last executing test programs: 14.114656099s ago: executing program 1 (id=311): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fchmodat(r0, &(0x7f0000000100)='./file1\x00', 0x0) 13.8732028s ago: executing program 1 (id=315): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 13.04871909s ago: executing program 1 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0xfdef) 12.917648631s ago: executing program 1 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0xec, &(0x7f0000000640)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.562992686s ago: executing program 1 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 4.883105954s ago: executing program 4 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.765999404s ago: executing program 4 (id=393): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 4.075669113s ago: executing program 4 (id=383): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) 3.788499548s ago: executing program 4 (id=389): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 3.720857073s ago: executing program 4 (id=390): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df40010010902"], 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.040105401s ago: executing program 0 (id=403): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.005806484s ago: executing program 0 (id=392): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) 2.525767315s ago: executing program 0 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1301}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.46537843s ago: executing program 0 (id=399): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 2.101297151s ago: executing program 3 (id=405): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r3, 0x6, 0x18, 0x0, 0x2000e881) 1.777222329s ago: executing program 4 (id=406): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrandom(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.584010835s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 1.569338977s ago: executing program 0 (id=408): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200641cb1337861de980942d71e5786f7de853d1702c3aee7060be87ee6e094dc3efac6a08db7cace4c9866664ad6ad90f89cad608aaa94c077ca4a523575fa0305e9ea01d0fe7b3b6496b31cb88769d63cb0e040a08c2045fcc3558ed39a675015039f3276635b96361adfe3c9f25ddceec35803a8778f80d0cc963cafab2bb0f4384dc190a299ebd8407925fd35609fbb8076b27d854ed005c0e82608d66d3b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="00000005"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.434176458s ago: executing program 2 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305839, &(0x7f0000000240)) 1.396502041s ago: executing program 3 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x200, 0x143) close(r1) 1.357237044s ago: executing program 2 (id=411): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8, 0x8000000000000000}) syz_open_dev$evdev(&(0x7f0000000040), 0x94ee, 0x801) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004300)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x2f, 0x1, 0x0, 0x24, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, 0x700, 0x8000, 0x0, 0x801}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x82307201, &(0x7f0000001180)) 1.279135441s ago: executing program 2 (id=412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r3, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x80000001}}, 0x18) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1.273088972s ago: executing program 3 (id=413): syz_open_dev$usbfs(0x0, 0x201, 0x40000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.249380244s ago: executing program 2 (id=414): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000004) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.116488375s ago: executing program 3 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.034466712s ago: executing program 2 (id=417): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 1.031463042s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 963.213268ms ago: executing program 1 (id=416): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb0100180000000000000024"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) 869.800536ms ago: executing program 2 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 0s ago: executing program 3 (id=420): socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) kernel console output (not intermixed with test programs): entered forwarding state [ 19.664175][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.671031][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.678109][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.684899][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.716222][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.723059][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.730163][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.736959][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.756516][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.763649][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.770739][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.778281][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.785171][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.792622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.800011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.818158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.826213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.834076][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.840858][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.848172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.856268][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.863076][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.887676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.895059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.902808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.918124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.925925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.933800][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.940572][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.947970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.956136][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.962946][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.970183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.978172][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.984896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.992602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.015116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.023333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.031792][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.038653][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.046354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.054061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.062112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.068951][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.076124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.083785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.091734][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.098578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.105807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.113518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.134103][ T283] device veth0_vlan entered promiscuous mode [ 20.145846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.153118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.162071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.170072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.177333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.184677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.193152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.201037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.208408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.215666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.223294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.234558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.245923][ T286] device veth0_vlan entered promiscuous mode [ 20.254322][ T283] device veth1_macvtap entered promiscuous mode [ 20.262771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.270895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.278886][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.285714][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.303241][ T284] device veth0_vlan entered promiscuous mode [ 20.313741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.321421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.330123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.338410][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.345228][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.352549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.360801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.368957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.376841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.384535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.392374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.400141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.407870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.415725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.423542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.431469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.438779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.449085][ T285] device veth0_vlan entered promiscuous mode [ 20.461036][ T286] device veth1_macvtap entered promiscuous mode [ 20.469134][ T284] device veth1_macvtap entered promiscuous mode [ 20.477931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.485261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.493345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.501385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.509945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.518121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.526166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.534138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.542055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.550036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.557677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.565856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.573863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.581352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.591084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.599106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.618327][ T285] device veth1_macvtap entered promiscuous mode [ 20.627114][ T282] device veth0_vlan entered promiscuous mode [ 20.633261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.640847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.649463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.657711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.666284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.674300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.682388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.690564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.698656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.706747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.714450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.722355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.729697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.742795][ T283] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.766987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.785853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.793960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.802291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.814100][ T282] device veth1_macvtap entered promiscuous mode [ 20.828307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.836764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.844662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.879075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.887356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.895888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.903874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.915154][ T311] cgroup: syz.4.5 (311) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 20.938918][ T311] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 20.966374][ T313] process 'syz.4.5' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 20.999204][ T321] device pim6reg1 entered promiscuous mode [ 21.185963][ T327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 21.212759][ T327] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 21.248904][ T317] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 21.258977][ T317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 21.273742][ T317] F2FS-fs (loop0): invalid crc value [ 21.309391][ T317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 21.431491][ T317] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 21.444250][ T317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 21.489957][ T331] ====================================================== [ 21.489957][ T331] WARNING: the mand mount option is being deprecated and [ 21.489957][ T331] will be removed in v5.15! [ 21.489957][ T331] ====================================================== [ 21.553018][ T331] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 21.567018][ T331] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 21.615593][ T331] F2FS-fs (loop3): invalid crc value [ 21.631938][ T331] F2FS-fs (loop3): Found nat_bits in checkpoint [ 21.687534][ T356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.708272][ T331] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 21.715210][ T331] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 22.066284][ T369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 22.528875][ T416] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 22.569594][ T416] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,minixdf,nodiscard,errors=remount-ro,norecovery,bsdgroups,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,auto_da_alloc=0x0000000000000080,nogrpid, [ 22.957956][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.974453][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.984853][ T428] device bridge_slave_0 entered promiscuous mode [ 22.994823][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.005252][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.015725][ T428] device bridge_slave_1 entered promiscuous mode [ 23.088834][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.095809][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.103044][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.109876][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.134369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.144025][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.168564][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.190025][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.207699][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.214570][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.225979][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.234074][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.240947][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.283918][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.298243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.319535][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.339137][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.375712][ T9] device bridge_slave_1 left promiscuous mode [ 23.381653][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.391977][ T9] device bridge_slave_0 left promiscuous mode [ 23.398842][ T446] EXT4-fs (loop3): Ignoring removed oldalloc option [ 23.413680][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.421684][ T9] device veth1_macvtap left promiscuous mode [ 23.427683][ T9] device veth0_vlan left promiscuous mode [ 23.428852][ T446] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue [ 23.501832][ T24] kauditd_printk_skb: 125 callbacks suppressed [ 23.501840][ T24] audit: type=1400 audit(1728574374.940:201): avc: denied { mount } for pid=443 comm="syz.2.44" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 23.521144][ T444] SELinux: duplicate or incompatible mount options [ 23.529271][ T450] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.539406][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.556077][ T24] audit: type=1400 audit(1728574374.960:202): avc: denied { mounton } for pid=443 comm="syz.2.44" path="/11/file1/file0" dev="loop2" ino=1048590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 23.582170][ T24] audit: type=1400 audit(1728574374.960:203): avc: denied { remount } for pid=443 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 23.605738][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.614335][ T428] device veth0_vlan entered promiscuous mode [ 23.620744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.628864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.641480][ T450] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.45: iget: bad extended attribute block 128 [ 23.642506][ T428] device veth1_macvtap entered promiscuous mode [ 23.680173][ T24] audit: type=1400 audit(1728574375.000:204): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.695394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.713499][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.722424][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.729870][ T465] Zero length message leads to an empty skb [ 23.730349][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.735864][ T450] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.45: couldn't read orphan inode 16 (err -117) [ 23.743807][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.763665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.772866][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.781287][ T24] audit: type=1400 audit(1728574375.000:205): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.806513][ T24] audit: type=1400 audit(1728574375.000:206): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 23.823871][ T450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.829592][ T24] audit: type=1400 audit(1728574375.050:207): avc: denied { ioctl } for pid=445 comm="syz.3.46" path="/8/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 23.861791][ T24] audit: type=1400 audit(1728574375.060:208): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 23.869336][ T450] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 23.901559][ T24] audit: type=1400 audit(1728574375.110:209): avc: denied { mounton } for pid=428 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 23.935018][ T474] syz.2.51[474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.935070][ T474] syz.2.51[474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.959075][ T24] audit: type=1326 audit(1728574375.150:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=460 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 23.995675][ T450] EXT4-fs error (device loop4): ext4_lookup:1828: inode #16: comm syz.4.45: iget: bad extended attribute block 128 [ 24.012965][ T475] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.51: inode #1: comm syz.2.51: iget: illegal inode # [ 24.025925][ T475] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.51: error while reading EA inode 1 err=-117 [ 24.038252][ T475] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.051543][ T475] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.51: inode #1: comm syz.2.51: iget: illegal inode # [ 24.064385][ T475] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.51: error while reading EA inode 1 err=-117 [ 24.076929][ T475] EXT4-fs (loop2): 1 orphan inode deleted [ 24.082476][ T475] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue [ 24.178041][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.186032][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.218747][ T469] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 24.232572][ T285] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 24.261692][ T469] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.295447][ T285] EXT4-fs error (device loop2): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 15 [ 24.315624][ T285] EXT4-fs error (device loop2): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 15 [ 24.332386][ T469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.415588][ T469] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.423701][ T469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.490663][ T469] F2FS-fs (loop1): Inconsistent error blkaddr:5663, sit bitmap:0 [ 24.501225][ T469] CPU: 1 PID: 469 Comm: syz.1.50 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 24.510666][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 24.520559][ T469] Call Trace: [ 24.523688][ T469] dump_stack_lvl+0x1e2/0x24b [ 24.528191][ T469] ? __bpf_trace_f2fs_fiemap+0x60/0x60 [ 24.533484][ T469] ? bfq_pos_tree_add_move+0x43b/0x43b [ 24.538780][ T469] ? set_page_dirty+0x196/0x300 [ 24.543467][ T469] ? f2fs_write_node_pages+0x900/0x900 [ 24.548760][ T469] dump_stack+0x15/0x17 [ 24.552750][ T469] f2fs_is_valid_blkaddr+0xc44/0x1370 [ 24.557962][ T469] f2fs_truncate_data_blocks_range+0x659/0xeb0 [ 24.563949][ T469] f2fs_do_truncate_blocks+0x5cf/0xb80 [ 24.569353][ T469] ? addrs_per_block+0x120/0x120 [ 24.574129][ T469] ? f2fs_mark_inode_dirty_sync+0x10d/0x140 [ 24.579848][ T469] f2fs_truncate_blocks+0x114/0x310 [ 24.584884][ T469] do_convert_inline_dir+0xb0c/0x1de0 [ 24.590094][ T469] ? page_cache_prev_miss+0x410/0x410 [ 24.595302][ T469] ? f2fs_try_convert_inline_dir+0x420/0x420 [ 24.596098][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.601111][ T469] ? find_next_bit+0xc7/0x100 [ 24.608006][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.612480][ T469] ? f2fs_room_for_filename+0xa8/0xc0 [ 24.619836][ T492] device bridge_slave_0 entered promiscuous mode [ 24.624553][ T469] f2fs_add_inline_entry+0x3ef/0x770 [ 24.631351][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.635822][ T469] ? do_convert_inline_dir+0x1de0/0x1de0 [ 24.635843][ T469] ? down_read_trylock+0x179/0x1d0 [ 24.642675][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.648147][ T469] ? __init_rwsem+0x1c0/0x1c0 [ 24.648156][ T469] ? f2fs_setup_filename+0x141/0x360 [ 24.648171][ T469] ? f2fs_init_casefolded_name+0x7d/0x460 [ 24.653431][ T492] device bridge_slave_1 entered promiscuous mode [ 24.659945][ T469] f2fs_add_dentry+0x1c8/0x340 [ 24.659955][ T469] ? f2fs_add_regular_entry+0xb10/0xb10 [ 24.659971][ T469] ? __kasan_check_write+0x14/0x20 [ 24.696326][ T469] ? trace_f2fs_new_inode+0x20/0x140 [ 24.698818][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.701443][ T469] f2fs_do_add_link+0x29b/0x400 [ 24.708307][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.712980][ T469] ? f2fs_add_dentry+0x340/0x340 [ 24.720090][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.724788][ T469] ? __init_rwsem+0x1c0/0x1c0 [ 24.731649][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.736151][ T469] f2fs_mkdir+0x40e/0x6a0 [ 24.736167][ T469] ? f2fs_symlink+0x9a0/0x9a0 [ 24.751880][ T469] ? selinux_inode_mkdir+0x22/0x30 [ 24.756246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.756821][ T469] ? security_inode_mkdir+0xbc/0x100 [ 24.768960][ T469] vfs_mkdir+0x4cf/0x6c0 [ 24.773032][ T469] do_mkdirat+0x1a6/0x2c0 [ 24.777200][ T469] ? do_mknodat+0x450/0x450 [ 24.781539][ T469] ? fpu__clear_all+0x20/0x20 [ 24.786052][ T469] ? __kasan_check_read+0x11/0x20 [ 24.790910][ T469] __x64_sys_mkdirat+0x7b/0x90 [ 24.795512][ T469] do_syscall_64+0x34/0x70 [ 24.799766][ T469] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.805495][ T469] RIP: 0033:0x7fa58e9efff9 [ 24.809749][ T469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 24.829308][ T469] RSP: 002b:00007fa58d669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 24.837548][ T469] RAX: ffffffffffffffda RBX: 00007fa58eba7f80 RCX: 00007fa58e9efff9 [ 24.845364][ T469] RDX: 0000000000000041 RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 24.853179][ T469] RBP: 00007fa58ea62296 R08: 0000000000000000 R09: 0000000000000000 [ 24.860985][ T469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.868797][ T469] R13: 0000000000000000 R14: 00007fa58eba7f80 R15: 00007ffe965239a8 [ 24.890436][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.917225][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.942815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.957948][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.964818][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.003711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.019411][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.026285][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.046303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.054278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.103168][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.127828][ T492] device veth0_vlan entered promiscuous mode [ 25.134386][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.143035][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.150476][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.175748][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.188112][ T492] device veth1_macvtap entered promiscuous mode [ 25.198204][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.212047][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.275425][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.283600][ T511] device syzkaller0 entered promiscuous mode [ 25.415386][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.425982][ T49] device bridge_slave_1 left promiscuous mode [ 25.431904][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.439175][ T49] device bridge_slave_0 left promiscuous mode [ 25.445183][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.452992][ T49] device veth1_macvtap left promiscuous mode [ 25.458948][ T49] device veth0_vlan left promiscuous mode [ 25.645606][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.656464][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.666786][ T55] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 25.675981][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.687555][ T55] usb 1-1: config 0 descriptor?? [ 25.815445][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.826276][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.835822][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 25.844610][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.852442][ T393] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.860386][ T15] usb 2-1: config 0 descriptor?? [ 26.115368][ T393] usb 3-1: Using ep0 maxpacket: 16 [ 26.169225][ T55] elo 0003:04E7:0030.0001: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 26.341626][ T15] pyra 0003:1E7D:2CF6.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 26.415656][ T504] exfat: Unknown parameter '00000000000000000000003ÿÿ000000000000000000031844674407370955161500000000000000000003' [ 26.435546][ T393] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 26.444394][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.452705][ T393] usb 3-1: Product: syz [ 26.456775][ T393] usb 3-1: Manufacturer: syz [ 26.461099][ T393] usb 3-1: SerialNumber: syz [ 26.466065][ T55] usb 1-1: USB disconnect, device number 2 [ 26.466162][ T393] usb 3-1: config 0 descriptor?? [ 26.515459][ T291] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.523592][ T393] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 26.555418][ T15] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 26.562596][ T15] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 26.569957][ T15] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 26.577819][ T15] usb 2-1: USB disconnect, device number 2 [ 26.635396][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.722672][ T393] usb 3-1: USB disconnect, device number 2 [ 26.875391][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 26.915483][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.926421][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.936354][ T291] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 26.945170][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.953561][ T291] usb 4-1: config 0 descriptor?? [ 26.977245][ T544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 26.986150][ T544] sch_tbf: burst 88 is lower than device ip6gre0 mtu (1448) ! [ 26.995472][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.007144][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.017018][ T20] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.026751][ T20] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.036331][ T20] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 27.045774][ T20] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 27.205443][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.214341][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.222154][ T20] usb 5-1: Product: syz [ 27.229493][ T20] usb 5-1: Manufacturer: syz [ 27.234248][ T20] usb 5-1: SerialNumber: syz [ 27.286052][ T551] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.390327][ T283] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 27.458530][ T291] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 27.668618][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.685199][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.696209][ T575] device bridge_slave_0 entered promiscuous mode [ 27.714887][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.721893][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.742523][ T575] device bridge_slave_1 entered promiscuous mode [ 27.829130][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.835991][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.843058][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.849918][ T575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.872735][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.883130][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.890360][ T291] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 27.905155][ T291] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 27.913625][ T291] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 27.922834][ T581] binder: BINDER_SET_CONTEXT_MGR already set [ 27.931594][ T291] usb 4-1: USB disconnect, device number 2 [ 27.937321][ T581] binder: 580:581 ioctl 4018620d 20000040 returned -16 [ 27.949540][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.959870][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.977560][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.984420][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.992961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.001314][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.008189][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.027627][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.041079][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.057169][ T583] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.070862][ T575] device veth0_vlan entered promiscuous mode [ 28.086996][ T583] EXT4-fs (loop0): orphan cleanup on readonly fs [ 28.093848][ T583] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3345: comm syz.0.86: Allocating blocks 41-42 which overlap fs metadata [ 28.101551][ T575] device veth1_macvtap entered promiscuous mode [ 28.114006][ T583] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.86: Failed to acquire dquot type 0 [ 28.125102][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.125710][ T583] EXT4-fs (loop0): 1 truncate cleaned up [ 28.133597][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.145871][ T583] EXT4-fs (loop0): pa ffff888110615d20: logic 1, phys. 41, len 23 [ 28.147437][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.153564][ T583] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4362: group 0, free 22, pa_free 23 [ 28.161002][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.177684][ T20] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 28.183375][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.192279][ T583] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue [ 28.215208][ T20] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 28.224273][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.248321][ T583] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.255531][ T20] cdc_ncm 5-1:1.0: bind() failure [ 28.263782][ T20] cdc_ncm 5-1:1.1: bind() failure [ 28.269434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.271228][ T20] usb 5-1: USB disconnect, device number 2 [ 28.288854][ T9] device bridge_slave_1 left promiscuous mode [ 28.295829][ T583] EXT4-fs (loop0): re-mounted. Opts: (null) [ 28.302304][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.309972][ T9] device bridge_slave_0 left promiscuous mode [ 28.316326][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.324119][ T9] device veth1_macvtap left promiscuous mode [ 28.330276][ T9] device veth0_vlan left promiscuous mode [ 28.378038][ T586] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 28.389735][ T586] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.403769][ T586] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.429851][ T586] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.436812][ T586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.507141][ T24] kauditd_printk_skb: 239 callbacks suppressed [ 28.507151][ T24] audit: type=1326 audit(1728574379.950:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.539135][ T24] audit: type=1326 audit(1728574379.980:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.570219][ T24] audit: type=1326 audit(1728574379.980:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.593901][ T24] audit: type=1326 audit(1728574379.980:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.621046][ T24] audit: type=1400 audit(1728574379.980:452): avc: denied { name_bind } for pid=585 comm="syz.2.87" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 28.642416][ T24] audit: type=1326 