last executing test programs: 5.264351742s ago: executing program 4 (id=101): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000092100000001220500"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='neigh_create\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xffffffffffffffdb, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.554161787s ago: executing program 4 (id=121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) read(r2, 0x0, 0x0) close(r2) close(r1) 3.341378786s ago: executing program 4 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x109) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4841) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x80000, 0x0, [0x8, 0xc24c, 0x0, 0x8, 0x8, 0x4e4, 0xe30351e, 0x200]}) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.225171256s ago: executing program 4 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001080000000000000000002c11000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000100039042abd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000c31006006000128008000100736974005400028008000100", @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 3.196578958s ago: executing program 1 (id=128): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.116971695s ago: executing program 4 (id=131): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 2.903502353s ago: executing program 4 (id=132): socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020800000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.844298218s ago: executing program 1 (id=133): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 2.511049307s ago: executing program 0 (id=137): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 2.421763294s ago: executing program 0 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) pread64(r2, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 2.23124431s ago: executing program 0 (id=150): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x2000800, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@check_normal}, {@utf8no}, {@numtail}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@fat=@flush}, {@utf8}, {@shortname_win95}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001dc, 0x24040840) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 1.796683318s ago: executing program 2 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x2, 0x8, 0x2, '\x00', 0x1}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.680024248s ago: executing program 2 (id=146): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@dioread_lock}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd0}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.338245726s ago: executing program 2 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) read(r2, 0x0, 0x0) close(r2) close(r1) 1.18146259s ago: executing program 2 (id=148): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.052040851s ago: executing program 2 (id=149): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) io_setup(0x7ff, &(0x7f0000000000)) eventfd(0x10001) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) eventfd2(0x9, 0x800) 953.997939ms ago: executing program 2 (id=151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x0, "58f9bca2"}, @main=@item_012={0x2, 0x0, 0x0, "2fb6"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff004, 0x9, 0x3, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = open(0x0, 0x0, 0x0) getdents64(r3, &(0x7f0000000280)=""/282, 0x11a) 805.615362ms ago: executing program 3 (id=152): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) setgroups(0x0, 0x0) symlinkat(&(0x7f0000000180)='./bus\x00', r0, &(0x7f0000000240)='./bus\x00') 748.784627ms ago: executing program 3 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32], 0x6, 0x2d7, &(0x7f0000000a00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYBLOB="9e8b32628dea0c337ee5a625726952e890748455d87f0eafa51c11e078e121744b7aaa59b0c1a29aa26c8bd339caf5"], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 587.080071ms ago: executing program 3 (id=154): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') 585.619801ms ago: executing program 1 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080062, &(0x7f0000000240)={[{@data_err_abort}, {@commit={'commit', 0x3d, 0xf}}]}, 0x1, 0x50d, &(0x7f0000008340)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 575.185821ms ago: executing program 0 (id=156): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 558.638733ms ago: executing program 0 (id=157): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="ac", 0x1}], 0x1, 0x5412, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x7) 484.500509ms ago: executing program 3 (id=158): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket(0x0, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r1, 0x89f2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x21, r2, 0x0, 0x0) 425.701944ms ago: executing program 3 (id=159): r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 413.717026ms ago: executing program 3 (id=160): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000280), 0x1, 0x77b, &(0x7f0000000800)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 311.028674ms ago: executing program 1 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 202.549013ms ago: executing program 1 (id=162): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r2, 0x0, 0x0, 0x3) close(r0) 42.178907ms ago: executing program 0 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB='P'], 0x150) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 0s ago: executing program 1 (id=164): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 19.976660][ T28] audit: type=1400 audit(1728575519.622:66): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.977638][ T282] cgroup: Unknown subsys name 'net' [ 19.999208][ T28] audit: type=1400 audit(1728575519.622:67): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.026312][ T28] audit: type=1400 audit(1728575519.652:68): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.026454][ T282] cgroup: Unknown subsys name 'devices' [ 20.167019][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.172432][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.271644][ T28] audit: type=1400 audit(1728575519.912:69): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.294868][ T28] audit: type=1400 audit(1728575519.912:70): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.319488][ T28] audit: type=1400 audit(1728575519.912:71): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.326588][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.351388][ T28] audit: type=1400 audit(1728575519.992:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.376625][ T28] audit: type=1400 audit(1728575519.992:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.404668][ T28] audit: type=1400 audit(1728575520.042:74): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.405068][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.429984][ T28] audit: type=1400 audit(1728575520.042:75): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.975150][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.982124][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.989371][ T291] device bridge_slave_0 entered promiscuous mode [ 20.997381][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.004212][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.011487][ T291] device bridge_slave_1 entered promiscuous mode [ 21.100555][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.107492][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.114538][ T292] device bridge_slave_0 entered promiscuous mode [ 21.121348][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.128295][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.135588][ T292] device bridge_slave_1 entered promiscuous mode [ 21.145652][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.152603][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.159926][ T295] device bridge_slave_0 entered promiscuous mode [ 21.176216][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.183051][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.190312][ T295] device bridge_slave_1 entered promiscuous mode [ 21.250271][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.257169][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.264215][ T293] device bridge_slave_0 entered promiscuous mode [ 21.272387][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.279470][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.286553][ T293] device bridge_slave_1 entered promiscuous mode [ 21.343408][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.350424][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.357760][ T296] device bridge_slave_0 entered promiscuous mode [ 21.368122][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.374965][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.382922][ T296] device bridge_slave_1 entered promiscuous mode [ 