515] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 147.373000][ T3486] device veth0_vlan entered promiscuous mode [ 147.385863][ T3515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.428556][ T3484] device veth0_vlan entered promiscuous mode [ 147.455509][ T3484] device veth1_macvtap entered promiscuous mode [ 147.517930][ T30] audit: type=1400 audit(1721248712.442:29125): avc: denied { mounton } for pid=3484 comm="syz-executor" path="/root/syzkaller.TKdAQt/syz-tmp" dev="sda1" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 148.107198][ T30] audit: type=1400 audit(1721248712.522:29126): avc: denied { write } for pid=3518 comm="syz.1.1087" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.156045][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.159235][ T30] audit: type=1400 audit(1721248712.532:29127): avc: denied { add_name } for pid=3518 comm="syz.1.1087" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.165261][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.193846][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.202018][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.209977][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.217939][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.225773][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.233719][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.241619][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.250088][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.258361][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.266086][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.274077][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.282480][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.290558][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.298550][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.305414][ T30] audit: type=1400 audit(1721248712.532:29128): avc: denied { create } for pid=3518 comm="syz.1.1087" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.306686][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.335418][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.343675][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.370219][ T3486] device veth1_macvtap entered promiscuous mode [ 148.378931][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.386293][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.389872][ T30] audit: type=1400 audit(1721248712.542:29129): avc: denied { read append open } for pid=3518 comm="syz.1.1087" path="/23/file1/memory.events" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.408041][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.429311][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.436660][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.446950][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.455033][ T30] audit: type=1400 audit(1721248712.592:29130): avc: denied { write } for pid=3518 comm="syz.1.1087" path="/23/file1/bus" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.455796][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.499175][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.517823][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.526051][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.557233][ T30] audit: type=1400 audit(1721248712.832:29131): avc: denied { create } for pid=3514 comm="syz.2.1086" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 148.578261][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.632122][ T30] audit: type=1400 audit(1721248712.832:29132): avc: denied { write } for pid=3514 comm="syz.2.1086" name="vlan0" dev="proc" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.657563][ T30] audit: type=1400 audit(1721248712.862:29133): avc: denied { mount } for pid=3484 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.692971][ T3542] loop1: detected capacity change from 0 to 2048 [ 148.693538][ T3541] loop2: detected capacity change from 0 to 256 [ 148.730439][ T3541] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 148.738167][ T3542] loop1: p1 < > p4 [ 148.758715][ T3542] loop1: p4 size 8388608 extends beyond EOD, truncated [ 148.899163][ T100] loop1: p1 < > p4 [ 148.903393][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 148.948256][ T3546] loop0: detected capacity change from 0 to 1024 [ 148.967441][ T100] loop1: p1 < > p4 [ 148.977262][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 148.988077][ T3546] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 149.017682][ T3546] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 149.032473][ T3553] loop1: detected capacity change from 0 to 2048 [ 149.039613][ T3546] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.078497][ T3546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 149.086963][ T3546] System zones: 0-1, 3-36 [ 149.105929][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 149.107906][ T407] udevd[407]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.132367][ T3546] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 149.147558][ T3553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.181100][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.206405][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 149.229884][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.256149][ T3553] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1092: bg 0: block 234: padding at end of block bitmap is not set [ 149.272052][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.298390][ T3551] device bridge_slave_0 entered promiscuous mode [ 149.311387][ T3553] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 30 with max blocks 9 with error 117 [ 149.325283][ T3553] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.325283][ T3553] [ 149.357266][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.364121][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.398814][ T3551] device bridge_slave_1 entered promiscuous mode [ 149.464302][ T3575] loop0: detected capacity change from 0 to 512 [ 149.484002][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.491063][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.504566][ T3579] loop1: detected capacity change from 0 to 512 [ 149.519593][ T3550] device bridge_slave_0 entered promiscuous mode [ 149.530415][ T3575] EXT4-fs error (device loop0): __ext4_iget:4892: inode #15: block 1803188595: comm syz.0.1099: invalid block [ 149.542205][ T3575] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1099: couldn't read orphan inode 15 (err -117) [ 149.554204][ T3575] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,block_validity,max_dir_size_kb=0x0000000000000053,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 149.577560][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.586294][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.594767][ T3550] device bridge_slave_1 entered promiscuous mode [ 149.605580][ T3579] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1100: casefold flag without casefold feature [ 149.618416][ T557] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 149.640260][ T329] device bridge_slave_1 left promiscuous mode [ 149.646452][ T3579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1100: missing EA_INODE flag [ 149.663520][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.663630][ T3579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1100: error while reading EA inode 12 err=-117 [ 149.671308][ T3278] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 149.683770][ T3579] EXT4-fs (loop1): 1 orphan inode deleted [ 149.703697][ T3579] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.703895][ T329] device bridge_slave_0 left promiscuous mode [ 149.755901][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.774581][ T329] device veth1_macvtap left promiscuous mode [ 149.780534][ T329] device veth0_vlan left promiscuous mode [ 149.903968][ T3586] loop1: detected capacity change from 0 to 512 [ 149.927335][ T3586] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.962191][ T3586] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1104: casefold flag without casefold feature [ 149.979700][ T3586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1104: missing EA_INODE flag [ 149.997230][ T557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29810, setting to 64 [ 150.001427][ T3586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1104: error while reading EA inode 12 err=-117 [ 150.027264][ T3586] EXT4-fs (loop1): 1 orphan inode deleted [ 150.032879][ T3586] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 150.165722][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.172615][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.179843][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.186687][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.207251][ T557] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 150.216131][ T557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.238831][ T557] usb 4-1: Product: syz [ 150.240899][ T3592] loop1: detected capacity change from 0 to 1024 [ 150.242820][ T557] usb 4-1: Manufacturer: syz [ 150.255633][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.262505][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.267227][ T557] usb 4-1: SerialNumber: syz [ 150.269652][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.280814][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.292202][ T557] usb 4-1: config 0 descriptor?? [ 150.307253][ T3558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.315579][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.323368][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.330911][ T557] hub 4-1:0.0: bad descriptor, ignoring hub [ 150.336721][ T557] hub: probe of 4-1:0.0 failed with error -5 [ 150.347021][ T3592] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 150.361404][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.368435][ T3592] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 150.375556][ T3592] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.391890][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.429573][ T3592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 150.440154][ T3592] System zones: 0-1, 3-36 [ 150.445776][ T3592] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 150.487282][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.494614][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.503068][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.511881][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.530342][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.537252][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.557989][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.566339][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.574876][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.581760][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.623348][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.630914][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.638547][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.646772][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.671917][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.678938][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.686668][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.695000][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.703596][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.710724][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.728014][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.734964][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.743843][ T3590] device bridge_slave_0 entered promiscuous mode [ 150.788168][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.800617][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.817388][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.833619][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.851622][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.867350][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.884134][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.900919][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.916614][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.925020][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.934131][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.944558][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.958024][ T3590] device bridge_slave_1 entered promiscuous mode [ 150.978098][ T3256] handle_bad_sector: 71689 callbacks suppressed [ 150.978129][ T3256] attempt to access beyond end of device [ 150.978129][ T3256] loop3: rw=524288, want=58152, limit=40427 [ 150.997394][ T3256] attempt to access beyond end of device [ 150.997394][ T3256] loop3: rw=524288, want=58160, limit=40427 [ 150.999378][ T3551] device veth0_vlan entered promiscuous mode [ 151.015542][ T3256] attempt to access beyond end of device [ 151.015542][ T3256] loop3: rw=524288, want=58168, limit=40427 [ 151.028910][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.037292][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.045566][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.053304][ T3256] attempt to access beyond end of device [ 151.053304][ T3256] loop3: rw=524288, want=58176, limit=40427 [ 151.065083][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.072714][ T3256] attempt to access beyond end of device [ 151.072714][ T3256] loop3: rw=524288, want=58184, limit=40427 [ 151.087305][ T3256] attempt to access beyond end of device [ 151.087305][ T3256] loop3: rw=524288, want=58192, limit=40427 [ 151.099113][ T3256] attempt to access beyond end of device [ 151.099113][ T3256] loop3: rw=524288, want=58200, limit=40427 [ 151.110967][ T3256] attempt to access beyond end of device [ 151.110967][ T3256] loop3: rw=524288, want=58208, limit=40427 [ 151.116242][ T3550] device veth0_vlan entered promiscuous mode [ 151.128322][ T3256] attempt to access beyond end of device [ 151.128322][ T3256] loop3: rw=524288, want=58216, limit=40427 [ 151.140835][ T3256] attempt to access beyond end of device [ 151.140835][ T3256] loop3: rw=524288, want=58224, limit=40427 [ 151.159810][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.177220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.184573][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.207517][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.237258][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.244652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.276597][ T3550] device veth1_macvtap entered promiscuous mode [ 151.298797][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.309160][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.326282][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.351975][ T3551] device veth1_macvtap entered promiscuous mode [ 151.371910][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.384577][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.401622][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.432900][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.443661][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.460874][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.477912][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.524868][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.540179][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.556041][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.572611][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.779507][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.787893][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.795724][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.803224][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.810744][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.819208][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.827550][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.834393][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.841883][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.851134][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.859374][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.866230][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.887770][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.902622][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.916444][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.925488][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.933040][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.941142][ T3590] device veth0_vlan entered promiscuous mode [ 151.948593][ T329] device bridge_slave_1 left promiscuous mode [ 151.954835][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.962532][ T329] device bridge_slave_0 left promiscuous mode [ 151.968832][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.980263][ T329] device bridge_slave_1 left promiscuous mode [ 151.986256][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.993921][ T329] device bridge_slave_0 left promiscuous mode [ 152.000295][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.008933][ T329] device veth1_macvtap left promiscuous mode [ 152.014809][ T329] device veth0_vlan left promiscuous mode [ 152.020719][ T329] device veth1_macvtap left promiscuous mode [ 152.026598][ T329] device veth0_vlan left promiscuous mode [ 152.192934][ T20] usb 4-1: USB disconnect, device number 16 [ 152.334093][ T3590] device