last executing test programs: 30.150223365s ago: executing program 4 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 30.121665425s ago: executing program 4 (id=365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x3, {0x3, 0x21, 'L'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 28.122519524s ago: executing program 4 (id=382): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="770b0098") 28.094319844s ago: executing program 4 (id=385): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f0000000800)=""/112, 0x70}) 27.921106854s ago: executing program 4 (id=388): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001a40)={0xfffffffffffffffe, 0x0, 0x0, r2, 0x5}) 27.543275016s ago: executing program 4 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.514902776s ago: executing program 32 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.955513933s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.984447957s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.085168455s ago: executing program 3 (id=581): ioperm(0x0, 0xab4b, 0x21000000007) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 10.042416595s ago: executing program 3 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000c80)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x10004, 0x0, [{0x4, 0x7, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x0, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x49}, {0x9, 0x1, 0x0, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0x1}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x40, '\x00', 0x5}, {0x80, 0x35, 0x8, '\x00', 0x9}, {0x99, 0x0, 0x2, '\x00', 0x1}, {0x8, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x9, 0x8, 0x0, '\x00', 0x2}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0xa5, '\x00', 0xfd}, {0xb0, 0x7, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x5, '\x00', 0x7f}, {0x1, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x8, '\x00', 0x6}, {0x0, 0x1, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) 9.887922075s ago: executing program 3 (id=585): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 9.823525876s ago: executing program 3 (id=586): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) setuid(0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4c4, &(0x7f0000000200)={[{@journal_checksum}]}, 0x1, 0xbe2, &(0x7f0000000f80)="$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") 9.649559717s ago: executing program 3 (id=588): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 9.370741888s ago: executing program 3 (id=591): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 9.360924718s ago: executing program 33 (id=591): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 9.147561669s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.455429302s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.324980155s ago: executing program 2 (id=626): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @remote}, {0x0, 0x0, 0xfffffffffffffc54, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.248166536s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.171589545s ago: executing program 2 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 1.028824616s ago: executing program 1 (id=639): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1.018202176s ago: executing program 2 (id=640): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 957.531046ms ago: executing program 1 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 890.581186ms ago: executing program 1 (id=645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done={0x400c6313}], 0x0, 0x0, 0x0}) 852.758026ms ago: executing program 1 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 732.151757ms ago: executing program 6 (id=652): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000005dc0)=[{{&(0x7f0000001500)={0xa, 0x8, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001740)="39444b087dafdc726ad121fd0760700a50126cce62a21b4b4b", 0x19}, {&(0x7f00000017c0)="aa679e96130a1ceefc0e2e1845283192ddabca19ef96da88b6a5425d16db9084216a54b7cb779eb1ac6fd69d1ba61bb560f030b4bd761c8c00af37698030dd918d378359142e54e6b007de4470c2138752897c2332a0c44c2f4e1e49d13d755eef6cae0ebb9c25d28991a4", 0x6b}, {&(0x7f0000001880)="80b230c257504d1ba0c3ea91f7aa39799f21e3aa6afc3e1cc68c55c5463c9b8dc1e1a959ec4caa2a6149d0d13bd374938972b4eed7e07650e0739216ad2e1633dca88eee2423b5e254f08c9923e34617f6021772aac910d71db0dc568eec8ab165dc7daf444b26a03dfb273e", 0x6c}, {&(0x7f0000001980)="7e40ee176e9e03f861a25e0dd87d94b2b2bf97c66040912edef9a8ccf3595dbde820f94703dd07449b65c7f48c97690aa8f36b3cf3bffb08125b4e0a0c523b863bb6bf67277ab822d53762cc8f9a8b73711c2ca384ed047a181105", 0x5b}], 0x4}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001b00)="da81472fbcebd210986f", 0xa}], 0x1}}], 0x3, 0xc080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x2, 0x1, 0x0, 0x8, 0x2, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 685.832157ms ago: executing program 1 (id=653): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2}) 650.861637ms ago: executing program 6 (id=654): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="5b91", 0x2}], 0x1}, 0x20048811) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/117, 0x75}], 0x1}, 0x40008020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x2042) 606.852577ms ago: executing program 1 (id=655): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=0x0, @ANYRES8, @ANYRES16=r0], 0x0) 585.592048ms ago: executing program 6 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 541.050588ms ago: executing program 6 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0x20cf01) 507.175768ms ago: executing program 5 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 497.322958ms ago: executing program 6 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 472.807108ms ago: executing program 5 (id=661): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c71756965742c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d7374726963742c646f74732c646f74732c002d4f2105463ddd8ff9c4b6fcc26640b3b44c8e0c9bbdec1863d64c8e82"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x2}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 438.978898ms ago: executing program 6 (id=662): syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 408.507738ms ago: executing program 5 (id=663): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10) 252.397119ms ago: executing program 2 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 251.337629ms ago: executing program 5 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x8050) 207.998269ms ago: executing program 2 (id=666): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x300, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 160.602639ms ago: executing program 2 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 42.88191ms ago: executing program 5 (id=668): syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2ba, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 6.40653ms ago: executing program 5 (id=669): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 0s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x0, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): : New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 46.026134][ T8] device veth0_vlan left promiscuous mode [ 46.031883][ T1077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.049869][ T1077] usb 2-1: Product: syz [ 46.054023][ T1077] usb 2-1: Manufacturer: syz [ 46.058448][ T1077] usb 2-1: SerialNumber: syz [ 46.070900][ T325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.090893][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.120687][ T325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.230690][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.237692][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.246009][ T1139] device bridge_slave_0 entered promiscuous mode [ 46.253092][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.259918][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.266921][ T40] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.267674][ T1139] device bridge_slave_1 entered promiscuous mode [ 46.290833][ T325] usb 5-1: New USB device found, idVendor=0582, idProduct=00f0, bcdDevice=c7.3d [ 46.299866][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.307693][ T325] usb 5-1: Product: syz [ 46.311694][ T325] usb 5-1: Manufacturer: syz [ 46.316078][ T325] usb 5-1: SerialNumber: syz [ 46.322242][ T325] usb 5-1: config 0 descriptor?? [ 46.350829][ T1077] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 46.357198][ T1077] usb 2-1: No valid video chain found. [ 46.358731][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.369255][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.376354][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.383132][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.409539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.417163][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.424551][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.434012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.442342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.450393][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.457261][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.466874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.475211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.483188][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.490011][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.506276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.514234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.523284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.531276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.540953][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 46.553364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.561615][ T1077] usb 2-1: USB disconnect, device number 8 [ 46.562072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.581769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.589496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.597874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.605362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.615193][ T1139] device veth0_vlan entered promiscuous mode [ 46.625564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.633651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.644319][ T325] usb 5-1: USB disconnect, device number 8 [ 46.645548][ T1139] device veth1_macvtap entered promiscuous mode [ 46.656048][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.682264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.689808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.697849][ T40] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.701534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.708044][ T40] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.722774][ T40] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 46.732012][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.743022][ T40] usb 4-1: config 0 descriptor?? [ 46.749833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.758128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.988888][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.996236][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.003789][ T1145] device bridge_slave_0 entered promiscuous mode [ 47.012326][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.019269][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.026773][ T1145] device bridge_slave_1 entered promiscuous mode [ 47.063685][ T8] device bridge_slave_1 left promiscuous mode [ 47.069700][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.077600][ T8] device bridge_slave_0 left promiscuous mode [ 47.094615][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.116091][ T8] device veth1_macvtap left promiscuous mode [ 47.127450][ T8] device veth0_vlan left promiscuous mode [ 47.181590][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 47.181617][ T28] audit: type=1400 audit(1732363557.204:281): avc: denied { getopt } for pid=1161 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.214252][ T28] audit: type=1400 audit(1732363557.224:282): avc: denied { write } for pid=1161 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.217368][ T40] hid (null): global environment stack underflow [ 47.234692][ T28] audit: type=1400 audit(1732363557.224:283): avc: denied { read } for pid=1161 comm="syz.4.284" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.263464][ T40] hid (null): invalid report_size 5201 [ 47.268796][ T40] hid (null): global environment stack underflow [ 47.275435][ T40] hid (null): global environment stack underflow [ 47.282513][ T40] hid (null): bogus close delimiter [ 47.287905][ T40] hid (null): unknown global tag 0xc [ 47.300861][ T40] hid (null): unknown global tag 0xe1 [ 47.306071][ T40] hid (null): unknown global tag 0xe [ 47.334060][ T40] hid-generic 0003:060B:500A.000B: unexpected long global item [ 47.349621][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.356588][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.363701][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.370455][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.378541][ T40] hid-generic: probe of 0003:060B:500A.000B failed with error -22 [ 47.415838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.431256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.449715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.460431][ T1077] usb 4-1: USB disconnect, device