audit(1728574379.980:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.666068][ T24] audit: type=1326 audit(1728574379.980:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.692630][ T24] audit: type=1326 audit(1728574379.980:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.724096][ T24] audit: type=1326 audit(1728574379.980:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.748642][ T24] audit: type=1326 audit(1728574379.980:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=585 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419c0e5ff9 code=0x7ffc0000 [ 28.800242][ T611] erofs: (device loop4): mounted with root inode @ nid 36. [ 28.820060][ T611] attempt to access beyond end of device [ 28.820060][ T611] loop4: rw=0, want=14546590696, limit=16 [ 28.848618][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 28.866401][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 28.884004][ T614] fuse: Unknown parameter 'user_i00000000000000000000' [ 28.899761][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 28.947186][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 28.969800][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 29.003411][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 29.051611][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 29.211190][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 29.275520][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 29.286697][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 29.297060][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 29.307248][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 29.317928][ T611] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 29.327439][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 29.336437][ T611] attempt to access beyond end of device [ 29.336437][ T611] loop4: rw=524288, want=312, limit=16 [ 29.347520][ T611] attempt to access beyond end of device [ 29.347520][ T611] loop4: rw=524288, want=1049280, limit=16 [ 29.358829][ T611] attempt to access beyond end of device [ 29.358829][ T611] loop4: rw=524288, want=6536, limit=16 [ 29.370095][ T611] attempt to access beyond end of device [ 29.370095][ T611] loop4: rw=524288, want=34359736344, limit=16 [ 29.381663][ T611] attempt to access beyond end of device [ 29.381663][ T611] loop4: rw=524288, want=736, limit=16 [ 29.392607][ T611] attempt to access beyond end of device [ 29.392607][ T611] loop4: rw=524288, want=536576872, limit=16 [ 29.404122][ T611] attempt to access beyond end of device [ 29.404122][ T611] loop4: rw=524288, want=13478624040, limit=16 [ 29.422058][ T611] attempt to access beyond end of device [ 29.422058][ T611] loop4: rw=524288, want=13716630384, limit=16 [ 29.426029][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.441091][ T611] attempt to access beyond end of device [ 29.441091][ T611] loop4: rw=524288, want=133693456, limit=16 [ 29.457246][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 29.467675][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 29.476708][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 29.485675][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 29.494530][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 29.503445][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 29.512428][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 29.521334][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 29.540141][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 29.552894][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 29.562186][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 29.572060][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 29.581606][ T611] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 29.591615][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 29.600842][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 29.614271][ T628] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.95: casefold flag without casefold feature [ 29.629574][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 29.635571][ T628] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 29.638796][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 29.657215][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 29.658486][ T628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.666225][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 29.683870][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 29.692790][ T611] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 29.705461][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 29.714330][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 29.723432][ T15] usb 2-1: Using ep0 maxpacket: 32 [ 29.726366][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 29.748757][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 29.757785][ T611] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 29.875619][ T15] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.885881][ T15] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.919094][ T626] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.928881][ T626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.939945][ T626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.965853][ T633] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.972577][ T633] EXT4-fs (loop2): Ignoring removed orlov option [ 29.989047][ T633] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,inlinecrypt,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 30.014385][ T626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.023012][ T626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.057048][ T626] F2FS-fs (loop3): Inconsistent error blkaddr:5663, sit bitmap:0 [ 30.064676][ T626] CPU: 1 PID: 626 Comm: syz.3.96 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 30.074045][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 30.083941][ T626] Call Trace: [ 30.087072][ T626] dump_stack_lvl+0x1e2/0x24b [ 30.091607][ T626] ? __bpf_trace_f2fs_fiemap+0x60/0x60 [ 30.096877][ T626] ? bfq_pos_tree_add_move+0x43b/0x43b [ 30.102169][ T626] ? set_page_dirty+0x196/0x300 [ 30.106853][ T626] ? f2fs_write_node_pages+0x900/0x900 [ 30.112155][ T626] dump_stack+0x15/0x17 [ 30.116134][ T626] f2fs_is_valid_blkaddr+0xc44/0x1370 [ 30.121344][ T626] f2fs_truncate_data_blocks_range+0x659/0xeb0 [ 30.127334][ T626] f2fs_do_truncate_blocks+0x5cf/0xb80 [ 30.132624][ T626] ? addrs_per_block+0x120/0x120 [ 30.137400][ T626] ? f2fs_mark_inode_dirty_sync+0x10d/0x140 [ 30.143125][ T626] f2fs_truncate_blocks+0x114/0x310 [ 30.148163][ T626] do_convert_inline_dir+0xb0c/0x1de0 [ 30.153374][ T626] ? page_cache_prev_miss+0x410/0x410 [ 30.158599][ T626] ? f2fs_try_convert_inline_dir+0x420/0x420 [ 30.164408][ T626] ? find_next_bit+0xc7/0x100 [ 30.168910][ T626] ? f2fs_room_for_filename+0xa8/0xc0 [ 30.174116][ T626] f2fs_add_inline_entry+0x3ef/0x770 [ 30.179234][ T626] ? do_convert_inline_dir+0x1de0/0x1de0 [ 30.184703][ T626] ? down_read_trylock+0x179/0x1d0 [ 30.189647][ T626] ? __init_rwsem+0x1c0/0x1c0 [ 30.194175][ T626] ? f2fs_setup_filename+0x141/0x360 [ 30.199281][ T626] ? f2fs_init_casefolded_name+0x7d/0x460 [ 30.204837][ T626] f2fs_add_dentry+0x1c8/0x340 [ 30.209440][ T626] ? f2fs_add_regular_entry+0xb10/0xb10 [ 30.214827][ T626] ? __kasan_check_write+0x14/0x20 [ 30.219766][ T626] ? trace_f2fs_new_inode+0x20/0x140 [ 30.224884][ T626] f2fs_do_add_link+0x29b/0x400 [ 30.229574][ T626] ? f2fs_add_dentry+0x340/0x340 [ 30.234351][ T626] ? __init_rwsem+0x1c0/0x1c0 [ 30.238866][ T626] f2fs_mkdir+0x40e/0x6a0 [ 30.243037][ T626] ? f2fs_symlink+0x9a0/0x9a0 [ 30.247553][ T626] ? selinux_inode_mkdir+0x22/0x30 [ 30.252488][ T626] ? security_inode_mkdir+0xbc/0x100 [ 30.257608][ T626] vfs_mkdir+0x4cf/0x6c0 [ 30.261690][ T626] do_mkdirat+0x1a6/0x2c0 [ 30.265851][ T626] ? do_mknodat+0x450/0x450 [ 30.270191][ T626] ? fpu__clear_all+0x20/0x20 [ 30.274723][ T626] ? __kasan_check_read+0x11/0x20 [ 30.279664][ T626] __x64_sys_mkdirat+0x7b/0x90 [ 30.284259][ T626] do_syscall_64+0x34/0x70 [ 30.288512][ T626] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.294494][ T626] RIP: 0033:0x7f3534714ff9 [ 30.298747][ T626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.318193][ T626] RSP: 002b:00007f353338e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 30.326430][ T626] RAX: ffffffffffffffda RBX: 00007f35348ccf80 RCX: 00007f3534714ff9 [ 30.334240][ T626] RDX: 0000000000000041 RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 30.342054][ T626] RBP: 00007f3534787296 R08: 0000000000000000 R09: 0000000000000000 [ 30.349863][ T626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.357677][ T626] R13: 0000000000000000 R14: 00007f35348ccf80 R15: 00007ffce5e1add8 [ 30.365584][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.374359][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.383811][ T15] usb 2-1: Product: syz [ 30.388116][ T15] usb 2-1: Manufacturer: syz [ 30.392572][ T15] usb 2-1: SerialNumber: syz [ 30.527217][ T665] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 30.676062][ T15] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 30.890892][ T20] usb 2-1: USB disconnect, device number 3 [ 30.899917][ T20] usblp0: removed [ 30.915392][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.045394][ T305] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.155370][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 31.275439][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 31.284383][ T25] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.294080][ T25] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 31.303835][ T25] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 31.313603][ T25] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 31.323387][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 31.330251][ T25] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 31.339348][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.385862][ T25] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 31.405700][ T305] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 31.423745][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.434577][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.444196][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.457008][ T305] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 31.466005][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.477404][ T305] usb 1-1: config 0 descriptor?? [ 31.532400][ T686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 31.599586][ T25] scsi host1: usb-storage 4-1:1.0 [ 31.801408][ T531] usb 4-1: USB disconnect, device number 3 [ 31.895481][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.966719][ T305] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 31.974157][ T305] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 31.981187][ T305] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 31.989054][ T305] nintendo 0003:057E:2009.0004: hidraw0: USB HID v0.