last executing test programs: 15.0738454s ago: executing program 1 (id=211): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000200)={&(0x7f0000000000)=""/68, 0x44, 0x2, 0x8}) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 14.39321999s ago: executing program 2 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 14.315059236s ago: executing program 2 (id=217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 14.304334657s ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x2000010, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 14.27471648s ago: executing program 2 (id=219): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}}, 0x0) 14.230090854s ago: executing program 2 (id=220): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000200)={&(0x7f0000000000)=""/68, 0x44, 0x2, 0x8}) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 5.9356143s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 5.234166341s ago: executing program 0 (id=252): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 4.45630987s ago: executing program 4 (id=256): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f00000004c0), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 4.345275689s ago: executing program 0 (id=257): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000790060010000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) 3.725190784s ago: executing program 1 (id=253): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 3.723925194s ago: executing program 3 (id=267): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 3.572143927s ago: executing program 4 (id=259): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000790060010000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 3.215084858s ago: executing program 0 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x19b, 0x8, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x67, 0x0, 0x36, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x4, 0xc8, 0x1, 0x6}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001000)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') pipe2(&(0x7f00000005c0), 0x80000) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000001080)='./file0\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fdc991", @ANYRES16=r6, @ANYBLOB], 0x184}}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={0x0, 0x37c}, 0x1, 0x0, 0x0, 0x1}, 0xd5) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.819534753s ago: executing program 1 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 2.707709513s ago: executing program 0 (id=262): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.707477083s ago: executing program 1 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x2000010, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2.445938186s ago: executing program 1 (id=264): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}}, 0x0) 1.94002121s ago: executing program 1 (id=265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 1.93976915s ago: executing program 3 (id=266): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.93960755s ago: executing program 4 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000024d3ced50000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000"], 0x4c}}, 0x0) 1.892224904s ago: executing program 4 (id=269): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.799669482s ago: executing program 0 (id=270): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000790060010000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) 1.648751526s ago: executing program 2 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 986.761184ms ago: executing program 4 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="45d08ca6f3cc0659759a233b375a2530496227acd33daeb0e7c30a79c49218426b2b81dd36d5ac8deaebf7f39fa2e0acb1f98998a06f6b040eb29ce9b95c868d72ce7530387166f024866027da1b54cfe64874ab49df3c927ef98bf7060ad080ce008970eb3f0297707d0911b69ce4b5b2474a0357e73ba21c398d4a0f66136c7049f0b2283b2ee1a5fe2ca6ad10a08ed0ac26dac583ac7f4466c276ea5768df816c1d3f47bedeb510c3f322e80248dc17637d20159404e4864776d68629c8695df5df26318463a3d99244a9f2ac254afbfb7738305e3643991ef082387f20f2565d8ea1359ad04af5c2733ecdd59ba37fc6c7aa47704981e0b70a5feff5ed08e31e02656dd6bbb914c11d7f01dc13df4d070d0b62b7765e93f6d4604299642d849c55b2fe1d1f7c3cf04c6011618a5e0ff2a4fc5269f5646871b5ecdbcf2b87f149c3f87cdf5eecc24fbfea9fe08950b44de870bced2148b1028c095324fc847f4f5c81"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000340)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xd, 0x2031f4f6, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x1}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)={0x128, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5ea}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x40001) socket$inet6(0xa, 0x4, 0x2b) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x193) sendfile(r3, r4, 0x0, 0xe065) sendfile(r3, r4, 0x0, 0xffff) 802.79452ms ago: executing program 0 (id=272): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 452.42348ms ago: executing program 3 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x19b, 0x8, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x67, 0x0, 0x36, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x4, 0xc8, 0x1, 0x6}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001000)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') pipe2(&(0x7f00000005c0), 0x80000) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000001080)='./file0\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fdc991", @ANYRES16=r6, @ANYBLOB], 0x184}}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={0x0, 0x37c}, 0x1, 0x0, 0x0, 0x1}, 0xd5) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 120.141439ms ago: executing program 3 (id=274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 33.380267ms ago: executing program 4 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 0s ago: executing program 3 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x2000010, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) kernel console output (not intermixed with test programs): e bridge_slave_0 entered promiscuous mode [ 36.305011][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.311888][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.319094][ T487] device bridge_slave_1 entered promiscuous mode [ 36.408924][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.415779][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.422928][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.429778][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.479468][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.486339][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.493457][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.500227][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.557284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.567852][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.575034][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.582902][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.590299][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.620612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.628647][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.635501][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.642750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.652198][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.659068][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.687550][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.695788][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.703736][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.712115][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.718973][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.726118][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.734043][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.741971][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.748820][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.767838][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.775953][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.784221][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.791460][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.798939][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.806651][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.815195][ T10] device bridge_slave_1 left promiscuous mode [ 36.821428][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.828795][ T10] device bridge_slave_0 left promiscuous mode [ 36.834768][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.842569][ T10] device veth1_macvtap left promiscuous mode [ 36.848458][ T10] device veth0_vlan left promiscuous mode [ 36.940722][ T486] device veth0_vlan entered promiscuous mode [ 36.955013][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.963243][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.971144][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.978346][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.986436][ T487] device veth0_vlan entered promiscuous mode [ 36.996253][ T486] device veth1_macvtap entered promiscuous mode [ 37.003059][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.018863][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.028221][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.036350][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.044994][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.074168][ T487] device veth1_macvtap entered promiscuous mode [ 37.081517][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.089758][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.097798][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.105390][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 37.121548][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.130745][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 37.130759][ T30] audit: type=1400 audit(1725746797.660:124): avc: denied { mount } for pid=486 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.158587][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.180736][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.207982][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.227960][ T30] audit: type=1400 audit(1725746797.690:125): avc: denied { mounton } for pid=486 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.236319][ T509] loop0: detected capacity change from 0 to 2048 [ 37.278320][ T506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 37.365007][ T509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.400971][ T523] loop3: detected capacity change from 0 to 2048 [ 37.451887][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462581][ T521] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.470352][ T521] device bridge_slave_0 entered promiscuous mode [ 37.483043][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.489953][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.497201][ T521] device bridge_slave_1 entered promiscuous mode [ 37.499043][ T523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.604750][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.611960][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.619590][ T515] device bridge_slave_0 entered promiscuous mode [ 37.639424][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.646325][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.656357][ T515] device bridge_slave_1 entered promiscuous mode [ 37.662738][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.781780][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.788676][ T521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.795750][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.802551][ T521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.872150][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.881401][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.888897][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.918073][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.926207][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.933125][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.940692][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.949616][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.956470][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.963718][ T39] usb 2-1: device descriptor read/64, error -71 [ 37.990658][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.998991][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.025387][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.039790][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.049420][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.058739][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.065592][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.076399][ T10] device bridge_slave_1 left promiscuous mode [ 38.083096][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.090606][ T10] device bridge_slave_0 left promiscuous mode [ 38.096605][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.104919][ T10] device bridge_slave_1 left promiscuous mode [ 38.111392][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.119517][ T10] device bridge_slave_0 left promiscuous mode [ 38.125498][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.134199][ T10] device veth1_macvtap left promiscuous mode [ 38.140119][ T10] device veth0_vlan left promiscuous mode [ 38.146033][ T10] device veth1_macvtap left promiscuous mode [ 38.152220][ T10] device veth0_vlan left promiscuous mode [ 38.357276][ T39] usb 2-1: device descriptor read/64, error -71 [ 38.368377][ T521] device veth0_vlan entered promiscuous mode [ 38.377145][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.384608][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.407549][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.415500][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.422347][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.431360][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.440128][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.448906][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.456538][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.467297][ T544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 38.481452][ T521] device veth1_macvtap entered promiscuous mode [ 38.516311][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.527323][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.537842][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.547466][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.555416][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.563901][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.572251][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.600343][ T515] device veth0_vlan entered promiscuous mode [ 