number 9 [ 47.481363][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.489506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.497854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.506210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.525467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.534075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.542671][ T40] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.552819][ T1169] loop1: detected capacity change from 0 to 40427 [ 47.555290][ T1145] device veth0_vlan entered promiscuous mode [ 47.565331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.572954][ T1169] F2FS-fs (loop1): fault_injection options not supported [ 47.573540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.579804][ T1169] F2FS-fs (loop1): Image doesn't support compression [ 47.579847][ T1169] F2FS-fs (loop1): Image doesn't support compression [ 47.601298][ T1169] F2FS-fs (loop1): fault_type options not supported [ 47.603923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.608525][ T1169] F2FS-fs (loop1): invalid crc value [ 47.615210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.621379][ T1169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.627903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.641917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.651222][ T1145] device veth1_macvtap entered promiscuous mode [ 47.667347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.675551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.682823][ T1169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.684535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.710036][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.719895][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.747156][ T290] syz-executor: attempt to access beyond end of device [ 47.747156][ T290] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 47.940893][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.951670][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.961334][ T40] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 47.970127][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.978573][ T40] usb 3-1: config 0 descriptor?? [ 48.241456][ T8] device bridge_slave_1 left promiscuous mode [ 48.247394][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.254744][ T8] device bridge_slave_0 left promiscuous mode [ 48.260669][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.268623][ T8] device veth1_macvtap left promiscuous mode [ 48.274725][ T8] device veth0_vlan left promiscuous mode [ 48.395159][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.402148][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.409313][ T1175] device bridge_slave_0 entered promiscuous mode [ 48.417164][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.424188][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.431482][ T1175] device bridge_slave_1 entered promiscuous mode [ 48.451977][ T40] hid-led 0003:0FC5:B080.000C: item fetching failed at offset 0/3 [ 48.459721][ T40] hid-led: probe of 0003:0FC5:B080.000C failed with error -22 [ 48.498249][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.505121][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.512230][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.518988][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.527100][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.534428][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.555848][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.563155][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.572065][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.580215][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.589672][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.596522][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.605750][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.614048][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.622152][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.628978][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.643352][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.651364][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.659393][ T325] usb 3-1: USB disconnect, device number 8 [ 48.667602][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.675971][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.690114][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.698339][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.709925][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.717698][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.726135][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.733558][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.743547][ T1175] device veth0_vlan entered promiscuous mode [ 48.753723][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.761726][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.771063][ T1175] device veth1_macvtap entered promiscuous mode [ 48.780465][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.788064][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.796314][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.809648][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.817926][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.291348][ T8] device bridge_slave_1 left promiscuous mode [ 49.297294][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.305400][ T8] device bridge_slave_0 left promiscuous mode [ 49.312336][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.320590][ T8] device veth1_macvtap left promiscuous mode [ 49.326619][ T8] device veth0_vlan left promiscuous mode [ 49.672796][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.679723][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.687312][ T1193] device bridge_slave_0 entered promiscuous mode [ 49.694451][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.701713][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.709074][ T1193] device bridge_slave_1 entered promiscuous mode [ 49.748152][ T28] audit: type=1400 audit(1732363559.764:284): avc: denied { read } for pid=1200 comm="syz.3.292" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.771704][ T28] audit: type=1400 audit(1732363559.764:285): avc: denied { open } for pid=1200 comm="syz.3.292" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.802653][ T28] audit: type=1400 audit(1732363559.814:286): avc: denied { map } for pid=1203 comm="syz.1.293" path="socket:[21251]" dev="sockfs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.834256][ T28] audit: type=1400 audit(1732363559.814:287): avc: denied { read } for pid=1203 comm="syz.1.293" path="socket:[21251]" dev="sockfs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.834345][ T1207] loop1: detected capacity change from 0 to 128 [ 49.857532][ T349] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 49.881108][ T1207] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.889609][ T1207] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 49.935918][ T290] EXT4-fs (loop1): unmounting filesystem. [ 49.951466][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.958327][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.965476][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.969669][ T1211] loop1: detected capacity change from 0 to 512 [ 49.972396][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.996832][ T1211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.006053][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.012780][ T1211] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 50.026841][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.030834][ T40] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.041904][ T1211] EXT4-fs (loop1): 1 truncate cleaned up [ 50.041976][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.047380][ T1211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.088895][ T28] audit: type=1400 audit(1732363560.104:288): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.089035][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.117247][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.117386][ T290] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2924: inode #18: comm syz-executor: corrupted xattr block 35 [ 50.124158][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.124716][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.137799][ T290] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 50.144072][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.166783][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.170760][ T349] usb 5-1: Using ep0 maxpacket: 16 [ 50.180347][ T290] EXT4-fs (loop1): unmounting filesystem. [ 50.193572][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.201514][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.216085][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.242750][ T1193] device veth0_vlan entered promiscuous mode [ 50.249406][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.258484][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.266119][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.283325][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.294931][ T1193] device veth1_macvtap entered promiscuous mode [ 50.309250][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.317833][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.330875][ T349] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 50.339839][ T40] usb 3-1: Using ep0 maxpacket: 8 [ 50.345902][ T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.360580][ T349] usb 5-1: config 0 descriptor?? [ 50.369603][ T28] audit: type=1400 audit(1732363560.384:289): avc: denied { read } for pid=1224 comm="syz.1.303" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.393868][ T28] audit: type=1400 audit(1732363560.384:290): avc: denied { open } for pid=1224 comm="syz.1.303" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.490799][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.501560][ T8] device bridge_slave_1 left promiscuous mode [ 50.508012][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 50.508655][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.519613][ T40] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.539308][ T8] device bridge_slave_0 left promiscuous mode [ 50.545695][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.554220][ T8] device veth1_macvtap left promiscuous mode [ 50.560122][ T8] device veth0_vlan left promiscuous mode [ 50.630271][ T500] usb 5-1: USB disconnect, device number 9 [ 50.690852][ T40] usb 3-1: New USB device found, idVendor=0582, idProduct=00f0, bcdDevice=c7.3d [ 50.699721][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.707632][ T40] usb 3-1: Product: syz [ 50.711643][ T40] usb 3-1: Manufacturer: syz [ 50.716042][ T40] usb 3-1: SerialNumber: syz [ 50.721949][ T40] usb 3-1: config 0 descriptor?? [ 50.800872][ T349] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.053263][ T40] usb 3-1: USB disconnect, device number 9 [ 51.061932][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.180860][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 51.198446][ T1232] process 'syz.4.306' launched './file0' with NULL argv: empty string added [ 51.200779][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 51.238189][ T349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.261151][ T349] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.270026][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.298993][ T349] usb 2-1: config 0 descriptor?? [ 51.311683][ T8] device bridge_slave_1 left promiscuous mode [ 51.319955][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.330844][ T1228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 51.338502][ T8] device bridge_slave_0 left promiscuous mode [ 51.344579][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.354437][ T8] device veth1_macvtap left promiscuous mode [ 51.360405][ T8] device veth0_vlan left promiscuous mode [ 51.530780][ T301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 51.584123][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.600893][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.608315][ T1238] device bridge_slave_0 entered promiscuous mode [ 51.615462][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.622513][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.629956][ T1238] device bridge_slave_1 entered promiscuous mode [ 51.793849][ T325] kernel write not supported for file bpf-prog (pid: 325 comm: kworker/0:4) [ 51.831911][ T349] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 51.841409][ T349] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 51.855666][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.864480][ T349] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 51.875807][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.901007][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.917320][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.927229][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.938937][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.950842][ T301] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 51.961138][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.968014][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.980731][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.999803][ T301] usb 5-1: config 0 descriptor?? [ 