last executing test programs: 13.228293842s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 10.88000115s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 8.075310927s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 5.699234008s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 3.770866021s ago: executing program 4 (id=5470): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3.736836514s ago: executing program 4 (id=5472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 3.704732947s ago: executing program 4 (id=5473): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 3.66189386s ago: executing program 4 (id=5475): syz_usb_connect(0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 3.3074809s ago: executing program 3 (id=5479): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220a000000c1"], 0x0}, 0x0) 2.924988432s ago: executing program 0 (id=5491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.902974304s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 880.253515ms ago: executing program 0 (id=5493): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 878.224555ms ago: executing program 3 (id=5494): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) fgetxattr(r3, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0x0) 877.264286ms ago: executing program 4 (id=5495): symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newtclass={0x24}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000890000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 799.561312ms ago: executing program 0 (id=5496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 775.885534ms ago: executing program 3 (id=5498): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 643.349565ms ago: executing program 0 (id=5499): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet(r0, &(0x7f00000002c0)="9b", 0x1, 0x4004084, 0x0, 0x0) 599.281259ms ago: executing program 0 (id=5500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 588.16326ms ago: executing program 3 (id=5502): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r2}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 558.500063ms ago: executing program 2 (id=5503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000004c0), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 557.280763ms ago: executing program 0 (id=5504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00000500000005000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 507.016837ms ago: executing program 2 (id=5505): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000ac0), 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b941942fd71da38d86cc0ef330c006b368bb0b3522c846c51339d337e0e5f5ff924437e719c3d76a3cdda2e94cecd9ea3f77fe715d87d43638f4b6305d5e85914b0bad9dd67261c720cd749c33a3ea8ce6fbce4a5ad48737b36de54461bd52571cb243477582b9fb7ef9663a", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2401}) 451.875611ms ago: executing program 3 (id=5506): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 451.196542ms ago: executing program 2 (id=5507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 432.222083ms ago: executing program 2 (id=5508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 395.491857ms ago: executing program 2 (id=5509): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s+m22U03aZJF9/OB1743M5s333kz897uDDMB9KzR9J9cxOGI+DCJGM6mJxExUM/1R5xcW+72ynIxTUmsrr7+e1Jf5tbKcjGaPpM6mBUej4gf3os4kttYb3VxaaZQLpfms/J4bfbCeHVx6ej52cJ0abo0d3xicvLYiedOHN+5QP/8eenQ9Y9eefrrk3+/+9jVD35M4mQcymY3x7FTRmM02yYD6Sa8y8s7XVmXJd1eAbYlPTT71o7yOBzD0VfPAQD/Z29HxCoA0GMS/T8A9JjG7wC3VpaLjdTdXyT21o2XImL/WvyN65trc/qza3b769dBh24ld10ZSSJiZAfqH42Iz79988s0xS5dhwRo5Z3LEXF2ZHTj+T/ZcM/CVj3TwTKj95Sd/2DvfJeOf55vNf7LrY9/osX4Z7DFsbsd9z/+c9d2oJq20vHfi033tt1uij8z0peVHqqP+QaSc+fLpfTc9nBEjMXAYFqe2KSOsZv/3Gw3r3n898fHb32R1p/+f2eJ3LX+wbs/M1WoFR4k5mY3Lkc80d8q/mS9/ZM249/THdbx6gvvf9ZuXhp/Gm8jbYx/d61eiXiqZfvfuaMt2fT+xPH67jDe2Cla+OaXT4fa1d/c/mlK6298F9gLafsPbR7/SNJ8v2Z163X8dGX4+3bz7h9/6/1/X/JGPb8vm3apUKvNT0TsS17bOP3Ync9m5QORLZ/GP/Zk6+N/s/0//U54tsP4+6//9tX2499dafxTW2r/rWeu3p7pa1d/Z+0/Wc+NZVM6Of91uoIPsu0AAAAAAAAAAAAAAAAAAAAAAAAAoFO5iDgUSS6/ns/l8vm1d3g/GkO5cqVaO3KusjA3FfV3ZY/EQK7xqMvhpuehTmTPw2+Uj91TfjYiHomITwYP1Mv5YqU81e3gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzsM37/1O/DnZ77QCAXbO/2ysAAOw5/T8A9B79PwD0Hv0/APQe/T8A9B79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvs9KlTaVr9a2W5mJanLi4uzFQuHp0qVWfyswvFfLEyfyE/XalMl0v5YmX2fn+vXKlcmIy5hUvjtVK1Nl5dXDozW1mYq505P1uYLp0pDexJVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwNdXFpZlCuVyal5GRkVnPdPvMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf8G8AAAD//7WFKeA=") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0xa1, 0x0, 0x0}) 381.242688ms ago: executing program 3 (id=5510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 351.51305ms ago: executing program 2 (id=5511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r5, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x130, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000013}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) r7 = syz_clone(0x40100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="2ee02c9810861e16bdad9dbeab19ce1d069a29fe9318db42c71662df058d98b8c07b5c4ef4031b1e7948d3b6a8fc3a7f7ed91fc00b486c797a6055ea127b96d699244ff56812bc209325c1c6a3be91d223d2a7a41fb4169b7084383f84e9e268f24d7d25f25e8ea6522855da7de7ebccf32e166aae3b27e2d1faeac2854d8493346683e67408dc453ece6b781f37ef4e") sched_getscheduler(r7) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 18.339248ms ago: executing program 4 (id=5512): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffdd) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRESOCT], 0x0) 0s ago: executing program 1 (id=5124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2028.176750][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2028.204288][T23945] xt_hashlimit: size too large, truncated to 1048576 [ 2028.351621][T23947] loop1: detected capacity change from 0 to 40427 [ 2028.368166][T23947] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 2028.375613][T23947] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2028.386301][T23947] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2028.410522][ T4816] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2028.434761][T23947] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 2028.441680][T23947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2028.487313][T23955] binder: 23952:23955 ioctl 4018620d 0 returned -22 [ 2028.495386][T23955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23955 comm=syz.0.5058 [ 2028.514942][T23955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5058'. [ 2028.584639][T23960] loop1: detected capacity change from 0 to 512 [ 2028.586566][T23954] loop0: detected capacity change from 0 to 512 [ 2028.600118][T23960] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 2028.609594][T23954] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2028.611870][T23960] EXT4-fs (loop1): 1 truncate cleaned up [ 2028.619931][T23954] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2028.624314][T23960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2028.631269][T23954] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3845: comm syz.0.5058: Allocating blocks 41-42 which overlap fs metadata [ 2028.649860][T23960] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 2028.652866][T23954] EXT4-fs (loop0): Remounting filesystem read-only [ 2028.669227][ T4816] usb 3-1: Using ep0 maxpacket: 8 [ 2028.674346][T23954] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.5058: Failed to acquire dquot type 0 [ 2028.685931][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2028.686100][T23954] EXT4-fs (loop0): 1 truncate cleaned up [ 2028.704103][T23954] EXT4-fs (loop0): pa ffff888112e91930: logic 1, phys. 41, len 23 [ 2028.711890][T23954] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 2028.722770][T23954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2028.749362][T21452] EXT4-fs (loop0): unmounting filesystem. [ 2028.750993][T23967] loop1: detected capacity change from 0 to 512 [ 2028.776652][T23967] EXT4-fs (loop1): 1 truncate cleaned up [ 2028.779218][T23969] loop0: detected capacity change from 0 to 512 [ 2028.782445][T23967] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2028.800595][ T4816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2028.807208][T23969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2028.820742][ T4816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.821248][T23969] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038 (0x7fffffff) [ 2028.833939][ T4816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2028.846611][T23967] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 2028.864876][T23967] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 2028.868878][ T4816] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 2028.875347][T23967] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 2028.884760][T23969] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2028.909721][ T4816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.919781][ T4816] usb 3-1: config 0 descriptor?? [ 2028.923068][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2028.946372][T21452] EXT4-fs (loop0): unmounting filesystem. [ 2028.953129][T17080] cdc_ncm 4-1:1.1: bind() failure [ 2028.972012][T23976] loop0: detected capacity change from 0 to 128 [ 2028.986561][T23976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2028.998799][T23976] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2029.055826][T21452] EXT4-fs (loop0): unmounting filesystem. [ 2029.109138][T23974] loop1: detected capacity change from 0 to 40427 [ 2029.134558][T23974] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2029.141545][T23974] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2029.149898][T23974] F2FS-fs (loop1): Image doesn't support compression [ 2029.163775][T23974] F2FS-fs (loop1): invalid crc value [ 2029.165734][T13196] usb 4-1: USB disconnect, device number 68 [ 2029.170913][T23974] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2029.194859][T23974] F2FS-fs (loop1): Start checkpoint disabled! [ 2029.201890][T23974] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2029.208770][T23974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2029.278290][T15259] kworker/u4:8: attempt to access beyond end of device [ 2029.278290][T15259] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2029.341521][T23986] loop1: detected capacity change from 0 to 256 [ 2029.348187][T23986] exfat: Deprecated parameter 'namecase' [ 2029.354022][T23986] exfat: Deprecated parameter 'namecase' [ 2029.359774][T23986] exfat: Deprecated parameter 'utf8' [ 2029.365109][T23986] exfat: Deprecated parameter 'namecase' [ 2029.373227][T23986] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 2029.401401][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.407724][T23988] loop1: detected capacity change from 0 to 512 [ 2029.409624][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.416240][T23988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2029.425301][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.435676][T23988] EXT4-fs (loop1): 1 orphan inode deleted [ 2029.437757][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.443493][T23988] EXT4-fs (loop1): 1 truncate cleaned up [ 2029.450334][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.455966][T23988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2029.462345][ T4816] elecom 0003:056E:011C.00C0: unknown main item tag 0x0 [ 2029.489025][ T4816] elecom 0003:056E:011C.00C0: item fetching failed at offset 20/41 [ 2029.497221][ T4816] elecom: probe of 0003:056E:011C.00C0 failed with error -22 [ 2029.574526][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2029.663995][ T4816] usb 3-1: USB disconnect, device number 70 [ 2029.769098][T24009] loop3: detected capacity change from 0 to 512 [ 2029.777140][T24009] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2029.785325][T24009] EXT4-fs (loop3): invalid journal inode [ 2029.790847][T24009] EXT4-fs (loop3): can't get journal size [ 2029.797463][T24009] EXT4-fs (loop3): 1 truncate cleaned up [ 2029.803287][T24009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2029.819380][T23742] EXT4-fs (loop3): unmounting filesystem. [ 2029.827162][T13196] usb 5-1: USB disconnect, device number 78 [ 2030.183376][T24032] usb usb5: usbfs: process 24032 (syz.3.5086) did not claim interface 0 before use [ 2030.238200][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 2030.238220][ T28] audit: type=1400 audit(2000000156.954:3492): avc: denied { watch } for pid=24037 comm="syz.3.5089" path="/22/file0/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 2030.570606][ T4816] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2030.840489][ T4816] usb 4-1: Using ep0 maxpacket: 32 [ 2030.859582][ T28] audit: type=1400 audit(2000000157.574:3493): avc: denied { connect } for pid=24051 comm="syz.0.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2030.886168][ T28] audit: type=1400 audit(2000000157.584:3494): avc: denied { write } for pid=24051 comm="syz.0.5094" path="socket:[122369]" dev="sockfs" ino=122369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2030.916679][ T28] audit: type=1400 audit(2000000157.634:3495): avc: denied { accept } for pid=24051 comm="syz.0.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2030.980776][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.996909][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.998095][T24055] xt_bpf: check failed: parse error [ 2031.014508][ T4816] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2031.044674][ T4816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.085543][ T4816] usb 4-1: config 0 descriptor?? [ 2031.131021][ T4816] hub 4-1:0.0: USB hub found [ 2031.430489][ T4816] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2031.440720][T13196] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2031.462000][ T28] audit: type=1400 audit(2000000158.184:3496): avc: denied { bind } for pid=24074 comm="syz.1.