21.434353][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.441220][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.448313][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.455081][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.500049][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.506911][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.513998][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.520805][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.555489][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.562335][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.569458][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.576232][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.603228][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.610098][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.617213][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.623957][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.637339][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.644181][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.651312][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.658091][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.679346][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.687813][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.696528][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.703905][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.711193][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.718344][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.726535][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.733543][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.740709][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.748052][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.755143][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.762593][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.769776][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.785704][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.793472][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.816199][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.824209][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.832368][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.839212][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.846491][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.854194][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.885690][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.894586][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.903640][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.911761][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.918701][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.925920][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.933801][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.940575][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.947749][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.955734][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.962559][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.969781][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.977755][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.984579][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.002624][ T291] device veth0_vlan entered promiscuous mode [ 22.017379][ T291] device veth1_macvtap entered promiscuous mode [ 22.027170][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.035143][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.043114][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.051613][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.059508][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.067318][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.075007][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.082968][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.090681][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.098605][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.106332][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.114199][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.122249][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.129688][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.137053][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.158281][ T292] device veth0_vlan entered promiscuous mode [ 22.168827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.177051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.185155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.193753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.201963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.209604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.217392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.224976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.232850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.240052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.247396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.255527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.263672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.271756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.279929][ T296] device veth0_vlan entered promiscuous mode [ 22.291217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.298531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.305838][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.312996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.323448][ T292] device veth1_macvtap entered promiscuous mode [ 22.340072][ T295] device veth0_vlan entered promiscuous mode [ 22.349687][ T296] device veth1_macvtap entered promiscuous mode [ 22.358129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.366132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.374401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.382047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.390214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.398232][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.405043][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.412305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.420400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.428372][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.435214][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.442369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.450579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.458732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.466691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.474445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.482480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.490427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.498176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.505544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.526818][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.534926][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.543328][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.551292][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.577252][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.589294][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.597435][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.606827][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.615915][ T318] overlayfs: statfs failed on './file0' [ 22.631212][ T295] device veth1_macvtap entered promiscuous mode [ 22.647683][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.656385][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.665590][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.675057][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.683313][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.691428][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.699689][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.723490][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.737396][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.751213][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.752445][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.759579][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.803372][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.817711][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.835696][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.843510][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.865767][ T293] device veth0_vlan entered promiscuous mode [ 22.893364][ T293] device veth1_macvtap entered promiscuous mode [ 22.900611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.911235][ T341] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 22.928393][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.943194][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.955655][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.985549][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.993667][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.002679][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.011404][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.136577][ T351] binder: 350:351 ioctl c0306201 200011c0 returned -14 [ 23.153793][ T353] loop1: detected capacity change from 0 to 1024 [ 23.183053][ T357] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 23.203863][ T353] EXT4-fs (loop1): Test dummy encryption mode enabled [ 23.230326][ T353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 23.237625][ T362] loop0: detected capacity change from 0 to 1024 [ 23.325773][ T295] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f39, entries 0, max 0(0), depth 0(0) [ 23.355998][ T362] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 23.382809][ T295] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f39, entries 0, max 0(0), depth 0(0) [ 23.405724][ T362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 23.448018][ T362] kvm: apic: phys broadcast and lowest prio [ 23.453754][ T362] Disabled LAPIC found during irq injection [ 23.461208][ T364] EXT4-fs (loop1): unmounting filesystem. [ 23.539963][ T293] EXT4-fs (loop0): unmounting filesystem. [ 23.646348][ T359] syz.4.10 (359) used greatest stack depth: 18904 bytes left [ 23.650314][ T380] loop0: detected capacity change from 0 to 1024 [ 23.664054][ T379] syz.3.24[379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.664124][ T379] syz.3.24[379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.773437][ T380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.825879][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.832962][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.841378][ T381] device bridge_slave_0 entered promiscuous mode [ 23.852420][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.875791][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.883376][ T381] device bridge_slave_1 entered promiscuous mode [ 23.902246][ T399] loop4: detected capacity change from 0 to 512 [ 