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0 [ 32.065458][ T305] nintendo 0003:057E:2009.0004: Failed to read stick cal, using defaults; ret=-38 [ 32.070647][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.081494][ T718] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.081518][ T305] nintendo 0003:057E:2009.0004: Analog stick positions may be inaccurate [ 32.089281][ T718] device bridge_slave_0 entered promiscuous mode [ 32.096674][ T305] nintendo 0003:057E:2009.0004: Failed to set report mode; ret=-38 [ 32.097383][ T305] nintendo 0003:057E:2009.0004: probe - fail = -38 [ 32.104753][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.112577][ T305] nintendo: probe of 0003:057E:2009.0004 failed with error -38 [ 32.117091][ T718] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.138323][ T718] device bridge_slave_1 entered promiscuous mode [ 32.168479][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.175334][ T718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.182418][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.189266][ T718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.201968][ T305] usb 1-1: USB disconnect, device number 3 [ 32.209579][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.218211][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.225396][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.236724][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.244642][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.251484][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.259893][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.267932][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.274752][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.287872][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.296626][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.310487][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.315501][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.337591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.345091][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.354664][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 32.355618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.370945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.379330][ T718] device veth0_vlan entered promiscuous mode [ 32.385675][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.400239][ T15] usb 2-1: config 0 descriptor?? [ 32.406781][ T718] device veth1_macvtap entered promiscuous mode [ 32.413860][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.435270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.443702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.465030][ T727] tipc: Started in network mode [ 32.469721][ T727] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 32.479022][ T727] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 32.487092][ T727] tipc: Enabled bearer , priority 10 [ 32.616167][ T441] device bridge_slave_1 left promiscuous mode [ 32.622126][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.629853][ T441] device bridge_slave_0 left promiscuous mode [ 32.636072][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.646861][ T441] device veth1_macvtap left promiscuous mode [ 32.654896][ T441] device veth0_vlan left promiscuous mode [ 32.889434][ T15] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 33.075388][ T291] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.315439][ T15] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 33.322640][ T15] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 33.329849][ T15] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 33.337846][ T15] usb 2-1: USB disconnect, device number 4 [ 33.345364][ T291] usb 1-1: Using ep0 maxpacket: 8 [ 33.355376][ T531] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.395976][ T753] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 33.395976][ T753] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 33.395976][ T753] [ 33.417244][ T753] EXT4-fs (loop3): 1 orphan inode deleted [ 33.422791][ T753] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,lazytime,sysvgroups,nouser_xattr,usrquota,,errors=continue [ 33.443245][ T753] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 33.475470][ T291] usb 1-1: config 0 has no interfaces? [ 33.555478][ T291] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 33.564444][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 33.574274][ T291] usb 1-1: SerialNumber: syz [ 33.582234][ T291] usb 1-1: config 0 descriptor?? [ 33.606659][ T25] tipc: 32-bit node address hash set to 1000000 [ 33.616131][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 33.616140][ T24] audit: type=1400 audit(1728574385.060:474): avc: denied { bind } for pid=760 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.645136][ T441] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.729545][ T284] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 33.735443][ T531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.737204][ T284] FAT-fs (loop3): Filesystem has been set read-only [ 33.747988][ T531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.754378][ T284] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 33.763969][ T531] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 33.780009][ T531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.789210][ T531] usb 5-1: config 0 descriptor?? [ 33.843940][ T55] usb 1-1: USB disconnect, device number 4 [ 33.939383][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.946340][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.953494][ T770] device bridge_slave_0 entered promiscuous mode [ 33.961651][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.968627][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.975816][ T770] device bridge_slave_1 entered promiscuous mode [ 34.007672][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.014501][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.021619][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.028410][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.044729][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.052432][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.059926][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.070561][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.078608][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.085476][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.093712][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.101924][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.108773][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.116146][ T25] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 34.124164][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.132064][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.146230][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.157572][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.165623][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.172852][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.182339][ T770] device veth0_vlan entered promiscuous mode [ 34.191861][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.200873][ T770] device veth1_macvtap entered promiscuous mode [ 34.212051][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.221531][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.276783][ T775] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.283776][ T775] EXT4-fs error (device loop3): ext4_fill_super:4955: inode #2: comm syz.3.144: casefold flag without casefold feature [ 34.296392][ T775] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 34.305967][ T775] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 34.320398][ T775] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 34.330279][ T24] audit: type=1400 audit(1728574385.772:475): avc: denied { add_name } for pid=774 comm="syz.3.144" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.371506][ T24] audit: type=1400 audit(1728574385.772:476): avc: denied { create } for pid=774 comm="syz.3.144" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 34.413539][ T24] audit: type=1400 audit(1728574385.772:477): avc: denied { link } for pid=774 comm="syz.3.144" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 34.457061][ T49] device bridge_slave_1 left promiscuous mode [ 34.462992][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.470913][ T49] device bridge_slave_0 left promiscuous mode [ 34.477312][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.477548][ T531] logitech-hidpp-device 0003:046D:C086.0006: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 34.497218][ T49] device veth1_macvtap left promiscuous mode [ 34.503037][ T49] device veth0_vlan left promiscuous mode [ 34.512967][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 34.523709][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.535128][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.545433][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 34.558837][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 34.570530][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.595110][ T25] usb 2-1: config 0 descriptor?? [ 34.600991][ T24] audit: type=1400 audit(1728574386.055:478): avc: denied { mounton } for pid=783 comm="syz.3.145" path="/1/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.623560][ T784] incfs: Can't find or create .index dir in ./file0 [ 34.632482][ T784] incfs: mount failed -14 [ 34.633602][ T24] audit: type=1400 audit(1728574386.087:479): avc: denied { wake_alarm } for pid=785 comm="syz.0.147" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.669766][ T393] usb 5-1: USB disconnect, device number 3 [ 35.056572][ T25] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 35.063497][ T25] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 35.070964][ T25] hid-rmi 0003:17EF:6085.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.1-1/input0 [ 35.169750][ T393] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.212971][ T797] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 35.212971][ T797] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.212971][ T797] [ 35.213611][ T24] audit: type=1400 audit(1728574386.696:480): avc: denied { ioctl } for pid=800 comm="syz.0.152" path="socket:[18218]" dev="sockfs" ino=18218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.238977][ T801] fuse: Bad value for 'user_id' [ 35.260456][ T291] usb 2-1: USB disconnect, device number 5 [ 35.274298][ T797] EXT4-fs (loop4): 1 orphan inode deleted [ 35.280456][ T797] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,lazytime,sysvgroups,nouser_xattr,usrquota,,errors=continue [ 35.300785][ T797] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 35.329026][ T24] audit: type=1400 audit(1728574386.811:481): avc: denied { map } for pid=804 comm="syz.0.153" path="/dev/ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.522277][ T393] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 35.533075][ T393] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.636476][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.655830][ T291] Bluetooth: hci0: command 0x1003 tx timeout [ 35.661668][ T763] Bluetooth: hci0: sending frame failed (-49) [ 35.713236][ T393] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.722064][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.729965][ T393] usb 4-1: Product: syz [ 35.734028][ T393] usb 4-1: Manufacturer: syz [ 35.738505][ T393] usb 4-1: SerialNumber: syz [ 35.753916][ T814] capability: warning: `syz.1.156' uses 32-bit capabilities (legacy support in use) [ 35.770373][ T794] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 35.865370][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 35.979825][ T794] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 35.986832][ T794] udc-core: couldn't find an available UDC or it's busy [ 35.993694][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.993701][ T794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.011649][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.021213][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.033976][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.042986][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.051266][ T25] usb 1-1: config 0 descriptor?? [ 36.084274][ T393] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 36.091492][ T393] usb 4-1: USB disconnect, device number 4 [ 36.503588][ T291] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.513493][ T25] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 36.521906][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input4 [ 36.534880][ T25] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 36.579928][ T819] handle_bad_sector: 18 callbacks suppressed [ 36.579936][ T819] attempt to access beyond end of device [ 36.579936][ T819] loop3: rw=34817, want=129, limit=128 [ 36.596891][ T24] audit: type=1400 audit(1728574388.155:482): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.619340][ T24] audit: type=1400 audit(1728574388.155:483): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.709303][ T25] usb 1-1: USB disconnect, device number 5 [ 36.751295][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 36.799064][ T828] overlayfs: statfs failed on './file0' [ 36.829239][ T830] netem: change failed [ 36.865771][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.878427][ T834] device syzkaller0 entered promiscuous mode [ 36.884697][ T291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.897652][ T291] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.906999][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.921212][ T291] usb 2-1: config 0 descriptor?? [ 36.965317][ T836] syz.3.165[836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.965371][ T836] syz.3.165[836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.989442][ T836] device syzkaller0 entered promiscuous mode [ 37.076367][ T832] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 37.084116][ T832] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.098071][ T832] F2FS-fs (loop4): invalid crc value [ 37.104634][ T839] fuse: Unknown parameter '0xffffffffffffffff' [ 37.116720][ T832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.155751][ T832] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.162679][ T832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.166690][ T848] device syzkaller0 entered promiscuous mode [ 37.186293][ T832] attempt to access beyond end of device [ 37.186293][ T832] loop4: rw=10241, want=45112, limit=40427 [ 37.210138][ T49] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.221960][ T49] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 37.267728][ T854] device syzkaller0 entered promiscuous mode [ 37.390383][ T291] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 37.398991][ T291] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 37.410548][ T291] microsoft 0003:045E:07DA.0009: no inputs found [ 37.417206][ T291] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 37.636332][ T890] udc-core: couldn't find an available UDC or it's busy [ 37.646579][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 37.647366][ T890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.652587][ T763] Bluetooth: hci0: sending frame failed (-49) [ 37.934732][ T885] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 37.943345][ T885] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 37.951708][ T25] usb 2-1: USB disconnect, device number 6 [ 37.958196][ T885] F2FS-fs (loop0): invalid crc value [ 37.964979][ T885] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.987632][ T885] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 37.994526][ T885] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 38.184521][ T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 38.195525][ T5] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.551472][ T291] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 38.605867][ T924] device pim6reg1 entered promiscuous mode [ 38.875556][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 38.875566][ T24] audit: type=1400 audit(1728574390.548:535): avc: denied { write } for pid=906 comm="syz.3.191" name="hidraw0" dev="devtmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.875665][ T907] hid-generic 0000:0000:0000.000A: pid 907 passed too short report [ 38.913289][ T5] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 38.980004][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.045288][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.052181][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.115788][ T933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.124677][ T933] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 39.125437][ T936] device syzkaller0 entered promiscuous mode [ 39.142299][ T291] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 39.172091][ T291] usb 4-1: can't read configurations, error -71 [ 39.190353][ T24] audit: type=1400 audit(1728574390.874:536): avc: denied { mounton } for pid=932 comm="syz.0.199" path="/37/file0/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.212635][ T24] audit: type=1400 audit(1728574390.874:537): avc: denied { setattr } for pid=932 comm="syz.0.199" name="work" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.234506][ T24] audit: type=1400 audit(1728574390.874:538): avc: denied { remove_name } for pid=932 comm="syz.0.199" name="#1" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.257799][ T24] audit: type=1400 audit(1728574390.874:539): avc: denied { rename } for pid=932 comm="syz.0.199" name="#1" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.284765][ T24] audit: type=1400 audit(1728574390.874:540): avc: denied { unlink } for pid=932 comm="syz.0.199" name="#1" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.306515][ T24] audit: type=1400 audit(1728574390.874:541): avc: denied { setattr } for pid=932 comm="syz.0.199" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.328958][ T24] audit: type=1400 audit(1728574390.874:542): avc: denied { link } for pid=932 comm="syz.0.199" name="#21" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.333029][ T5] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 39.350637][ T24] audit: type=1400 audit(1728574390.916:543): avc: denied { rmdir } for pid=428 comm="syz-executor" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.385630][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.400396][ T940] capability: warning: `syz.4.202' uses deprecated v2 capabilities in a way that may be insecure [ 39.410848][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.411126][ T24] audit: type=1400 audit(1728574391.105:544): avc: denied { write } for pid=939 comm="syz.4.202" path="socket:[17248]" dev="sockfs" ino=17248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.420679][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 39.467395][ T5] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 39.476862][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.497869][ T5] usb 2-1: config 0 descriptor?? [ 39.542627][ T948] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 39.542627][ T948] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 39.542627][ T948] [ 39.577944][ T956] device pim6reg1 entered promiscuous mode [ 39.585358][ T948] EXT4-fs (loop0): 1 orphan inode deleted [ 39.594555][ T948] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,lazytime,sysvgroups,nouser_xattr,usrquota,,errors=continue [ 39.616864][ T948] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 39.626637][ T393] Bluetooth: hci0: command 0x1009 tx timeout [ 39.877926][ T980] device pim6reg1 entered promiscuous mode [ 39.922633][ T984] binder: 983:984 ioctl c0306201 20000680 returned -14 [ 39.943038][ T5] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 39.950229][ T5] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 39.957120][ T5] hid-rmi 0003:17EF:6085.000B: item fetching failed at offset 2/5 [ 39.964816][ T5] hid-rmi 0003:17EF:6085.000B: parse failed [ 39.970462][ T5] hid-rmi: probe of 0003:17EF:6085.000B failed with error -22 [ 40.139775][ T25] usb 2-1: USB disconnect, device number 7 [ 40.162786][ T994] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpid,,errors=continue [ 40.172893][ T994] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 40.275681][ T291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.513907][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 40.628364][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.639061][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.648672][ T291] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.657426][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.666015][ T291] usb 4-1: config 0 descriptor?? [ 40.714568][ T291] hub 4-1:0.0: USB hub found [ 40.914151][ T291] hub 4-1:0.0: 1 port detected [ 41.866747][ T291] hub 4-1:0.0: activate --> -90 [ 42.058705][ T25] usb 4-1: USB disconnect, device number 6 [ 42.075888][ T291] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 43.610299][ T1019] cgroup: none used incorrectly [ 43.613151][ T1013] FAT-fs (loop0): Directory bread(block 64) failed [ 43.628640][ T1013] FAT-fs (loop0): Directory bread(block 65) failed [ 43.635113][ T1013] FAT-fs (loop0): Directory bread(block 66) failed [ 43.660750][ T1013] FAT-fs (loop0): Directory bread(block 67) failed [ 43.686299][ T1013] FAT-fs (loop0): Directory bread(block 68) failed [ 43.693038][ T1013] FAT-fs (loop0): Directory bread(block 69) failed [ 43.699788][ T1013] FAT-fs (loop0): Directory bread(block 70) failed [ 43.706722][ T1013] FAT-fs (loop0): Directory bread(block 71) failed [ 43.713341][ T1013] FAT-fs (loop0): Directory bread(block 72) failed [ 43.721178][ T1013] FAT-fs (loop0): Directory bread(block 73) failed [ 43.726490][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.764693][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.773519][ T1020] device bridge_slave_0 entered promiscuous mode [ 43.790111][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.797634][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.807245][ T1020] device bridge_slave_1 entered promiscuous mode [ 43.864955][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.871830][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.878912][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.885690][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.913668][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.921217][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.928672][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.937505][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.955361][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.963466][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.970323][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.977582][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.987058][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.993925][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.001487][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.010282][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.022171][ T1030] device pim6reg1 entered promiscuous mode [ 44.036660][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.071254][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.080727][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.089579][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.098483][ T1020] device veth0_vlan entered promiscuous mode [ 44.126682][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.136027][ T1020] device veth1_macvtap entered promiscuous mode [ 