38.607768][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.617189][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.625419][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.633504][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.641871][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.650205][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.658362][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.666482][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.674343][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.684453][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 38.693339][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.700655][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.718972][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.727381][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.759230][ T515] device veth1_macvtap entered promiscuous mode [ 38.781493][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.789509][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.795409][ T560] loop3: detected capacity change from 0 to 2048 [ 38.807700][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.829819][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.838107][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.858419][ T344] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.881050][ T560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.933898][ T39] usb 2-1: device descriptor read/64, error -71 [ 39.308629][ T573] loop3: detected capacity change from 0 to 2048 [ 39.377311][ T39] usb 2-1: device descriptor read/64, error -71 [ 39.388553][ T573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.457072][ T292] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.497095][ T39] usb usb2-port1: attempt power cycle [ 39.667724][ T10] device bridge_slave_1 left promiscuous mode [ 39.673698][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.681353][ T10] device bridge_slave_0 left promiscuous mode [ 39.687529][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.695244][ T10] device veth1_macvtap left promiscuous mode [ 39.701266][ T10] device veth0_vlan left promiscuous mode [ 39.752609][ T292] usb 3-1: device descriptor read/64, error -71 [ 39.829434][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 39.907044][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.029956][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 40.053808][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.061867][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.070201][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.077896][ T39] usb 2-1: device descriptor read/8, error -71 [ 40.078734][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.092096][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.105072][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.113194][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.121358][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.165392][ T292] usb 3-1: device descriptor read/64, error -71 [ 40.220838][ T596] loop3: detected capacity change from 0 to 2048 [ 40.308567][ T596] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.369388][ T39] usb 2-1: device descriptor read/8, error -71 [ 40.375423][ T309] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.454535][ T601] loop3: detected capacity change from 0 to 2048 [ 40.460748][ T292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.548584][ T601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.657076][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 40.677197][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.840098][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.851347][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.861437][ T39] usb 2-1: device descriptor read/8, error -71 [ 40.869690][ T309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.882661][ T309] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 40.891948][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.900665][ T309] usb 5-1: config 0 descriptor?? [ 40.937068][ T292] usb 3-1: device descriptor read/64, error -71 [ 41.137114][ T39] usb 2-1: device descriptor read/8, error -71 [ 41.257123][ T39] usb usb2-port1: unable to enumerate USB device [ 41.347109][ T292] usb 3-1: device descriptor read/64, error -71 [ 41.415847][ T309] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 41.423644][ T309] hid-steam 0003:28DE:1102.000B: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 41.435356][ T309] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 41.443502][ T309] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 41.517196][ T309] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 41.536486][ T309] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000B/input/input14 [ 41.593717][ T593] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000B/input/input15 [ 41.696808][ T309] usb 5-1: USB disconnect, device number 7 [ 41.718916][ T292] usb usb3-port1: attempt power cycle [ 41.728981][ T309] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 42.137025][ T292] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.268245][ T618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 42.307065][ T292] usb 3-1: device descriptor read/8, error -71 [ 42.394075][ T629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 42.440052][ T631] loop4: detected capacity change from 0 to 2048 [ 42.448618][ T633] loop3: detected capacity change from 0 to 2048 [ 42.488491][ T631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.578642][ T633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.607228][ T292] usb 3-1: device descriptor read/8, error -71 [ 43.046822][ T292] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.227110][ T292] usb 3-1: device descriptor read/8, error -71 [ 43.341833][ T646] loop4: detected capacity change from 0 to 2048 [ 43.438660][ T646] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.916050][ T292] usb 3-1: device descriptor read/8, error -71 [ 44.047236][ T292] usb usb3-port1: unable to enumerate USB device [ 44.275740][ T667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 44.307038][ T388] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.607040][ T388] usb 4-1: device descriptor read/64, error -71 [ 45.017026][ T388] usb 4-1: device descriptor read/64, error -71 [ 45.180116][ T674] loop4: detected capacity change from 0 to 2048 [ 45.228406][ T674] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.287054][ T388] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.577057][ T388] usb 4-1: device descriptor read/64, error -71 [ 46.017051][ T388] usb 4-1: device descriptor read/64, error -71 [ 46.137111][ T388] usb usb4-port1: attempt power cycle [ 46.707076][ T388] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.887086][ T388] usb 4-1: device descriptor read/8, error -71 [ 47.008413][ T689] loop4: detected capacity change from 0 to 2048 [ 47.088302][ T689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.167080][ T388] usb 4-1: device descriptor read/8, error -71 [ 47.547050][ T388] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.747095][ T388] usb 4-1: device descriptor read/8, error -71 [ 47.962971][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.969986][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.977264][ T699] device bridge_slave_0 entered promiscuous mode [ 47.983975][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.990912][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.997997][ T699] device bridge_slave_1 entered promiscuous mode [ 48.047075][ T388] usb 4-1: device descriptor read/8, error -71 [ 48.051934][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.060080][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.067194][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.073970][ T699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.096455][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.103920][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.111122][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.122464][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.130478][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.137321][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.145666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.153664][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.160517][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.177104][ T388] usb usb4-port1: unable to enumerate USB device [ 48.184599][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.192931][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.201030][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.213820][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.221586][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.228882][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.236800][ T699] device veth0_vlan entered promiscuous mode [ 48.246958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.256004][ T699] device veth1_macvtap entered promiscuous mode [ 48.270496][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.278912][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.326632][ T713] loop1: detected capacity change from 0 to 2048 [ 48.338298][ T715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 48.398482][ T713] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.517477][ T328] device bridge_slave_1 left promiscuous mode [ 48.523441][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.530778][ T328] device bridge_slave_0 left promiscuous mode [ 48.617998][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.652155][ T328] device veth1_macvtap left promiscuous mode [ 48.682498][ T328] device veth0_vlan left promiscuous mode [ 49.618831][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.625905][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.633249][ T726] device bridge_slave_0 entered promiscuous mode [ 49.644927][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.651949][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.659072][ T726] device bridge_slave_1 entered promiscuous mode [ 49.673743][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.677025][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 49.680738][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.681214][ T729] device bridge_slave_0 entered promiscuous mode [ 49.704655][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.711927][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.719266][ T729] device bridge_slave_1 entered promiscuous mode [ 49.811166][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.818130][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.825184][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.832004][ T726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.842899][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.849925][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.857029][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.863878][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.900977][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.908632][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.915787][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.923487][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.930769][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.940448][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.947789][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.957071][ T39] usb 5-1: device descriptor read/64, error -71 [ 49.965506][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.973871][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.981964][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.988812][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.998596][ T328] device bridge_slave_1 left promiscuous mode [ 50.004631][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.012167][ T328] device bridge_slave_0 left promiscuous mode [ 50.018165][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.025818][ T328] device veth1_macvtap left promiscuous mode [ 50.031708][ T328] device veth0_vlan left promiscuous mode [ 50.139499][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.148074][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.156428][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.163318][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.171356][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.179649][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.184968][ T749] loop1: detected capacity change from 0 to 2048 [ 50.187789][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.200484][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.220076][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.228898][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.236845][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.243699][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.251447][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.252426][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.259617][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.297056][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.305254][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.313396][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.321899][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.330317][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.339367][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.351623][ T726] device veth0_vlan entered promiscuous mode [ 50.357979][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.365217][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.372578][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.380394][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.388291][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.396095][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.417037][ T39] usb 5-1: device descriptor read/64, error -71 [ 50.632170][ T726] device veth1_macvtap entered promiscuous mode [ 50.639689][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.648137][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.656176][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.679368][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.687099][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 50.687714][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.703042][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.710730][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.718913][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.726905][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.735038][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.743276][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.752250][ T729] device veth0_vlan entered promiscuous mode [ 50.761043][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.768335][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.794596][ T729] device veth1_macvtap entered promiscuous mode [ 50.801006][ T755] loop0: detected capacity change from 0 to 2048 [ 50.801524][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.815272][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.823847][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.837287][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.845352][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.853616][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.861669][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.896031][ T755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.900705][ T757] 9pnet: Insufficient options for proto=fd [ 50.971717][ T763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 50.980598][ T39] usb 5-1: device descriptor read/64, error -71 [ 51.000477][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.012577][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.021048][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.029131][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.037297][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.045315][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.053462][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.072686][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.367067][ T39] usb 5-1: device descriptor read/64, error -71 [ 51.387802][ T328] device bridge_slave_1 left promiscuous mode [ 51.393795][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.401254][ T328] device bridge_slave_0 left promiscuous mode [ 51.407298][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.415206][ T328] device veth1_macvtap left promiscuous mode [ 51.421114][ T328] device veth0_vlan left promiscuous mode [ 51.437100][ T309] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.487096][ T39] usb usb5-port1: attempt power cycle [ 51.497094][ T344] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 51.707043][ T309] usb 2-1: device descriptor read/64, error -71 [ 51.767103][ T344] usb 3-1: device descriptor read/64, error -71 [ 51.897098][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 52.067103][ T39] usb 5-1: device descriptor read/8, error -71 [ 52.107054][ T309] usb 2-1: device descriptor read/64, error -71 [ 52.157075][ T344] usb 3-1: device descriptor read/64, error -71 [ 52.337129][ T39] usb 5-1: device descriptor read/8, error -71 [ 52.377073][ T309] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.427052][ T344] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.607092][ T39] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 52.667094][ T309] usb 2-1: device descriptor read/64, error -71 [ 52.697071][ T344] usb 3-1: device descriptor read/64, error -71 [ 52.897128][ T39] usb 5-1: device descriptor read/8, error -71 [ 53.057112][ T309] usb 2-1: device descriptor read/64, error -71 [ 53.087092][ T344] usb 3-1: device descriptor read/64, error -71 [ 53.167095][ T39] usb 5-1: device descriptor read/8, error -71 [ 53.177147][ T309] usb usb2-port1: attempt power cycle [ 53.207083][ T344] usb usb3-port1: attempt power cycle [ 53.287090][ T39] usb usb5-port1: unable to enumerate USB device [ 53.472368][ T791] 9pnet: Insufficient options for proto=fd [ 53.525701][ T795] loop0: detected capacity change from 0 to 2048 [ 53.587049][ T309] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 53.608616][ T795] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.617050][ T344] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.887297][ T309] usb 2-1: device descriptor read/8, error -71 [ 53.897358][ T344] usb 3-1: device descriptor read/8, error -71 [ 54.157125][ T309] usb 2-1: device descriptor read/8, error -71 [ 54.167188][ T344] usb 3-1: device descriptor read/8, error -71 [ 54.429249][ T806] loop0: detected capacity change from 0 to 2048 [ 54.447055][ T344] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.454554][ T309] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 54.473849][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.480993][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.489621][ T807] device bridge_slave_0 entered promiscuous mode [ 54.497508][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.505952][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.507103][ T806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.513485][ T807] device bridge_slave_1 entered promiscuous mode [ 54.604163][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.611039][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.618257][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.625018][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.652216][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.659801][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.666940][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.680423][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.687095][ T344] usb 3-1: device descriptor read/8, error -71 [ 54.688425][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.694303][ T309] usb 2-1: device descriptor read/8, error -71 [ 54.701089][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.701723][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.934935][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.941813][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.966635][ T807] device veth0_vlan entered promiscuous mode [ 54.973842][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.982141][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.987149][ T344] usb 3-1: device descriptor read/8, error -71 [ 54.990518][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.995782][ T309] usb 2-1: device descriptor read/8, error -71 [ 55.003311][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.017213][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.024960][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.040093][ T807] device veth1_macvtap entered promiscuous mode [ 55.047195][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.058362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.072258][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.095872][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 55.107740][ T30] audit: type=1400 audit(1725746815.640:126): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.130732][ T309] usb usb2-port1: unable to enumerate USB device [ 55.136935][ T344] usb usb3-port1: unable to enumerate USB device [ 55.143468][ T30] audit: type=1400 audit(1725746815.640:127): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.166273][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.174732][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.182883][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.191196][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.206352][ T819] loop3: detected capacity change from 0 to 2048 [ 55.239048][ T819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.375067][ T328] device bridge_slave_1 left promiscuous mode [ 55.381096][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.388876][ T328] device bridge_slave_0 left promiscuous mode [ 55.395567][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.413887][ T328] device veth1_macvtap left promiscuous mode [ 55.420056][ T328] device veth0_vlan left promiscuous mode [ 56.534088][ T841] 9pnet: Insufficient options for proto=fd [ 56.597762][ T845] loop0: detected capacity change from 0 to 2048 [ 56.688761][ T845] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.087500][ T851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 57.465408][ T855] loop3: detected capacity change from 0 to 2048 [ 57.551816][ T855] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.867019][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.137032][ T310] usb 1-1: device descriptor read/64, error -71 [ 58.527060][ T310] usb 1-1: device descriptor read/64, error -71 [ 58.797038][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 59.067029][ T310] usb 1-1: device descriptor read/64, error -71 [ 59.637662][ T310] usb 1-1: device descriptor read/64, error -71 [ 59.757080][ T310] usb usb1-port1: attempt power cycle [ 60.167099][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.211756][ T885] netlink: 'syz.3.154': attribute type 27 has an invalid length. [ 60.250886][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.257897][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.320398][ T888] device veth0_vlan left promiscuous mode [ 60.326358][ T888] device veth0_vlan entered promiscuous mode [ 60.333557][ T888] device veth1_macvtap left promiscuous mode [ 60.339643][ T310] usb 1-1: device descriptor read/8, error -71 [ 60.341331][ T888] device veth1_macvtap entered promiscuous mode [ 60.356766][ T885] syz.3.154 (885) used greatest stack depth: 19232 bytes left [ 60.359028][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.372145][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.379798][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.388069][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.391416][ T890] loop3: detected capacity change from 0 to 2048 [ 60.395277][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.408977][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.417189][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.425452][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.432321][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.438798][ T890] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.439654][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.458006][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.465907][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.474449][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.482584][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.490793][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.498897][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.506927][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.515148][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.523394][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.531711][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.539969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.548055][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.556131][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.563936][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.571991][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.579774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.587734][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.595892][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.604132][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.611641][ T310] usb 1-1: device descriptor read/8, error -71 [ 60.617909][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.625542][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.632809][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.640032][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.648090][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.655995][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.663712][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.686568][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.693510][ T887] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.701893][ T887] device bridge_slave_0 entered promiscuous mode [ 60.713886][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.720903][ T887] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.728245][ T887] device bridge_slave_1 entered promiscuous mode [ 60.781038][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.787888][ T887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.795025][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.801787][ T887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.824971][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.832420][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.840140][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.851203][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.859210][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.866034][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.887032][ T310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 60.895465][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.905218][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.913292][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920173][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.927384][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.935097][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.945034][ T887] device veth0_vlan entered promiscuous mode [ 60.953079][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.961064][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.968349][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.982856][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.992229][ T887] device veth1_macvtap entered promiscuous mode [ 61.001616][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.014800][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.045876][ T899] loop4: detected capacity change from 0 to 2048 [ 61.057140][ T310] usb 1-1: device descriptor read/8, error -71 [ 61.088869][ T899] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.117996][ T328] device bridge_slave_1 left promiscuous mode [ 61.124075][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.132445][ T328] device bridge_slave_0 left promiscuous mode [ 61.138641][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.146850][ T328] device veth1_macvtap left promiscuous mode [ 61.153407][ T328] device veth0_vlan left promiscuous mode [ 61.597200][ T310] usb 1-1: device descriptor read/8, error -71 [ 61.691838][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.698857][ T909] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.706182][ T909] device bridge_slave_0 entered promiscuous mode [ 61.714099][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.721387][ T909] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.722013][ T310] usb usb1-port1: unable to enumerate USB device [ 61.734942][ T909] device bridge_slave_1 entered promiscuous mode [ 61.820703][ T914] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.827628][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.834750][ T914] device bridge_slave_0 entered promiscuous mode [ 61.842161][ T914] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.849156][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.856300][ T914] device bridge_slave_1 entered promiscuous mode [ 62.812208][ T930] netlink: 'syz.3.166': attribute type 27 has an invalid length. [ 62.828320][ T930] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.835291][ T930] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.885001][ T934] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.892302][ T934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.900347][ T934] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.907784][ T934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.922201][ T934] device veth0_vlan left promiscuous mode [ 62.928041][ T934] device veth0_vlan entered promiscuous mode [ 62.934827][ T934] device veth1_macvtap left promiscuous mode [ 62.941461][ T934] device veth1_macvtap entered promiscuous mode [ 