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2031.516476][T24082] loop1: detected capacity change from 0 to 256 [ 2031.560532][ T4816] usbhid 4-1:0.0: can't add hid device: -71 [ 2031.568239][ T4816] usbhid: probe of 4-1:0.0 failed with error -71 [ 2031.600704][ T4816] usb 4-1: USB disconnect, device number 69 [ 2031.694899][T24086] loop1: detected capacity change from 0 to 2048 [ 2031.702464][T13196] usb 3-1: Using ep0 maxpacket: 16 [ 2031.720693][T24086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2031.729683][T24086] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 2031.820709][T13196] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2031.829783][T13196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.840620][T13196] usb 3-1: config 0 descriptor?? [ 2031.904116][T13196] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2032.110846][T13196] usb 3-1: Detected FT232A [ 2032.117572][T13196] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2032.154189][T24099] loop3: detected capacity change from 0 to 128 [ 2032.433408][T11483] usb 3-1: USB disconnect, device number 71 [ 2032.440235][T11483] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2032.449690][T11483] ftdi_sio 3-1:0.0: device disconnected [ 2032.490360][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2032.939105][T24108] syz.1.5116[24108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2032.939188][T24108] syz.1.5116[24108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2032.952828][T24108] netem: incorrect ge model size [ 2032.969013][T24108] netem: change failed [ 2032.983367][T24114] loop1: detected capacity change from 0 to 512 [ 2032.992065][T24114] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 2033.000820][T24114] EXT4-fs (loop1): 1 truncate cleaned up [ 2033.006451][T24114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2033.029806][T24114] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 2033.040100][T23772] EXT4-fs (loop1): unmounting filesystem. [ 2033.055653][ T28] audit: type=1400 audit(2000000159.774:3497): avc: denied { write } for pid=24117 comm="syz.1.5120" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2033.311684][T24122] loop3: detected capacity change from 0 to 40427 [ 2033.318589][T24122] F2FS-fs (loop3): fault_injection options not supported [ 2033.325885][T24122] F2FS-fs (loop3): Image doesn't support compression [ 2033.332646][T24122] F2FS-fs (loop3): Image doesn't support compression [ 2033.339178][T24122] F2FS-fs (loop3): fault_type options not supported [ 2033.346990][T24122] F2FS-fs (loop3): invalid crc value [ 2033.353357][T24122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2033.360191][T24124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.367395][T24124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.374991][T24124] device bridge_slave_0 entered promiscuous mode [ 2033.383965][T24124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.391503][T24124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.393750][T24122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2033.398787][T24124] device bridge_slave_1 entered promiscuous mode [ 2033.422220][T24122] syz.3.5123: attempt to access beyond end of device [ 2033.422220][T24122] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 2033.441933][T23742] syz-executor: attempt to access beyond end of device [ 2033.441933][T23742] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2033.543418][T24124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.550309][T24124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.557430][T24124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.564205][T24124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.632424][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2033.640300][T20045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.647578][T20045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.661995][T19204] device bridge_slave_1 left promiscuous mode [ 2033.668545][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.676871][T19204] device bridge_slave_0 left promiscuous mode [ 2033.683642][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.692196][T19204] device veth1_macvtap left promiscuous mode [ 2033.698104][T19204] device veth0_vlan left promiscuous mode [ 2033.801724][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2033.810273][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2033.818650][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.825526][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.832914][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2033.842094][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.848939][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.856322][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2033.864145][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2033.875802][T24124] device veth0_vlan entered promiscuous mode [ 2033.886792][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2033.900744][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2033.908291][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2033.908984][T24145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24145 comm=syz.2.5132 [ 2033.929957][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2033.940935][T24124] device veth1_macvtap entered promiscuous mode [ 2033.948064][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5132'. [ 2033.968935][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2034.002416][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2034.012092][T24151] loop3: detected capacity change from 0 to 256 [ 2034.033055][T24151] FAT-fs (loop3): bogus number of FAT sectors [ 2034.039002][T24151] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2034.254409][T24163] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.265352][T24163] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.280998][T24163] device bridge_slave_0 entered promiscuous mode [ 2034.293455][T24163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.305186][T24163] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.320993][T24163] device bridge_slave_1 entered promiscuous mode [ 2034.751579][T19204] device bridge_slave_1 left promiscuous mode [ 2034.757647][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.790874][T19204] device bridge_slave_0 left promiscuous mode [ 2034.796838][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.843076][T19204] device veth1_macvtap left promiscuous mode [ 2034.849058][T19204] device veth0_vlan left promiscuous mode [ 2034.980617][T24170] loop3: detected capacity change from 0 to 40427 [ 2034.993888][T24170] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 2035.001532][T24170] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2035.009778][T24170] F2FS-fs (loop3): fault_injection options not supported [ 2035.019488][T24170] F2FS-fs (loop3): invalid crc value [ 2035.051899][T24170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2035.101429][T24163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.108318][T24163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.115438][T24163] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.122211][T24163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.137555][T24170] F2FS-fs (loop3): Start checkpoint disabled! [ 2035.148150][T24170] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2035.159275][T24170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2035.170934][T17080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.196953][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.228546][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2035.240514][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2035.267990][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2035.290970][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2035.299008][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.305887][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.320913][T24191] binder: 24189:24191 ioctl 4018620d 0 returned -22 [ 2035.330559][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2035.338854][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2035.364040][T24190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24190 comm=syz.0.5149 [ 2035.370695][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.383287][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.384966][T24190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5149'. [ 2035.399334][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2035.407671][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2035.415761][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2035.423836][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2035.451893][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2035.460082][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2035.469195][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2035.481007][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2035.489790][T24163] device veth0_vlan entered promiscuous mode [ 2035.501473][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2035.508828][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2035.528326][T24163] device veth1_macvtap entered promiscuous mode [ 2035.535967][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2035.544561][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2035.553399][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2035.571963][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2035.575096][ T28] audit: type=1400 audit(2000000162.294:3498): avc: denied { ioctl } for pid=24197 comm="syz.0.5152" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=122751 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2035.580079][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2035.620332][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2035.631135][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2035.670526][T17080] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2035.798571][T24209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24209 comm=syz.2.5157 [ 2035.855858][T24207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.868866][T24207] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.882444][T24207] device bridge_slave_0 entered promiscuous mode [ 2035.890258][T24207] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.897398][T24207] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.904600][T24207] device bridge_slave_1 entered promiscuous mode [ 2035.950442][T17080] usb 4-1: Using ep0 maxpacket: 16 [ 2035.974381][T24227] binder: 24222:24227 ioctl 4018620d 0 returned -22 [ 2035.983215][T24227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24227 comm=syz.2.5161 [ 2036.013676][T24227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5161'. [ 2036.075971][T24221] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.084593][T24221] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.091574][T17080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.102927][T24221] device bridge_slave_0 entered promiscuous mode [ 2036.109959][T17080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.119696][T17080] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2036.128938][T17080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.129524][T24221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.140855][T17080] usb 4-1: config 0 descriptor?? [ 2036.143610][T24221] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.156042][T24221] device bridge_slave_1 entered promiscuous mode [ 2036.199183][T24242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5166'. [ 2036.301738][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2036.309223][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2036.334793][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2036.343251][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2036.352923][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.359899][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.367167][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2036.376166][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2036.384246][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.391107][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.419038][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2036.427098][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2036.435343][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2036.444400][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2036.452417][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2036.460275][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2036.469211][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2036.480318][T24207] device veth0_vlan entered promiscuous mode [ 2036.491756][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2036.499661][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2036.515438][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2036.523342][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2036.537360][T24207] device veth1_macvtap entered promiscuous mode [ 2036.561391][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2036.569447][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2036.577898][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2036.585972][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2036.593786][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2036.609684][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2036.618483][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2036.626634][T20045] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2036.631704][T17080] hid-multitouch 0003:1FD2:6007.00C1: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 2036.634958][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.652699][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.659266][T24266] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2036.668283][ T28] audit: type=1326 audit(2000000163.384:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24265 comm="syz.0.5177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672157dff9 code=0x0 [ 