52.000874][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.021103][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.031095][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.037959][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.068295][ T1265] loop2: detected capacity change from 0 to 2048 [ 52.074750][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.083137][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.100571][ T1238] device veth0_vlan entered promiscuous mode [ 52.105597][ T1265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.107172][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.117502][ T325] usb 2-1: USB disconnect, device number 9 [ 52.123915][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.136794][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.144587][ T1265] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 52.145139][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.163601][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.173478][ T1265] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 52.179227][ T1238] device veth1_macvtap entered promiscuous mode [ 52.188340][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.197363][ T956] EXT4-fs (loop2): unmounting filesystem. [ 52.220863][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.231654][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.240091][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.249042][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.450457][ T1279] loop3: detected capacity change from 0 to 40427 [ 52.458071][ T1279] F2FS-fs (loop3): invalid crc value [ 52.467142][ T1279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.481841][ T301] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 52.503784][ T301] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 52.513770][ T1279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.515892][ T301] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 52.555158][ T292] syz-executor: attempt to access beyond end of device [ 52.555158][ T292] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.737413][ T40] usb 5-1: USB disconnect, device number 10 [ 52.750806][ C0] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -2 [ 52.771435][ T1172] device bridge_slave_1 left promiscuous mode [ 52.777381][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.785205][ T1172] device bridge_slave_0 left promiscuous mode [ 52.791239][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.798969][ T1172] device veth1_macvtap left promiscuous mode [ 52.804863][ T1172] device veth0_vlan left promiscuous mode [ 53.105022][ T1291] loop3: detected capacity change from 0 to 512 [ 53.166411][ T1291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.180918][ T1291] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 53.231199][ T292] EXT4-fs (loop3): unmounting filesystem. [ 53.270523][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.287041][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.300127][ T1296] device bridge_slave_0 entered promiscuous mode [ 53.314826][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.331271][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.338807][ T1296] device bridge_slave_1 entered promiscuous mode [ 53.469381][ T1293] loop1: detected capacity change from 0 to 40427 [ 53.493456][ T1293] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 53.509391][ T1293] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.522262][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.529134][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.536262][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.543129][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.556471][ T1293] F2FS-fs (loop1): invalid crc value [ 53.587463][ T1293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.594309][ T1328] loop2: detected capacity change from 0 to 1024 [ 53.605169][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.621806][ T1328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.624769][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.651356][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.655938][ T1328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.690994][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.699390][ T1328] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 53.707889][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.714783][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.722117][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.730174][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.731887][ T1293] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.737041][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.760865][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.761341][ T1138] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 53.776070][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.791287][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.793810][ T1293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.815226][ T956] EXT4-fs (loop2): unmounting filesystem. [ 53.823842][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.857242][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.865709][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.879895][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.888443][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.897347][ T1296] device veth0_vlan entered promiscuous mode [ 53.910610][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.913095][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 53.913110][ T28] audit: type=1400 audit(1732363563.934:294): avc: denied { name_bind } for pid=1339 comm="syz.2.343" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.918145][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.954836][ T1293] syz.1.325: attempt to access beyond end of device [ 53.954836][ T1293] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 53.959542][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.977034][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.986703][ T1296] device veth1_macvtap entered promiscuous mode [ 53.997450][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.005902][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.014549][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.034254][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.053179][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.080820][ T301] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.140852][ T1138] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.151850][ T1138] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.230841][ T1138] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.239769][ T1138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.247708][ T1138] usb 5-1: SerialNumber: syz [ 54.310832][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.320784][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 54.440868][ T301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.450864][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.459487][ T301] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.541509][ T1138] usb 5-1: 0:2 : does not exist [ 54.548610][ T1138] usb 5-1: USB disconnect, device number 11 [ 54.631340][ T1172] device bridge_slave_1 left promiscuous mode [ 54.637274][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.644657][ T1172] device bridge_slave_0 left promiscuous mode [ 54.650574][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.658337][ T1172] device veth1_macvtap left promiscuous mode [ 54.664249][ T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.673412][ T1172] device veth0_vlan left promiscuous mode [ 54.679093][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.686982][ T6] usb 3-1: config 0 has no interfaces? [ 54.692274][ T301] usb 4-1: Product: syz [ 54.696213][ T301] usb 4-1: Manufacturer: syz [ 54.700592][ T301] usb 4-1: SerialNumber: syz [ 54.751381][ T301] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 54.758937][ T301] cdc_ncm 4-1:1.0: bind() failure [ 54.850841][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 54.859735][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.867604][ T6] usb 3-1: Product: syz [ 54.871553][ T6] usb 3-1: Manufacturer: syz [ 54.875950][ T6] usb 3-1: SerialNumber: syz [ 54.881251][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 54.954958][ T1138] usb 4-1: USB disconnect, device number 10 [ 55.014834][ T28] audit: type=1400 audit(1732363565.034:295): avc: denied { set_context_mgr } for pid=1352 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.050098][ T28] audit: type=1400 audit(1732363565.054:296): avc: denied { map } for pid=1352 comm="syz.4.348" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.074657][ T28] audit: type=1400 audit(1732363565.074:297): avc: denied { mounton } for pid=1357 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.113455][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.120474][ T1357] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.128578][ T1357] device bridge_slave_0 entered promiscuous mode [ 55.135582][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.142484][ T1357] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.149849][ T1357] device bridge_slave_1 entered promiscuous mode [ 55.227261][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.234161][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.241248][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.248002][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.271131][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.278617][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.286242][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.295732][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.303836][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.310680][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.319386][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.327683][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.329876][ T349] usb 3-1: USB disconnect, device number 10 [ 55.334564][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.349471][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.365386][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.380610][ T1357] device veth0_vlan entered promiscuous mode [ 55.392898][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.402271][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.410217][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.423289][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.437809][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.449033][ T1357] device veth1_macvtap entered promiscuous mode [ 55.460474][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.492548][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.441376][ T312] device bridge_slave_1 left promiscuous mode [ 56.447328][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.454695][ T312] device bridge_slave_0 left promiscuous mode [ 56.460606][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.468410][ T312] device veth1_macvtap left promiscuous mode [ 56.474279][ T312] device veth0_vlan left promiscuous mode [ 56.563491][ T28] audit: type=1400 audit(1732363566.584:298): avc: denied { unmount } for pid=956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.590775][ T1392] serio: Serial port ptm0 [ 56.743655][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.750574][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.753036][ T28] audit: type=1400 audit(1732363566.774:299): avc: denied { bind } for pid=1411 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.758295][ T1401] device bridge_slave_0 entered promiscuous mode [ 56.783158][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.790004][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.797889][ T1401] device bridge_slave_1 entered promiscuous mode [ 56.804666][ T28] audit: type=1400 audit(1732363566.824:300): avc: denied { read } for pid=1411 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.850763][ T349] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 56.865181][ T28] audit: type=1400 audit(1732363566.884:301): avc: denied { setopt } for pid=1411 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.884531][ T500] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.971266][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.978562][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.005607][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.014001][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.022990][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.029946][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.037666][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.071620][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.073643][ T28] audit: type=1400 audit(1732363567.094:302): avc: denied { ioctl } for pid=1421 comm="syz.1.372" path="socket:[22414]" dev="sockfs" ino=22414 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.079897][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.113274][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.120122][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.138805][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.152738][ T1424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'. [ 57.157402][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.161529][ T500] usb 4-1: Using ep0 maxpacket: 8 [ 57.178290][ T1401] device veth0_vlan entered promiscuous mode [ 