veth1_macvtap entered promiscuous mode [ 152.340976][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.358861][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.370067][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.379055][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.028753][ T3617] capability: warning: `syz.1.1112' uses 32-bit capabilities (legacy support in use) [ 153.048883][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 153.048900][ T30] audit: type=1400 audit(1721248717.972:29168): avc: denied { name_bind } for pid=3618 comm="syz.2.1113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 153.059879][ T3615] loop0: detected capacity change from 0 to 2048 [ 153.106851][ T30] audit: type=1400 audit(1721248718.002:29169): avc: denied { map } for pid=3618 comm="syz.2.1113" path="socket:[32447]" dev="sockfs" ino=32447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.163327][ T3625] loop1: detected capacity change from 0 to 1024 [ 153.170303][ T30] audit: type=1400 audit(1721248718.002:29170): avc: denied { read } for pid=3618 comm="syz.2.1113" path="socket:[32447]" dev="sockfs" ino=32447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.197741][ T3615] loop0: p1 < > p4 [ 153.201887][ T3615] loop0: p4 size 8388608 extends beyond EOD, truncated [ 153.229348][ T3625] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 153.247206][ T3625] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 153.273478][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.285078][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.292612][ T3623] device bridge_slave_0 entered promiscuous mode [ 153.299744][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.306722][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.314126][ T3623] device bridge_slave_1 entered promiscuous mode [ 153.325464][ T3625] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.373559][ T3625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 153.389267][ T3625] System zones: 0-1, 3-36 [ 153.492106][ T3640] input: syz1 as /devices/virtual/input/input34 [ 153.500448][ T30] audit: type=1400 audit(1721248718.402:29171): avc: denied { setopt } for pid=3630 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.629182][ T3625] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 153.712451][ T316] udevd[316]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 153.729450][ T320] udevd[320]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 153.749056][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 153.761678][ T320] udevd[320]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 153.775295][ T329] device bridge_slave_1 left promiscuous mode [ 153.784268][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.806040][ T329] device bridge_slave_0 left promiscuous mode [ 153.815711][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.859177][ T329] device veth1_macvtap left promiscuous mode [ 153.869155][ T329] device veth0_vlan left promiscuous mode [ 154.092932][ T30] audit: type=1400 audit(1721248719.002:29172): avc: denied { bind } for pid=3645 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.325759][ T30] audit: type=1400 audit(1721248719.002:29173): avc: denied { connect } for pid=3645 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.538158][ T30] audit: type=1400 audit(1721248719.462:29174): avc: denied { mount } for pid=3665 comm="syz.0.1130" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.588595][ T3668] loop2: detected capacity change from 0 to 512 [ 154.591455][ T30] audit: type=1400 audit(1721248719.502:29175): avc: denied { unmount } for pid=3590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.648864][ T3668] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 154.663815][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.672665][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.680529][ T3668] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.1129: invalid block [ 154.695789][ T3668] EXT4-fs (loop2): Remounting filesystem read-only [ 154.702707][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.710857][ T3668] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1129: couldn't read orphan inode 11 (err -117) [ 154.773352][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.797347][ T3668] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 154.823949][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.830953][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.849202][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.859388][ T30] audit: type=1400 audit(1721248719.782:29176): avc: denied { create } for pid=3667 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.867780][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.893935][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.900872][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.922958][ T30] audit: type=1400 audit(1721248719.812:29177): avc: denied { getopt } for pid=3667 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.049945][ T3682] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1133'. [ 155.114511][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.140212][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.209178][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.269759][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.300506][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.311395][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.338033][ T3623] device veth0_vlan entered promiscuous mode [ 155.354055][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.369006][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.390769][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.402395][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.428122][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.439493][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.454031][ T3623] device veth1_macvtap entered promiscuous mode [ 155.468041][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.476759][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.489601][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.510696][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.534458][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.154536][ T3693] input: syz1 as /devices/virtual/input/input35 [ 156.192895][ T3256] handle_bad_sector: 77365 callbacks suppressed [ 156.192916][ T3256] attempt to access beyond end of device [ 156.192916][ T3256] loop3: rw=524288, want=58656, limit=40427 [ 156.223637][ T3256] attempt to access beyond end of device [ 156.223637][ T3256] loop3: rw=524288, want=58664, limit=40427 [ 156.235027][ T3256] attempt to access beyond end of device [ 156.235027][ T3256] loop3: rw=524288, want=58672, limit=40427 [ 156.246395][ T3256] attempt to access beyond end of device [ 156.246395][ T3256] loop3: rw=524288, want=58680, limit=40427 [ 156.260821][ T3256] attempt to access beyond end of device [ 156.260821][ T3256] loop3: rw=524288, want=58688, limit=40427 [ 156.272168][ T3256] attempt to access beyond end of device [ 156.272168][ T3256] loop3: rw=524288, want=58696, limit=40427 [ 156.283514][ T3256] attempt to access beyond end of device [ 156.283514][ T3256] loop3: rw=524288, want=58704, limit=40427 [ 156.294874][ T3256] attempt to access beyond end of device [ 156.294874][ T3256] loop3: rw=524288, want=58712, limit=40427 [ 156.306896][ T3256] attempt to access beyond end of device [ 156.306896][ T3256] loop3: rw=524288, want=58720, limit=40427 [ 156.321251][ T3256] attempt to access beyond end of device [ 156.321251][ T3256] loop3: rw=524288, want=58728, limit=40427 [ 156.728757][ T329] device bridge_slave_1 left promiscuous mode [ 156.734735][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.747690][ T329] device bridge_slave_0 left promiscuous mode [ 156.753760][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.768282][ T329] device veth1_macvtap left promiscuous mode [ 156.774216][ T329] device veth0_vlan left promiscuous mode [ 158.086160][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 158.086189][ T30] audit: type=1400 audit(1721248723.002:29251): avc: denied { connect } for pid=3722 comm="syz.1.1145" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.113970][ T557] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.141773][ T30] audit: type=1400 audit(1721248723.032:29252): avc: denied { write } for pid=3722 comm="syz.1.1145" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.145272][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.177766][ T30] audit: type=1400 audit(1721248723.092:29253): avc: denied { name_bind } for pid=3727 comm="syz.1.1147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.177978][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.206864][ T3711] device bridge_slave_0 entered promiscuous mode [ 158.214552][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.221558][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.229398][ T3711] device bridge_slave_1 entered promiscuous mode [ 158.257683][ T30] audit: type=1400 audit(1721248723.092:29254): avc: denied { name_bind } for pid=3727 comm="syz.1.1147" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 158.294931][ T30] audit: type=1400 audit(1721248723.092:29255): avc: denied { node_bind } for pid=3727 comm="syz.1.1147" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 158.322379][ T30] audit: type=1400 audit(1721248723.122:29256): avc: denied { create } for pid=3727 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.352390][ T30] audit: type=1400 audit(1721248723.122:29257): avc: denied { create } for pid=3727 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.372934][ T30] audit: type=1400 audit(1721248723.122:29258): avc: denied { setopt } for pid=3727 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.394242][ T30] audit: type=1400 audit(1721248723.162:29259): avc: denied { mounton } for pid=3729 comm="syz.3.1148" path="/11/file1" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.436334][ T30] audit: type=1400 audit(1721248723.172:29260): avc: denied { map } for pid=3727 comm="syz.1.1147" path="socket:[32741]" dev="sockfs" ino=32741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.511944][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.517330][ T557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.519764][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.550740][ T557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.569117][ T557] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.600239][ T557] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.620205][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.629017][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.632930][ T557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.645162][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.652055][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.661214][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.670635][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.681082][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.687959][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.727103][ T3740] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1150'. [ 158.788579][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.815794][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.878228][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.957701][ T557] usb 1-1: config 0 descriptor?? [ 158.976543][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.991530][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.000086][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.007602][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.016086][ T3711] device veth0_vlan entered promiscuous mode [ 159.032368][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.042472][ T3711] device veth1_macvtap entered promiscuous mode [ 159.054961][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.074813][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.346590][ T3744] input: syz1 as /devices/virtual/input/input36 [ 159.578415][ T557] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 159.596331][ T557] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 159.618019][ T557] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 159.875068][ T1088] usb 1-1: USB disconnect, device number 21 [ 159.967961][ T329] device bridge_slave_1 left promiscuous mode [ 159.973960][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.992331][ T329] device bridge_slave_0 left promiscuous mode [ 160.005564][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.016360][ T329] device veth1_macvtap left promiscuous mode [ 160.022396][ T329] device veth0_vlan left promiscuous mode [ 161.032930][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.077634][ T1088] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 161.154763][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.162160][ T3759] device bridge_slave_0 entered promiscuous mode [ 161.169487][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.172512][ T3773] usb usb8: usbfs: process 3773 (syz.0.1158) did not claim interface 0 before use [ 161.176605][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.177183][ T3759] device bridge_slave_1 entered promiscuous mode [ 161.197168][ T3256] handle_bad_sector: 106609 callbacks suppressed [ 161.197193][ T3256] attempt to access beyond end of device [ 161.197193][ T3256] loop3: rw=0, want=57592, limit=40427 [ 161.216700][ T3256] attempt to access beyond end of device [ 161.216700][ T3256] loop3: rw=0, want=57600, limit=40427 [ 161.227752][ T3256] attempt to access beyond end of device [ 161.227752][ T3256] loop3: rw=0, want=57608, limit=40427 [ 161.254557][ T3779] loop1: detected capacity change from 0 to 128 [ 161.261083][ T3256] attempt to access beyond end of device [ 161.261083][ T3256] loop3: rw=0, want=57616, limit=40427 [ 161.276686][ T3256] attempt to access beyond end of device [ 161.276686][ T3256] loop3: rw=0, want=57624, limit=40427 [ 161.289112][ T3256] attempt to access beyond end of device [ 161.289112][ T3256] loop3: rw=0, want=57632, limit=40427 [ 161.301055][ T3256] attempt to access beyond end of device [ 161.301055][ T3256] loop3: rw=0, want=57640, limit=40427 [ 161.312132][ T3256] attempt to access beyond end of device [ 161.312132][ T3256] loop3: rw=0, want=57648, limit=40427 [ 161.323134][ T3256] attempt to access beyond end of device [ 161.323134][ T3256] loop3: rw=0, want=57656, limit=40427 [ 161.334076][ T3256] attempt to access beyond end of device [ 161.334076][ T3256] loop3: rw=0, want=57664, limit=40427 [ 161.367161][ T1088] usb 3-1: Using ep0 maxpacket: 16 [ 161.412347][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.420940][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.436628][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.445349][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.453560][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.460449][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.468017][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.476254][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.484502][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.491392][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.498742][ T1088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.509989][ T1088] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.523073][ T1088] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.532123][ T1088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.541795][ T1088] usb 3-1: config 0 descriptor?? [ 161.612782][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.623805][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.639344][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.680305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.702689][ T3759] device veth0_vlan entered promiscuous mode [ 161.711086][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.719893][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.727358][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.744704][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.758831][ T3759] device veth1_macvtap entered promiscuous mode [ 161.775960][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.785052][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.088831][ T1088] HID 045e:07da: Invalid code 65791 type 1 [ 162.102721][ T1088] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0022/input/input37 [ 162.127079][ T1088] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 162.670662][ T20] usb 3-1: USB disconnect, device number 23 [ 162.793508][ T329] device bridge_slave_1 left promiscuous mode [ 162.799764][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.807635][ T329] device bridge_slave_0 left promiscuous mode [ 162.813875][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.822256][ T329] device veth1_macvtap left promiscuous mode [ 162.828135][ T329] device veth0_vlan left promiscuous mode [ 163.663801][ T3810] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1166'. [ 163.737304][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 163.737396][ T30] audit: type=1400 audit(1721248728.652:29280): avc: denied { sys_module } for pid=3803 comm="syz.3.1169" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.920445][ T30] audit: type=1400 audit(1721248728.712:29281): avc: denied { module_load } for pid=3803 comm="syz.3.1169" path="/sys/kernel/warn_count" dev="sysfs" ino=23209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 