62.958582][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.967288][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.975320][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.984368][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.992846][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.001046][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.009582][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.017812][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.025935][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.034361][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.042780][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.051354][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.059528][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.067784][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.075760][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.117855][ T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 63.154634][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.162261][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.188457][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.197162][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.205272][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.214010][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.220863][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.228171][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.236484][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.244518][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.251352][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.258668][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.266385][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.274375][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.293337][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.301136][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.308671][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.328270][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.335775][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.343768][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.351924][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.359969][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.366788][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.374016][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.382116][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.390104][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.396939][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.404094][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.411575][ T20] usb 5-1: device descriptor read/64, error -71 [ 63.417830][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.425570][ T909] device veth0_vlan entered promiscuous mode [ 63.427010][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.438881][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.446842][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.465707][ T909] device veth1_macvtap entered promiscuous mode [ 63.472539][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.484485][ T914] device veth0_vlan entered promiscuous mode [ 63.491257][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.499186][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.506442][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.520953][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.529291][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.537644][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.545617][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.573385][ T30] audit: type=1400 audit(1725746824.100:128): avc: denied { create } for pid=938 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.596025][ T914] device veth1_macvtap entered promiscuous mode [ 63.603768][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.616416][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.633856][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.717175][ T310] usb 4-1: device descriptor read/64, error -71 [ 63.724340][ T355] device bridge_slave_1 left promiscuous mode [ 63.771297][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.867697][ T355] device bridge_slave_0 left promiscuous mode [ 63.874386][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.891378][ T355] device bridge_slave_1 left promiscuous mode [ 63.898256][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.909169][ T355] device bridge_slave_0 left promiscuous mode [ 63.915928][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.933404][ T355] device veth1_macvtap left promiscuous mode [ 63.939891][ T355] device veth0_vlan left promiscuous mode [ 63.946490][ T355] device veth1_macvtap left promiscuous mode [ 63.954513][ T355] device veth0_vlan left promiscuous mode [ 64.027029][ T20] usb 5-1: device descriptor read/64, error -71 [ 64.297126][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 64.347018][ T310] usb 4-1: device descriptor read/64, error -71 [ 64.567054][ T20] usb 5-1: device descriptor read/64, error -71 [ 64.617054][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 64.625411][ T958] loop2: detected capacity change from 0 to 2048 [ 64.738575][ T958] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.777066][ T392] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.069514][ T310] usb 4-1: device descriptor read/64, error -71 [ 65.137033][ T20] usb 5-1: device descriptor read/64, error -71 [ 65.257060][ T392] usb 2-1: device descriptor read/64, error -71 [ 65.263226][ T20] usb usb5-port1: attempt power cycle [ 65.457085][ T310] usb 4-1: device descriptor read/64, error -71 [ 65.520030][ T965] loop2: detected capacity change from 0 to 2048 [ 65.568317][ T965] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.578854][ T310] usb usb4-port1: attempt power cycle [ 65.647164][ T392] usb 2-1: device descriptor read/64, error -71 [ 65.677171][ T20] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 65.847151][ T20] usb 5-1: device descriptor read/8, error -71 [ 65.917036][ T392] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 65.987017][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 66.117539][ T20] usb 5-1: device descriptor read/8, error -71 [ 66.157090][ T310] usb 4-1: device descriptor read/8, error -71 [ 66.187030][ T392] usb 2-1: device descriptor read/64, error -71 [ 66.387133][ T20] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 66.427148][ T310] usb 4-1: device descriptor read/8, error -71 [ 66.742868][ T392] usb 2-1: device descriptor read/64, error -71 [ 66.749161][ T20] usb 5-1: device descriptor read/8, error -71 [ 66.867072][ T392] usb usb2-port1: attempt power cycle [ 66.917014][ T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 67.027092][ T20] usb 5-1: device descriptor read/8, error -71 [ 67.117060][ T310] usb 4-1: device descriptor read/8, error -71 [ 67.157399][ T20] usb usb5-port1: unable to enumerate USB device [ 67.297040][ T392] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 67.311029][ T978] netlink: 'syz.2.176': attribute type 27 has an invalid length. [ 67.330995][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.337993][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.386389][ T979] device veth0_vlan left promiscuous mode [ 67.392221][ T979] device veth0_vlan entered promiscuous mode [ 67.399152][ T979] device veth1_macvtap left promiscuous mode [ 67.405495][ T979] device veth1_macvtap entered promiscuous mode [ 67.412697][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.419871][ T310] usb 4-1: device descriptor read/8, error -71 [ 67.426504][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.434104][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.444498][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.451359][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.458544][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.466638][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.474808][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.481669][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.488800][ T392] usb 2-1: device descriptor read/8, error -71 [ 67.494865][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.503042][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 67.510860][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.518787][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 67.526563][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.534729][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.542439][ T310] usb usb4-port1: unable to enumerate USB device [ 67.548736][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.556589][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.565091][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.573024][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.581088][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.589195][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.597203][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.605274][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.613078][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.620942][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.628728][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.636520][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.644707][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.652775][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.660658][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.668324][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.675511][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.682862][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.690838][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.698812][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.706229][ T981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.177'. [ 67.715591][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.769757][ T392] usb 2-1: device descriptor read/8, error -71 [ 67.801194][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.808117][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.815185][ T984] device bridge_slave_0 entered promiscuous mode [ 67.826270][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.833262][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.840704][ T984] device bridge_slave_1 entered promiscuous mode [ 67.893174][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.900053][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.907156][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.913914][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.934300][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.942499][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.949652][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.967749][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.975658][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.982520][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.989700][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.997783][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.004609][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.012307][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.020035][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.034991][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.042924][ T392] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 68.054105][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.062226][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.069950][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.079665][ T984] device veth0_vlan entered promiscuous mode [ 68.089892][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.099003][ T984] device veth1_macvtap entered promiscuous mode [ 68.111244][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.119514][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.149970][ T991] netlink: 'syz.2.188': attribute type 27 has an invalid length. [ 68.172561][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.179594][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.225479][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.232336][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.240177][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.247039][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.247062][ T392] usb 2-1: device descriptor read/8, error -71 [ 68.262977][ T991] device veth0_vlan left promiscuous mode [ 68.270053][ T991] device veth0_vlan entered promiscuous mode [ 68.276940][ T991] device veth1_macvtap left promiscuous mode [ 68.283718][ T991] device veth1_macvtap entered promiscuous mode [ 68.291436][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.298926][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.311149][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.319585][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.329158][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.337230][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.345267][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.353494][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.361685][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.377248][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.385381][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.407336][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.415284][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.437494][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.445480][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.457090][ T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 68.537195][ T392] usb 2-1: device descriptor read/8, error -71 [ 68.547910][ T328] device bridge_slave_1 left promiscuous mode [ 68.553866][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.561287][ T328] device bridge_slave_0 left promiscuous mode [ 68.567364][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.575210][ T328] device veth1_macvtap left promiscuous mode [ 68.581358][ T328] device veth0_vlan left promiscuous mode [ 68.657121][ T392] usb usb2-port1: unable to enumerate USB device [ 68.697038][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 68.837133][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.847903][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.857397][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.869989][ T310] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 68.879012][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.887769][ T310] usb 1-1: config 0 descriptor?? [ 69.278825][ T1009] loop2: detected capacity change from 0 to 2048 [ 69.368377][ T310] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 69.368994][ T1009] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.377798][ T310] hid-steam 0003:28DE:1102.000D: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 69.398480][ T310] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 69.411398][ T310] hid-steam 0003:28DE:1102.000E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 69.487059][ T310] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected [ 69.496615][ T310] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000D/input/input16 [ 70.155795][ T993] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000D/input/input17 [ 70.168615][ T310] usb 1-1: USB disconnect, device number 12 [ 70.187797][ T310] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected [ 70.704389][ T1021] loop0: detected capacity change from 0 to 2048 [ 70.788575][ T1021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.127111][ T1027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.189'. [ 71.640173][ T1035] netlink: 'syz.0.192': attribute type 27 has an invalid length. [ 71.659336][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.666323][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.716344][ T1035] device veth0_vlan left promiscuous mode [ 71.722171][ T1035] device veth0_vlan entered promiscuous mode [ 71.729229][ T1035] device veth1_macvtap left promiscuous mode [ 71.735535][ T1035] device veth1_macvtap entered promiscuous mode [ 71.743157][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.750689][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.758526][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.766574][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.773428][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.780705][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.789170][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.797911][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.804750][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.812171][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.820313][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.828395][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.836313][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.844480][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.852587][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.860598][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.868701][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.876503][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.884464][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.892426][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.900543][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.908546][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.916570][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.924461][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.932406][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.940187][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.948001][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.956081][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.964223][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.972001][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.979799][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.987100][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.994642][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.002771][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.010763][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.018298][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.132671][ T1050] loop2: detected capacity change from 0 to 2048 [ 72.218850][ T1050] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.126714][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.133774][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.141121][ T1063] device bridge_slave_0 entered promiscuous mode [ 73.152825][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.159694][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.166844][ T1063] device bridge_slave_1 entered promiscuous mode [ 73.213540][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.220499][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.227764][ T1064] device bridge_slave_0 entered promiscuous mode [ 73.234326][ T1072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.202'. [ 73.250353][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.257264][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.264543][ T1064] device bridge_slave_1 entered promiscuous mode [ 73.281113][ T1074] 9pnet: Insufficient options for proto=fd [ 73.308307][ T1076] netlink: 'syz.2.204': attribute type 27 has an invalid length. [ 73.325938][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.332902][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.392447][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.399320][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.407730][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.414582][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.427640][ T1076] device veth0_vlan left promiscuous mode [ 73.433495][ T1076] device veth0_vlan entered promiscuous mode [ 73.440538][ T1076] device veth1_macvtap left promiscuous mode [ 73.447254][ T1076] device veth1_macvtap entered promiscuous mode [ 73.461051][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.469199][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.476784][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.485468][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.493866][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.530921][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.540528][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.548788][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.557166][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.565615][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.574444][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.582645][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.590533][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.598725][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.606609][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.696293][ T30] audit: type=1400 audit(1725746834.220:129): avc: denied { mounton } for pid=1084 comm="syz.2.208" path="/29/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.724085][ T1085] incfs: Can't find or create .index dir in ./file0 [ 73.726452][ T30] audit: type=1400 audit(1725746834.250:130): avc: denied { write } for pid=1084 comm="syz.2.208" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.747499][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.758669][ T30] audit: type=1400 audit(1725746834.250:131): avc: denied { add_name } for pid=1084 comm="syz.2.208" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.758953][ T1085] incfs: mount failed -14 [ 73.790960][ T30] audit: type=1400 audit(1725746834.250:132): avc: denied { create } for pid=1084 comm="syz.2.208" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.811997][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.826122][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.833007][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.840556][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.848157][ T30] audit: type=1400 audit(1725746834.250:133): avc: denied { associate } for pid=1084 comm="syz.2.208" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.849494][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.876773][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.884404][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.927722][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.935185][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.953923][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.974417][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.984287][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.992484][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.999347][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.006879][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.014935][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.021804][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.031714][ T1063] device veth0_vlan entered promiscuous mode [ 74.049887][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.059190][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.067672][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.075518][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.084040][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.091381][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.105709][ T1063] device veth1_macvtap entered promiscuous mode [ 74.122279][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.130534][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.139074][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.166631][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.174832][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.183511][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.191774][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.201586][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.209907][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.218245][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.225961][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.235553][ T1064] device veth0_vlan entered promiscuous mode [ 74.258753][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.267482][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.286495][ T1064] device veth1_macvtap entered promiscuous mode [ 74.298461][ T355] device bridge_slave_1 left promiscuous mode [ 74.304890][ T1093] loop4: detected capacity change from 0 to 2048 [ 74.311255][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.318996][ T355] device bridge_slave_0 left promiscuous mode [ 74.339512][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.348117][ T355] device veth1_macvtap left promiscuous mode [ 74.353991][ T355] device veth0_vlan left promiscuous mode [ 74.409168][ T1093] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.513752][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.521980][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.530320][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.550039][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.560309][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.568732][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.576830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.686548][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.693727][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.701274][ T1100] device bridge_slave_0 entered promiscuous mode [ 74.708177][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.715189][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.722466][ T1100] device bridge_slave_1 entered promiscuous mode [ 74.780347][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.787211][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.794268][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.801098][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.823494][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.831250][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.839214][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.857099][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.865237][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.872134][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.880295][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.893267][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.897102][ T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 74.900152][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.931718][ T1110] loop2: detected capacity change from 0 to 2048 [ 74.931914][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.945840][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.968373][ T1100] device veth0_vlan entered promiscuous mode [ 74.975140][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.983774][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.986938][ T1110] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.992247][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.057284][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.075179][ T1100] device veth1_macvtap entered promiscuous mode [ 75.081287][ T39] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 75.089024][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.097356][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.142946][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.152379][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.162202][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.188265][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.198567][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.357056][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 75.389131][ T1118] netlink: 'syz.4.214': attribute type 27 has an invalid length. [ 75.410151][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.417194][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.424423][ T39] usb 1-1: device descriptor read/64, error -71 [ 75.469651][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.476532][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.485790][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.486116][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.492687][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.503453][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.519413][ T1118] device veth0_vlan left promiscuous mode [ 75.520108][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.526051][ T1118] device veth0_vlan entered promiscuous mode [ 75.538341][ T20] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 75.549327][ T1118] device veth1_macvtap left promiscuous mode [ 75.552893][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.560477][ T1118] device veth1_macvtap entered promiscuous mode [ 75.567495][ T20] usb 4-1: config 0 descriptor?? [ 75.574900][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.584885][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.592565][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.601847][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.611006][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.619498][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.674634][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.683078][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.691042][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.699273][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.707494][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.715488][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.723388][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.727040][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 75.731363][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.748119][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.007966][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.016303][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.024354][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.032461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.067387][ T39] usb 1-1: device descriptor read/64, error -71 [ 76.102825][ T1131] incfs: Can't find or create .index dir in ./file0 [ 76.109438][ T1131] incfs: mount failed -14 [ 76.151278][ T1133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.227861][ T355] device bridge_slave_1 left promiscuous mode [ 76.233776][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.238623][ T20] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 76.247783][ T6] usb 2-1: device descriptor read/64, error -71 [ 76.247973][ T355] device bridge_slave_0 left promiscuous mode [ 76.254416][ T20] hid-steam 0003:28DE:1102.000F: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 76.260502][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.272015][ T20] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 76.285286][ T355] device bridge_slave_1 left promiscuous mode [ 76.288204][ T20] hid-steam 0003:28DE:1102.0010: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 76.291388][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.309816][ T355] device bridge_slave_0 left promiscuous mode [ 76.315733][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.323898][ T355] device veth1_macvtap left promiscuous mode [ 76.329835][ T355] device veth0_vlan left promiscuous mode [ 76.335518][ T355] device veth1_macvtap left promiscuous mode [ 76.341607][ T355] device veth0_vlan left promiscuous mode [ 76.347249][ T39] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 76.367030][ T20] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 76.383552][ T20] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000F/input/input18 [ 76.491973][ T392] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 76.503570][ T1101] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000F/input/input19 [ 76.521173][ T1138] 9pnet: Insufficient options for proto=fd [ 76.528276][ T20] usb 4-1: USB disconnect, device number 11 [ 76.551036][ T20] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 76.657062][ T39] usb 1-1: device descriptor read/64, error -71 [ 76.677103][ T6] usb 2-1: device descriptor read/64, error -71 [ 76.767023][ T392] usb 3-1: device descriptor read/64, error -71 [ 76.947115][ T6] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 77.047303][ T1144] loop3: detected capacity change from 0 to 2048 [ 77.087023][ T39] usb 1-1: device descriptor read/64, error -71 [ 77.098413][ T1144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.157079][ T392] usb 3-1: device descriptor read/64, error -71 [ 77.217060][ T6] usb 2-1: device descriptor read/64, error -71 [ 77.217084][ T39] usb usb1-port1: attempt power cycle [ 77.427384][ T392] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 77.633493][ T1151] loop4: detected capacity change from 0 to 256 [ 77.657267][ T39] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 77.688340][ T1151] ======================================================= [ 77.688340][ T1151] WARNING: The mand mount option has been deprecated and [ 77.688340][ T1151] and is ignored by this kernel. Remove the mand [ 77.688340][ T1151] option from the mount to silence this warning. [ 77.688340][ T1151] ======================================================= [ 77.741712][ T1151] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 77.749736][ T6] usb 2-1: device descriptor read/64, error -71 [ 77.775631][ T30] audit: type=1400 audit(1725746838.300:134): avc: denied { write } for pid=1148 comm="syz.4.224" name="file1" dev="loop4" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.797965][ T30] audit: type=1400 audit(1725746838.300:135): avc: denied { open } for pid=1148 comm="syz.4.224" name="file1" dev="loop4" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.827005][ T392] usb 3-1: device descriptor read/64, error -71 [ 77.877359][ T6] usb usb2-port1: attempt power cycle [ 77.947128][ T39] usb 1-1: device descriptor read/8, error -71 [ 77.962292][ T1154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 77.984953][ T1156] netlink: 'syz.3.226': attribute type 27 has an invalid length. [ 78.004971][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.011984][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.060704][ T1156] device veth0_vlan left promiscuous mode [ 78.066428][ T1156] device veth0_vlan entered promiscuous mode [ 78.073399][ T1156] device veth1_macvtap left promiscuous mode [ 78.079927][ T1156] device veth1_macvtap entered promiscuous mode [ 78.089123][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.096792][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.104329][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.112833][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.119709][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.127171][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.135340][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.143540][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.150414][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.157742][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.165860][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.177236][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.185108][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.193310][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.203189][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.211128][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.219322][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.227204][ T39] usb 1-1: device descriptor read/8, error -71 [ 78.227515][ T392] usb 3-1: device descriptor read/64, error -71 [ 78.233645][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.247471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.252495][ T1164] loop3: detected capacity change from 0 to 2048 [ 78.255684][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.269673][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.279071][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.287308][ T6] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 78.287897][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.299798][ T1164] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.302530][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.320479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.357221][ T392] usb usb3-port1: attempt power cycle [ 78.377189][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.385347][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.393525][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.401664][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.409479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.417412][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.424627][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.431885][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.440641][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.450709][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.522430][ T39] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 78.535882][ T30] audit: type=1400 audit(1725746839.060:136): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.591548][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.725049][ T6] usb 2-1: device descriptor read/8, error -71 [ 78.731721][ T30] audit: type=1400 audit(1725746839.090:137): avc: denied { open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.754226][ T30] audit: type=1400 audit(1725746839.100:138): avc: denied { getattr } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.783204][ T30] audit: type=1400 audit(1725746839.310:139): avc: denied { create } for pid=1171 comm="syz.4.230" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.783536][ T1172] incfs: Can't find or create .index dir in ./file0 [ 78.809649][ T1172] incfs: mount failed -14 [ 78.817156][ T39] usb 1-1: device descriptor read/8, error -71 [ 79.191479][ T392] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 79.227183][ T6] usb 2-1: device descriptor read/8, error -71 [ 79.247348][ T1179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 79.287073][ T39] usb 1-1: device descriptor read/8, error -71 [ 79.387074][ T392] usb 3-1: device descriptor read/8, error -71 [ 79.407664][ T39] usb usb1-port1: unable to enumerate USB device [ 79.497061][ T6] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 79.527008][ T310] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 79.657057][ T392] usb 3-1: device descriptor read/8, error -71 [ 79.667089][ T6] usb 2-1: device descriptor read/8, error -71 [ 79.767073][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 79.902972][ T1186] loop4: detected capacity change from 0 to 256 [ 80.107179][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.117995][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.127659][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.140308][ T392] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 80.147672][ T6] usb 2-1: device descriptor read/8, error -71 [ 80.153611][ T310] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 80.162523][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.170827][ T310] usb 4-1: config 0 descriptor?? [ 80.267129][ T6] usb usb2-port1: unable to enumerate USB device [ 80.327045][ T392] usb 3-1: device descriptor read/8, error -71 [ 80.597124][ T392] usb 3-1: device descriptor read/8, error -71 [ 80.641867][ T1189] loop4: detected capacity change from 0 to 2048 [ 80.649362][ T310] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 80.656598][ T310] hid-steam 0003:28DE:1102.0011: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 80.668537][ T310] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 80.676045][ T310] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 80.717125][ T392] usb usb3-port1: unable to enumerate USB device [ 80.757176][ T310] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 80.759437][ T1189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.772445][ T310] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0011/input/input20 [ 80.858808][ T1180] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0011/input/input21 [ 80.871422][ T309] usb 4-1: USB disconnect, device number 12 [ 80.881276][ T309] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 81.490313][ T1196] loop3: detected capacity change from 0 to 2048 [ 81.555574][ T1198] netlink: 'syz.4.237': attribute type 27 has an invalid length. [ 81.572109][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.579101][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.614475][ T1196] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.683205][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.690102][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.698818][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.705678][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.720163][ T1198] device veth0_vlan left promiscuous mode [ 81.726065][ T1198] device veth0_vlan entered promiscuous mode [ 81.733044][ T1198] device veth1_macvtap left promiscuous mode [ 81.745139][ T1198] device veth1_macvtap entered promiscuous mode [ 81.752108][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.759612][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.767408][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.776604][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.785409][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.797935][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.806858][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.815432][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.824196][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.832791][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.844242][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.853579][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.862219][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.871484][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.881492][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.410796][ T1213] incfs: Can't find or create .index dir in ./file0 [ 82.417451][ T1213] incfs: mount failed -14 [ 82.457797][ T1215] loop3: detected capacity change from 0 to 2048 [ 82.538397][ T1215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.886338][ T1221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.243'. [ 83.370883][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 84.047040][ T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 84.273279][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 84.295157][ T1239] netlink: 'syz.3.249': attribute type 27 has an invalid length. [ 84.297066][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 84.316053][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.323049][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.370502][ T1239] device veth0_vlan left promiscuous mode [ 84.376212][ T1239] device veth0_vlan entered promiscuous mode [ 84.382839][ T1239] device veth1_macvtap left promiscuous mode [ 84.389238][ T1239] device veth1_macvtap entered promiscuous mode [ 84.397460][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.404734][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.415638][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.424006][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.427220][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.430868][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.446754][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.458701][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.467982][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.472128][ T6] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 84.480390][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.488607][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.497592][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.510542][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.517923][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.518063][ T6] usb 5-1: config 0 descriptor?? [ 84.529235][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 84.538788][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.546767][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 84.554692][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.562769][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.570639][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.578526][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.586287][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.594254][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.602231][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.610327][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.618288][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.626306][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.634346][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.642153][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.649904][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.657712][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.665734][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.673851][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.681605][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.689282][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.696455][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.703705][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.711707][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.719764][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.746409][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.792048][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.799039][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.806245][ T1246] device bridge_slave_0 entered promiscuous mode [ 84.812547][ T310] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 84.813875][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.826987][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.834102][ T1246] device bridge_slave_1 entered promiscuous mode [ 84.881649][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.888498][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.895571][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.902396][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.925172][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.932952][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.940186][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.958184][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.966146][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.973001][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.980171][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.988202][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.995024][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.002263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.008484][ T6] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 85.010260][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.019313][ T6] hid-steam 0003:28DE:1102.0013: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 85.035445][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.038636][ T6] hid-steam 0003:28DE:1102.0014: unknown main item tag 0x0 [ 85.049108][ T1246] device veth0_vlan entered promiscuous mode [ 85.057051][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 85.063108][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.065820][ T6] hid-steam 0003:28DE:1102.0014: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 85.082307][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.089840][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.103259][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.112143][ T1246] device veth1_macvtap entered promiscuous mode [ 85.122543][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.131262][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.147025][ T6] hid-steam 0003:28DE:1102.0013: Steam Controller 'XXXXXXXXXX' connected [ 85.169823][ T6] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0013/input/input22 [ 85.174730][ T1251] loop0: detected capacity change from 0 to 2048 [ 85.181416][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.201389][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.214409][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.219448][ T1251] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.237306][ T310] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 85.237354][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.256847][ T310] usb 4-1: config 0 descriptor?? [ 85.301348][ T1233] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0013/input/input23 [ 85.322304][ T6] usb 5-1: USB disconnect, device number 16 [ 85.335238][ T6] hid-steam 0003:28DE:1102.0013: Steam Controller 'XXXXXXXXXX' disconnected [ 85.408261][ T355] device bridge_slave_1 left promiscuous mode [ 85.414310][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.421751][ T355] device bridge_slave_0 left promiscuous mode [ 85.428016][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.437307][ T355] device veth1_macvtap left promiscuous mode [ 85.443170][ T355] device veth0_vlan left promiscuous mode [ 85.797205][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 85.803043][ T310] usbhid: probe of 4-1:0.0 failed with error -71 [ 85.810821][ T310] usb 4-1: USB disconnect, device number 13 [ 85.879552][ T1260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.254'. [ 85.921211][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 85.955634][ T1265] loop4: detected capacity change from 0 to 2048 [ 85.966672][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.973723][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.980985][ T1261] device bridge_slave_0 entered promiscuous mode [ 85.988982][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.995876][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.003478][ T1261] device bridge_slave_1 entered promiscuous mode [ 86.051650][ T1265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.124838][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.131758][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.138832][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.145592][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.196390][ T1261] device veth0_vlan entered promiscuous mode [ 86.216587][ T1261] device veth1_macvtap entered promiscuous mode [ 86.236397][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.249260][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.258666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.267848][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.576218][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.584496][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.592396][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.600275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.608522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.616275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.623577][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.630880][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.689840][ T1282] loop1: detected capacity change from 0 to 2048 [ 86.725636][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.732564][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.740199][ T1278] device bridge_slave_0 entered promiscuous mode [ 86.747575][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.754481][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.762175][ T1278] device bridge_slave_1 entered promiscuous mode [ 86.811026][ T1282] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.931303][ T1280] loop3: detected capacity change from 0 to 40427 [ 87.195267][ T1280] F2FS-fs (loop3): invalid crc value [ 87.209303][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.216187][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.223308][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.230078][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.251656][ T1294] netlink: 'syz.0.260': attribute type 27 has an invalid length. [ 87.264567][ T1280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.282469][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.289482][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.312361][ T1280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 87.345393][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.357614][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.433916][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.440831][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.473988][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.480899][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.535176][ T1294] device veth0_vlan left promiscuous mode [ 87.541348][ T1294] device veth0_vlan entered promiscuous mode [ 87.549209][ T1294] device veth1_macvtap left promiscuous mode [ 87.555966][ T1294] device veth1_macvtap entered promiscuous mode [ 87.599514][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.610129][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.636083][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.649152][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.657652][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.665899][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.675355][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.699545][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.709768][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.716222][ T1308] loop0: detected capacity change from 0 to 2048 [ 87.718531][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.734308][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.743685][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.752830][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.761517][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.770174][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.778882][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.787193][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.795808][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.808631][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.822962][ T1308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.825061][ T1311] attempt to access beyond end of device [ 87.825061][ T1311] loop3: rw=2049, want=53952, limit=40427 [ 87.951785][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.972081][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.987464][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.011045][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.061237][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068131][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.136084][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.184123][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.268827][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.275768][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.291886][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.299863][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.308307][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.316145][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.324464][ T355] device bridge_slave_1 left promiscuous mode [ 88.330578][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.338007][ T355] device bridge_slave_0 left promiscuous mode [ 88.343981][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.352036][ T355] device veth1_macvtap left promiscuous mode [ 88.357966][ T355] device veth0_vlan left promiscuous mode [ 88.413164][ T1064] attempt to access beyond end of device [ 88.413164][ T1064] loop3: rw=2049, want=45104, limit=40427 [ 88.439161][ T1317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.264'. [ 88.464718][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.473888][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.482708][ T1319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 88.498439][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.506272][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.526655][ T1278] device veth0_vlan entered promiscuous mode [ 88.536454][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.543926][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.578416][ T1323] loop4: detected capacity change from 0 to 2048 [ 88.600162][ T1278] device veth1_macvtap entered promiscuous mode [ 88.608944][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.617208][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.627460][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.632257][ T1325] loop3: detected capacity change from 0 to 2048 [ 88.655177][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.658080][ T1323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.663568][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.681928][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.690557][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.727104][ T392] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 88.769691][ T1325] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.210486][ T392] usb 2-1: Using ep0 maxpacket: 8 [ 89.318162][ T388] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 89.477382][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.497004][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.533959][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.560837][ T392] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 89.569961][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.584331][ T392] usb 2-1: config 0 descriptor?? [ 89.660885][ T1347] loop4: detected capacity change from 0 to 256 [ 89.827081][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 89.869566][ T355] device bridge_slave_1 left promiscuous mode [ 89.877768][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.881397][ T388] usb 3-1: Using ep0 maxpacket: 8 [ 89.896475][ T355] device bridge_slave_0 left promiscuous mode [ 89.906986][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.915290][ T355] device veth1_macvtap left promiscuous mode [ 89.922791][ T355] device veth0_vlan left promiscuous mode [ 90.017163][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.028198][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.037809][ T388] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.050769][ T388] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 90.051591][ T1349] netlink: 'syz.3.273': attribute type 27 has an invalid length. [ 90.059698][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.075970][ T388] usb 3-1: config 0 descriptor?? [ 90.090375][ T1349] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.097300][ T1349] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.117227][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 90.146140][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.153013][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.158607][ T392] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 90.164346][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.167793][ T392] hid-steam 0003:28DE:1102.0015: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 90.173931][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.186833][ T392] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 90.200217][ T392] hid-steam 0003:28DE:1102.0016: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 90.204794][ T1351] device veth0_vlan left promiscuous mode [ 90.219552][ T1351] device veth0_vlan entered promiscuous mode [ 90.226392][ T1351] device veth1_macvtap left promiscuous mode [ 90.233152][ T1351] device veth1_macvtap entered promiscuous mode [ 90.240850][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.248338][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.255762][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.264148][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.273975][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.281901][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.287521][ T392] hid-steam 0003:28DE:1102.0015: Steam Controller 'XXXXXXXXXX' connected [ 90.295413][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.308824][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.318904][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.328372][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.341582][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.349932][ T26] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 90.352680][ T392] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0015/input/input24 [ 90.371602][ T1320] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0015/input/input25 [ 90.386636][ T392] usb 2-1: USB disconnect, device number 23 [ 90.397950][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.406524][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.419922][ T392] hid-steam 0003:28DE:1102.0015: Steam Controller 'XXXXXXXXXX' disconnected [ 90.420895][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.439136][ T85] ================================================================== [ 90.447229][ T85] BUG: KASAN: use-after-free in mutex_lock+0xa9/0x1e0 [ 90.453946][ T85] Write of size 8 at addr ffff8881186cf450 by task acpid/85 [ 90.461066][ T85] [ 90.463232][ T85] CPU: 1 PID: 85 Comm: acpid Not tainted 5.15.157-syzkaller-00897-g53be7c8abe11 #0 [ 90.472343][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.482248][ T85] Call Trace: [ 90.485362][ T85] [ 90.488139][ T85] dump_stack_lvl+0x151/0x1c0 [ 90.492663][ T85] ? io_uring_drop_tctx_refs+0x190/0x190 [ 90.498117][ T85] ? __wake_up_klogd+0xd5/0x110 [ 90.502805][ T85] ? panic+0x760/0x760 [ 90.506712][ T85] ? vfs_open+0x73/0x80 [ 90.510705][ T85] print_address_description+0x87/0x3b0 [ 90.516085][ T85] kasan_report+0x179/0x1c0 [ 90.520425][ T85] ? mutex_lock+0xa9/0x1e0 [ 90.524679][ T85] ? mutex_lock+0xa9/0x1e0 [ 90.528929][ T85] kasan_check_range+0x293/0x2a0 [ 90.533710][ T85] __kasan_check_write+0x14/0x20 [ 90.538476][ T85] mutex_lock+0xa9/0x1e0 [ 90.542559][ T85] ? wait_for_completion_killable_timeout+0x10/0x10 [ 90.548981][ T85] steam_input_open+0x91/0x1a0 [ 90.553577][ T85] ? steam_input_register+0xa70/0xa70 [ 90.558788][ T85] ? __kasan_check_write+0x14/0x20 [ 90.563735][ T85] ? mutex_lock_interruptible+0xb6/0x1e0 [ 90.569199][ T85] ? __kasan_check_write+0x14/0x20 [ 90.574147][ T85] input_open_device+0x1a5/0x310 [ 90.578925][ T85] ? kobject_get_unless_zero+0x229/0x320 [ 90.584388][ T85] evdev_open+0x3df/0x620 [ 90.588559][ T85] chrdev_open+0x4f7/0x620 [ 90.592813][ T85] ? cd_forget+0x170/0x170 [ 90.597064][ T85] ? fsnotify_perm+0x4ba/0x5d0 [ 90.601662][ T85] ? cd_forget+0x170/0x170 [ 90.605913][ T85] do_dentry_open+0x81c/0xfd0 [ 90.610521][ T85] vfs_open+0x73/0x80 [ 90.614332][ T85] path_openat+0x26f0/0x2f40 [ 90.618760][ T85] ? kasan_quarantine_put+0x34/0x1a0 [ 90.623881][ T85] ? __kasan_slab_alloc+0xb1/0xe0 [ 90.628740][ T85] ? kmem_cache_alloc+0xf5/0x200 [ 90.633511][ T85] ? getname_flags+0xba/0x520 [ 90.638030][ T85] ? __x64_sys_openat+0x243/0x290 [ 90.642891][ T85] ? do_filp_open+0x460/0x460 [ 90.647408][ T85] do_filp_open+0x21c/0x460 [ 90.651829][ T85] ? vfs_tmpfile+0x2c0/0x2c0 [ 90.656259][ T85] do_sys_openat2+0x13f/0x830 [ 90.660770][ T85] ? set_current_blocked+0x40/0x40 [ 90.665713][ T85] ? do_sys_open+0x220/0x220 [ 90.670139][ T85] ? __fdget_pos+0x209/0x3a0 [ 90.674567][ T85] ? ksys_read+0x24f/0x2c0 [ 90.678821][ T85] __x64_sys_openat+0x243/0x290 [ 90.683507][ T85] ? __ia32_sys_open+0x270/0x270 [ 90.688281][ T85] ? debug_smp_processor_id+0x17/0x20 [ 90.693490][ T85] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 90.699389][ T85] ? exit_to_user_mode_prepare+0x39/0xa0 [ 90.704902][ T85] x64_sys_call+0x6bf/0x9a0 [ 90.709196][ T85] do_syscall_64+0x3b/0xb0 [ 90.713452][ T85] ? clear_bhb_loop+0x35/0x90 [ 90.717963][ T85] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.723700][ T85] RIP: 0033:0x7f68537339a4 [ 90.727948][ T85] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 90.747661][ T85] RSP: 002b:00007ffd8f9e8770 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.755904][ T85] RAX: ffffffffffffffda RBX: 00007ffd8f9e8a58 RCX: 00007f68537339a4 [ 90.763716][ T85] RDX: 0000000000080800 RSI: 00007ffd8f9e8958 RDI: 00000000ffffff9c [ 90.771524][ T85] RBP: 00007ffd8f9e8958 R08: 00000000000000f4 R09: 00007ffd8f9e8958 [ 90.779334][ T85] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 90.787146][ T85] R13: 0000000000000020 R14: 00007ffd8f9e8a58 R15: 00007ffd8f9e8958 [ 90.794960][ T85] [ 90.797823][ T85] [ 90.799996][ T85] Allocated by task 392: [ 90.804073][ T85] ____kasan_kmalloc+0xdb/0x110 [ 90.808757][ T85] __kasan_kmalloc+0x9/0x10 [ 90.813097][ T85] __kmalloc_track_caller+0x139/0x260 [ 90.818307][ T85] devm_kmalloc+0x4f/0x160 [ 90.822557][ T85] steam_probe+0x11d/0xa80 [ 90.826811][ T85] hid_device_probe+0x261/0x390 [ 90.831497][ T85] really_probe+0x28d/0x970 [ 90.835837][ T85] __driver_probe_device+0x1a0/0x310 [ 90.840958][ T85] driver_probe_device+0x54/0x3d0 [ 90.845818][ T85] __device_attach_driver+0x2c5/0x470 [ 90.851025][ T85] bus_for_each_drv+0x183/0x200 [ 90.855711][ T85] __device_attach+0x312/0x510 [ 90.860313][ T85] device_initial_probe+0x1a/0x20 [ 90.865172][ T85] bus_probe_device+0xbe/0x1e0 [ 90.869777][ T85] device_add+0xb60/0xf10 [ 90.873943][ T85] hid_add_device+0x39c/0x4e0 [ 90.878456][ T85] usbhid_probe+0xb0e/0xea0 [ 90.882791][ T85] usb_probe_interface+0x5b6/0xa90 [ 90.887738][ T85] really_probe+0x28d/0x970 [ 90.892078][ T85] __driver_probe_device+0x1a0/0x310 [ 90.897199][ T85] driver_probe_device+0x54/0x3d0 [ 90.902058][ T85] __device_attach_driver+0x2c5/0x470 [ 90.907270][ T85] bus_for_each_drv+0x183/0x200 [ 90.911958][ T85] __device_attach+0x312/0x510 [ 90.916554][ T85] device_initial_probe+0x1a/0x20 [ 90.921415][ T85] bus_probe_device+0xbe/0x1e0 [ 90.926024][ T85] device_add+0xb60/0xf10 [ 90.930186][ T85] usb_set_configuration+0x190f/0x1e80 [ 90.935473][ T85] usb_generic_driver_probe+0x8b/0x150 [ 90.940768][ T85] usb_probe_device+0x144/0x260 [ 90.945454][ T85] really_probe+0x28d/0x970 [ 90.949798][ T85] __driver_probe_device+0x1a0/0x310 [ 90.954914][ T85] driver_probe_device+0x54/0x3d0 [ 90.959778][ T85] __device_attach_driver+0x2c5/0x470 [ 90.964982][ T85] bus_for_each_drv+0x183/0x200 [ 90.969670][ T85] __device_attach+0x312/0x510 [ 90.974271][ T85] device_initial_probe+0x1a/0x20 [ 90.979129][ T85] bus_probe_device+0xbe/0x1e0 [ 90.983729][ T85] device_add+0xb60/0xf10 [ 90.987895][ T85] usb_new_device+0x1038/0x1c00 [ 90.992583][ T85] hub_event+0x2def/0x4770 [ 90.996835][ T85] process_one_work+0x6bb/0xc10 [ 91.001644][ T85] worker_thread+0xad5/0x12a0 [ 91.006150][ T85] kthread+0x421/0x510 [ 91.010055][ T85] ret_from_fork+0x1f/0x30 [ 91.014311][ T85] [ 91.016479][ T85] Freed by task 392: [ 91.020210][ T85] kasan_set_track+0x4b/0x70 [ 91.024636][ T85] kasan_set_free_info+0x23/0x40 [ 91.029414][ T85] ____kasan_slab_free+0x126/0x160 [ 91.034363][ T85] __kasan_slab_free+0x11/0x20 [ 91.038956][ T85] slab_free_freelist_hook+0xbd/0x190 [ 91.044164][ T85] kfree+0xc8/0x220 [ 91.047808][ T85] release_nodes+0xf1/0x230 [ 91.052151][ T85] devres_release_all+0x148/0x1a0 [ 91.057009][ T85] device_release_driver_internal+0x51a/0x7d0 [ 91.062912][ T85] device_release_driver+0x19/0x20 [ 91.067857][ T85] bus_remove_device+0x2f8/0x360 [ 91.072631][ T85] device_del+0x663/0xe90 [ 91.076797][ T85] hid_destroy_device+0x68/0x110 [ 91.081574][ T85] usbhid_disconnect+0x9e/0xc0 [ 91.086173][ T85] usb_unbind_interface+0x1fa/0x8c0 [ 91.091206][ T85] device_release_driver_internal+0x50b/0x7d0 [ 91.097106][ T85] device_release_driver+0x19/0x20 [ 91.102055][ T85] bus_remove_device+0x2f8/0x360 [ 91.106827][ T85] device_del+0x663/0xe90 [ 91.110993][ T85] usb_disable_device+0x380/0x720 [ 91.115853][ T85] usb_disconnect+0x32a/0x890 [ 91.120369][ T85] hub_event+0x1d42/0x4770 [ 91.124621][ T85] process_one_work+0x6bb/0xc10 [ 91.129307][ T85] worker_thread+0xe02/0x12a0 [ 91.133820][ T85] kthread+0x421/0x510 [ 91.137725][ T85] ret_from_fork+0x1f/0x30 [ 91.141978][ T85] [ 91.144146][ T85] Last potentially related work creation: [ 91.149703][ T85] kasan_save_stack+0x3b/0x60 [ 91.154218][ T85] __kasan_record_aux_stack+0xd3/0xf0 [ 91.159422][ T85] kasan_record_aux_stack_noalloc+0xb/0x10 [ 91.165066][ T85] call_rcu+0x135/0x1310 [ 91.169145][ T85] qdisc_destroy+0x162/0x280 [ 91.173571][ T85] dev_shutdown+0x43b/0x560 [ 91.177912][ T85] unregister_netdevice_many+0x9b2/0x17c0 [ 91.183467][ T85] default_device_exit_batch+0x38a/0x3f0 [ 91.188932][ T85] cleanup_net+0x6ce/0xc00 [ 91.193185][ T85] process_one_work+0x6bb/0xc10 [ 91.197873][ T85] worker_thread+0xad5/0x12a0 [ 91.202384][ T85] kthread+0x421/0x510 [ 91.206290][ T85] ret_from_fork+0x1f/0x30 [ 91.210544][ T85] [ 91.212715][ T85] Second to last potentially related work creation: [ 91.219136][ T85] kasan_save_stack+0x3b/0x60 [ 91.223647][ T85] __kasan_record_aux_stack+0xd3/0xf0 [ 91.228856][ T85] kasan_record_aux_stack_noalloc+0xb/0x10 [ 91.234499][ T85] kvfree_call_rcu+0xb1/0x8b0 [ 91.239011][ T85] neigh_destroy+0x411/0x540 [ 91.243436][ T85] neigh_cleanup_and_release+0x73/0x1b0 [ 91.248840][ T85] neigh_remove_one+0x3a6/0x430 [ 91.253507][ T85] ___neigh_create+0x474/0x1bd0 [ 91.258192][ T85] __neigh_create+0x32/0x40 [ 91.262534][ T85] ip6_finish_output2+0x9ee/0x16e0 [ 91.267480][ T85] __ip6_finish_output+0x60f/0x7c0 [ 91.272428][ T85] ip6_finish_output+0x31/0x210 [ 91.277112][ T85] ip6_output+0x1f7/0x4d0 [ 91.281279][ T85] mld_sendpack+0x662/0xbb0 [ 91.285618][ T85] mld_ifc_work+0x7dc/0xbb0 [ 91.289961][ T85] process_one_work+0x6bb/0xc10 [ 91.294646][ T85] worker_thread+0xad5/0x12a0 [ 91.299157][ T85] kthread+0x421/0x510 [ 91.303062][ T85] ret_from_fork+0x1f/0x30 [ 91.307319][ T85] [ 91.309489][ T85] The buggy address belongs to the object at ffff8881186cf400 [ 91.309489][ T85] which belongs to the cache kmalloc-512 of size 512 [ 91.323376][ T85] The buggy address is located 80 bytes inside of [ 91.323376][ T85] 512-byte region [ffff8881186cf400, ffff8881186cf600) [ 91.336391][ T85] The buggy address belongs to the page: [ 91.341872][ T85] page:ffffea000461b300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1186cc [ 91.351928][ T85] head:ffffea000461b300 order:2 compound_mapcount:0 compound_pincount:0 [ 91.360089][ T85] flags: 0x4000000000010200(slab|head|zone=1) [ 91.365996][ T85] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 91.374416][ T85] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 91.382828][ T85] page dumped because: kasan: bad access detected [ 91.389082][ T85] page_owner tracks the page as allocated [ 91.394660][ T85] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 138, ts 7150416501, free_ts 0 [ 91.412508][ T85] post_alloc_hook+0x1a3/0x1b0 [ 91.417108][ T85] prep_new_page+0x1b/0x110 [ 91.421446][ T85] get_page_from_freelist+0x3550/0x35d0 [ 91.426832][ T85] __alloc_pages+0x27e/0x8f0 [ 91.431255][ T85] new_slab+0x9a/0x4e0 [ 91.435159][ T85] ___slab_alloc+0x39e/0x830 [ 91.439593][ T85] __slab_alloc+0x4a/0x90 [ 91.443753][ T85] __kmalloc_track_caller+0x16c/0x260 [ 91.448959][ T85] __alloc_skb+0x10c/0x550 [ 91.453215][ T85] alloc_skb_with_frags+0xa6/0x680 [ 91.458163][ T85] sock_alloc_send_pskb+0x915/0xa50 [ 91.463196][ T85] unix_dgram_sendmsg+0x6fd/0x2090 [ 91.468144][ T85] __sys_sendto+0x564/0x720 [ 91.472485][ T85] __x64_sys_sendto+0xe5/0x100 [ 91.477081][ T85] x64_sys_call+0x15c/0x9a0 [ 91.481421][ T85] do_syscall_64+0x3b/0xb0 [ 91.485673][ T85] page_owner free stack trace missing [ 91.490881][ T85] [ 91.493050][ T85] Memory state around the buggy address: [ 91.498522][ T85] ffff8881186cf300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.506419][ T85] ffff8881186cf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.514317][ T85] >ffff8881186cf400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.522214][ T85] ^ [ 91.528724][ T85] ffff8881186cf480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.536622][ T85] ffff8881186cf500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.544519][ T85] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.552419][ T85] Disabling lock debugging due to kernel taint [ 91.567410][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.575485][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.584640][ T388] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 91.594658][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.616552][ T26] usb 1-1: config 0 descriptor?? [ 91.626559][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.635195][ T388] hid-steam 0003:28DE:1102.0017: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 91.646775][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.670206][ T388] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0 [ 91.685873][ T388] hid-steam 0003:28DE:1102.0018: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 91.697035][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.706063][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.722249][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.732246][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.741452][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.756609][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.765447][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.774435][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.783175][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.791848][ T85] hid 0003:28DE:1102.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 91.800575][ T388] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' connected [ 91.817269][ T26] usb 1-1: can't set config #0, error -71 [ 91.818321][ T388] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0017/input/input26 [ 91.832953][ T26] usb 1-1: USB disconnect, device number 17 [ 91.857747][ T388] usb 3-1: USB disconnect, device number 19 [ 91.870514][ T388] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' disconnected [ 92.680840][ T355] device bridge_slave_1 left promiscuous mode [ 92.686759][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.694071][ T355] device bridge_slave_0 left promiscuous mode [ 92.700056][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.708231][ T355] device bridge_slave_1 left promiscuous mode [ 92.714157][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.721406][ T355] device bridge_slave_0 left promiscuous mode [ 92.727511][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.735257][ T355] device bridge_slave_1 left promiscuous mode [ 92.741349][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.748610][ T355] device bridge_slave_0 left promiscuous mode [ 92.754516][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.762416][ T355] device bridge_slave_1 left promiscuous mode [ 92.768394][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.775563][ T355] device bridge_slave_0 left promiscuous mode [ 92.781557][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.789383][ T355] device bridge_slave_1 left promiscuous mode [ 92.795287][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.802673][ T355] device bridge_slave_0 left promiscuous mode [ 92.808644][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.817455][ T355] device veth1_macvtap left promiscuous mode [ 92.823253][ T355] device veth0_vlan left promiscuous mode [ 92.829132][ T355] device veth1_macvtap left promiscuous mode [ 92.834920][ T355] device veth0_vlan left promiscuous mode [ 92.840841][ T355] device veth1_macvtap left promiscuous mode [ 92.846661][ T355] device veth0_vlan left promiscuous mode [ 92.852443][ T355] device veth1_macvtap left promiscuous mode [ 92.858509][ T355] device veth0_vlan left promiscuous mode [ 92.864353][ T355] device veth1_macvtap left promiscuous mode [ 92.870292][ T355] device veth0_vlan left promiscuous mode