57.185527][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.194136][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.203161][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.210489][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.225877][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.252249][ T1401] device veth1_macvtap entered promiscuous mode [ 57.260901][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.264511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.284744][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.294474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.302469][ T500] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.314944][ T349] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 57.330798][ T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.342633][ T349] usb 5-1: config 0 descriptor?? [ 57.390887][ T500] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 57.399757][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 57.410745][ T1430] loop1: detected capacity change from 0 to 1024 [ 57.424272][ T500] usb 4-1: SerialNumber: syz [ 57.432615][ T500] usb 4-1: config 0 descriptor?? [ 57.462090][ T1430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.471391][ T500] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 57.478123][ T500] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized! [ 57.508746][ T500] usb 4-1: Failed to create links for entity 255 [ 57.518798][ T500] usb 4-1: Failed to register entities (-22). [ 57.585884][ T1430] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.600941][ T1430] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1968 with error 28 [ 57.613336][ T1430] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.613336][ T1430] [ 57.623247][ T1430] EXT4-fs (loop1): Total free blocks count 0 [ 57.629137][ T1430] EXT4-fs (loop1): Free/Dirty block details [ 57.635713][ T1430] EXT4-fs (loop1): free_blocks=68451041280 [ 57.641741][ T1430] EXT4-fs (loop1): dirty_blocks=1968 [ 57.646851][ T1430] EXT4-fs (loop1): Block reservation details [ 57.653034][ T1430] EXT4-fs (loop1): i_reserved_data_blocks=123 [ 57.678686][ T500] usb 4-1: USB disconnect, device number 11 [ 57.711367][ T312] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 57.723923][ T1417] loop2: detected capacity change from 0 to 131072 [ 57.732216][ T1417] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 57.746266][ T1417] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 57.755129][ T1417] F2FS-fs (loop2): invalid crc value [ 57.762144][ T1417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.796938][ T1417] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 57.803860][ T1417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 57.822123][ T349] hid-led 0003:0FC5:B080.000F: item fetching failed at offset 0/3 [ 57.829961][ T349] hid-led: probe of 0003:0FC5:B080.000F failed with error -22 [ 57.843994][ T28] audit: type=1400 audit(1732363567.864:303): avc: denied { rename } for pid=1416 comm="syz.2.370" name="file0" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.946024][ T8] device bridge_slave_1 left promiscuous mode [ 57.952117][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.959439][ T8] device bridge_slave_0 left promiscuous mode [ 57.965942][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.974166][ T8] device veth1_macvtap left promiscuous mode [ 57.980013][ T8] device veth0_vlan left promiscuous mode [ 58.048077][ T500] usb 5-1: USB disconnect, device number 12 [ 58.546469][ T1449] tmpfs: Unknown parameter 'syz$' [ 58.602979][ T1456] syz.3.383 uses obsolete (PF_INET,SOCK_PACKET) [ 58.625988][ T1461] loop4: detected capacity change from 0 to 1024 [ 58.682217][ T1461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.688941][ T1461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.698216][ T1461] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.706501][ T1461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801c02c, mo2=0003] [ 58.721685][ T1461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.776112][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.790797][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.798557][ T1465] device bridge_slave_0 entered promiscuous mode [ 58.806181][ T400] EXT4-fs (loop4): unmounting filesystem. [ 58.812644][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.825833][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.833671][ T1465] device bridge_slave_1 entered promiscuous mode [ 58.930737][ T500] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 58.958650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.966683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.983423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.992176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.000195][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.007076][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.014965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.023654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.037605][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.044503][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.063886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.071435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.079334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.087345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.095503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.112206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.126895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.157782][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.166167][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.173824][ T500] usb 2-1: Using ep0 maxpacket: 16 [ 59.181603][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 59.181620][ T28] audit: type=1400 audit(1732363569.204:305): avc: denied { create } for pid=1483 comm="syz.2.394" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.214845][ T1465] device veth0_vlan entered promiscuous mode [ 59.226636][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.237350][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.252057][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.260403][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.261196][ T28] audit: type=1400 audit(1732363569.224:306): avc: denied { write } for pid=1483 comm="syz.2.394" name="file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.269543][ T1465] device veth1_macvtap entered promiscuous mode [ 59.308471][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.315639][ T28] audit: type=1400 audit(1732363569.224:307): avc: denied { open } for pid=1483 comm="syz.2.394" path="/62/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.319993][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.338308][ T28] audit: type=1400 audit(1732363569.224:308): avc: denied { ioctl } for pid=1483 comm="syz.2.394" path="/62/file0" dev="tmpfs" ino=345 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.362813][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.370174][ T28] audit: type=1400 audit(1732363569.254:309): avc: denied { unlink } for pid=956 comm="syz-executor" name="file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.382543][ T500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.416503][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.420774][ T500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.447444][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.461085][ T500] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 59.473171][ T500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.498002][ T500] usb 2-1: config 0 descriptor?? [ 59.565720][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.572725][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.580134][ T1487] device bridge_slave_0 entered promiscuous mode [ 59.588170][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.595232][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.611620][ T1487] device bridge_slave_1 entered promiscuous mode [ 59.695791][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.702683][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.709751][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.716560][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.738485][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.746119][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.753908][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.765432][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.773522][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.780436][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.789175][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.797314][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.804191][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.817661][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.828544][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.843955][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.855448][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.863708][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.871509][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.880115][ T312] device bridge_slave_1 left promiscuous mode [ 59.886324][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.893788][ T312] device bridge_slave_0 left promiscuous mode [ 59.899741][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.907665][ T312] device veth1_macvtap left promiscuous mode [ 59.913580][ T312] device veth0_vlan left promiscuous mode [ 59.971953][ T500] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 59.978867][ T500] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 59.985785][ T500] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 59.992692][ T500] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 59.999541][ T500] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 59.999748][ T1487] device veth0_vlan entered promiscuous mode [ 60.006632][ T500] appleir 0003:05AC:8241.0010: No inputs registered, leaving [ 60.026981][ T500] appleir 0003:05AC:8241.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 60.028338][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.047180][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.057135][ T1487] device veth1_macvtap entered promiscuous mode [ 60.067157][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.074855][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.082982][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.092695][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.100851][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.251424][ T500] usb 2-1: USB disconnect, device number 10 [ 60.793397][ T1509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=1509 comm=syz.1.401 [ 60.836778][ T1513] xt_TCPMSS: Only works on TCP SYN packets [ 60.843328][ T1509] Zero length message leads to an empty skb [ 60.881407][ T312] device bridge_slave_1 left promiscuous mode [ 60.887464][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.919868][ T1520] SELinux: policydb version 0 does not match my version range 15-33 [ 60.928147][ T1520] SELinux: failed to load policy [ 60.933419][ T312] device bridge_slave_0 left promiscuous mode [ 60.939391][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.971636][ T312] device veth1_macvtap left promiscuous mode [ 60.977521][ T312] device veth0_vlan left promiscuous mode [ 61.100935][ T28] audit: type=1400 audit(1732363571.114:310): avc: denied { setopt } for pid=1511 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.249986][ T1538] syzkaller0: refused to change device tx_queue_len [ 61.330196][ T1542] loop1: detected capacity change from 0 to 512 [ 61.345079][ T1542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.371942][ T1542] EXT4-fs (loop1): 1 truncate cleaned up [ 61.378851][ T1542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.387752][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.393293][ T28] audit: type=1400 audit(1732363571.414:311): avc: denied { mounton } for pid=1551 comm="syz.5.418" path="/4/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.417061][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.450309][ T1524] device bridge_slave_0 entered promiscuous mode [ 61.458729][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.465807][ T1524] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.474187][ T1524] device bridge_slave_1 entered promiscuous mode [ 61.489107][ T290] EXT4-fs (loop1): unmounting filesystem. [ 61.516067][ T28] audit: type=1400 audit(1732363571.534:312): avc: denied { bind } for pid=1565 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.597811][ T1566] loop5: detected capacity change from 0 to 2048 [ 61.635779][ T1573] loop1: detected capacity change from 0 to 1024 [ 61.662992][ T1573] EXT4-fs: Ignoring removed orlov option [ 61.669277][ T1573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.681901][ T1566] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 61.728124][ T1566] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 61.742797][ T1573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.749252][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.757915][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.765073][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.772118][ T1524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.811310][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 