163.994056][ T3820] usb usb8: usbfs: process 3820 (syz.2.1174) did not claim interface 0 before use [ 164.044623][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.057265][ T3804] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.078510][ T3804] device bridge_slave_0 entered promiscuous mode [ 164.085828][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.113297][ T3804] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.127051][ T3804] device bridge_slave_1 entered promiscuous mode [ 164.257169][ T314] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 164.261925][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.271495][ T3804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.278569][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.285434][ T3804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.331348][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.340729][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.348690][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.367630][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.376032][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.383126][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.391053][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.399252][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.406137][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.433658][ T3837] syz.1.1179[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.433740][ T3837] syz.1.1179[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.443806][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.466110][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.475057][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.483648][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.506161][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.514594][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.537590][ T30] audit: type=1400 audit(1721248729.462:29282): avc: denied { ioctl } for pid=3834 comm="syz.1.1179" path="socket:[34468]" dev="sockfs" ino=34468 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.544327][ T3837] loop1: detected capacity change from 0 to 1024 [ 164.566915][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.576953][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.586833][ T3804] device veth0_vlan entered promiscuous mode [ 164.598111][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.605601][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.637263][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.645728][ T3837] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.651693][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.664808][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.676762][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.677573][ T3837] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,dioread_nolock,barrier=0x0000000000000648,noinit_itable,,errors=continue. Quota mode: writeback. [ 164.714708][ T3804] device veth1_macvtap entered promiscuous mode [ 164.723368][ T30] audit: type=1400 audit(1721248729.642:29283): avc: denied { mount } for pid=3834 comm="syz.1.1179" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.777803][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.785695][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.787257][ T314] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.794543][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.810903][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.826511][ T314] usb 4-1: SerialNumber: syz [ 164.847012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.860538][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.138082][ T314] usb 4-1: 0:2 : does not exist [ 165.146267][ T314] usb 4-1: USB disconnect, device number 17 [ 165.898407][ T1636] device bridge_slave_1 left promiscuous mode [ 165.904372][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.914628][ T1636] device bridge_slave_0 left promiscuous mode [ 165.920638][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.928993][ T1636] device veth1_macvtap left promiscuous mode [ 165.934828][ T1636] device veth0_vlan left promiscuous mode [ 166.207164][ T3256] handle_bad_sector: 132722 callbacks suppressed [ 166.207187][ T3256] attempt to access beyond end of device [ 166.207187][ T3256] loop3: rw=0, want=58584, limit=40427 [ 166.227241][ T3256] attempt to access beyond end of device [ 166.227241][ T3256] loop3: rw=0, want=58592, limit=40427 [ 166.238389][ T3256] attempt to access beyond end of device [ 166.238389][ T3256] loop3: rw=0, want=58600, limit=40427 [ 166.249284][ T3256] attempt to access beyond end of device [ 166.249284][ T3256] loop3: rw=0, want=58608, limit=40427 [ 166.260219][ T3256] attempt to access beyond end of device [ 166.260219][ T3256] loop3: rw=0, want=58616, limit=40427 [ 166.271018][ T3256] attempt to access beyond end of device [ 166.271018][ T3256] loop3: rw=0, want=58624, limit=40427 [ 166.281759][ T3256] attempt to access beyond end of device [ 166.281759][ T3256] loop3: rw=0, want=58632, limit=40427 [ 166.292769][ T3256] attempt to access beyond end of device [ 166.292769][ T3256] loop3: rw=0, want=58640, limit=40427 [ 166.303588][ T3256] attempt to access beyond end of device [ 166.303588][ T3256] loop3: rw=0, want=58648, limit=40427 [ 166.314743][ T3256] attempt to access beyond end of device [ 166.314743][ T3256] loop3: rw=0, want=58656, limit=40427 [ 166.703316][ T30] audit: type=1400 audit(1721248731.622:29284): avc: denied { setattr } for pid=3856 comm="syz.0.1183" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 166.790985][ T30] audit: type=1400 audit(1721248731.712:29285): avc: denied { ioctl } for pid=3871 comm="syz.3.1190" path="socket:[34585]" dev="sockfs" ino=34585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.847264][ T30] audit: type=1400 audit(1721248731.732:29286): avc: denied { write } for pid=3871 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.876718][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.893669][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.907805][ T3881] loop0: detected capacity change from 0 to 256 [ 166.926100][ T3868] device bridge_slave_0 entered promiscuous mode [ 166.933392][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.947248][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.957016][ T3868] device bridge_slave_1 entered promiscuous mode [ 166.962801][ T30] audit: type=1400 audit(1721248731.872:29287): avc: denied { mount } for pid=3880 comm="syz.0.1189" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 166.967198][ T20] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 168.127288][ T30] audit: type=1400 audit(1721248733.022:29288): avc: denied { unmount } for pid=3590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 168.340374][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.347345][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.354917][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.361729][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.416385][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.424199][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.487414][ T20] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 168.525973][ T20] usb 2-1: config 0 has no interface number 0 [ 168.536084][ T20] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.752826][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.775047][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.863419][ T20] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.873461][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.947371][ T20] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 168.951103][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.965187][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.972174][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.980912][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.989454][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.995052][ T20] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 168.997954][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.012083][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.024738][ T20] usb 2-1: Manufacturer: syz [ 169.036702][ T20] usb 2-1: config 0 descriptor?? [ 169.056954][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.066959][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.362322][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.395198][ T30] audit: type=1400 audit(1721248734.312:29289): avc: denied { create } for pid=3920 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.418948][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.465557][ T30] audit: type=1400 