23.926403][ T399] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.28: bg 0: block 393: padding at end of block bitmap is not set [ 23.940870][ T399] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 23.951361][ T399] EXT4-fs (loop4): 2 truncates cleaned up [ 23.961352][ T399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 24.052329][ T292] EXT4-fs (loop4): unmounting filesystem. [ 24.059723][ T303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.068013][ T293] EXT4-fs (loop0): unmounting filesystem. [ 24.088507][ T10] device bridge_slave_1 left promiscuous mode [ 24.094536][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.113512][ T408] loop4: detected capacity change from 0 to 4096 [ 24.121895][ T10] device bridge_slave_0 left promiscuous mode [ 24.129971][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.147229][ T408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 24.162071][ T10] device veth1_macvtap left promiscuous mode [ 24.168949][ T10] device veth0_vlan left promiscuous mode [ 24.195584][ T408] loop4: detected capacity change from 4096 to 0 [ 24.218653][ T292] EXT4-fs (loop4): unmounting filesystem. [ 24.364199][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.371104][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.378181][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.384943][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.412961][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.429210][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.436992][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.465322][ T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.476220][ T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.492146][ T428] loop2: detected capacity change from 0 to 1024 [ 24.499009][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.506493][ T303] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 24.511568][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.522518][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.526638][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.537958][ T428] EXT4-fs: Ignoring removed orlov option [ 24.543624][ T428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.551204][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.551473][ T303] usb 4-1: config 0 descriptor?? [ 24.564794][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.571695][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.581719][ T431] loop4: detected capacity change from 0 to 512 [ 24.596792][ T428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.606036][ T381] device veth0_vlan entered promiscuous mode [ 24.625491][ T291] EXT4-fs (loop2): unmounting filesystem. [ 24.632384][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.641656][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.649655][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.651181][ T431] EXT4-fs (loop4): 1 orphan inode deleted [ 24.657628][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.664300][ T431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 24.670683][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.687456][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.695527][ T431] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 24.705708][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.713387][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.741462][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.749634][ T292] EXT4-fs (loop4): unmounting filesystem. [ 24.763087][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.772681][ T440] input: syz0 as /devices/virtual/input/input4 [ 24.781678][ T442] syz.4.42[442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.781743][ T442] syz.4.42[442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.805686][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.848266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.866208][ T381] device veth1_macvtap entered promiscuous mode [ 24.891076][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.901636][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.909922][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.918855][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.927058][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.055581][ T303] hid (null): bogus close delimiter [ 25.127511][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 25.127525][ T28] audit: type=1400 audit(1728575524.772:166): avc: denied { create } for pid=463 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.129540][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 25.133718][ T28] audit: type=1400 audit(1728575524.772:167): avc: denied { bind } for pid=463 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.187178][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 25.194156][ T28] audit: type=1400 audit(1728575524.772:168): avc: denied { setopt } for pid=463 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.216626][ T28] audit: type=1400 audit(1728575524.772:169): avc: denied { write } for pid=463 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.261446][ T470] syz.4.51[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.261548][ T470] syz.4.51[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.272817][ T303] usb 4-1: language id specifier not provided by device, defaulting to English [ 25.299158][ T470] syz.4.51[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.299204][ T470] syz.4.51[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.334088][ T28] audit: type=1400 audit(1728575524.972:170): avc: denied { create } for pid=471 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.364916][ T297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.366005][ T28] audit: type=1400 audit(1728575525.012:171): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.394449][ T28] audit: type=1400 audit(1728575525.012:172): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.419773][ T28] audit: type=1400 audit(1728575525.012:173): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.697206][ T303] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 25.733397][ T303] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input6 [ 25.745080][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.748333][ T484] serio: Serial port pts0 [ 25.756414][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.762224][ T303] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7 [ 25.781670][ T297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.781713][ T297] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 25.781733][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.813078][ T303] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 25.822763][ T297] usb 2-1: config 0 descriptor?? [ 25.845154][ T303] uclogic 0003:256C:006D.0001: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 25.859057][ T28] audit: type=1400 audit(1728575525.502:174): avc: denied { mount } for pid=488 comm="syz.0.59" name="/" dev="ramfs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 25.882713][ T28] audit: type=1400 audit(1728575525.502:175): avc: denied { mounton } for pid=488 comm="syz.0.59" path="/8/file0" dev="ramfs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 25.988161][ T500] input: syz0 as /devices/virtual/input/input9 [ 25.997404][ T24] usb 4-1: USB disconnect, device number 2 [ 26.124563][ T503] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.131748][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.140998][ T503] device bridge_slave_0 entered promiscuous mode [ 26.150480][ T503] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.157409][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.164833][ T503] device bridge_slave_1 entered promiscuous mode [ 26.193309][ T510] loop2: detected capacity change from 0 to 16 [ 26.200065][ T510] erofs: (device loop2): mounted with root inode @ nid 36. [ 26.207798][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.240728][ T512] loop2: detected capacity change from 0 to 512 [ 26.265621][ T503] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.267204][ T512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.272606][ T503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.281644][ T512] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 26.288462][ T503] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.304860][ T503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.326025][ T297] betop 0003:11C2:2208.0002: item fetching failed at offset 4/5 [ 26.334178][ T297] betop 0003:11C2:2208.0002: parse failed [ 26.334354][ T291] EXT4-fs (loop2): unmounting filesystem. [ 26.343710][ T297] betop: probe of 0003:11C2:2208.0002 failed with error -22 [ 26.369413][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.377381][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.384425][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.396092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.404054][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.410909][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.426089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.434166][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.441033][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.448209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.456137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.465395][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 26.477495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.488700][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.496447][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.504186][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.511697][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.520272][ T503] device veth0_vlan entered promiscuous mode [ 26.533876][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.550613][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.560908][ T10] device bridge_slave_1 left promiscuous mode [ 26.567269][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.574426][ T303] usb 2-1: USB disconnect, device number 2 [ 26.580437][ T10] device bridge_slave_0 left promiscuous mode [ 26.586594][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.594206][ T10] device veth1_macvtap left promiscuous mode [ 26.600188][ T10] device veth0_vlan left promiscuous mode [ 26.605401][ T19] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 26.614682][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.626063][ T19] usb 5-1: config 0 descriptor?? [ 26.679318][ T503] device veth1_macvtap entered promiscuous mode [ 26.688597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.696852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.704973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.715543][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.723717][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.772910][ T525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.71'. [ 26.782505][ T525] netlink: 172 bytes leftover after parsing attributes in process `syz.0.71'. [ 26.876860][ T19] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 27.095561][ T19] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 27.105489][ T19] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 27.115603][ T19] asix: probe of 5-1:0.0 failed with error -32 [ 27.195295][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.355289][ T297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.435301][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 27.534258][ T549] loop3: detected capacity change from 0 to 2048 [ 27.557279][ T549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.565359][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.625375][ T549] loop3: detected capacity change from 2048 to 63 [ 27.643254][ T10] kworker/u4:1: attempt to access beyond end of device [ 27.643254][ T10] loop3: rw=1, sector=448, nr_sectors = 8 limit=63 [ 27.657060][ T10] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 27.668418][ T10] Buffer I/O error on device loop3, logical block 112 [ 27.674987][ T10] Buffer I/O error on device loop3, logical block 113 [ 27.682116][ T10] kworker/u4:1: attempt to access beyond end of device [ 27.682116][ T10] loop3: rw=1, sector=464, nr_sectors = 8 limit=63 [ 27.695526][ T10] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 116) [ 27.707041][ T10] Buffer I/O error on device loop3, logical block 116 [ 27.713610][ T10] Buffer I/O error on device loop3, logical block 117 [ 27.720434][ T297] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 27.721403][ T296] EXT4-fs (loop3): unmounting filesystem. [ 27.728867][ T297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.744579][ T550] kmmpd-loop3: attempt to access beyond end of device [ 27.744579][ T550] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 27.745170][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.758999][ T550] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 27.767037][ T297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 27.783769][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.791706][ T24] usb 1-1: Product: syz [ 27.795713][ T297] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.808465][ T24] usb 1-1: Manufacturer: syz [ 27.812816][ T24] usb 1-1: SerialNumber: syz [ 27.933445][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.935298][ T297] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 27.940384][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.950532][ T297] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 27.956679][ T554] device bridge_slave_0 entered promiscuous mode [ 27.963998][ T297] usb 2-1: Product: syz [ 27.971061][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.974223][ T297] usb 2-1: Manufacturer: syz [ 27.981071][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.993297][ T554] device bridge_slave_1 entered promiscuous mode [ 28.025689][ T297] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 28.047263][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.054097][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.061341][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.068119][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.089476][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.097118][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.104228][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.114175][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.122586][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.129474][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.162288][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.172468][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.179341][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.186906][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.194821][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.212180][ T554] device veth0_vlan entered promiscuous mode [ 28.219514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.228374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.237094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.248889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.273201][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.282842][ T554] device veth1_macvtap entered promiscuous mode [ 28.294588][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.312921][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.343250][ T571] loop2: detected capacity change from 0 to 1024 [ 28.356438][ T571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.380619][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.392933][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.394395][ T575] loop3: detected capacity change from 0 to 512 [ 28.404624][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.412588][ T575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.420420][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.432910][ T575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.444016][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.463230][ T297] usb 2-1: USB disconnect, device number 3 [ 28.463449][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.475718][ T575] EXT4-fs (loop3): 1 truncate cleaned up [ 28.479427][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.484578][ T575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.495348][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.514040][ T10] device bridge_slave_1 left promiscuous mode [ 28.520137][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.520191][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.538321][ T10] device bridge_slave_0 left promiscuous mode [ 28.538659][ T291] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 28.549471][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.567200][ T554] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.588916][ T554] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 28.609378][ T10] device veth1_macvtap left promiscuous mode [ 28.609457][ T554] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.615504][ T10] device veth0_vlan left promiscuous mode [ 28.637267][ T554] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 28.661401][ T554] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.683096][ T554] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 28.703251][ T554] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.724589][ T554] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 28.744242][ T554] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 28.765931][ T554] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 28.846816][ T291] EXT4-fs (loop2): unmounting filesystem. [ 28.897855][ T554] EXT4-fs (loop3): unmounting filesystem. [ 28.922374][ T6] usb 5-1: USB disconnect, device number 2 [ 28.955338][ T24] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 28.962007][ T24] cdc_ncm 1-1:1.0: dwNtbInMaxSize=201 is too small. Using 2048 [ 28.977835][ T24] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 29.023258][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.030313][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.037594][ T578] device bridge_slave_0 entered promiscuous mode [ 29.045824][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.052677][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.060063][ T578] device bridge_slave_1 entered promiscuous mode [ 29.100758][ T591] loop4: detected capacity change from 0 to 512 [ 29.115616][ T591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.135138][ T591] EXT4-fs (loop4): 1 truncate cleaned up [ 29.140765][ T591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.165408][ T24] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 29.181025][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.188014][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.195335][ T592] device bridge_slave_0 entered promiscuous mode [ 29.202013][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.209259][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.216644][ T592] device bridge_slave_1 entered promiscuous mode [ 29.227722][ T292] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.249402][ T292] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.270496][ T292] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.292089][ T292] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.311883][ T292] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.333425][ T292] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.354396][ T292] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.355275][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.378182][ T292] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.403887][ T24] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.410499][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.415333][ T292] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.421432][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.449535][ T24] usb 1-1: USB disconnect, device number 2 [ 