61.824983][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.835121][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.853853][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.871698][ T290] EXT4-fs (loop1): unmounting filesystem. [ 61.892130][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.910672][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.917579][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.930683][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.941007][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.947869][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.972190][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.996907][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.025671][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.043088][ T1524] device veth0_vlan entered promiscuous mode [ 62.061150][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.069378][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.077408][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.093733][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.114220][ T1524] device veth1_macvtap entered promiscuous mode [ 62.135074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.144906][ T28] audit: type=1400 audit(1732363572.164:313): avc: denied { read } for pid=1601 comm="syz.5.439" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.149914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.172735][ T28] audit: type=1400 audit(1732363572.164:314): avc: denied { open } for pid=1601 comm="syz.5.439" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.238541][ T1610] loop2: detected capacity change from 0 to 256 [ 62.238868][ T1606] serio: Serial port ptm0 [ 62.252050][ T1610] exfat: Deprecated parameter 'namecase' [ 62.261542][ T1610] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 62.350799][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 62.590797][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 62.871028][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 62.879939][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.887756][ T24] usb 2-1: Product: syz [ 62.892373][ T312] device bridge_slave_1 left promiscuous mode [ 62.898292][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.905325][ T24] usb 2-1: Manufacturer: syz [ 62.909771][ T24] usb 2-1: SerialNumber: syz [ 62.915078][ T312] device bridge_slave_0 left promiscuous mode [ 62.921072][ T24] usb 2-1: config 0 descriptor?? [ 62.921171][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.933562][ T312] device veth1_macvtap left promiscuous mode [ 62.939414][ T312] device veth0_vlan left promiscuous mode [ 63.539142][ T349] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 63.553828][ T349] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 63.620984][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:80:c3:fe:ca:91 [ 63.666702][ T24] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 63.683548][ T24] usb 2-1: USB disconnect, device number 11 [ 63.765926][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.773142][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.780566][ T1637] device bridge_slave_0 entered promiscuous mode [ 63.787904][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.794961][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.802469][ T1637] device bridge_slave_1 entered promiscuous mode [ 63.880794][ T349] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.881876][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.894969][ T1637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.902082][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.908856][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.923682][ T1639] loop2: detected capacity change from 0 to 1024 [ 63.942661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.950356][ T1639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.957456][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.957742][ T1639] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.975529][ T1639] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 63.985378][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.987470][ T1639] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.998736][ T1639] EXT4-fs warning (device loop2): ext4_enable_quotas:7022: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 64.013257][ T1639] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 64.022169][ T1639] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.454: bad orphan inode 8 [ 64.032677][ T1639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.032744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.049645][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.056508][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.063892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.072082][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.078946][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.091205][ T956] EXT4-fs (loop2): unmounting filesystem. [ 64.091678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.112943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.128949][ T1637] device veth0_vlan entered promiscuous mode [ 64.136454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.146021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.157280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.167981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.175515][ T500] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 64.185461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.198001][ T1637] device veth1_macvtap entered promiscuous mode [ 64.212886][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.227288][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.250871][ T349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.276099][ T349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.293836][ T349] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.320899][ T349] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.360857][ T349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.375095][ T349] usb 6-1: config 0 descriptor?? [ 64.540850][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.551614][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.562805][ T500] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.575545][ T500] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.584359][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.593256][ T500] usb 4-1: config 0 descriptor?? [ 64.821623][ T312] device bridge_slave_1 left promiscuous mode [ 64.828246][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.835725][ T312] device bridge_slave_0 left promiscuous mode [ 64.841748][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.849432][ T312] device veth1_macvtap left promiscuous mode [ 64.855492][ T312] device veth0_vlan left promiscuous mode [ 64.872221][ T349] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x2 [ 64.879851][ T349] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 64.895034][ T349] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 65.051466][ T500] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 65.058940][ T500] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 65.067622][ T500] plantronics 0003:047F:FFFF.0013: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 65.923361][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.930289][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.937688][ T1688] device bridge_slave_0 entered promiscuous mode [ 65.944930][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.957814][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.966079][ T1688] device bridge_slave_1 entered promiscuous mode [ 66.049464][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.056634][ T1688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.063757][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.070604][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.098959][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.108007][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.120589][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.141890][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.155805][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.162712][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.173306][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.183212][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.190073][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.197904][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.213821][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.229529][ T1688] device veth0_vlan entered promiscuous mode [ 66.236730][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.246023][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.254762][ T1138] usb 4-1: USB disconnect, device number 12 [ 66.263679][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.273637][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.288535][ T1688] device veth1_macvtap entered promiscuous mode [ 66.297222][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.321600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.341260][ T1714] input: syz0 as /devices/virtual/input/input15 [ 66.346246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.357105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.371488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.425584][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 66.425602][ T28] audit: type=1400 audit(1732363576.444:320): avc: denied { read write } for pid=1718 comm="syz.1.483" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.454746][ T28] audit: type=1400 audit(1732363576.444:321): avc: denied { open } for pid=1718 comm="syz.1.483" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.610795][ T500] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 66.870838][ T500] usb 3-1: Using ep0 maxpacket: 16 [ 66.941289][ T8] device bridge_slave_1 left promiscuous mode [ 66.947253][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.954482][ T8] device bridge_slave_0 left promiscuous mode [ 66.960396][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.968162][ T8] device veth1_macvtap left promiscuous mode [ 66.974052][ T8] device veth0_vlan left promiscuous mode [ 67.000843][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.001117][ T6] usb 6-1: USB disconnect, device number 2 [ 67.011870][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.027507][ T500] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 67.036822][ T500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.045605][ T500] usb 3-1: config 0 descriptor?? [ 67.262472][ T28] audit: type=1400 audit(1732363577.284:322): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.502508][ T500] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0014/input/input16 [ 67.582543][ T500] appleir 0003:05AC:8241.0014: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 67.979172][ T1733] loop5: detected capacity change from 0 to 1024 [ 67.999797][ T1733] EXT4-fs: Ignoring removed orlov option [ 68.006103][ T1733] EXT4-fs (loop5): Test dummy encryption mode enabled [ 68.019222][ T1736] SELinux: Context is not valid (left unmapped). [ 68.041282][ T1733] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.093483][ T1733] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 68.142927][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 68.198882][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.218540][ T1743] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.237206][ T1743] device bridge_slave_0 entered promiscuous mode [ 68.253012][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.266460][ T1743] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.282152][ T1743] device bridge_slave_1 entered promiscuous mode [ 68.293702][ T6] usb 3-1: USB disconnect, device number 11 [ 68.485047][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.494448][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.512056][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.523329][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.532269][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.539120][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.551021][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.569394][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.589490][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.596394][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.606916][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.625623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.646345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.652156][ T1792] loop5: detected capacity change from 0 to 256 [ 68.671040][ T1790] netlink: 96 bytes leftover after parsing attributes in process `syz.3.511'. [ 68.685074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.695832][ T1792] FAT-fs (loop5): Directory bread(block 64) failed [ 68.701324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.714809][ T1792] FAT-fs (loop5): Directory bread(block 65) failed [ 68.724936][ T1792] FAT-fs (loop5): Directory bread(block 66) failed [ 68.725057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.739836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.741718][ T1792] FAT-fs (loop5): Directory bread(block 67) failed [ 68.750779][ T1743] device veth0_vlan entered promiscuous mode [ 68.761694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.769322][ T1792] FAT-fs (loop5): Directory bread(block 68) failed [ 68.769791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.781571][ T1792] FAT-fs (loop5): Directory bread(block 69) failed [ 68.796437][ T1743] device veth1_macvtap entered promiscuous mode [ 68.806148][ T1792] FAT-fs (loop5): Directory bread(block 70) failed [ 68.809958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.816227][ T1792] FAT-fs (loop5): Directory bread(block 71) failed [ 68.828124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.836977][ T1792] FAT-fs (loop5): Directory bread(block 72) failed [ 68.841716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.844738][ T1792] FAT-fs (loop5): Directory bread(block 73) failed [ 68.860782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.874382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.896884][ T1803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 68.910988][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.919099][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.967059][ T312] kworker/u4:3: attempt to access beyond end of device [ 68.967059][ T312] loop5: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 68.999948][ T28] audit: type=1400 audit(1732363579.014:323): avc: denied { read write } for pid=1487 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.047847][ T28] audit: type=1400 audit(1732363579.014:324): avc: denied { open } for pid=1487 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.083864][ T28] audit: type=1400 audit(1732363579.014:325): avc: denied { ioctl } for pid=1487 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.110587][ T28] audit: type=1400 audit(1732363579.014:326): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.136804][ T28] audit: type=1400 audit(1732363579.014:327): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.158948][ T28] audit: type=1400 audit(1732363579.014:328): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.181921][ T28] audit: type=1400 audit(1732363579.014:329): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.601322][ T312] device bridge_slave_1 left promiscuous mode [ 69.607260][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.614659][ T312] device bridge_slave_0 left promiscuous mode [ 69.620591][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.629030][ T312] device veth1_macvtap left promiscuous mode [ 69.635037][ T312] device veth0_vlan left promiscuous mode [ 70.798294][ T1840] loop3: detected capacity change from 0 to 256 [ 70.849737][ T1840] 9pnet: p9_errstr2errno: server reported unknown error @hQIte({Q8Ν [ 70.967035][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.974345][ T1842] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.981278][ T538] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 70.989815][ T1842] device bridge_slave_0 entered promiscuous mode [ 70.997006][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.003988][ T1842] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.011449][ T1842] device bridge_slave_1 entered promiscuous mode [ 71.152361][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.159493][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.160864][ T1138] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 71.166642][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.180829][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.221997][ T1868] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.229258][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.236915][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.251902][ T538] usb 2-1: Using ep0 maxpacket: 8 [ 71.262544][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.273941][ T1870] loop5: detected capacity change from 0 to 1024 [ 71.280398][ T1870] EXT4-fs: Ignoring removed orlov option [ 71.291318][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.292789][ T1870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 71.312252][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.327139][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.340417][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.348730][ T1487] EXT4-fs (loop5): unmounting filesystem. [ 71.349114][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.367620][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.373545][ T1876] SELinux: failed to load policy [ 71.377018][ T1842] device veth0_vlan entered promiscuous mode [ 71.380936][ T538] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.399735][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.412052][ T1842] device veth1_macvtap entered promiscuous mode [ 71.418665][ T1879] loop5: detected capacity change from 0 to 1024 [ 71.425313][ T1879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.433022][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.435575][ T1879] EXT4-fs: Ignoring removed bh option [ 71.442349][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.446612][ T1879] ext2: Unknown parameter 'uid>00000000000000000000' [ 71.466644][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 71.466659][ T28] audit: type=1400 audit(1732363581.484:379): avc: denied { mounton } for pid=1842 comm="syz-executor" path="/root/syzkaller.72YwMM/syz-tmp" dev="sda1" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.497732][ T28] audit: type=1400 audit(1732363581.484:380): avc: denied { mount } for pid=1842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.519930][ T28] audit: type=1400 audit(1732363581.484:381): avc: denied { mount } for pid=1842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.520956][ T538] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 71.541928][ T1138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.551255][ T538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 71.567199][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 71.584201][ T538] usb 2-1: SerialNumber: syz [ 71.586844][ T1138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.591322][ T538] usb 2-1: config 0 descriptor?? [ 71.604065][ T28] audit: type=1400 audit(1732363581.484:382): avc: denied { mounton } for pid=1842 comm="syz-executor" path="/root/syzkaller.72YwMM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.604805][ T1138] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 71.631241][ T28] audit: type=1400 audit(1732363581.484:383): avc: denied { mounton } for pid=1842 comm="syz-executor" path="/root/syzkaller.72YwMM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.666765][ T1138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.670376][ T538] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 71.676458][ T28] audit: type=1400 audit(1732363581.514:384): avc: denied { mounton } for pid=1842 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.685279][ T1882] device pim6reg1 entered promiscuous mode [ 71.704504][ T1138] usb 4-1: config 0 descriptor?? [ 71.709783][ T538] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 71.718521][ T28] audit: type=1400 audit(1732363581.514:385): avc: denied { mount } for pid=1842 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.740767][ T538] usb 2-1: Failed to create links for entity 255 [ 71.745616][ T28] audit: type=1400 audit(1732363581.514:386): avc: denied { mounton } for pid=1842 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 71.761541][ T538] usb 2-1: Failed to register entities (-22). [ 71.779362][ T28] audit: type=1400 audit(1732363581.514:387): avc: denied { mount } for pid=1842 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.900893][ T6] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 71.905435][ T349] usb 2-1: USB disconnect, device number 12 [ 72.192153][ T1138] uclogic 0003:28BD:0074.0015: interface is invalid, ignoring [ 72.291411][ T312] device bridge_slave_1 left promiscuous mode [ 72.297376][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.304698][ T312] device bridge_slave_0 left promiscuous mode [ 72.310609][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.318409][ T312] device veth1_macvtap left promiscuous mode [ 72.324346][ T312] device veth0_vlan left promiscuous mode [ 72.410233][ T325] usb 4-1: USB disconnect, device number 13 [ 72.570878][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 72.579885][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.070832][ T6] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 73.077520][ T6] usb 3-1: No valid video chain found. [ 73.274023][ T6] usb 3-1: USB disconnect, device number 12 [ 73.280997][ T28] audit: type=1400 audit(1732363583.304:388): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.432869][ T1889] loop5: detected capacity change from 0 to 256 [ 73.440301][ T1892] loop1: detected capacity change from 0 to 256 [ 73.447371][ T1892] exfat: Deprecated parameter 'utf8' [ 73.453221][ T1892] exfat: Deprecated parameter 'namecase' [ 73.458846][ T1892] exfat: Deprecated parameter 'utf8' [ 73.466628][ T1889] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 73.480922][ T1892] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 73.724686][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.736198][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.743991][ T1900] device bridge_slave_0 entered promiscuous mode [ 73.750978][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.758286][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.770544][ T1900] device bridge_slave_1 entered promiscuous mode [ 73.900607][ T1902] loop5: detected capacity change from 0 to 40427 [ 73.922578][ T1925] syz.3.562[1925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.922651][ T1925] syz.3.562[1925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.935256][ T1902] F2FS-fs (loop5): fault_injection options not supported [ 73.971072][ T1902] F2FS-fs (loop5): heap/no_heap options were deprecated [ 73.982519][ T1902] F2FS-fs (loop5): Image doesn't support compression [ 73.999379][ T1902] F2FS-fs (loop5): fault_type options not supported [ 74.018596][ T1902] F2FS-fs (loop5): invalid crc value [ 74.028031][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.035036][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.042140][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.049161][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.067607][ T1902] F2FS-fs (loop5): Found nat_bits in checkpoint [ 74.133092][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.141807][ T1937] loop2: detected capacity change from 0 to 128 [ 74.148677][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.162640][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.178918][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.186532][ T1937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.195164][ T1937] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 74.227155][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.231560][ T1902] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 74.235363][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.248254][ T1918] loop1: detected capacity change from 0 to 40427 [ 74.249190][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.279688][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.289223][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.289517][ T1918] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.296099][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.309741][ T1902] syz.5.553: attempt to access beyond end of device [ 74.309741][ T1902] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.326103][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.335369][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.341223][ T1487] syz-executor: attempt to access beyond end of device [ 74.341223][ T1487] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 74.344224][ T956] EXT4-fs (loop2): unmounting filesystem. [ 74.374759][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.402680][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.421265][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.428975][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.439658][ T1900] device veth0_vlan entered promiscuous mode [ 74.446675][ T1918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.463064][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.477937][ T1946] device bridge_slave_0 left promiscuous mode [ 74.484157][ T1946] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.492817][ T1946] device bridge_slave_1 left promiscuous mode [ 74.499358][ T1946] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.524155][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.534542][ T1900] device veth1_macvtap entered promiscuous mode [ 74.547360][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.579660][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.598963][ T1951] netlink: 15 bytes leftover after parsing attributes in process `syz.5.568'. [ 74.616401][ T290] syz-executor: attempt to access beyond end of device [ 74.616401][ T290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.710415][ T1960] overlayfs: missing 'lowerdir' [ 75.241265][ T322] device bridge_slave_1 left promiscuous mode [ 75.247189][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.254513][ T322] device bridge_slave_0 left promiscuous mode [ 75.260543][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.268290][ T322] device veth1_macvtap left promiscuous mode [ 75.274155][ T322] device veth0_vlan left promiscuous mode [ 76.507255][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 76.507272][ T28] audit: type=1400 audit(1732363586.524:416): avc: denied { append } for pid=1968 comm="syz.3.575" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.555618][ T28] audit: type=1400 audit(1732363586.524:417): avc: denied { write } for pid=1967 comm="syz.1.576" name="mcfilter6" dev="proc" ino=4026532431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.616118][ T28] audit: type=1400 audit(1732363586.634:418): avc: denied { wake_alarm } for pid=1980 comm="syz.3.581" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.697837][ T1989] loop1: detected capacity change from 0 to 512 [ 76.707604][ T1989] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.714188][ T1989] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.584: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.732466][ T1989] EXT4-fs error (device loop1): ext4_quota_enable:6981: comm syz.1.584: Bad quota inode: 4, type: 1 [ 76.743523][ T1989] EXT4-fs warning (device loop1): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.743945][ T1982] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758517][ T1989] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 76.765186][ T1982] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.778825][ T1982] device bridge_slave_0 entered promiscuous mode [ 76.780773][ T1989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.786277][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.803551][ T1982] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.805223][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.811117][ T1982] device bridge_slave_1 entered promiscuous mode [ 76.828241][ T28] audit: type=1400 audit(1732363586.844:419): avc: denied { connect } for pid=1994 comm="syz.3.585" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.833323][ T1989] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 76.860759][ T1138] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 76.882338][ T1997] loop3: detected capacity change from 0 to 2048 [ 76.899161][ T1989] EXT4-fs warning (device loop1): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 76.899161][ T1989] [ 76.928874][ T290] EXT4-fs (loop1): unmounting filesystem. [ 76.935512][ T1997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.964887][ T28] audit: type=1400 audit(1732363586.984:420): avc: denied { name_bind } for pid=2002 comm="syz.1.587" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.987362][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.994256][ T1982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.996198][ T28] audit: type=1400 audit(1732363587.014:421): avc: denied { node_bind } for pid=2002 comm="syz.1.587" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.001360][ T1982] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.028419][ T1982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.029662][ T2003] capability: warning: `syz.1.587' uses 32-bit capabilities (legacy support in use) [ 77.037671][ T292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.060259][ T28] audit: type=1400 audit(1732363587.054:422): avc: denied { remove_name } for pid=292 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.083432][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.085355][ T292] EXT4-fs (loop3): Remounting filesystem read-only [ 77.097916][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.108738][ T28] audit: type=1400 audit(1732363587.054:423): avc: denied { rmdir } for pid=292 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.132752][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.140083][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.149859][ T28] audit: type=1400 audit(1732363587.064:424): avc: denied { create } for pid=2002 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.170030][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 77.170205][ T28] audit: type=1400 audit(1732363587.064:425): avc: denied { write } for pid=2002 comm="syz.1.587" path="socket:[27441]" dev="sockfs" ino=27441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.204597][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.218887][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.235669][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.246120][ T2004] EXT4-fs (loop3): unmounting filesystem. [ 77.258080][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.266196][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.274240][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.294742][ T1982] device veth0_vlan entered promiscuous mode [ 77.307464][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.317468][ T1982] device veth1_macvtap entered promiscuous mode [ 77.328850][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.330835][ T6] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 77.345143][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.356843][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.366715][ T6] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 77.375208][ T1138] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 77.375397][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.384349][ T6] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 77.401053][ T1138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.409218][ T6] usb 6-1: config 250 has no interface number 0 [ 77.415825][ T1138] usb 3-1: config 0 descriptor?? [ 77.420874][ T6] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 77.433832][ T6] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 77.444343][ T6] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.455507][ T6] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.466071][ T6] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 77.479486][ T6] usb 6-1: config 250 interface 228 has no altsetting 0 [ 77.510753][ T40] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 77.528186][ T2011] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.535396][ T2011] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.542977][ T2011] device bridge_slave_0 entered promiscuous mode [ 77.549915][ T2011] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.557225][ T2011] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.564843][ T2011] device bridge_slave_1 entered promiscuous mode [ 77.611328][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 77.620217][ T6] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 77.629740][ T6] usb 6-1: Product: syz [ 77.634026][ T6] usb 6-1: SerialNumber: syz [ 77.652023][ T2011] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.658884][ T2011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.666009][ T2011] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.672769][ T2011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.682672][ T6] hub 6-1:250.228: bad descriptor, ignoring hub [ 77.688777][ T6] hub: probe of 6-1:250.228 failed with error -5 [ 77.709873][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.717414][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.724726][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.736153][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.744401][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.752261][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 77.752682][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.764014][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.772627][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.781169][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.789105][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.795967][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.810305][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.818402][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.827490][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.835474][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.849184][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.857669][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.871116][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.878861][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.887449][ T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.889299][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.905199][ T40] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 77.908885][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.916585][ T40] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 77.922358][ T6] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 77.935021][ T40] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.946259][ T1138] hid-rmi 0003:1532:011D.0016: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0 [ 77.956371][ T2011] device veth0_vlan entered promiscuous mode [ 77.974102][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.987603][ T312] device bridge_slave_1 left promiscuous mode [ 77.993806][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.001500][ T312] device bridge_slave_0 left promiscuous mode [ 78.007534][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010865][ T2008] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 78.022076][ T312] device veth1_macvtap left promiscuous mode [ 78.027925][ T312] device veth0_vlan left promiscuous mode [ 78.031337][ T40] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 78.114154][ T24] usb 3-1: USB disconnect, device number 13 [ 78.137747][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.145795][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.155034][ T2011] device veth1_macvtap entered promiscuous mode [ 78.164292][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.172113][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.181384][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.191203][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.199349][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.241255][ T40] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 78.248502][ T40] usb 2-1: USB disconnect, device number 13 [ 78.541064][ T1971] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 78.841270][ T312] device bridge_slave_1 left promiscuous mode [ 78.847210][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.854650][ T312] device bridge_slave_0 left promiscuous mode [ 78.860564][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.868400][ T312] device veth1_macvtap left promiscuous mode [ 78.874252][ T312] device veth0_vlan left promiscuous mode [ 79.160839][ T1971] usb 6-1: failed to restore interface 228 altsetting 255 (error=-71) [ 79.169098][ T500] usb 6-1: USB disconnect, device number 3 [ 79.175575][ T500] usblp0: removed [ 79.531980][ T2026] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.538841][ T2026] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.546632][ T2026] device bridge_slave_0 entered promiscuous mode [ 79.554343][ T2026] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.561446][ T2026] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.568775][ T2026] device bridge_slave_1 entered promiscuous mode [ 79.625523][ T2023] loop6: detected capacity change from 0 to 40427 [ 79.632590][ T2023] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 79.640188][ T2023] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 79.648989][ T2023] F2FS-fs (loop6): invalid crc value [ 79.655894][ T2023] F2FS-fs (loop6): Found nat_bits in checkpoint [ 79.657538][ T2026] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.668956][ T2026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.676047][ T2026] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.682838][ T2026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.690010][ T500] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 79.705842][ T2023] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 79.713154][ T2023] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 79.719169][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.731741][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.738977][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.753551][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.761848][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.761925][ T2023] syz.6.592: attempt to access beyond end of device [ 79.761925][ T2023] loop6: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 79.769866][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.790208][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.790720][ T40] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 79.805078][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.813464][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.821730][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.828576][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.838301][ T322] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 79.839385][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.847475][ T322] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 79.855669][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.886552][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.895780][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.900100][ T322] kworker/u4:4: attempt to access beyond end of device [ 79.900100][ T322] loop6: rw=1, sector=45224, nr_sectors = 8 limit=40427 [ 79.910096][ T2026] device veth0_vlan entered promiscuous mode [ 79.925450][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.933881][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.942200][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.949989][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.960007][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.967807][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.982622][ T2026] device