2036.669819][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2036.699720][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2036.707840][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.714687][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.721825][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2036.729766][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2036.738019][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2036.751984][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2036.760111][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2036.768724][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2036.780286][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2036.807366][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2036.819946][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2036.841163][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2036.852114][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2036.864951][T24221] device veth0_vlan entered promiscuous mode [ 2036.871739][T17064] usb 4-1: USB disconnect, device number 70 [ 2036.890479][T20045] usb 3-1: Using ep0 maxpacket: 8 [ 2036.891774][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2036.910781][T24221] device veth1_macvtap entered promiscuous mode [ 2036.924121][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2036.943586][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2037.020926][T20045] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.040488][T20045] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2037.049536][T20045] usb 3-1: config 1 has no interface number 1 [ 2037.070509][T20045] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2037.090524][T20045] usb 3-1: config 1 interface 2 has no altsetting 0 [ 2037.252088][T20045] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2037.261142][T20045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.269116][T20045] usb 3-1: Product: syz [ 2037.273475][T20045] usb 3-1: Manufacturer: syz [ 2037.277945][T20045] usb 3-1: SerialNumber: syz [ 2037.321864][T19204] device bridge_slave_1 left promiscuous mode [ 2037.327854][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.335481][T19204] device bridge_slave_0 left promiscuous mode [ 2037.341688][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.349193][T19204] device bridge_slave_1 left promiscuous mode [ 2037.355292][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.362988][T19204] device bridge_slave_0 left promiscuous mode [ 2037.368981][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.376818][T19204] device veth1_macvtap left promiscuous mode [ 2037.382662][T19204] device veth0_vlan left promiscuous mode [ 2037.388574][T19204] device veth1_macvtap left promiscuous mode [ 2037.394575][T19204] device veth0_vlan left promiscuous mode [ 2037.600675][T20045] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 2037.612380][T20045] usb 3-1: selecting invalid altsetting 0 [ 2037.647764][T24281] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.654890][T20045] usb 3-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 2037.655019][T24281] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.668967][T24281] device bridge_slave_0 entered promiscuous mode [ 2037.670498][T20045] usb 3-1: selecting invalid altsetting 0 [ 2037.676045][T24281] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.687983][T24281] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.695263][T24281] device bridge_slave_1 entered promiscuous mode [ 2037.717696][T20045] usb 3-1: USB disconnect, device number 72 [ 2037.815966][T24281] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.822866][T24281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.830077][T24281] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.836942][T24281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2037.850506][ T4816] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2037.870453][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2037.878341][T17080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.886965][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.906567][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2037.914868][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.921842][T17080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2037.929018][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2037.937530][T17080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.944500][T17080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.957602][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2037.965677][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2037.998305][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2038.010121][T24281] device veth0_vlan entered promiscuous mode [ 2038.017162][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2038.025227][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2038.033071][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2038.046964][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2038.064588][T24281] device veth1_macvtap entered promiscuous mode [ 2038.081738][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2038.101541][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2038.220698][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.231777][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.241518][ T4816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2038.254608][ T4816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2038.263560][ T4816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.272858][ T4816] usb 4-1: config 0 descriptor?? [ 2038.320572][T20045] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2038.420479][T11483] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2038.560482][T20045] usb 5-1: Using ep0 maxpacket: 32 [ 2038.571384][T19204] device bridge_slave_1 left promiscuous mode [ 2038.577399][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.584733][T19204] device bridge_slave_0 left promiscuous mode [ 2038.590753][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.598195][T19204] device veth1_macvtap left promiscuous mode [ 2038.604272][T19204] device veth0_vlan left promiscuous mode [ 2038.660580][T11483] usb 3-1: Using ep0 maxpacket: 32 [ 2038.680590][T20045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2038.691649][T20045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2038.707380][T20045] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2038.716391][T20045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.728330][T20045] usb 5-1: config 0 descriptor?? [ 2038.750559][T24296] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2038.751446][ T4816] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0x0 [ 2038.767670][ T4816] plantronics 0003:047F:FFFF.00C2: No inputs registered, leaving [ 2038.775966][T20045] hub 5-1:0.0: USB hub found [ 2038.783043][ T4816] plantronics 0003:047F:FFFF.00C2: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2038.803844][T24304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.810849][T24304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.817952][T24304] device bridge_slave_0 entered promiscuous mode [ 2038.825499][T24304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.832457][T24304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.839451][T24304] device bridge_slave_1 entered promiscuous mode [ 2038.893024][T24304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.899880][T24304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2038.907100][T24304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.913875][T24304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.932807][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2038.940200][T17080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.947858][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.957566][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2038.965635][T11483] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2038.974854][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.981817][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.989090][T11483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.996922][T11483] usb 3-1: Product: syz [ 2039.000948][T11483] usb 3-1: Manufacturer: syz [ 2039.005412][T11483] usb 3-1: SerialNumber: syz [ 2039.010428][T11483] usb 3-1: config 0 descriptor?? [ 2039.020487][T20045] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 2039.029017][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2039.037287][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.044222][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.052042][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2039.059891][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2039.075964][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2039.085725][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2039.093556][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2039.100953][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2039.111291][T24304] device veth0_vlan entered promiscuous mode [ 2039.121271][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2039.130226][T24304] device veth1_macvtap entered promiscuous mode [ 2039.141145][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2039.150721][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2039.310515][T20045] usbhid 5-1:0.0: can't add hid device: -71 [ 2039.316424][T20045] usbhid: probe of 5-1:0.0 failed with error -71 [ 2039.350727][T20045] usb 5-1: USB disconnect, device number 79 [ 2039.530949][T19204] device bridge_slave_1 left promiscuous mode [ 2039.536896][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.544271][T19204] device bridge_slave_0 left promiscuous mode [ 2039.550341][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.557945][T19204] device veth1_macvtap left promiscuous mode [ 2039.563885][T19204] device veth0_vlan left promiscuous mode [ 2039.710568][T11483] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:9a:44:15:58:31 [ 2039.721939][T11483] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 2039.728929][T11483] usb 3-1: USB disconnect, device number 73 [ 2039.772021][ T28] audit: type=1400 audit(2000000166.494:3500): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2039.955499][T24316] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.962478][T24316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.969856][T24316] device bridge_slave_0 entered promiscuous mode [ 2039.978069][T24316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.985147][T24316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.993385][T24316] device bridge_slave_1 entered promiscuous mode [ 2040.065201][T24316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.072360][T24316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.079390][T24316] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.086312][T24316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2040.107148][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2040.114637][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.122143][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.131086][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2040.139335][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.146176][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2040.165874][T24316] device veth0_vlan entered promiscuous mode [ 2040.172412][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2040.180580][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2040.188255][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2040.195762][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2040.203532][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2040.213104][T20045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.218208][T24330] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2040.219953][T20045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.235407][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2040.243472][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2040.257459][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2040.266423][T24316] device veth1_macvtap entered promiscuous mode [ 2040.274684][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2040.284820][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2040.292860][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2040.330534][T17080] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2040.510517][ T313] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2040.541096][T19204] device bridge_slave_1 left promiscuous mode [ 2040.547045][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.554498][T19204] device bridge_slave_0 left promiscuous mode [ 2040.560538][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.568237][T19204] device veth1_macvtap left promiscuous mode [ 2040.574161][T19204] device veth0_vlan left promiscuous mode [ 2040.710544][T17080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.721343][T17080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.730997][T17080] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2040.743578][T17080] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 2040.752432][T17080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.761116][T17080] usb 5-1: config 0 descriptor?? [ 2040.880554][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.891330][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.900879][ T313] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2040.909657][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.910785][T17064] usb 4-1: USB disconnect, device number 71 [ 2040.921329][ T313] usb 3-1: config 0 descriptor?? [ 2041.221876][T17080] wacom 0003:056A:0314.00C3: unknown main item tag 0x0 [ 2041.230988][T24345] loop3: detected capacity change from 0 to 16 [ 2041.236911][T17080] wacom 0003:056A:0314.00C3: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 2041.256570][T17080] wacom 0003:056A:0314.00C3: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.4-1/input0 [ 2041.267954][T24345] erofs: (device loop3): mounted with root inode @ nid 36. [ 2041.268477][T17080] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0314.00C3/input/input68 [ 2041.284977][T24345] syz.3.5203: attempt to access beyond end of device [ 2041.284977][T24345] loop3: rw=0, sector=24, nr_sectors = 8 limit=16 [ 2041.331446][T24345] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 2041.351501][T24343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.359122][T24343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.379360][T24343] device bridge_slave_0 entered promiscuous