audit(1721248734.342:29290): avc: denied { write } for pid=3920 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.505667][ T3868] device veth0_vlan entered promiscuous mode [ 169.515255][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.524000][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.535261][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.543205][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.568639][ T3868] device veth1_macvtap entered promiscuous mode [ 169.575630][ T3923] usb usb8: usbfs: process 3923 (syz.0.1207) did not claim interface 0 before use [ 169.597355][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.604683][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.639230][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.651055][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.692868][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.787220][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.797591][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.816025][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.164440][ T20] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0023/input/input38 [ 170.175335][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.201446][ T20] sony 0003:054C:03D5.0023: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 170.249526][ T311] usb 2-1: USB disconnect, device number 15 [ 170.275814][ T3931] loop2: detected capacity change from 0 to 40427 [ 170.311681][ T3931] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 170.323940][ T3931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 170.348375][ T3931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.404703][ T3931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 170.414298][ T3931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.454641][ T30] audit: type=1400 audit(1721248735.372:29291): avc: denied { write } for pid=3930 comm="syz.2.1208" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.477590][ T30] audit: type=1400 audit(1721248735.372:29292): avc: denied { add_name } for pid=3930 comm="syz.2.1208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.498636][ T30] audit: type=1400 audit(1721248735.372:29293): avc: denied { create } for pid=3930 comm="syz.2.1208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.519850][ T30] audit: type=1400 audit(1721248735.422:29294): avc: denied { write open } for pid=3930 comm="syz.2.1208" path="/24/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.607713][ T30] audit: type=1400 audit(1721248735.442:29295): avc: denied { ioctl } for pid=3930 comm="syz.2.1208" path="/24/bus/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.632721][ T30] audit: type=1400 audit(1721248735.512:29296): avc: denied { read } for pid=3930 comm="syz.2.1208" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.729036][ T3551] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 170.729075][ T3551] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 170.736716][ T3551] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 170.770958][ T3865] syz.1.1187 (3865) used greatest stack depth: 19648 bytes left [ 170.839348][ T1636] device bridge_slave_1 left promiscuous mode [ 170.845312][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.853025][ T1636] device bridge_slave_0 left promiscuous mode [ 170.859160][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.867638][ T1636] device veth1_macvtap left promiscuous mode [ 170.873475][ T1636] device veth0_vlan left promiscuous mode [ 171.217151][ T3256] handle_bad_sector: 59695 callbacks suppressed [ 171.217170][ T3256] attempt to access beyond end of device [ 171.217170][ T3256] loop3: rw=524288, want=59016, limit=40427 [ 171.234775][ T3256] attempt to access beyond end of device [ 171.234775][ T3256] loop3: rw=524288, want=59024, limit=40427 [ 171.246181][ T3256] attempt to access beyond end of device [ 171.246181][ T3256] loop3: rw=524288, want=59032, limit=40427 [ 171.257476][ T3256] attempt to access beyond end of device [ 171.257476][ T3256] loop3: rw=524288, want=59040, limit=40427 [ 171.268634][ T3256] attempt to access beyond end of device [ 171.268634][ T3256] loop3: rw=524288, want=59048, limit=40427 [ 171.279945][ T3256] attempt to access beyond end of device [ 171.279945][ T3256] loop3: rw=524288, want=59056, limit=40427 [ 171.291127][ T3256] attempt to access beyond end of device [ 171.291127][ T3256] loop3: rw=524288, want=59064, limit=40427 [ 171.302334][ T3256] attempt to access beyond end of device [ 171.302334][ T3256] loop3: rw=524288, want=59072, limit=40427 [ 171.313692][ T3256] attempt to access beyond end of device [ 171.313692][ T3256] loop3: rw=524288, want=59080, limit=40427 [ 171.324879][ T3256] attempt to access beyond end of device [ 171.324879][ T3256] loop3: rw=524288, want=59088, limit=40427 [ 172.173333][ T3964] loop1: detected capacity change from 0 to 2048 [ 172.245202][ T3964] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1216: bad orphan inode 8192 [ 172.271344][ T3964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.285450][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.294124][ T30] audit: type=1400 audit(1721248737.212:29297): avc: denied { write } for pid=3972 comm="syz.0.1217" name="igmp6" dev="proc" ino=4026533206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 172.327864][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.421205][ T312] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 172.425887][ T3976] IPv6: addrconf: prefix option has invalid lifetime [ 172.437684][ T3958] device bridge_slave_0 entered promiscuous mode [ 172.455033][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.463596][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.471351][ T3958] device bridge_slave_1 entered promiscuous mode [ 172.477248][ T1088] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 172.856171][ T30] audit: type=1400 audit(1721248737.772:29298): avc: denied { read } for pid=3984 comm="syz.0.1221" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.957836][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 173.012189][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.043953][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.077451][ T1088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.081537][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.099863][ T1088] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.106328][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.122181][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.129183][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.137086][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.147044][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.156373][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.163271][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.189090][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.197494][ T1088] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.208956][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.216681][ T1088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.217333][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.232949][ T1088] usb 3-1: SerialNumber: syz [ 173.267441][ T312] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 173.302022][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.331521][ T3958] device veth0_vlan entered promiscuous mode [ 173.337592][ T312] usb 4-1: Product: syz [ 173.341821][ T312] usb 4-1: Manufacturer: syz [ 173.353096][ T312] usb 4-1: SerialNumber: syz [ 173.371884][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.396349][ T312] usb 4-1: config 0 descriptor?? [ 173.402889][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.419802][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.428078][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.453433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.476879][ T3958] device veth1_macvtap entered promiscuous mode [ 173.500769][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.535255][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.543706][ T314] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 173.591052][ T1088] usb 3-1: 0:2 : does not exist [ 173.636261][ T1088] usb 3-1: USB disconnect, device number 24 [ 173.917290][ T314] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 173.925207][ T314] usb 2-1: config 0 has no interface number 0 [ 173.931617][ T314] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.943470][ T314] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.027256][ T314] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 174.036234][ T314] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 174.044359][ T314] usb 2-1: Manufacturer: syz [ 174.053065][ T314] usb 2-1: config 0 descriptor?? [ 174.147506][ T312] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:fb:97:44:b1:ff [ 174.174919][ T312] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 174.195421][ T312] usb 4-1: USB disconnect, device number 18 [ 174.368085][ T8] device bridge_slave_1 left promiscuous mode [ 174.374090][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.391681][ T8] device bridge_slave_0 left promiscuous mode [ 174.407882][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.416458][ T8] device veth1_macvtap left promiscuous mode [ 174.422637][ T8] device veth0_vlan left promiscuous mode [ 174.560593][ T314] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0024/input/input39 [ 174.584128][ T314] sony 0003:054C:03D5.0024: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 174.807555][ T312] usb 2-1: USB disconnect, device number 16 [ 175.761889][ T4037] IPv6: addrconf: prefix option has invalid lifetime [ 175.878094][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 175.878111][ T30] audit: type=1400 audit(1721248740.802:29316): avc: denied { append } for pid=4047 comm="syz.0.1232" name="001" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.016811][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.039846][ T4051] usb usb5: usbfs: process 4051 (syz.0.1232) did not claim interface 0 before use [ 176.050996][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.072845][ T4038] device bridge_slave_0 entered promiscuous mode [ 176.098540][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.127064][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.148493][ T4057] syz.3.1234[4057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.148579][ T4057] syz.3.1234[4057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.169693][ T4038] device bridge_slave_1 entered promiscuous mode [ 176.229889][ T3256] handle_bad_sector: 140444 callbacks suppressed [ 176.229910][ T3256] attempt to access beyond end of device [ 176.229910][ T3256] loop3: rw=0, want=58296, limit=40427 [ 176.247295][ T3256] attempt to access beyond end of device [ 176.247295][ T3256] loop3: rw=0, want=58304, limit=40427 [ 176.267951][ T3256] attempt to access beyond end of device [ 176.267951][ T3256] loop3: rw=0, want=58312, limit=40427 [ 176.270393][ T4028] loop1: detected capacity change from 0 to 40427 [ 176.285378][ T3256] attempt to access beyond end of device [ 176.285378][ T3256] loop3: rw=0, want=58320, limit=40427 [ 176.313864][ T3256] attempt to access beyond end of device [ 176.313864][ T3256] loop3: rw=0, want=58328, limit=40427 [ 176.334326][ T3256] attempt to access beyond end of device [ 176.334326][ T3256] loop3: rw=0, want=58336, limit=40427 [ 176.345486][ T3256] attempt to access beyond end of device [ 176.345486][ T3256] loop3: rw=0, want=58344, limit=40427 [ 176.357040][ T4028] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 176.370738][ T4028] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.379906][ T3256] attempt to access beyond end of device [ 176.379906][ T3256] loop3: rw=0, want=58352, limit=40427 [ 176.400963][ T3256] attempt to access beyond end of device [ 176.400963][ T3256] loop3: rw=0, want=58360, limit=40427 [ 176.418341][ T4028] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.446700][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.453602][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.460238][ T3256] attempt to access beyond end of device [ 176.460238][ T3256] loop3: rw=0, want=58368, limit=40427 [ 176.460818][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.478329][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.544162][ T4028] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.551725][ T4028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.584628][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.597667][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.616168][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.639420][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.667389][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.678577][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.685558][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.707387][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.726084][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.733165][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.802366][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.827174][ T512] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 176.828330][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.874603][ T4038] device veth0_vlan entered promiscuous mode [ 176.891248][ T4071] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 176.907698][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.925834][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.937532][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.957538][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.988062][ T4038] device veth1_macvtap entered promiscuous mode [ 177.008371][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.027508][ T4078] loop2: detected capacity change from 0 to 2048 [ 177.036268][ T4080] device pim6reg1 entered promiscuous mode [ 177.043328][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.053009][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.061701][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.070052][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.099756][ T4078] loop2: p1 < > p4 [ 177.104840][ T4078] loop2: p4 size 8388608 extends beyond EOD, truncated [ 177.139219][ T100] loop2: p1 < > p4 [ 177.147503][ T100] loop2: p4 size 8388608 extends beyond EOD, truncated [ 177.207214][ T512] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.220096][ T30] audit: type=1400 audit(1721248742.142:29317): avc: denied { mounton } for pid=4077 comm="syz.2.1241" path="/dev/loop2p1" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.235157][ T512] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.287184][ T30] audit: type=1400 audit(1721248742.182:29318): avc: denied { mount } for pid=4077 comm="syz.2.1241" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 177.319145][ T316] udevd[316]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 177.319469][ T320] udevd[320]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 177.357397][ T30] audit: type=1400 audit(1721248742.182:29319): avc: denied { remount } for pid=4077 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.377668][ T30] audit: type=1400 audit(1721248742.192:29320): avc: denied { unmount } for pid=3551 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.387247][ T512] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.411254][ T320] udevd[320]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 177.411712][ T316] udevd[316]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 177.437177][ T512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.444994][ T512] usb 4-1: SerialNumber: syz [ 177.748040][ T512] usb 4-1: 0:2 : does not exist [ 177.767279][ T512] usb 4-1: USB disconnect, device number 19 [ 178.007882][ T1636] device bridge_slave_1 left promiscuous mode [ 178.013856][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.034367][ T1636] device bridge_slave_0 left promiscuous mode [ 178.047286][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.058484][ T1636] device veth1_macvtap left promiscuous mode [ 178.064463][ T1636] device veth0_vlan left promiscuous mode [ 179.204416][ T4089] loop0: detected capacity change from 0 to 128 [ 179.315240][ T30] audit: type=1326 audit(1721248744.232:29321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a19863ad9 code=0x0 [ 179.396341][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.461607][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.477727][ T4094] device bridge_slave_0 entered promiscuous mode [ 179.494974][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.517241][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.524909][ T4103] usb usb5: usbfs: process 4103 (syz.2.1248) did not claim interface 0 before use [ 179.537566][ T4094] device bridge_slave_1 entered promiscuous mode [ 179.565750][ T30] audit: type=1400 audit(1721248744.482:29322): avc: denied { ioctl } for pid=4104 comm="syz.0.1249" path="socket:[37487]" dev="sockfs" ino=37487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.601850][ T4107] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 179.652456][ T4107] loop0: detected capacity change from 0 to 512 [ 179.950656][ T4107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.051154][ T4107] EXT4-fs (loop0): 1 truncate cleaned up [ 180.057209][ T4107] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 180.123540][ T30] audit: type=1400 audit(1721248745.042:29323): avc: denied { read } for pid=4104 comm="syz.0.1249" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.156195][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.163099][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.170252][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.177146][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.191611][ T30] audit: type=1400 audit(1721248745.072:29324): avc: denied { open } for pid=4104 comm="syz.0.1249" path="/40/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.255171][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.270884][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.287927][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.295285][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.328549][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.336772][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.343676][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.371234][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.387464][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.394422][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.417301][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.452501][ T1088] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 180.452669][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.537237][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.557811][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.574128][ T4094] device veth0_vlan entered promiscuous mode [ 180.613809][ T4124] loop2: detected capacity change from 0 to 256 [ 180.624982][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.637556][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.657921][ T30] audit: type=1400 audit(1721248745.582:29325): avc: denied { remount } for pid=4123 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.684905][ T4094] device veth1_macvtap entered promiscuous mode [ 180.697627][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.707176][ T1088] usb 1-1: Using ep0 maxpacket: 16 [ 180.719793][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.747571][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.764501][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.782974][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.827397][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.837459][ T1088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.845812][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.857293][ T1088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.873567][ T1088] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.876806][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.886758][ T1088] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.914924][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.923044][ T1088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.952466][ T1088] usb 1-1: config 0 descriptor?? [ 180.982632][ T30] audit: type=1400 audit(1721248745.902:29326): avc: denied { create } for pid=4123 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.025084][ T30] audit: type=1400 audit(1721248745.922:29327): avc: denied { read } for pid=4123 comm="syz.2.1256" path="socket:[36679]" dev="sockfs" ino=36679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.103027][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.120471][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.142450][ T4122] device bridge_slave_0 entered promiscuous mode SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=60 (errno 13: Permission denied) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=40 (errno 13: Permission denied) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=929 state=3 status=67 (errno 9: Bad file descriptor) [ 181.167212][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.176171][ T30] audit: type=1400 audit(1721248746.092:29328): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[429]" dev="pipefs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 181.213616][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.229701][ T4122] device bridge_slave_1 entered promiscuous mode [ 181.243993][ T3256] handle_bad_sector: 77675 callbacks suppressed [ 181.244017][ T3256] attempt to access beyond end of device [ 181.244017][ T3256] loop3: rw=524288, want=59224, limit=40427 [ 181.293505][ T3256] attempt to access beyond end of device [ 181.293505][ T3256] loop3: rw=524288, want=59232, limit=40427 [ 181.320809][ T3256] attempt to access beyond end of device [ 181.320809][ T3256] loop3: rw=524288, want=59240, limit=40427 [ 181.337964][ T3256] attempt to access beyond end of device [ 181.337964][ T3256] loop3: rw=524288, want=59248, limit=40427 [ 181.366904][ T3256] attempt to access beyond end of device [ 181.366904][ T3256] loop3: rw=524288, want=59256, limit=40427 [ 181.393057][ T3256] attempt to access beyond end of device [ 181.393057][ T3256] loop3: rw=524288, want=59264, limit=40427 [ 181.430768][ T3256] attempt to access beyond end of device [ 181.430768][ T3256] loop3: rw=524288, want=59272, limit=40427 [ 181.446300][ T3256] attempt to access beyond end of device [ 181.446300][ T3256] loop3: rw=524288, want=59280, limit=40427 [ 181.458192][ T3256] attempt to access beyond end of device [ 181.458192][ T3256] loop3: rw=524288, want=59288, limit=40427 [ 181.469989][ T3256] attempt to access beyond end of device [ 181.469989][ T3256] loop3: rw=524288, want=59296, limit=40427 [ 181.482829][ T1636] device bridge_slave_1 left promiscuous mode [ 181.497508][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.505405][ T1636] device bridge_slave_0 left promiscuous mode [ 181.527281][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.535458][ T1636] device veth1_macvtap left promiscuous mode [ 181.557220][ T1636] device veth0_vlan left promiscuous mode [ 181.897227][ T1088] usbhid 1-1:0.0: can't add hid device: -71 [ 181.903014][ T1088] usbhid: probe of 1-1:0.0 failed with error -71 [ 181.939246][ T1088] usb 1-1: USB disconnect, device number 22 [ 182.202657][ T4028] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 182.879021][ T1636] device bridge_slave_1 left promiscuous mode [ 182.884994][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.907624][ T1636] device bridge_slave_0 left promiscuous mode [ 182.913611][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.938279][ T1636] device bridge_slave_1 left promiscuous mode [ 182.944470][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.969312][ T1636] device bridge_slave_0 left promiscuous mode [ 182.975310][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.998565][ T1636] device bridge_slave_1 left promiscuous mode [ 183.004530][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.028796][ T1636] device bridge_slave_0 left promiscuous mode [ 183.034771][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.058355][ T1636] device bridge_slave_1 left promiscuous mode [ 183.064331][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.087662][ T1636] device bridge_slave_0 left promiscuous mode [ 183.093744][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.117474][ T1636] device veth1_macvtap left promiscuous mode [ 183.123335][ T1636] device veth0_vlan left promiscuous mode [ 183.137481][ T1636] device veth1_macvtap left promiscuous mode [ 183.143356][ T1636] device veth0_vlan left promiscuous mode [ 183.157423][ T1636] device veth1_macvtap left promiscuous mode [ 183.163279][ T1636] device veth0_vlan left promiscuous mode [ 186.247181][ T4028] handle_bad_sector: 234062 callbacks suppressed [ 186.247212][ T4028] attempt to access beyond end of device [ 186.247212][ T4028] loop1: rw=524288, want=58728, limit=40427 [ 186.248797][ T3256] attempt to access beyond end of device [ 186.248797][ T3256] loop3: rw=524288, want=57352, limit=40427 [ 186.253423][ T4028] attempt to access beyond end of device [ 186.253423][ T4028] loop1: rw=524288, want=58736, limit=40427 [ 186.279547][ T3256] attempt to access beyond end of device [ 186.279547][ T3256] loop3: rw=524288, want=57360, limit=40427 [ 186.288570][ T4028] attempt to access beyond end of device [ 186.288570][ T4028] loop1: rw=524288, want=58744, limit=40427 [ 186.300226][ T3256] attempt to access beyond end of device [ 186.300226][ T3256] loop3: rw=524288, want=57368, limit=40427 [ 186.309633][ T4028] attempt to access beyond end of device [ 186.309633][ T4028] loop1: rw=524288, want=58752, limit=40427 [ 186.321222][ T3256] attempt to access beyond end of device [ 186.321222][ T3256] loop3: rw=524288, want=57376, limit=40427 [ 186.331998][ T4028] attempt to access beyond end of device [ 186.331998][ T4028] loop1: rw=524288, want=58760, limit=40427 [ 186.343587][ T3256] attempt to access beyond end of device [ 186.343587][ T3256] loop3: rw=524288, want=57384, limit=40427