veth1_macvtap entered promiscuous mode [ 79.989180][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.997269][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.005354][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.029256][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.047876][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.068114][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.076095][ T500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.094782][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.103444][ T500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.129303][ T500] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 80.149350][ T500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.160173][ T500] usb 2-1: config 0 descriptor?? [ 80.181550][ T40] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 80.190150][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.200331][ T40] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.210209][ T40] usb 3-1: config 1 has no interface number 1 [ 80.217557][ T40] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.240745][ T40] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 38, changing to 4 [ 80.440874][ T40] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.449928][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.457815][ T40] usb 3-1: Product: syz [ 80.461781][ T40] usb 3-1: Manufacturer: syz [ 80.466152][ T40] usb 3-1: SerialNumber: syz [ 80.652151][ T500] wacom 0003:056A:0331.0017: unknown main item tag 0x0 [ 80.658883][ T500] wacom 0003:056A:0331.0017: unknown main item tag 0x0 [ 80.665851][ T500] wacom 0003:056A:0331.0017: unknown main item tag 0x0 [ 80.673324][ T500] wacom 0003:056A:0331.0017: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 80.684483][ T8] device bridge_slave_1 left promiscuous mode [ 80.690969][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.698240][ T8] device bridge_slave_0 left promiscuous mode [ 80.704417][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.712537][ T8] device veth1_macvtap left promiscuous mode [ 80.718441][ T8] device veth0_vlan left promiscuous mode [ 80.854233][ T349] usb 2-1: USB disconnect, device number 14 [ 80.861705][ T40] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.923554][ T40] usb 3-1: USB disconnect, device number 14 [ 80.931433][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.192022][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 82.192039][ T28] audit: type=1400 audit(1732363592.214:439): avc: denied { create } for pid=2052 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.245152][ T28] audit: type=1400 audit(1732363592.244:440): avc: denied { bind } for pid=2052 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.295762][ T28] audit: type=1400 audit(1732363592.244:441): avc: denied { listen } for pid=2052 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.335242][ T28] audit: type=1400 audit(1732363592.344:442): avc: denied { watch } for pid=2068 comm="syz.6.609" path="/5" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.393956][ T28] audit: type=1400 audit(1732363592.344:443): avc: denied { execute_no_trans } for pid=2068 comm="syz.6.609" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.448277][ T28] audit: type=1400 audit(1732363592.464:444): avc: denied { read } for pid=2075 comm="syz.6.612" path="socket:[28352]" dev="sockfs" ino=28352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.520642][ T2082] binder: 2081:2082 ioctl c0306201 20000100 returned -14 [ 82.557644][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.566373][ T2077] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.570778][ T40] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.592570][ T2077] device bridge_slave_0 entered promiscuous mode [ 82.606885][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.620715][ T2077] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.624811][ T2059] loop1: detected capacity change from 0 to 40427 [ 82.634459][ T2059] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 82.642139][ T2059] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.650362][ T2059] F2FS-fs (loop1): fault_injection options not supported [ 82.651331][ T2077] device bridge_slave_1 entered promiscuous mode [ 82.662026][ T2059] F2FS-fs (loop1): invalid crc value [ 82.673741][ T2059] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.685131][ T28] audit: type=1400 audit(1732363592.704:445): avc: denied { bind } for pid=2091 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.732274][ T2059] F2FS-fs (loop1): Start checkpoint disabled! [ 82.741664][ T2059] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.748583][ T2059] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 82.782677][ T28] audit: type=1400 audit(1732363592.804:446): avc: denied { rename } for pid=2057 comm="syz.1.601" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.804553][ T28] audit: type=1400 audit(1732363592.804:447): avc: denied { rmdir } for pid=2057 comm="syz.1.601" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.838920][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 82.844237][ T28] audit: type=1400 audit(1732363592.804:448): avc: denied { rename } for pid=2057 comm="syz.1.601" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.887777][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.894659][ T2077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.897114][ T1172] kworker/u4:6: attempt to access beyond end of device [ 82.897114][ T1172] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 82.901796][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.901822][ T2077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.929745][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.940606][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.970753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.978949][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.992367][ T40] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.000846][ T40] usb 6-1: config 0 has no interface number 0 [ 83.006750][ T40] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 83.017858][ T40] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.028014][ T40] usb 6-1: config 0 interface 41 has no altsetting 0 [ 83.034942][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.043125][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.049992][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.057643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.065920][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.072808][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.097945][ T2077] device veth0_vlan entered promiscuous mode [ 83.118158][ T2104] loop2: detected capacity change from 0 to 512 [ 83.125060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.125698][ T2104] EXT4-fs: Ignoring removed bh option [ 83.139641][ T2104] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.144904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.153804][ T2104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.155287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.175136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.183115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.190918][ T40] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.192184][ T2104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.200125][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.217140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.226834][ T40] usb 6-1: Product: syz [ 83.232071][ T2104] ext4 filesystem being mounted at /124/bus supports timestamps until 2038 (0x7fffffff) [ 83.237261][ T40] usb 6-1: Manufacturer: syz [ 83.244850][ T2077] device veth1_macvtap entered promiscuous mode [ 83.253873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.267248][ T40] usb 6-1: SerialNumber: syz [ 83.287585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.294816][ T40] usb 6-1: config 0 descriptor?? [ 83.310869][ T2067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 83.311749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.328394][ T2067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 83.368185][ T956] EXT4-fs (loop2): unmounting filesystem. [ 83.553480][ T2067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 83.560533][ T2067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.021475][ T8] device bridge_slave_1 left promiscuous mode [ 84.027684][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.035297][ T8] device bridge_slave_0 left promiscuous mode [ 84.041262][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.048825][ T8] device veth1_macvtap left promiscuous mode [ 84.054704][ T8] device veth0_vlan left promiscuous mode [ 84.230863][ T40] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 84.490790][ T40] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 84.501245][ T40] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 84.510995][ T40] CoreChips: probe of 6-1:0.41 failed with error -71 [ 84.518530][ T40] usb 6-1: USB disconnect, device number 4 [ 85.693602][ T2153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.745874][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 85.770315][ T2159] loop6: detected capacity change from 0 to 256 [ 85.771145][ T2162] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 85.781747][ T2159] FAT-fs (loop6): Unrecognized mount option "18446744073709551615" or missing value [ 85.879486][ T2168] mmap: syz.1.646 (2168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.913472][ T2168] binder_alloc: binder_alloc_mmap_handler: 2167 20ffc000-20ffd000 already mapped failed -16 [ 85.978201][ T2151] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.991229][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.021249][ T2151] device bridge_slave_0 entered promiscuous mode [ 86.059299][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.070794][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.115260][ T2151] device bridge_slave_1 entered promiscuous mode [ 86.209986][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.216878][ T2151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.223989][ T2151] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.230752][ T2151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.242107][ T2203] loop5: detected capacity change from 0 to 256 [ 86.289207][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.296679][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.304432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.313742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.324551][ T2207] device batadv_slave_1 entered promiscuous mode [ 86.334651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.344087][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.350956][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.358500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.367053][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.373942][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.385391][ T2206] device batadv_slave_1 left promiscuous mode [ 86.400854][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 86.408612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.423939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.465922][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.485443][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.501874][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.516958][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.533622][ T2151] device veth0_vlan entered promiscuous mode [ 86.540948][ T1138] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 86.555622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.566044][ T2151] device veth1_macvtap entered promiscuous mode [ 86.577350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.590187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.662798][ T2236] loop5: detected capacity change from 0 to 256 SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=258 state=3 status=67 (errno 9: Bad file descriptor) [ 86.780875][ T1138] usb 7-1: Using ep0 maxpacket: 8 [ 87.020847][ T1138] usb 7-1: device descriptor read/all, error -71 [ 87.030975][ T6] usb 2-1: unable to read config index 0 descriptor/all [ 87.037761][ T6] usb 2-1: can't read configurations, error -71 [ 87.321281][ T8] device bridge_slave_1 left promiscuous mode [ 87.327211][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.334519][ T8] device bridge_slave_0 left promiscuous mode [ 87.340433][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.348347][ T8] device veth1_macvtap left promiscuous mode [ 87.354260][ T8] device veth0_vlan left promiscuous mode [ 88.121586][ T8] device bridge_slave_1 left promiscuous mode [ 88.127522][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.134904][ T8] device bridge_slave_0 left promiscuous mode [ 88.140861][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.148521][ T8] device bridge_slave_1 left promiscuous mode [ 88.154522][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.161793][ T8] device bridge_slave_0 left promiscuous mode [ 88.167697][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.176243][ T8] device veth1_macvtap left promiscuous mode [ 88.182132][ T8] device veth0_vlan left promiscuous mode [ 88.188261][ T8] device veth1_macvtap left promiscuous mode [ 88.194112][ T8] device veth0_vlan left promiscuous mode [ 88.199936][ T8] device veth1_macvtap left promiscuous mode [ 88.205906][ T8] device veth0_vlan left promiscuous mode