mode [ 2041.391765][ T313] itetech 0003:258A:6A88.00C4: unknown main item tag 0x0 [ 2041.400021][T24343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.409695][ T313] itetech 0003:258A:6A88.00C4: hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 2041.440730][T24343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.448115][T24343] device bridge_slave_1 entered promiscuous mode [ 2041.483975][T17064] kernel write not supported for file [eventfd] (pid: 17064 comm: kworker/1:12) [ 2041.485602][T13196] usb 5-1: USB disconnect, device number 80 [ 2041.507811][ T28] audit: type=1400 audit(2000000168.224:3501): avc: denied { compute_member } for pid=24357 comm="syz.3.5207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2041.530376][T19204] device bridge_slave_1 left promiscuous mode [ 2041.536436][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.547672][T19204] device bridge_slave_0 left promiscuous mode [ 2041.553915][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.559687][T24362] xt_hashlimit: size too large, truncated to 1048576 [ 2041.576843][T19204] device veth1_macvtap left promiscuous mode [ 2041.583286][T19204] device veth0_vlan left promiscuous mode [ 2041.604909][T10355] usb 3-1: USB disconnect, device number 74 [ 2041.636507][ T28] audit: type=1400 audit(2000000168.354:3502): avc: denied { name_bind } for pid=24361 comm="syz.0.5210" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2041.659061][T24366] binder: 24363:24366 ioctl 4018620d 0 returned -22 [ 2041.667679][T24366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24366 comm=syz.3.5211 [ 2041.683390][T24366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5211'. [ 2041.749872][T24367] loop3: detected capacity change from 0 to 512 [ 2041.757235][T24367] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2041.767944][T24367] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2041.785976][T24367] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3845: comm syz.3.5211: Allocating blocks 41-42 which overlap fs metadata [ 2041.799918][T24367] EXT4-fs (loop3): Remounting filesystem read-only [ 2041.810704][T24367] Quota error (device loop3): write_blk: dquota write failed [ 2041.818114][T24367] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2041.828355][T24367] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.5211: Failed to acquire dquot type 0 [ 2041.849247][T24367] EXT4-fs (loop3): 1 truncate cleaned up [ 2041.857076][T24367] EXT4-fs (loop3): pa ffff888112e911f8: logic 1, phys. 41, len 23 [ 2041.864850][T24367] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 2041.875192][T24367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2041.904580][ T28] audit: type=1400 audit(2000000168.624:3503): avc: denied { ioctl } for pid=24369 comm="syz.0.5212" path="socket:[126312]" dev="sockfs" ino=126312 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2042.025983][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2042.037459][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2042.065412][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2042.074267][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2042.082492][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.089356][T17080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.096615][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2042.105038][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2042.114294][T17080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.121215][T17080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.128474][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2042.136893][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2042.156279][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2042.188579][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2042.214043][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2042.227814][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2042.237388][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2042.247031][T24343] device veth0_vlan entered promiscuous mode [ 2042.327853][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2042.351520][T24343] device veth1_macvtap entered promiscuous mode [ 2042.393126][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2042.412104][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2042.457259][T23742] EXT4-fs (loop3): unmounting filesystem. [ 2042.465773][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5228'. [ 2042.480382][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2042.488589][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2042.529881][T24414] loop3: detected capacity change from 0 to 512 [ 2042.556987][T24414] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2042.594172][T24414] EXT4-fs (loop3): 1 truncate cleaned up [ 2042.600474][T24414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2042.632563][ T28] audit: type=1400 audit(2000000169.354:3504): avc: denied { ioctl } for pid=24412 comm="syz.3.5231" path="/47/bus/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2042.674312][T23742] EXT4-fs (loop3): unmounting filesystem. [ 2043.356323][ T28] audit: type=1400 audit(2000000170.074:3505): avc: denied { unmount } for pid=21452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2043.391205][T19204] device bridge_slave_1 left promiscuous mode [ 2043.397146][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.404479][T19204] device bridge_slave_0 left promiscuous mode [ 2043.410654][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.417996][T19204] device veth1_macvtap left promiscuous mode [ 2043.423874][T19204] device veth0_vlan left promiscuous mode [ 2043.533966][T24434] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2043.543200][ T28] audit: type=1400 audit(2000000170.254:3506): avc: denied { mounton } for pid=24433 comm="syz.4.5239" path="/20/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2043.576959][T24434] FAT-fs (loop9): unable to read boot sector [ 2043.955395][T24443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.991807][T24443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.032056][ T28] audit: type=1400 audit(2000000170.754:3507): avc: denied { getopt } for pid=24464 comm="syz.4.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2044.052459][T24443] device bridge_slave_0 entered promiscuous mode [ 2044.086985][T24443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.118286][T24443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.145106][T24443] device bridge_slave_1 entered promiscuous mode [ 2044.454089][T24472] Invalid ELF header magic: != ELF [ 2044.460546][T17064] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2044.468123][ T28] audit: type=1400 audit(2000000171.174:3508): avc: denied { module_load } for pid=24471 comm="syz.0.5252" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 2044.511453][T24443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.518379][T24443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.525583][T24443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.532442][T24443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.575012][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.588947][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.628630][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2044.645683][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2044.658609][T24462] loop3: detected capacity change from 0 to 40427 [ 2044.662148][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2044.673247][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2044.675286][T24462] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 2044.682364][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.693638][T24462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2044.695464][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.704745][T24462] F2FS-fs (loop3): invalid crc value [ 2044.711002][T17064] usb 5-1: Using ep0 maxpacket: 16 [ 2044.717310][T24462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2044.721551][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2044.735732][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2044.744241][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.751147][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.764304][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2044.772487][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2044.780333][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2044.790488][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2044.799788][T24490] device veth0_vlan left promiscuous mode [ 2044.806607][T24490] device veth0_vlan entered promiscuous mode [ 2044.826217][T24462] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2044.835507][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2044.843681][T24462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2044.843763][T17064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2044.851324][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2044.876830][T17064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2044.884286][T24443] device veth0_vlan entered promiscuous mode [ 2044.901000][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2044.901135][T17064] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2044.912126][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2044.921648][T17064] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2044.940932][T17064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.946098][T24443] device veth1_macvtap entered promiscuous mode [ 2044.963330][T23742] syz-executor: attempt to access beyond end of device [ 2044.963330][T23742] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2044.984189][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2044.987541][T17064] usb 5-1: config 0 descriptor?? [ 2045.002309][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2045.019703][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2045.027901][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2045.036020][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2045.044879][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2045.053283][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2045.061637][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2045.069879][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2045.095223][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 2045.208632][T24504] loop3: detected capacity change from 0 to 40427 [ 2045.221445][T24504] F2FS-fs (loop3): invalid crc value [ 2045.227500][T24504] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2045.246476][T24504] F2FS-fs (loop3): Start checkpoint disabled! [ 2045.252881][T24504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2045.376797][ T10] kworker/u4:1: attempt to access beyond end of device [ 2045.376797][ T10] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 2045.390791][ T10] kworker/u4:1: attempt to access beyond end of device [ 2045.390791][ T10] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 2045.474379][T17064] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00C5/input/input71 [ 2045.551557][T17064] microsoft 0003:045E:07DA.00C5: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2045.692434][T17064] usb 5-1: USB disconnect, device number 81 [ 2045.701383][ T7124] device bridge_slave_1 left promiscuous mode [ 2045.707335][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.717087][ T7124] device bridge_slave_0 left promiscuous mode [ 2045.723429][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.731419][ T7124] device veth1_macvtap left promiscuous mode [ 2045.737267][ T7124] device veth0_vlan left promiscuous mode [ 2046.208345][T24523] binder: 24513:24523 ioctl 4018620d 0 returned -22 [ 2046.239212][T24523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5267'. [ 2046.545929][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2046.545977][ T28] audit: type=1400 audit(2000000173.264:3510): avc: denied { mount } for pid=24534 comm="syz.3.5273" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2046.553046][T24535] overlayfs: upper fs does not support tmpfile. [ 2046.579974][ T28] audit: type=1400 audit(2000000173.274:3511): avc: denied { mounton } for pid=24534 comm="syz.3.5273" path="/56/file1/file2" dev="bpf" ino=128037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 2046.648832][T24518] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.656410][T24518] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.666062][ T28] audit: type=1400 audit(2000000173.384:3512): avc: denied { unmount } for pid=23742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2046.666682][T24518] device bridge_slave_0 entered promiscuous mode [ 2046.735184][T24518] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.735260][T24538] loop3: detected capacity change from 0 to 512 [ 2046.748942][T24518] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.749419][T24538] EXT4-fs: Ignoring removed orlov option [ 2046.761610][ T313] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2046.776673][T24518] device bridge_slave_1 entered promiscuous mode [ 2046.791483][T24538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2046.801689][T24538] ext4 filesystem being mounted at /57/bus supports timestamps until 2038 (0x7fffffff) [ 2046.992474][T23742] EXT4-fs (loop3): unmounting filesystem. [ 2047.024954][T24546] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2047.049499][ T28] audit: type=1400 audit(2000000173.764:3513): avc: denied { sqpoll } for pid=24547 comm="syz.3.