29.449711][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.462124][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.469886][ T24] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 29.470912][ T292] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.572961][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.580740][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.588139][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.588158][ T292] EXT4-fs (loop4): unmounting filesystem. [ 29.637037][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.645040][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.651928][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.666053][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.674221][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.681107][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.697515][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.705507][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.729799][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.737949][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 29.759810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.767575][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.774755][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.783086][ T578] device veth0_vlan entered promiscuous mode [ 29.820292][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.827844][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.835098][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.843365][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.851626][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.858468][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.866204][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.874232][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.882222][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.889065][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.895231][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.907006][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.910342][ T578] device veth1_macvtap entered promiscuous mode [ 29.937476][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.945849][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.956232][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.963938][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.971968][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.980007][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.988255][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.996262][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.011036][ T592] device veth0_vlan entered promiscuous mode [ 30.017453][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.024296][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.031782][ T599] device bridge_slave_0 entered promiscuous mode [ 30.038963][ T10] device bridge_slave_1 left promiscuous mode [ 30.044894][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.052162][ T10] device bridge_slave_0 left promiscuous mode [ 30.058210][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.058233][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.067085][ T6] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 30.082172][ T6] usb 2-1: Product: syz [ 30.086120][ T6] usb 2-1: Manufacturer: syz [ 30.086342][ T10] device veth1_macvtap left promiscuous mode [ 30.096455][ T10] device veth0_vlan left promiscuous mode [ 30.126841][ T6] hub 2-1:4.0: USB hub found [ 30.170270][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.178408][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.187051][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.194651][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.202453][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.210859][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.219273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.227293][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.235642][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.242533][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245235][ T303] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.250162][ T599] device bridge_slave_1 entered promiscuous mode [ 30.270171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.277562][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.289555][ T592] device veth1_macvtap entered promiscuous mode [ 30.298745][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.307399][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.315430][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.335303][ T6] hub 2-1:4.0: 2 ports detected [ 30.342139][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.350364][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.363862][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.372134][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.396191][ T610] netlink: 1312 bytes leftover after parsing attributes in process `syz.2.93'. [ 30.430683][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.437596][ T599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.443171][ T612] loop3: detected capacity change from 0 to 512 [ 30.444640][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.457524][ T599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.457706][ T612] EXT4-fs: Mount option(s) incompatible with ext2 [ 30.479133][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.486751][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.493931][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.503059][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.517814][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.524672][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.536382][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.544339][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.551281][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.560556][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 30.574057][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.583539][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.598730][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.609748][ T599] device veth0_vlan entered promiscuous mode [ 30.616583][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.624411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.631719][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.645392][ T303] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 30.653396][ T303] usb 1-1: config 0 has no interface number 0 [ 30.659544][ T303] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 30.672003][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.681483][ T599] device veth1_macvtap entered promiscuous mode [ 30.682893][ T303] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 30.692762][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.708826][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 30.708835][ T28] audit: type=1400 audit(1728575530.352:262): avc: denied { mounton } for pid=613 comm="syz.3.105" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.741312][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.771100][ T28] audit: type=1400 audit(1728575530.412:263): avc: denied { module_request } for pid=599 comm="syz-executor" kmod="ip6table_nat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 30.801228][ T618] loop3: detected capacity change from 0 to 512 [ 30.802758][ T28] audit: type=1400 audit(1728575530.412:264): avc: denied { read write } for pid=599 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.809051][ T618] EXT4-fs: Ignoring removed bh option [ 30.838479][ T28] audit: type=1400 audit(1728575530.412:265): avc: denied { open } for pid=599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.842168][ T618] EXT4-fs error (device loop3): __ext4_iget:5046: inode #15: block 1803188595: comm syz.3.107: invalid block [ 30.863261][ T28] audit: type=1400 audit(1728575530.412:266): avc: denied { ioctl } for pid=599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.876142][ T618] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.107: couldn't read orphan inode 15 (err -117) [ 30.899857][ T28] audit: type=1400 audit(1728575530.442:267): avc: denied { ioctl } for pid=605 comm="syz.0.104" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.911224][ T618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.936269][ T28] audit: type=1400 audit(1728575530.442:268): avc: denied { read write } for pid=619 comm="syz.4.101" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.968539][ T28] audit: type=1400 audit(1728575530.442:269): avc: denied { open } for pid=619 comm="syz.4.101" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.975431][ T303] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 30.991897][ T28] audit: type=1400 audit(1728575530.462:270): avc: denied { mounton } for pid=617 comm="syz.3.107" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.001517][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.045702][ T303] usb 1-1: Product: syz [ 31.049794][ T303] usb 1-1: Manufacturer: syz [ 31.054184][ T303] usb 1-1: SerialNumber: syz [ 31.054760][ T28] audit: type=1400 audit(1728575530.482:271): avc: denied { append } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.061660][ T303] usb 1-1: config 0 descriptor?? [ 31.095689][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.105712][ T606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.126320][ T303] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 31.204276][ T303] ums-sddr09: probe of 1-1:0.20 failed with error -22 [ 31.285174][ T592] EXT4-fs (loop3): unmounting filesystem. [ 31.301551][ T630] loop3: detected capacity change from 0 to 512 [ 31.310160][ T630] EXT4-fs: Ignoring removed bh option [ 31.315650][ T630] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.322289][ T630] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.330235][ T630] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 31.347330][ T630] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.109: attempt to clear invalid blocks 2 len 1 [ 31.361114][ T630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 31.382529][ T633] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 31.383612][ T59] usb 1-1: USB disconnect, device number 3 [ 31.386207][ T633] loop2: detected capacity change from 0 to 512 [ 31.472772][ T630] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.109: invalid indirect mapped block 1819239214 (level 0) [ 31.496480][ T10] device bridge_slave_1 left promiscuous mode [ 31.502459][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.506832][ T633] EXT4-fs: Ignoring removed orlov option [ 31.514954][ T630] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.109: invalid indirect mapped block 1819239214 (level 1) [ 31.529055][ T633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.529111][ T10] device bridge_slave_0 left promiscuous mode [ 31.540670][ T633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.554645][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.557387][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.564919][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.572751][ T630] EXT4-fs (loop3): 1 truncate cleaned up [ 31.584443][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 31.590794][ T630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.598633][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.607916][ T10] device bridge_slave_1 left promiscuous mode [ 31.625495][ T633] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.110: casefold flag without casefold feature [ 31.628058][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.638014][ T24] usb 5-1: config 0 descriptor?? [ 31.648603][ T633] EXT4-fs (loop2): Remounting filesystem read-only [ 31.656219][ T10] device bridge_slave_0 left promiscuous mode [ 31.662121][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.665395][ T633] EXT4-fs (loop2): 1 truncate cleaned up [ 31.674443][ T633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.683406][ T10] device veth1_macvtap left promiscuous mode [ 31.685697][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 31.696631][ T10] device veth0_vlan left promiscuous mode [ 31.707553][ T10] device veth1_macvtap left promiscuous mode [ 31.713409][ T10] device veth0_vlan left promiscuous mode [ 31.720975][ T578] EXT4-fs (loop2): unmounting filesystem. [ 31.785293][ T6] hub 2-1:4.0: activate --> -90 [ 31.886546][ T592] EXT4-fs (loop3): unmounting filesystem. [ 31.907148][ T638] syz.3.112[638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.907210][ T638] syz.3.112[638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.918788][ T303] usb 5-1: USB disconnect, device number 3 [ 32.015260][ T59] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.096647][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.103720][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.110980][ T646] device bridge_slave_0 entered promiscuous mode [ 32.117684][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.124528][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.131798][ T646] device bridge_slave_1 entered promiscuous mode [ 32.149374][ T651] syz.0.118[651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.149444][ T651] syz.0.118[651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.165587][ T651] overlayfs: statfs failed on './file0' [ 32.195835][ T653] loop0: detected capacity change from 0 to 512 [ 32.202597][ T39] usb 2-1: USB disconnect, device number 4 [ 32.215297][ T6] usb 2-1-port2: cannot warm reset (err = -71) [ 32.217774][ T653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.221605][ T6] usb 2-1-port2: attempt power cycle [ 32.230610][ T653] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 32.268576][ T503] EXT4-fs (loop0): unmounting filesystem. [ 32.273347][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.281015][ T646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.288088][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.294861][ T646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.336143][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.343706][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.352448][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.375370][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.400610][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.417896][ T646] device veth0_vlan entered promiscuous mode [ 32.423842][ T59] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.448552][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.463866][ T646] device veth1_macvtap entered promiscuous mode [ 32.475424][ T59] usb 3-1: config 0 descriptor?? [ 32.481031][ T657] loop0: detected capacity change from 0 to 40427 [ 32.488414][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.497130][ T657] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 32.497695][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.504728][ T657] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.512841][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.522924][ T657] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.528618][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.541138][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.549220][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.557288][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.563704][ T657] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.564113][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.564284][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.572137][ T657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.580843][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.600023][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.608846][ T657] syz.0.120: attempt to access beyond end of device [ 32.608846][ T657] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.624868][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.632845][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.653262][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.662560][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.791757][ T673] binder: 672:673 ioctl c0306201 20000380 returned -14 [ 32.817014][ T699] can0: slcan on pts0. [ 32.848116][ T700] netlink: 72 bytes leftover after parsing attributes in process `syz.4.126'. [ 32.875383][ T699] can0 (unregistered): slcan off pts0. [ 32.907359][ T719] loop3: detected capacity change from 0 to 512 [ 32.927177][ T723] loop4: detected capacity change from 0 to 512 [ 32.943591][ T719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.978077][ T719] EXT4-fs (loop3): 1 truncate cleaned up [ 32.983734][ T723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.997892][ T719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.004409][ T723] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 33.056773][ T719] loop3: detected capacity change from 512 to 64 [ 33.066099][ T719] syz.3.129: attempt to access beyond end of device [ 33.066099][ T719] loop3: rw=2049, sector=76, nr_sectors = 2 limit=64 [ 33.086528][ T719] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 38) [ 33.132334][ T599] EXT4-fs (loop4): unmounting filesystem. [ 33.137256][ T719] Buffer I/O error on device loop3, logical block 38 [ 33.144697][ T10] device bridge_slave_1 left promiscuous mode [ 33.157585][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.175894][ T10] device bridge_slave_0 left promiscuous mode [ 33.195314][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.224108][ T10] device veth1_macvtap left promiscuous mode [ 33.232714][ T10] device veth0_vlan left promiscuous mode [ 33.234338][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.265316][ T59] usb 3-1: string descriptor 0 read error: -71 [ 33.265425][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.285303][ T59] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 33.295549][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.312296][ T59] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 33.330690][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.344263][ T59] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 33.364247][ T59] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 33.368824][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.371863][ T59] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 33.384961][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.407866][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.413607][ T59] usb 3-1: USB disconnect, device number 2 [ 33.424935][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.441597][ T646] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 33.463658][ T755] device pim6reg1 entered promiscuous mode [ 33.530429][ T759] loop0: detected capacity change from 0 to 512 [ 33.539067][ T759] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.137: bg 0: block 393: padding at end of block bitmap is not set [ 33.553469][ T759] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 33.555571][ T646] EXT4-fs (loop3): unmounting filesystem. [ 33.563160][ T759] EXT4-fs (loop0): 2 truncates cleaned up [ 33.573466][ T759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.583629][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.612016][ T503] EXT4-fs (loop0): unmounting filesystem. [ 33.652362][ T763] loop0: detected capacity change from 0 to 2048 [ 33.676668][ T763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.685300][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 33.707490][ T503] EXT4-fs (loop0): unmounting filesystem. [ 33.726633][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.733586][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.741471][ T764] device bridge_slave_0 entered promiscuous mode [ 33.749030][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.755957][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.763016][ T764] device bridge_slave_1 entered promiscuous mode [ 