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2047.072894][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2047.080553][ T28] audit: type=1400 audit(2000000173.794:3514): avc: denied { lock } for pid=24547 comm="syz.3.5277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=128110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2047.108325][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2047.116669][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2047.124943][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2047.132415][T24552] loop3: detected capacity change from 0 to 256 [ 2047.135179][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2047.141269][T24552] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 2047.152003][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2047.171015][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2047.172510][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.185532][ T28] audit: type=1400 audit(2000000173.904:3515): avc: denied { mounton } for pid=24551 comm="syz.3.5278" path="/60/file0/bus" dev="loop3" ino=1049682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2047.188613][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.217762][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.219736][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2047.231042][ T313] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2047.238322][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2047.246711][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.254421][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.261540][ T28] audit: type=1400 audit(2000000173.974:3516): avc: denied { watch } for pid=24554 comm="syz.2.5279" path="/102/bus" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2047.268079][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.290953][T24556] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 2047.307667][T24556] exFAT-fs (loop3): Filesystem has been set read-only [ 2047.308780][T24555] Invalid ELF header magic: != ELF [ 2047.320116][ T313] usb 5-1: config 0 descriptor?? [ 2047.329589][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2047.344752][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2047.347037][T23742] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 2047.353803][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2047.371095][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2047.371470][ T28] audit: type=1400 audit(2000000174.024:3517): avc: denied { module_load } for pid=24554 comm="syz.2.5279" path="/102/bus" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 2047.378480][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2047.401241][T23742] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 2047.408590][T24518] device veth0_vlan entered promiscuous mode [ 2047.450803][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2047.461976][T24518] device veth1_macvtap entered promiscuous mode [ 2047.481196][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2047.603586][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2047.692843][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5288'. [ 2047.728782][T24568] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.735718][T24568] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.743248][T24568] device bridge_slave_0 entered promiscuous mode [ 2047.750184][T24568] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.757325][T24568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.764911][T24568] device bridge_slave_1 entered promiscuous mode [ 2047.825626][T24568] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.833008][T24568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.840117][T24568] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.841301][ T313] cp2112 0003:10C4:EA90.00C6: item fetching failed at offset 5/7 [ 2047.846945][T24568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.862140][ T313] cp2112 0003:10C4:EA90.00C6: parse failed [ 2047.867793][ T313] cp2112: probe of 0003:10C4:EA90.00C6 failed with error -22 [ 2047.883530][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2047.891695][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.898706][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.911185][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2047.919194][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.926061][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.933188][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2047.941111][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.947932][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.962982][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2047.977569][T24568] device veth0_vlan entered promiscuous mode [ 2047.984222][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2047.992405][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2048.000161][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2048.007813][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2048.015565][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2048.028323][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2048.037061][T24568] device veth1_macvtap entered promiscuous mode [ 2048.045710][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2048.055600][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2048.089308][ T314] usb 5-1: USB disconnect, device number 82 [ 2048.550952][ T10] device bridge_slave_1 left promiscuous mode [ 2048.557233][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.564709][ T10] device bridge_slave_0 left promiscuous mode [ 2048.570858][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.578247][ T10] device bridge_slave_1 left promiscuous mode [ 2048.584226][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.591303][ T10] device bridge_slave_0 left promiscuous mode [ 2048.597231][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.605069][ T10] device veth1_macvtap left promiscuous mode [ 2048.611061][ T10] device veth0_vlan left promiscuous mode [ 2048.616940][ T10] device veth1_macvtap left promiscuous mode [ 2048.622851][ T10] device veth0_vlan left promiscuous mode [ 2048.827074][T24585] syz.4.5292[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2048.827160][T24585] syz.4.5292[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2048.850057][T24585] syz.4.5292[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2048.870298][T24585] syz.4.5292[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2048.917616][ T28] audit: type=1326 audit(2000000175.634:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24587 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3b97dff9 code=0x7ffc0000 [ 2049.013201][T24591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.033429][T24604] binder: 24598:24604 ioctl 4018620d 0 returned -22 [ 2049.044976][T24591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.053555][T24591] device bridge_slave_0 entered promiscuous mode [ 2049.065324][T24604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5296'. [ 2049.075914][T24591] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.083072][T24591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.097162][T24591] device bridge_slave_1 entered promiscuous mode [ 2049.254573][T24591] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.261511][T24591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.268562][T24591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.275370][T24591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.300602][T11483] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2049.328691][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2049.338367][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.346740][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.376431][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2049.386410][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.393312][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.402233][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2049.410337][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.417616][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.425418][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2049.434417][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2049.452320][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2049.466503][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2049.475735][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2049.483898][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2049.495787][T24591] device veth0_vlan entered promiscuous mode [ 2049.524121][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2049.536733][T24591] device veth1_macvtap entered promiscuous mode [ 2049.555380][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2049.573373][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2049.660523][T11483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.671475][T11483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.681541][T11483] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2049.690769][T11483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.701302][T11483] usb 4-1: config 0 descriptor?? [ 2050.240504][T11483] usbhid 4-1:0.0: can't add hid device: -71 [ 2050.246296][T11483] usbhid: probe of 4-1:0.0 failed with error -71 [ 2050.253150][T11483] usb 4-1: USB disconnect, device number 72 [ 2050.420982][ T10] device bridge_slave_1 left promiscuous mode [ 2050.427034][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.434532][ T10] device bridge_slave_0 left promiscuous mode [ 2050.440571][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.448016][ T10] device veth1_macvtap left promiscuous mode [ 2050.454141][ T10] device veth0_vlan left promiscuous mode [ 2051.137278][T24631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.153956][T24631] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.163212][T24631] device bridge_slave_0 entered promiscuous mode [ 2051.171675][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 2051.180588][T11483] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2051.191573][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.222849][T24631] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.243133][T24631] device bridge_slave_1 entered promiscuous mode [ 2051.251172][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 2051.420473][T11483] usb 5-1: Using ep0 maxpacket: 32 [ 2051.427197][T24657] binder: 24655:24657 ioctl 4018620d 0 returned -22 [ 2051.452613][T24657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5315'. [ 2051.540679][T11483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.571392][T11483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.596903][T11483] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2051.617222][T11483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.694870][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.701801][T24631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2051.708886][T24631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.715689][T24631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2051.741680][T11483] usb 5-1: config 0 descriptor?? [ 2051.781367][T11483] hub 5-1:0.0: USB hub found [ 2051.805324][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2051.814863][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.819233][ T28] audit: type=1400 audit(2000000178.534:3519): avc: denied { ioctl } for pid=24672 comm="syz.3.5322" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2051.847777][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.861296][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2051.870246][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2051.878760][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.885656][T17080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2051.897934][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2051.906963][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2051.915814][T17064] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.922723][T17064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2051.932709][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2051.941435][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2051.949822][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2051.958178][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2051.993664][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2052.001951][T11483] hub 5-1:0.0: 1 port detected [ 2052.008806][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2052.016982][ T28] audit: type=1400 audit(2000000178.724:3520): avc: denied { bind } for pid=24678 comm="syz.3.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.050452][ T4097] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2052.053895][T24631] device veth0_vlan entered promiscuous mode [ 2052.065107][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2052.075166][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2052.094751][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2052.103375][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2052.112122][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2052.120418][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2052.121302][T24681] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2052.130331][T24631] device veth1_macvtap entered promiscuous mode [ 2052.153258][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2052.161342][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2052.169995][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2052.184605][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2052.194765][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2052.300506][T11483] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 2052.310468][ T4097] usb 3-1: Using ep0 maxpacket: 32 [ 2052.312176][T11483] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 2052.420657][T11483] usbhid 5-1:0.0: can't add hid device: -71 [ 2052.426528][T11483] usbhid: probe of 5-1:0.0 failed with error -71 [ 2052.440618][ T4097] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.450596][ T4097] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.460843][T11483] usb 5-1: USB disconnect, device number 83 [ 2052.461651][ T4097] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2052.476761][ T4097] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2052.489563][ T4097] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2052.498464][ T4097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.981171][ T4097] ntrig 0003:1B96:000A.00C7: unknown main item tag 0x0 [ 2052.988005][ T4097] ntrig 0003:1B96:000A.00C7: unknown main item tag 0x0 [ 2052.996284][ T4097] ntrig 0003:1B96:000A.00C7: unknown main item tag 0x0 [ 2053.002983][ T4097] ntrig 0003:1B96:000A.00C7: unknown main item tag 0x0 [ 2053.009638][ T4097] ntrig 0003:1B96:000A.00C7: unknown main item tag 0x0 [ 2053.016910][ T4097] ntrig 0003:1B96:000A.00C7: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 