33.828406][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.835301][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.842364][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.849193][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.880878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.892749][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.900168][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.921692][ T783] device syzkaller0 entered promiscuous mode [ 33.929397][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.938132][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.946194][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.953078][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.960325][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.968683][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.975435][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.977123][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.986528][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.993209][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.022974][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.030878][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.038751][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.046636][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.061405][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.070514][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.075377][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.079240][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.087405][ T59] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.105334][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.110542][ T764] device veth0_vlan entered promiscuous mode [ 34.113182][ T24] usb 2-1: SerialNumber: syz [ 34.125543][ T6] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 34.136443][ T764] device veth1_macvtap entered promiscuous mode [ 34.144015][ T788] loop2: detected capacity change from 0 to 512 [ 34.151347][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.159777][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.168279][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.168896][ T788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.176517][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.185990][ T788] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 34.193272][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.218740][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.226212][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.233519][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.242195][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.242956][ T578] EXT4-fs (loop2): unmounting filesystem. [ 34.250611][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.264078][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.305416][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.314279][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.325639][ T6] usb 5-1: Product: syz [ 34.329629][ T6] usb 5-1: Manufacturer: syz [ 34.335484][ T6] usb 5-1: SerialNumber: syz [ 34.360500][ T799] loop2: detected capacity change from 0 to 512 [ 34.368496][ T799] EXT4-fs: Ignoring removed bh option [ 34.375695][ T799] EXT4-fs error (device loop2): __ext4_iget:5046: inode #15: block 1803188595: comm syz.2.146: invalid block [ 34.387518][ T799] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 34.399818][ T799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.400329][ T24] usb 2-1: 0:2 : does not exist [ 34.436345][ T10] device bridge_slave_1 left promiscuous mode [ 34.442334][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.451503][ T10] device bridge_slave_0 left promiscuous mode [ 34.458577][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.487004][ T10] device veth1_macvtap left promiscuous mode [ 34.492979][ T10] device veth0_vlan left promiscuous mode [ 34.495316][ T59] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 34.517340][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.541751][ T59] usb 1-1: config 0 descriptor?? [ 34.589644][ T740] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 34.695883][ T578] EXT4-fs (loop2): unmounting filesystem. [ 34.788398][ T773] loop0: detected capacity change from 0 to 256 [ 34.864160][ T809] syz.2.148[809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.864231][ T809] syz.2.148[809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.922684][ T319] usb 2-1: USB disconnect, device number 9 [ 34.995325][ T59] usb 1-1: Cannot read MAC address [ 35.000384][ T59] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 35.010279][ T59] usb 1-1: USB disconnect, device number 4 [ 35.088077][ T816] loop2: detected capacity change from 0 to 512 [ 35.098461][ T816] EXT4-fs: Ignoring removed i_version option [ 35.106818][ T816] EXT4-fs: Ignoring removed nobh option [ 35.112871][ T816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.127846][ T816] EXT4-fs (loop2): 1 truncate cleaned up [ 35.133376][ T816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.233953][ T820] loop3: detected capacity change from 0 to 512 [ 35.245670][ T740] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 35.247663][ T820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.262189][ T820] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 35.284849][ T764] EXT4-fs (loop3): unmounting filesystem. [ 35.300088][ T824] loop3: detected capacity change from 0 to 256 [ 35.306748][ T824] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.319353][ T824] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.416020][ T303] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.475291][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.478909][ T826] loop1: detected capacity change from 0 to 512 [ 35.486776][ T6] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 35.488062][ T826] ======================================================= [ 35.488062][ T826] WARNING: The mand mount option has been deprecated and [ 35.488062][ T826] and is ignored by this kernel. Remove the mand [ 35.488062][ T826] option from the mount to silence this warning. [ 35.488062][ T826] ======================================================= [ 35.494819][ T6] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 35.532397][ T834] loop0: detected capacity change from 0 to 512 [ 35.554165][ T834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.555862][ T834] EXT4-fs (loop0): 1 truncate cleaned up [ 35.577945][ T834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.633655][ T843] loop3: detected capacity change from 0 to 2048 [ 35.643128][ T843] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2818051)! [ 35.653711][ T843] EXT4-fs (loop3): group descriptors corrupted! [ 35.660228][ T834] loop0: detected capacity change from 512 to 64 [ 35.666754][ T303] usb 3-1: Using ep0 maxpacket: 8 [ 35.672657][ T844] syz.0.157: attempt to access beyond end of device [ 35.672657][ T844] loop0: rw=2049, sector=76, nr_sectors = 2 limit=64 [ 35.695412][ T6] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 35.711057][ T6] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.757215][ T844] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 38) [ 35.795651][ T6] usb 5-1: USB disconnect, device number 4 [ 35.815714][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.836810][ T6] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 35.852475][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.890958][ T303] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.896652][ T844] Buffer I/O error on device loop0, logical block 38 [ 35.948314][ T303] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 35.990015][ T503] EXT4-fs warning (device loop0): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.992328][ T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.003847][ T503] EXT4-fs warning (device loop0): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 36.018807][ T303] usb 3-1: config 0 descriptor?? [ 36.029311][ T503] EXT4-fs warning (device loop0): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 36.034019][ T315] ================================================================== [ 36.050327][ T315] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 36.058109][ T315] Read of size 8 at addr ffff88811bc12cf0 by task kworker/0:3/315 [ 36.065763][ T315] [ 36.067925][ T315] CPU: 0 PID: 315 Comm: kworker/0:3 Not tainted 6.1.99-syzkaller-00007-g19e119d2d0fe #0 [ 36.077554][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.087446][ T315] Workqueue: events release_one_tty [ 36.092487][ T315] Call Trace: [ 36.095623][ T315] [ 36.098383][ T315] dump_stack_lvl+0x151/0x1b7 [ 36.102916][ T315] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 36.108310][ T315] ? _printk+0xd1/0x111 [ 36.112297][ T315] ? __virt_addr_valid+0x242/0x2f0 [ 36.117951][ T315] print_report+0x158/0x4e0 [ 36.122283][ T315] ? __virt_addr_valid+0x242/0x2f0 [ 36.127230][ T315] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 36.133320][ T315] ? __list_del_entry_valid+0xa6/0x130 [ 36.138686][ T315] kasan_report+0x13c/0x170 [ 36.143839][ T315] ? __list_del_entry_valid+0xa6/0x130 [ 36.149125][ T315] ? release_one_tty+0x27a/0x290 [ 36.154025][ T315] __asan_report_load8_noabort+0x14/0x20 [ 36.159565][ T315] __list_del_entry_valid+0xa6/0x130 [ 36.164682][ T315] process_one_work+0x4d7/0xcb0 [ 36.169370][ T315] worker_thread+0xa60/0x1260 [ 36.173891][ T315] kthread+0x26d/0x300 [ 36.177793][ T315] ? worker_clr_flags+0x1a0/0x1a0 [ 36.182670][ T315] ? kthread_blkcg+0xd0/0xd0 [ 36.187085][ T315] ret_from_fork+0x1f/0x30 [ 36.191335][ T315] [ 36.194194][ T315] [ 36.196359][ T315] Allocated by task 6: [ 36.200268][ T315] kasan_set_track+0x4b/0x70 [ 36.204690][ T315] kasan_save_alloc_info+0x1f/0x30 [ 36.209638][ T315] __kasan_kmalloc+0x9c/0xb0 [ 36.214064][ T315] __kmalloc_node+0xb4/0x1e0 [ 36.218490][ T315] kvmalloc_node+0x221/0x640 [ 36.222916][ T315] alloc_netdev_mqs+0x8c/0xf90 [ 36.227517][ T315] alloc_etherdev_mqs+0x36/0x40 [ 36.232203][ T315] usbnet_probe+0x207/0x27c0 [ 36.236629][ T315] usb_probe_interface+0x5b6/0xa90 [ 36.241576][ T315] really_probe+0x2b8/0x920 [ 36.245917][ T315] __driver_probe_device+0x1a0/0x310 [ 36.251036][ T315] driver_probe_device+0x54/0x3d0 [ 36.255899][ T315] __device_attach_driver+0x2e3/0x490 [ 36.261106][ T315] bus_for_each_drv+0x183/0x200 [ 36.265794][ T315] __device_attach+0x312/0x510 [ 36.270413][ T315] device_initial_probe+0x1a/0x20 [ 36.275254][ T315] bus_probe_device+0xbe/0x1e0 [ 36.279941][ T315] device_add+0xb60/0xf10 [ 36.284190][ T315] usb_set_configuration+0x190f/0x1e80 [ 36.289484][ T315] usb_generic_driver_probe+0x8b/0x150 [ 36.294779][ T315] usb_probe_device+0x144/0x260 [ 36.299467][ T315] really_probe+0x2b8/0x920 [ 36.303804][ T315] __driver_probe_device+0x1a0/0x310 [ 36.308928][ T315] driver_probe_device+0x54/0x3d0 [ 36.313789][ T315] __device_attach_driver+0x2e3/0x490 [ 36.318995][ T315] bus_for_each_drv+0x183/0x200 [ 36.323685][ T315] __device_attach+0x312/0x510 [ 36.328373][ T315] device_initial_probe+0x1a/0x20 [ 36.333227][ T315] bus_probe_device+0xbe/0x1e0 [ 36.337829][ T315] device_add+0xb60/0xf10 [ 36.341995][ T315] usb_new_device+0xf2f/0x1820 [ 36.346593][ T315] hub_event+0x2db1/0x4830 [ 36.350849][ T315] process_one_work+0x73d/0xcb0 [ 36.355553][ T315] worker_thread+0xa60/0x1260 [ 36.360045][ T315] kthread+0x26d/0x300 [ 36.363950][ T315] ret_from_fork+0x1f/0x30 [ 36.368204][ T315] [ 36.370377][ T315] Freed by task 6: [ 36.373933][ T315] kasan_set_track+0x4b/0x70 [ 36.378469][ T315] kasan_save_free_info+0x2b/0x40 [ 36.383419][ T315] ____kasan_slab_free+0x131/0x180 [ 36.388360][ T315] __kasan_slab_free+0x11/0x20 [ 36.393397][ T315] __kmem_cache_free+0x218/0x3b0 [ 36.398356][ T315] kfree+0x7a/0xf0 [ 36.401913][ T315] kvfree+0x35/0x40 [ 36.405558][ T315] netdev_freemem+0x3f/0x60 [ 36.409896][ T315] netdev_release+0x7f/0xb0 [ 36.414239][ T315] device_release+0x95/0x1c0 [ 36.418663][ T315] kobject_put+0x178/0x260 [ 36.422916][ T315] put_device+0x1f/0x30 [ 36.426913][ T315] free_netdev+0x393/0x480 [ 36.431158][ T315] usbnet_disconnect+0x245/0x390 [ 36.435933][ T315] usb_unbind_interface+0x1fa/0x8c0 [ 36.440966][ T315] device_release_driver_internal+0x53e/0x870 [ 36.446880][ T315] device_release_driver+0x19/0x20 [ 36.451823][ T315] bus_remove_device+0x2fa/0x360 [ 36.456596][ T315] device_del+0x663/0xe90 [ 36.460754][ T315] usb_disable_device+0x380/0x720 [ 36.465614][ T315] usb_disconnect+0x32a/0x890 [ 36.470127][ T315] hub_event+0x1ed8/0x4830 [ 36.474380][ T315] process_one_work+0x73d/0xcb0 [ 36.479066][ T315] worker_thread+0xd71/0x1260 [ 36.483580][ T315] kthread+0x26d/0x300 [ 36.487487][ T315] ret_from_fork+0x1f/0x30 [ 36.491743][ T315] [ 36.493910][ T315] Last potentially related work creation: [ 36.499477][ T315] kasan_save_stack+0x3b/0x60 [ 36.503978][ T315] __kasan_record_aux_stack+0xb4/0xc0 [ 36.509184][ T315] kasan_record_aux_stack_noalloc+0xb/0x10 [ 36.514828][ T315] insert_work+0x56/0x310 [ 36.518991][ T315] __queue_work+0x9b6/0xd70 [ 36.523331][ T315] queue_work_on+0x105/0x170 [ 36.527756][ T315] usbnet_link_change+0xeb/0x100 [ 36.533423][ T315] usbnet_probe+0x1dbe/0x27c0 [ 36.537934][ T315] usb_probe_interface+0x5b6/0xa90 [ 36.542882][ T315] really_probe+0x2b8/0x920 [ 36.547223][ T315] __driver_probe_device+0x1a0/0x310 [ 36.552355][ T315] driver_probe_device+0x54/0x3d0 [ 36.557200][ T315] __device_attach_driver+0x2e3/0x490 [ 36.562408][ T315] bus_for_each_drv+0x183/0x200 [ 36.567095][ T315] __device_attach+0x312/0x510 [ 36.571782][ T315] device_initial_probe+0x1a/0x20 [ 36.576642][ T315] bus_probe_device+0xbe/0x1e0 [ 36.581242][ T315] device_add+0xb60/0xf10 [ 36.585410][ T315] usb_set_configuration+0x190f/0x1e80 [ 36.590712][ T315] usb_generic_driver_probe+0x8b/0x150 [ 36.595997][ T315] usb_probe_device+0x144/0x260 [ 36.600683][ T315] really_probe+0x2b8/0x920 [ 36.605021][ T315] __driver_probe_device+0x1a0/0x310 [ 36.610239][ T315] driver_probe_device+0x54/0x3d0 [ 36.615285][ T315] __device_attach_driver+0x2e3/0x490 [ 36.620473][ T315] bus_for_each_drv+0x183/0x200 [ 36.625160][ T315] __device_attach+0x312/0x510 [ 36.629758][ T315] device_initial_probe+0x1a/0x20 [ 36.634618][ T315] bus_probe_device+0xbe/0x1e0 [ 36.639217][ T315] device_add+0xb60/0xf10 [ 36.643382][ T315] usb_new_device+0xf2f/0x1820 [ 36.648009][ T315] hub_event+0x2db1/0x4830 [ 36.652238][ T315] process_one_work+0x73d/0xcb0 [ 36.656924][ T315] worker_thread+0xa60/0x1260 [ 36.661438][ T315] kthread+0x26d/0x300 [ 36.665342][ T315] ret_from_fork+0x1f/0x30 [ 36.669594][ T315] [ 36.671765][ T315] The buggy address belongs to the object at ffff88811bc12000 [ 36.671765][ T315] which belongs to the cache kmalloc-4k of size 4096 [ 36.685743][ T315] The buggy address is located 3312 bytes inside of [ 36.685743][ T315] 4096-byte region [ffff88811bc12000, ffff88811bc13000) [ 36.699028][ T315] [ 36.701187][ T315] The buggy address belongs to the physical page: [ 36.707448][ T315] page:ffffea00046f0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bc10 [ 36.717504][ T315] head:ffffea00046f0400 order:3 compound_mapcount:0 compound_pincount:0 [ 36.725662][ T315] flags: 0x4000000000010200(slab|head|zone=1) [ 36.731570][ T315] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 36.739987][ T315] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 36.748402][ T315] page dumped because: kasan: bad access detected [ 36.754655][ T315] page_owner tracks the page as allocated [ 36.760320][ T315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 297, tgid 297 (kworker/1:3), ts 28032337060, free_ts 26649843894 [ 36.782658][ T315] post_alloc_hook+0x213/0x220 [ 36.787223][ T315] prep_new_page+0x1b/0x110 [ 36.791569][ T315] get_page_from_freelist+0x27ea/0x2870 [ 36.796940][ T315] __alloc_pages+0x3a1/0x780 [ 36.801374][ T315] alloc_slab_page+0x6c/0xf0 [ 36.805797][ T315] new_slab+0x90/0x3e0 [ 36.809698][ T315] ___slab_alloc+0x6f9/0xb80 [ 36.814126][ T315] __slab_alloc+0x5d/0xa0 [ 36.818292][ T315] __kmem_cache_alloc_node+0x1af/0x250 [ 36.823583][ T315] kmalloc_trace+0x2a/0xa0 [ 36.827837][ T315] kobject_uevent_env+0x262/0x720 [ 36.833052][ T315] kobject_uevent+0x1f/0x30 [ 36.837387][ T315] driver_bound+0x490/0x4e0 [ 36.841778][ T315] really_probe+0x802/0x920 [ 36.846064][ T315] __driver_probe_device+0x1a0/0x310 [ 36.851184][ T315] driver_probe_device+0x54/0x3d0 [ 36.856045][ T315] page last free stack trace: [ 36.860559][ T315] free_unref_page_prepare+0x83d/0x850 [ 36.865854][ T315] free_unref_page+0xb2/0x5c0 [ 36.870363][ T315] __free_pages+0x61/0xf0 [ 36.874535][ T315] __free_slab+0xce/0x1a0 [ 36.879562][ T315] __unfreeze_partials+0x165/0x1a0 [ 36.884510][ T315] put_cpu_partial+0xa9/0x100 [ 36.889023][ T315] __slab_free+0x1c8/0x280 [ 36.893278][ T315] ___cache_free+0xc6/0xd0 [ 36.897536][ T315] qlist_free_all+0xc5/0x140 [ 36.902062][ T315] kasan_quarantine_reduce+0x15a/0x180 [ 36.907359][ T315] __kasan_slab_alloc+0x24/0x80 [ 36.912045][ T315] slab_post_alloc_hook+0x53/0x2c0 [ 36.916997][ T315] kmem_cache_alloc_node+0x18a/0x2d0 [ 36.922197][ T315] __alloc_skb+0xcc/0x2d0 [ 36.926451][ T315] inet_netconf_notify_devconf+0x173/0x230 [ 36.932094][ T315] inetdev_event+0x823/0x1110 [ 36.936612][ T315] [ 36.938777][ T315] Memory state around the buggy address: [ 36.944334][ T315] ffff88811bc12b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.952239][ T315] ffff88811bc12c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.960304][ T315] >ffff88811bc12c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.968198][ T315] ^ [ 36.975935][ T315] ffff88811bc12d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.983837][ T315] ffff88811bc12d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 36.991730][ T315] ================================================================== [ 36.999630][ T315] Disabling lock debugging due to kernel taint [ 37.007650][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 37.007664][ T28] audit: type=1400 audit(1728575536.652:397): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[6104]" dev="pipefs" ino=6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.275339][ T303] usb 3-1: can't set config #0, error -71 [ 37.293155][ T303] usb 3-1: USB disconnect, device number 3 [ 37.301780][ T503] EXT4-fs (loop0): unmounting filesystem. [ 37.319085][ T816] EXT4-fs (loop2): unmounting filesystem. [ 37.685801][ T388] device bridge_slave_1 left promiscuous mode [ 37.691747][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.699125][ T388] device bridge_slave_0 left promiscuous mode [ 37.705026][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.712840][ T388] device veth1_macvtap left promiscuous mode [ 37.718782][ T388] device veth0_vlan left promiscuous mode [ 38.516198][ T388] device bridge_slave_1 left promiscuous mode [ 38.522112][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.529540][ T388] device bridge_slave_0 left promiscuous mode [ 38.535579][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.543143][ T388] device bridge_slave_1 left promiscuous mode [ 38.549703][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.556956][ T388] device bridge_slave_0 left promiscuous mode [ 38.562857][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.570396][ T388] device bridge_slave_1 left promiscuous mode [ 38.576393][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.583541][ T388] device bridge_slave_0 left promiscuous mode [ 38.589569][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.597057][ T388] device bridge_slave_1 left promiscuous mode [ 38.602976][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.610262][ T388] device bridge_slave_0 left promiscuous mode [ 38.616270][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.624325][ T388] device veth1_macvtap left promiscuous mode [ 38.630186][ T388] device veth0_vlan left promiscuous mode [ 38.635960][ T388] device veth1_macvtap left promiscuous mode [ 38.641753][ T388] device veth0_vlan left promiscuous mode [ 38.647647][ T388] device veth1_macvtap left promiscuous mode [ 38.653443][ T388] device veth0_vlan left promiscuous mode [ 38.659325][ T388] device veth1_macvtap left promiscuous mode [ 38.665137][ T388] device veth0_vlan left promiscuous mode