2053.120878][ T10] device bridge_slave_1 left promiscuous mode [ 2053.126804][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.133971][ T10] device bridge_slave_0 left promiscuous mode [ 2053.139886][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.147411][ T10] device veth1_macvtap left promiscuous mode [ 2053.153240][ T10] device veth0_vlan left promiscuous mode [ 2053.191706][ T4097] usb 3-1: USB disconnect, device number 75 [ 2053.571523][T17064] kernel write not supported for file /vcsa1 (pid: 17064 comm: kworker/1:12) [ 2053.716310][T24698] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.723311][T24698] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.731004][T24698] device bridge_slave_0 entered promiscuous mode [ 2053.738008][T24698] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.744985][T24698] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.752941][T24698] device bridge_slave_1 entered promiscuous mode [ 2053.814948][T24698] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.821900][T24698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.828979][T24698] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.835813][T24698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.865011][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2053.872648][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2053.881182][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2053.897933][T24713] netlink: 'syz.2.5336': attribute type 4 has an invalid length. [ 2053.907823][T24713] netlink: 'syz.2.5336': attribute type 4 has an invalid length. [ 2053.916266][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2053.924445][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2053.942653][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2053.950485][ T4097] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2053.950863][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2053.973394][T24698] device veth0_vlan entered promiscuous mode [ 2053.980979][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2053.989215][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2053.997764][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2054.005944][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2054.019531][T24719] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2054.022010][T24698] device veth1_macvtap entered promiscuous mode [ 2054.029514][T24719] SELinux: failed to load policy [ 2054.036449][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2054.047639][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2054.055401][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2054.064062][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2054.072389][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2054.086038][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2054.094076][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2054.102221][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2054.110155][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2054.230557][T17080] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2054.310507][ T4097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.321297][ T4097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.330853][ T4097] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 2054.339697][ T4097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.348382][ T4097] usb 4-1: config 0 descriptor?? [ 2054.590532][T17080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.601278][T17080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.611021][T17080] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2054.619858][T17080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.629345][T17080] usb 3-1: config 0 descriptor?? [ 2054.661048][T15259] device bridge_slave_1 left promiscuous mode [ 2054.667041][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.674922][T15259] device bridge_slave_0 left promiscuous mode [ 2054.681061][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.688773][T15259] device veth1_macvtap left promiscuous mode [ 2054.694758][T15259] device veth0_vlan left promiscuous mode [ 2054.831444][ T4097] cypress 0003:04B4:07B1.00C8: unknown main item tag 0x6 [ 2054.838495][ T4097] cypress 0003:04B4:07B1.00C8: item fetching failed at offset 4/5 [ 2054.846335][ T4097] cypress 0003:04B4:07B1.00C8: parse failed [ 2054.852082][ T4097] cypress: probe of 0003:04B4:07B1.00C8 failed with error -22 [ 2055.031722][ T4097] usb 4-1: USB disconnect, device number 73 [ 2055.111251][T17080] arvo 0003:1E7D:30D4.00C9: unknown main item tag 0x0 [ 2055.117849][T17080] arvo 0003:1E7D:30D4.00C9: unknown main item tag 0x0 [ 2055.124959][T17080] arvo 0003:1E7D:30D4.00C9: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 2055.530231][T24727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.541038][T24727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.548587][T24727] device bridge_slave_0 entered promiscuous mode [ 2055.552675][T17080] usb 3-1: USB disconnect, device number 76 [ 2055.557289][T24732] loop3: detected capacity change from 0 to 512 [ 2055.567783][T24727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.575113][T24727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.580517][T24732] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2055.582892][T24727] device bridge_slave_1 entered promiscuous mode [ 2055.603578][T24732] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2055.618179][T24732] EXT4-fs (loop3): 1 truncate cleaned up [ 2055.624358][T24732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2055.654059][T24568] EXT4-fs (loop3): unmounting filesystem. [ 2055.716750][T24727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.723663][T24727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.730949][T24727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.737888][T24727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.745101][ T28] audit: type=1400 audit(2000000182.434:3521): avc: denied { read write } for pid=24568 comm="syz-executor" name="loop3" dev="devtmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2055.769616][ T28] audit: type=1400 audit(2000000182.434:3522): avc: denied { open } for pid=24568 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2055.817160][ T28] audit: type=1400 audit(2000000182.434:3523): avc: denied { ioctl } for pid=24568 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=2326 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2055.818007][T24747] loop3: detected capacity change from 0 to 512 [ 2055.845340][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2055.856161][ T28] audit: type=1400 audit(2000000182.454:3524): avc: denied { append } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=40 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2055.875887][T24747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2055.878941][ T28] audit: type=1400 audit(2000000182.454:3525): avc: denied { bpf } for pid=24744 comm="syz.3.5347" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2055.887916][T24747] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff) [ 2055.907832][ T28] audit: type=1400 audit(2000000182.454:3526): avc: denied { map_create } for pid=24744 comm="syz.3.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2055.918149][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.936596][ T28] audit: type=1400 audit(2000000182.454:3527): avc: denied { map_read map_write } for pid=24744 comm="syz.3.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2055.962921][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.962928][ T28] audit: type=1400 audit(2000000182.454:3528): avc: denied { prog_load } for pid=24744 comm="syz.3.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2055.990477][T24568] EXT4-fs (loop3): unmounting filesystem. [ 2056.002095][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2056.010147][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.017030][T17080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.037418][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2056.047373][T17080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.054459][T17080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2056.071480][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2056.079370][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2056.097585][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2056.117700][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2056.139400][T24727] device veth0_vlan entered promiscuous mode [ 2056.147239][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2056.156368][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2056.176767][T24727] device veth1_macvtap entered promiscuous mode [ 2056.194352][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2056.201832][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2056.209201][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2056.221387][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2056.229528][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2056.241399][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2056.254602][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2056.285263][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2056.297531][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2057.000889][T15259] device bridge_slave_1 left promiscuous mode [ 2057.006834][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.014179][T15259] device bridge_slave_0 left promiscuous mode [ 2057.020300][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.028177][T15259] device veth1_macvtap left promiscuous mode [ 2057.034053][T15259] device veth0_vlan left promiscuous mode [ 2057.851679][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 2057.851697][ T28] audit: type=1400 audit(2000000184.574:3571): avc: denied { bind } for pid=24780 comm="syz.3.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.901840][ T28] audit: type=1400 audit(2000000184.574:3572): avc: denied { name_bind } for pid=24780 comm="syz.3.5362" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2057.924920][ T28] audit: type=1400 audit(2000000184.574:3573): avc: denied { node_bind } for pid=24780 comm="syz.3.5362" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2057.946091][ T28] audit: type=1400 audit(2000000184.574:3574): avc: denied { setopt } for pid=24780 comm="syz.3.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.968368][ T28] audit: type=1400 audit(2000000184.574:3575): avc: denied { read } for pid=24780 comm="syz.3.5362" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.997528][ T28] audit: type=1400 audit(2000000184.574:3576): avc: denied { write } for pid=24779 comm="syz.2.5361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2058.019900][ T28] audit: type=1400 audit(2000000184.684:3577): avc: denied { create } for pid=24792 comm="syz.4.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2058.051970][ T28] audit: type=1400 audit(2000000184.684:3578): avc: denied { connect } for pid=24792 comm="syz.4.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2058.081733][ T28] audit: type=1400 audit(2000000184.704:3579): avc: denied { create } for pid=24795 comm="syz.2.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2058.108011][T24808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.117587][T24806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.125156][ T28] audit: type=1400 audit(2000000184.714:3580): avc: denied { setopt } for pid=24792 comm="syz.4.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2058.160134][T24794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.171642][T24794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.182720][T24794] device bridge_slave_0 entered promiscuous mode [ 2058.189705][T24794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.204206][T24794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.211727][T24794] device bridge_slave_1 entered promiscuous mode [ 2058.261103][T24821] tmpfs: Unknown parameter 'syz ' [ 2058.327821][T24794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.334734][T24794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.372601][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.380010][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2058.387611][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2058.402631][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2058.410730][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2058.418676][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.425471][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.433149][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2058.441207][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.448048][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.455265][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2058.463018][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2058.475344][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2058.483333][T10355] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2058.493085][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2058.501049][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2058.508183][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2058.516357][T24794] device veth0_vlan entered promiscuous mode [ 2058.522414][ T4097] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2058.534432][T24794] device veth1_macvtap entered promiscuous mode [ 2058.541203][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2058.551705][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2058.562954][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2058.630481][T11483] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2058.657230][T17080] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.664829][T17080] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.672357][T17080] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.679671][T17080] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2058.686842][T17080] rtc rtc0: __rtc_set_alarm: err=-22 [ 2058.770788][ T4097] usb 5-1: Using ep0 maxpacket: 8 [ 2058.870535][T10355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.881255][T10355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2058.890844][ T4097] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 2058.899633][ T4097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.907504][T10355] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 2058.916401][T10355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.925561][ T4097] usb 5-1: config 0 descriptor?? [ 2058.931066][T10355] usb 4-1: config 0 descriptor?? [ 2058.971137][ T4097] usb 5-1: unknown interface protocol 0x3f, assuming v1 [ 2058.977943][ T4097] usb 5-1: cannot find UAC_HEADER [ 2058.984461][ T4097] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 2058.990506][T11483] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.998222][T22670] udevd[22670]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2059.001356][T11483] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2059.100522][T11483] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2059.109389][T11483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2059.117218][T11483] usb 3-1: SerialNumber: syz [ 2059.174602][ T314] usb 5-1: USB disconnect, device number 84 [ 2059.182406][ T10] device bridge_slave_1 left promiscuous mode [ 2059.188414][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.195664][ T10] device bridge_slave_0 left promiscuous mode [ 2059.201657][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.209231][ T10] device veth1_macvtap left promiscuous mode [ 2059.215116][ T10] device veth0_vlan left promiscuous mode [ 2059.391185][T10355] elo 0003:04E7:0030.00CA: item fetching failed at offset 5/7 [ 2059.398783][T10355] elo 0003:04E7:0030.00CA: parse failed [ 2059.401229][T11483] usb 3-1: 0:2 : does not exist [ 2059.404445][T10355] elo: probe of 0003:04E7:0030.00CA failed with error -22 [ 2059.409632][T11483] usb 3-1: unit 255 not found! [ 2059.595579][T10355] usb 4-1: USB disconnect, device number 74 [ 2059.620566][T11483] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2059.631745][T11483] usb 3-1: USB disconnect, device number 77 [ 2060.273889][T24847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.287500][T24847] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.295045][T24847] device bridge_slave_0 entered promiscuous mode [ 2060.302096][T24847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.311004][T24847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.311492][T24844] syz.4.5388[24844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2060.318008][T24844] syz.4.5388[24844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2060.318420][T24847] device bridge_slave_1 entered promiscuous mode [ 2060.374450][T24859] loop3: detected capacity change from 0 to 512 [ 2060.389793][T24859] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.5391: iget: bad extended attribute block 1 [ 2060.411999][T24859] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5391: couldn't read orphan inode 15 (err -117) [ 2060.433994][T24859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2060.451003][T24568] EXT4-fs (loop3): unmounting filesystem. [ 2060.482079][T24847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.488972][T24847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.496113][T24847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.502979][T24847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.545534][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2060.569542][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.577225][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.597207][T24847] device veth0_vlan entered promiscuous mode [ 2060.604775][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2060.624924][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2060.636235][T24883] input: syz1 as /devices/virtual/input/input72 [ 2060.654608][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2060.662249][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2060.669991][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2060.678378][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.685438][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.692875][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2060.701382][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.708245][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.715477][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2060.723327][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2060.738413][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2060.757484][T24847] device veth1_macvtap entered promiscuous mode [ 2060.770325][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2060.784006][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2061.351181][ T7124] device bridge_slave_1 left promiscuous mode [ 2061.357115][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.364651][ T7124] device bridge_slave_0 left promiscuous mode [ 2061.370602][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.378518][ T7124] device veth1_macvtap left promiscuous mode [ 2061.385195][ T7124] device veth0_vlan left promiscuous mode [ 2062.551172][T24915] netem: incorrect ge model size [ 2062.557728][T24915] netem: change failed [ 2062.644930][T24928] all: renamed from team_slave_0 [ 2062.689483][T24920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.696474][T24920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.703784][T24920] device bridge_slave_0 entered promiscuous mode [ 2062.717510][T24920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.724509][T24920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.732464][T24920] device bridge_slave_1 entered promiscuous mode [ 2062.780460][T11483] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2062.809508][T24920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.816583][T24920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2062.823676][T24920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.830464][T24920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.847388][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2062.856588][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.865437][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.882883][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2062.895822][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.902725][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.910700][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2062.918717][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.925604][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2062.932931][T10355] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2062.951396][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2062.959196][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2062.975565][T24920] device veth0_vlan entered promiscuous mode [ 2062.983122][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2062.991540][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2062.999601][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2063.007509][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2063.023362][T24920] device veth1_macvtap entered promiscuous mode [ 2063.030827][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2063.062634][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2063.074063][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2063.115673][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 2063.115694][ T28] audit: type=1400 audit(2000000189.834:3623): avc: denied { mount } for pid=24951 comm="syz.2.5428" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2063.149076][T24954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5429'. [ 2063.160607][T11483] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.171396][ T28] audit: type=1400 audit(2000000189.894:3624): avc: denied { unmount } for pid=23302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2063.191361][T11483] usb 5-1: config 0 has no interfaces? [ 2063.198247][T10355] usb 4-1: Using ep0 maxpacket: 16 [ 2063.203425][ T28] audit: type=1400 audit(2000000189.914:3625): avc: denied { create } for pid=24956 comm="syz.2.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2063.224623][ T28] audit: type=1400 audit(2000000189.914:3626): avc: denied { write } for pid=24956 comm="syz.2.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2063.320530][T10355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.331320][T10355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.340866][T10355] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2063.349632][T10355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.350650][T11483] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2063.358160][T10355] usb 4-1: config 0 descriptor?? [ 2063.370810][T11483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.379062][T11483] usb 5-1: Product: syz [ 2063.383085][T11483] usb 5-1: Manufacturer: syz [ 2063.387459][T11483] usb 5-1: SerialNumber: syz [ 2063.392679][T11483] usb 5-1: config 0 descriptor?? [ 2063.634458][T11483] usb 5-1: USB disconnect, device number 85 [ 2063.850925][T10355] cp2112 0003:10C4:EA90.00CB: unexpected long global item [ 2063.857934][T10355] cp2112 0003:10C4:EA90.00CB: parse failed [ 2063.863712][T10355] cp2112: probe of 0003:10C4:EA90.00CB failed with error -22 [ 2064.057505][T20045] usb 4-1: USB disconnect, device number 75 [ 2064.210961][T15259] device bridge_slave_1 left promiscuous mode [ 2064.216969][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.224375][T15259] device bridge_slave_0 left promiscuous mode [ 2064.230287][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.237905][T15259] device veth1_macvtap left promiscuous mode [ 2064.243764][T15259] device veth0_vlan left promiscuous mode [ 2064.956394][ T28] audit: type=1400 audit(2000000191.674:3627): avc: denied { read write } for pid=24961 comm="syz.0.5431" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2064.999629][ T28] audit: type=1400 audit(2000000191.704:3628): avc: denied { open } for pid=24961 comm="syz.0.5431" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2065.042456][T24968] loop3: detected capacity change from 0 to 256 [ 2065.049004][T24968] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777lCJ}tBꓵbI$%<.*:-?s# I{'P0^R/x3U`Q|`kA_SdUK2$-Rv;/}E 7Dӽ[b" or missing value [ 2065.056680][ T28] audit: type=1400 audit(2000000191.714:3629): avc: denied { setopt } for pid=24969 comm="syz.0.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2065.102019][ T28] audit: type=1400 audit(2000000191.824:3630): avc: denied { read } for pid=24973 comm="syz.0.5438" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2065.127561][ T28] audit: type=1400 audit(2000000191.824:3631): avc: denied { open } for pid=24973 comm="syz.0.5438" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2065.160096][T24981] binder: 24973:24981 ioctl 4018620d 0 returned -22 [ 2065.175326][T24981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24981 comm=syz.0.5438 [ 2065.203493][T24981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5438'. [ 2065.213351][T24971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.216081][ T28] audit: type=1400 audit(2000000191.874:3632): avc: denied { read } for pid=24973 comm="syz.0.5438" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2065.255729][T24971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.265839][T24971] device bridge_slave_0 entered promiscuous mode [ 2065.281636][T24971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.288752][T24971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.298307][T24971] device bridge_slave_1 entered promiscuous mode [ 2065.469348][T25000] device syzkaller0 entered promiscuous mode [ 2065.605982][T25014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2065.613161][T25014] IPv6: NLM_F_CREATE should be set when creating new route [ 2065.654293][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2065.664663][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2065.682344][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2065.690696][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2065.699118][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.706022][T13196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2065.713377][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2065.721964][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2065.730072][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.736953][T13196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2065.744456][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2065.766476][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2065.775237][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2065.803964][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2065.819768][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2065.827871][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2065.835607][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2065.845328][T24971] device veth0_vlan entered promiscuous mode [ 2065.868351][T17080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2065.878038][T24971] device veth1_macvtap entered promiscuous mode [ 2065.896716][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2065.905989][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2065.920563][T11483] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2066.160437][T11483] usb 5-1: Using ep0 maxpacket: 16 [ 2066.280510][T11483] usb 5-1: config 0 has no interfaces? [ 2066.285866][T11483] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2066.294691][T11483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.303269][T11483] usb 5-1: config 0 descriptor?? [ 2066.542668][T11483] usb 5-1: USB disconnect, device number 86 [ 2066.640961][T19204] device bridge_slave_1 left promiscuous mode [ 2066.646880][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.654235][T19204] device bridge_slave_0 left promiscuous mode [ 2066.660168][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.667700][T19204] device veth1_macvtap left promiscuous mode [ 2066.673663][T19204] device veth0_vlan left promiscuous mode [ 2067.831878][T25038] syz.3.5462[25038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.831963][T25038] syz.3.5462[25038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.849256][T25038] syz.3.5462[25038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.860739][T25038] syz.3.5462[25038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.891497][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5464'. [ 2067.974759][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2067.981810][T25045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.989058][T25045] device bridge_slave_0 entered promiscuous mode [ 2067.996277][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.003311][T25045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.010875][T25045] device bridge_slave_1 entered promiscuous mode [ 2068.071375][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.078239][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.085350][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.092121][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.116425][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2068.124444][T20045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.132242][T20045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.142080][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2068.150175][T20045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.157131][T20045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.166286][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2068.174306][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.181146][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.205245][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2068.213383][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2068.230709][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2068.239057][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2068.248588][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2068.250549][T17080] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2068.256003][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2068.270705][T25045] device veth0_vlan entered promiscuous mode [ 2068.284266][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2068.293999][T25045] device veth1_macvtap entered promiscuous mode [ 2068.309365][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2068.310604][T20045] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2068.318264][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2068.520482][T17080] usb 4-1: Using ep0 maxpacket: 32 [ 2068.560472][T20045] usb 5-1: Using ep0 maxpacket: 8 [ 2068.660536][T17080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2068.671328][T17080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2068.680630][T20045] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2068.681369][T17080] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2068.692507][T20045] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2068.701121][T17080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.710767][T20045] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2068.721923][T17080] usb 4-1: config 0 descriptor?? [ 2068.728099][T20045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.910883][ T10] device bridge_slave_1 left promiscuous mode [ 2068.916846][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.924098][ T10] device bridge_slave_0 left promiscuous mode [ 2068.930047][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.937794][ T10] device veth1_macvtap left promiscuous mode [ 2068.943649][ T10] device veth0_vlan left promiscuous mode [ 2069.020515][T20045] usb 5-1: string descriptor 0 read error: -71 [ 2069.027235][T20045] hub 5-1:32.0: USB hub found [ 2069.090525][T20045] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 2069.121501][T20045] usb 5-1: USB disconnect, device number 87 [ 2069.211222][T17080] hkems 0003:2006:0118.00CC: unbalanced delimiter at end of report description [ 2069.220295][T17080] hkems 0003:2006:0118.00CC: parse failed [ 2069.225887][T17080] hkems: probe of 0003:2006:0118.00CC failed with error -22 [ 2069.415250][T17080] usb 4-1: USB disconnect, device number 76 [ 2070.420873][T25073] binder: 25066:25073 ioctl 4018620d 0 returned -22 [ 2070.433109][T25073] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25073 comm=syz.2.5471 [ 2070.448379][T25073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5471'. [ 2070.601053][T25075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.608030][T25075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.616798][T25075] device bridge_slave_0 entered promiscuous mode [ 2070.625248][T25075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.632692][T25075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.640796][T25075] device bridge_slave_1 entered promiscuous mode [ 2070.700459][T17080] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2070.799311][T25075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.806242][T25075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2070.813480][T25075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.820458][T25075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.856974][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2070.864129][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2070.864147][ T28] audit: type=1400 audit(2000000197.574:3640): avc: denied { create } for pid=25095 comm="syz.2.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2070.889946][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.897348][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.916898][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2070.925331][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.932221][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.939813][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2070.947830][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.954680][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2070.972248][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2070.983924][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2070.991733][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2071.001450][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2071.009576][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2071.016908][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2071.029723][T25075] device veth0_vlan entered promiscuous mode [ 2071.047250][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2071.058405][T25075] device veth1_macvtap entered promiscuous mode [ 2071.060538][T17080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2071.064704][T20045] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2071.083206][T17080] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2071.093498][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2071.101744][T17080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2071.117087][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2071.120446][T17080] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2071.290500][T17080] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2071.299371][T17080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.307228][T17080] usb 5-1: Product: syz [ 2071.311181][T17080] usb 5-1: Manufacturer: syz [ 2071.315601][T17080] usb 5-1: SerialNumber: syz [ 2071.321083][T17080] usb 5-1: config 0 descriptor?? [ 2071.361014][T17080] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 2071.460493][T20045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.471329][T20045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.480836][T20045] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 2071.489745][T20045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.500835][T20045] usb 4-1: config 0 descriptor?? [ 2071.590650][T17080] scsi host1: usb-storage 5-1:0.0 [ 2071.597221][T17080] usb 5-1: USB disconnect, device number 88 [ 2071.861011][T19204] device bridge_slave_1 left promiscuous mode [ 2071.867018][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.874578][T19204] device bridge_slave_0 left promiscuous mode [ 2071.880626][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.888141][T19204] device veth1_macvtap left promiscuous mode [ 2071.894172][T19204] device veth0_vlan left promiscuous mode [ 2071.981084][T20045] petalynx 0003:18B1:0037.00CD: collection stack underflow [ 2071.988105][T20045] petalynx 0003:18B1:0037.00CD: item 0 1 0 12 parsing failed [ 2071.995507][T20045] petalynx 0003:18B1:0037.00CD: parse failed [ 2072.001411][T20045] petalynx: probe of 0003:18B1:0037.00CD failed with error -22 [ 2072.187747][T20045] usb 4-1: USB disconnect, device number 77 [ 2073.333271][T25142] loop3: detected capacity change from 0 to 512 [ 2073.348146][T25142] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2073.359936][T25142] EXT4-fs (loop3): invalid journal inode [ 2073.376702][T25142] EXT4-fs (loop3): can't get journal size [ 2073.383519][T25135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.390782][T25135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.398147][T25135] device bridge_slave_0 entered promiscuous mode [ 2073.405753][T25135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.413752][T25142] EXT4-fs (loop3): 1 truncate cleaned up [ 2073.419411][T25135] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.426612][T25142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2073.435790][T25135] device bridge_slave_1 entered promiscuous mode [ 2073.463351][ T28] audit: type=1400 audit(2000000200.184:3641): avc: denied { ioctl } for pid=25140 comm="syz.3.5498" path="/66/file0/cgroup.events" dev="loop3" ino=18 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2073.502699][T24568] EXT4-fs (loop3): unmounting filesystem. [ 2073.529037][ T28] audit: type=1400 audit(2000000200.244:3642): avc: denied { setopt } for pid=25154 comm="syz.0.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2073.560309][T25160] loop3: detected capacity change from 0 to 1024 [ 2073.587946][T25160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2073.613619][ T28] audit: type=1400 audit(2000000200.334:3643): avc: denied { create } for pid=25159 comm="syz.3.5502" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2073.640328][T24568] EXT4-fs (loop3): unmounting filesystem. [ 2073.673598][T25171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25171 comm=syz.2.5508 [ 2073.687719][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2073.702208][T20045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2073.721883][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2073.730368][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2073.739310][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.746320][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.754244][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2073.762813][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2073.771747][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.778580][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.793667][T25135] device veth0_vlan entered promiscuous mode [ 2073.801571][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2073.810127][T25178] binder: 25176:25178 ioctl 4018620d 0 returned -22 [ 2073.816774][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2073.825749][T25178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25178 comm=syz.2.5511 [ 2073.838556][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2073.845737][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2073.854384][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2073.863010][T25178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5511'. [ 2073.871940][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2073.879633][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2073.899389][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2073.916871][T25135] device veth1_macvtap entered promiscuous mode [ 2073.954436][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2073.963005][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2073.986330][T13196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2074.040691][ T314] usb 4-1: new high-speed USB device number 78 using dummy_hcd SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=5124 state=3 status=67 (errno 9: Bad file descriptor) [ 2074.178669][ T28] audit: type=1400 audit(2000000200.894:3644): avc: denied { write } for pid=298 comm="syz-executor" path="pipe:[14495]" dev="pipefs" ino=14495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2074.361789][T13196] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2074.480525][ T314] usb 4-1: device descriptor read/all, error -71 [ 2074.640866][ T10] device bridge_slave_1 left promiscuous mode [ 2074.646867][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2074.654131][ T10] device bridge_slave_0 left promiscuous mode [ 2074.660236][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.667703][ T10] device veth1_macvtap left promiscuous mode [ 2074.673637][ T10] device veth0_vlan left promiscuous mode [ 2075.401300][ T10] device bridge_slave_1 left promiscuous mode [ 2075.407218][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.414667][ T10] device bridge_slave_0 left promiscuous mode [ 2075.420773][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.428183][ T10] device bridge_slave_1 left promiscuous mode [ 2075.434288][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.441444][ T10] device bridge_slave_0 left promiscuous mode [ 2075.447325][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.454759][ T10] device bridge_slave_1 left promiscuous mode [ 2075.460832][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.467823][ T10] device bridge_slave_0 left promiscuous mode [ 2075.473886][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.481508][ T10] device bridge_slave_1 left promiscuous mode [ 2075.487401][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.494597][ T10] device bridge_slave_0 left promiscuous mode [ 2075.500581][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.508219][ T10] device veth1_macvtap left promiscuous mode [ 2075.514224][ T10] device veth0_vlan left promiscuous mode [ 2075.519897][ T10] device veth1_macvtap left promiscuous mode [ 2075.525826][ T10] device veth0_vlan left promiscuous mode [ 2075.531484][ T10] device veth1_macvtap left promiscuous mode [ 2075.537271][ T10] device veth0_vlan left promiscuous mode [ 2075.543114][ T10] device veth1_macvtap left promiscuous mode [ 2075.548900][ T10] device veth0_vlan left promiscuous mode