44.146275][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.160806][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.169943][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 44.169953][ T24] audit: type=1400 audit(1728574396.102:569): avc: denied { compute_member } for pid=1032 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.217085][ T24] audit: type=1400 audit(1728574396.133:570): avc: denied { unmount } for pid=1020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.286360][ T1045] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 44.286360][ T1045] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.286360][ T1045] [ 44.316303][ T1045] EXT4-fs (loop2): 1 orphan inode deleted [ 44.321904][ T1045] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,lazytime,sysvgroups,nouser_xattr,usrquota,,errors=continue [ 44.343167][ T24] audit: type=1400 audit(1728574396.280:571): avc: denied { mount } for pid=1044 comm="syz.2.224" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.373790][ T1045] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 44.420695][ T49] device bridge_slave_1 left promiscuous mode [ 44.429015][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.443399][ T462] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.450066][ T49] device bridge_slave_0 left promiscuous mode [ 44.457514][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.465560][ T49] device veth1_macvtap left promiscuous mode [ 44.471645][ T49] device veth0_vlan left promiscuous mode [ 44.477412][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.506041][ T24] audit: type=1400 audit(1728574396.459:572): avc: denied { transfer } for pid=1061 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 44.525556][ T1063] binder_alloc: 1061: binder_alloc_buf, no vma [ 44.525909][ T1055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.598749][ T1067] syz.3.242[1067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.598803][ T1067] syz.3.242[1067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.631694][ T1067] syz.3.242[1067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.642916][ T1067] syz.3.242[1067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.876321][ T25] usb 1-1: config 0 has no interfaces? [ 44.936327][ T24] audit: type=1400 audit(1728574396.910:573): avc: denied { unlink } for pid=1081 comm="syz.4.248" name="#3" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.958662][ T1080] device pim6reg1 entered promiscuous mode [ 44.967365][ T1082] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 44.987688][ T1082] overlayfs: upper fs does not support tmpfile. [ 45.085984][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.20 [ 45.097884][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.113718][ T25] usb 1-1: Product: syz [ 45.117821][ T25] usb 1-1: Manufacturer: syz [ 45.122287][ T25] usb 1-1: SerialNumber: syz [ 45.127300][ T25] usb 1-1: config 0 descriptor?? [ 45.201262][ T1089] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.263210][ T24] audit: type=1400 audit(1728574397.246:574): avc: denied { bind } for pid=1097 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.287573][ T49] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 45.314561][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.326720][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.326720][ T49] [ 45.336403][ T24] audit: type=1400 audit(1728574397.267:575): avc: denied { listen } for pid=1097 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.352577][ T49] EXT4-fs (loop2): Total free blocks count 0 [ 45.361314][ T49] EXT4-fs (loop2): Free/Dirty block details [ 45.367375][ T49] EXT4-fs (loop2): free_blocks=68451041280 [ 45.373140][ T49] EXT4-fs (loop2): dirty_blocks=16 [ 45.378053][ T49] EXT4-fs (loop2): Block reservation details [ 45.384276][ T49] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 45.390394][ T24] audit: type=1400 audit(1728574397.267:576): avc: denied { accept } for pid=1097 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.420469][ T1102] device syzkaller0 entered promiscuous mode [ 45.461303][ T24] audit: type=1400 audit(1728574397.456:577): avc: denied { rename } for pid=1103 comm="syz.1.256" name="file1" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.487208][ T436] usb 1-1: USB disconnect, device number 6 [ 45.527109][ T24] audit: type=1326 audit(1728574397.530:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1111 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7281418ff9 code=0x7ffc0000 [ 45.551604][ T1108] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 46.041408][ T1133] incfs_lookup_dentry err:-14 [ 46.046078][ T1133] incfs: Can't find or create .incomplete dir in ./file0 [ 46.083165][ T1133] incfs: mount failed -14 [ 46.175449][ T1118] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 46.200358][ T1118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.224539][ T1118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.296096][ T436] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.320132][ T1118] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.345098][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.372244][ T1118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.379278][ T1150] xt_hashlimit: size too large, truncated to 1048576 [ 46.386239][ T1118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.524252][ T436] usb 1-1: Using ep0 maxpacket: 8 [ 46.638547][ T436] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.705385][ T436] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 46.714906][ T436] usb 1-1: can't read configurations, error -71 [ 46.728102][ T1161] EXT4-fs (loop4): Ignoring removed nobh option [ 46.749169][ T1161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.776824][ T1161] EXT4-fs (loop4): 1 truncate cleaned up [ 46.800472][ T1161] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue [ 46.884399][ T1161] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #18: comm syz.4.275: invalid indirect mapped block 62562 (level 0) [ 46.907868][ T718] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /45/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 46.929395][ T718] EXT4-fs error (device loop4): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 46.950422][ T718] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /45/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 46.972136][ T718] EXT4-fs error (device loop4): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 46.992849][ T718] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /45/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.014702][ T718] EXT4-fs error (device loop4): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 47.034537][ T718] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /45/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.056533][ T718] EXT4-fs error (device loop4): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 47.086412][ T718] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /45/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.110128][ T1172] Leaked POSIX lock on dev=0x0:0x1f ino=0xd1 fl_owner=ffff88811da11d40 fl_flags=0x81 fl_type=0x1 fl_pid=1168 [ 47.130631][ T575] Leaked locks on dev=0x0:0x1f ino=0xd1: [ 47.153671][ T575] POSIX: fl_owner=ffff88811da11d40 fl_flags=0x81 fl_type=0x1 fl_pid=1168 [ 47.172289][ T1175] exfat: Deprecated parameter 'utf8' [ 47.278067][ T1175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 47.326766][ T49] tipc: Disabling bearer [ 47.333911][ T49] tipc: Left network mode [ 47.554668][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.562677][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.570226][ T1185] device bridge_slave_0 entered promiscuous mode [ 47.594280][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.601233][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.601696][ T1190] syz.3.286[1190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.608024][ T1190] syz.3.286[1190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.608420][ T1185] device bridge_slave_1 entered promiscuous mode [ 47.675887][ T1192] device syzkaller0 entered promiscuous mode [ 47.712394][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.721157][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.729975][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.738449][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.746866][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.753731][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.763498][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.783697][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.792055][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.800060][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.806919][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.814993][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.824072][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.840013][ T1185] device veth0_vlan entered promiscuous mode [ 47.846450][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.846786][ T1197] kvm: pic: non byte write [ 47.855253][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.866717][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.869034][ T1197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 47.874677][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.902893][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.911998][ T1185] device veth1_macvtap entered promiscuous mode [ 47.920969][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.931081][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.957874][ T49] device bridge_slave_1 left promiscuous mode [ 47.964119][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971338][ T49] device bridge_slave_0 left promiscuous mode [ 47.977388][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.984828][ T49] device veth1_macvtap left promiscuous mode [ 47.990666][ T49] device veth0_vlan left promiscuous mode [ 48.296054][ T531] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.305554][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 48.311511][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.524659][ T531] usb 2-1: Using ep0 maxpacket: 8 [ 48.620530][ T1208] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.630982][ T1208] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 48.639031][ T531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.640989][ T1208] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 48.661739][ T531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.671801][ T531] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 48.684587][ T531] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 48.711255][ T531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.728084][ T531] usb 2-1: config 0 descriptor?? [ 48.786793][ T1215] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 49.048602][ T436] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.183435][ T531] ntrig 0003:1B96:0010.000C: item fetching failed at offset 5/7 [ 49.191063][ T531] ntrig 0003:1B96:0010.000C: parse failed [ 49.196932][ T531] ntrig: probe of 0003:1B96:0010.000C failed with error -22 [ 49.277175][ T436] usb 5-1: Using ep0 maxpacket: 32 [ 49.374328][ T55] usb 2-1: USB disconnect, device number 8 [ 49.544348][ T436] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 49.553189][ T436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.561250][ T436] usb 5-1: Product: syz [ 49.565381][ T436] usb 5-1: Manufacturer: syz [ 49.581973][ T436] usb 5-1: SerialNumber: syz [ 49.587229][ T436] usb 5-1: config 0 descriptor?? [ 49.677842][ T20] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.869882][ T1235] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 49.944131][ T20] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 50.090574][ T1241] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 50.090574][ T1241] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 50.090574][ T1241] [ 50.136430][ T1241] EXT4-fs (loop1): 1 orphan inode deleted [ 50.141987][ T1241] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,lazytime,sysvgroups,nouser_xattr,usrquota,,errors=continue [ 50.182706][ T1241] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 50.215729][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 50.215740][ T24] audit: type=1400 audit(1728574402.443:618): avc: denied { getattr } for pid=1246 comm="syz.0.306" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.221789][ T1247] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 50.258816][ T436] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:8c:b6:78:5f:33 [ 50.282731][ T436] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 50.286967][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 50.294602][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.300874][ T24] audit: type=1400 audit(1728574402.527:619): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.304083][ T436] usb 5-1: USB disconnect, device number 4 [ 50.356696][ T1250] device pim6reg1 entered promiscuous mode [ 50.462144][ T1271] syz.0.312[1271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.462203][ T1271] syz.0.312[1271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.476850][ T1271] syz.0.312[1271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.488301][ T1271] syz.0.312[1271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.521855][ T24] audit: type=1400 audit(1728574402.768:620): avc: denied { execute } for pid=1287 comm="syz.0.313" name="file1" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.558319][ T24] audit: type=1400 audit(1728574402.768:621): avc: denied { execute_no_trans } for pid=1287 comm="syz.0.313" path="/67/file1" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.562653][ T1285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.596809][ T1285] EXT4-fs (loop1): 1 truncate cleaned up [ 50.602336][ T1285] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue [ 50.630026][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 50.638928][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.669054][ T24] audit: type=1400 audit(1728574402.926:622): avc: denied { read } for pid=1284 comm="syz.1.311" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.723087][ T24] audit: type=1400 audit(1728574402.978:623): avc: denied { read } for pid=1292 comm="syz.1.315" dev="nsfs" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.743949][ T24] audit: type=1400 audit(1728574402.978:624): avc: denied { open } for pid=1292 comm="syz.1.315" path="net:[4026532361]" dev="nsfs" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.797029][ T1297] exfat: Deprecated parameter 'utf8' [ 50.813338][ T1297] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 50.970223][ T24] audit: type=1400 audit(1728574403.241:625): avc: denied { setopt } for pid=1304 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.106143][ T20] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 51.114105][ T20] uvcvideo: No valid video chain found. [ 51.299341][ T436] usb 4-1: USB disconnect, device number 7 [ 51.534638][ T1318] device syzkaller0 entered promiscuous mode [ 51.627560][ T1322] kvm: pic: non byte write [ 51.633497][ T1322] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 51.660572][ T1325] device syzkaller0 entered promiscuous mode [ 51.748007][ T1329] device pim6reg1 entered promiscuous mode [ 52.221028][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.234628][ T1344] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.245252][ T1344] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 52.256099][ T1344] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 52.268382][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 52.396546][ T1347] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 52.409069][ T1347] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.433075][ T1347] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.458774][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 52.465345][ T1347] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 52.477451][ T1347] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 52.484420][ T1347] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.573395][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 52.630225][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 52.637614][ T25] usb 4-1: can't read configurations, error -71 [ 53.158409][ T1366] Leaked POSIX lock on dev=0x0:0x1e ino=0xdd fl_owner=ffff888119d123c0 fl_flags=0x81 fl_type=0x1 fl_pid=1360 [ 53.176011][ T770] Leaked locks on dev=0x0:0x1e ino=0xdd: [ 53.181546][ T770] POSIX: fl_owner=ffff888119d123c0 fl_flags=0x81 fl_type=0x1 fl_pid=1360 [ 53.262428][ T1374] binder: 1372:1374 ioctl 4018620d 0 returned -22 [ 54.939076][ T531] Bluetooth: hci1: command 0x1003 tx timeout [ 54.944976][ T762] Bluetooth: hci1: sending frame failed (-49) [ 56.120351][ T1383] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 56.165519][ T1383] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,minixdf,nodiscard,errors=remount-ro,norecovery,bsdgroups,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,auto_da_alloc=0x0000000000000080,nogrpid, [ 56.202868][ T1387] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 56.206065][ T24] audit: type=1400 audit(1728574408.742:626): avc: denied { mount } for pid=1382 comm="syz.3.344" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.246649][ T24] audit: type=1400 audit(1728574408.773:627): avc: denied { unmount } for pid=770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.300332][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.307666][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.315135][ T1389] device bridge_slave_0 entered promiscuous mode [ 56.333805][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.341550][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.348881][ T1389] device bridge_slave_1 entered promiscuous mode [ 56.447562][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.454457][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.461560][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.468424][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.499387][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.508218][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.515159][ T24] audit: type=1400 audit(1728574409.056:628): avc: denied { mounton } for pid=1398 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.538350][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.576608][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.598352][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.605200][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.619147][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.629914][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.636758][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.686013][ T1389] device veth0_vlan entered promiscuous mode [ 56.727224][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.769247][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.791950][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.801532][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.809657][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.818108][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.916784][ T55] Bluetooth: hci1: command 0x1001 tx timeout [ 56.922720][ T40] Bluetooth: hci1: sending frame failed (-49) [ 56.951818][ T1389] device veth1_macvtap entered promiscuous mode [ 56.967343][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.007158][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.029497][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.048391][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.061197][ T1398] device bridge_slave_0 entered promiscuous mode [ 57.072908][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.080004][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.087213][ T1398] device bridge_slave_1 entered promiscuous mode [ 57.094245][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.127290][ T441] device bridge_slave_1 left promiscuous mode [ 57.134097][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.150547][ T441] device bridge_slave_0 left promiscuous mode [ 57.164176][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.172365][ T441] device veth1_macvtap left promiscuous mode [ 57.178232][ T441] device veth0_vlan left promiscuous mode [ 57.399945][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.409589][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.429060][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.440916][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.458970][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.465829][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.473606][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.488637][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.502634][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.509938][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.521577][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.544077][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.558358][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.573869][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.588339][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.597545][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.609206][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.619738][ T1398] device veth0_vlan entered promiscuous mode [ 57.641426][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.653921][ T1398] device veth1_macvtap entered promiscuous mode [ 57.674158][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.686541][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.705141][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.720599][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.726697][ T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.764401][ T24] audit: type=1326 audit(1728574410.369:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 57.811413][ T24] audit: type=1326 audit(1728574410.400:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 57.864291][ T24] audit: type=1326 audit(1728574410.400:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 57.916244][ T24] audit: type=1326 audit(1728574410.400:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 57.958524][ T24] audit: type=1326 audit(1728574410.400:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 57.981610][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 57.991202][ T24] audit: type=1326 audit(1728574410.400:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 58.015537][ T24] audit: type=1326 audit(1728574410.400:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8094fff9 code=0x7ffc0000 [ 58.107573][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.164878][ T55] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 58.172344][ T55] usb 5-1: can't read configurations, error -71 [ 58.679406][ T436] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 58.899280][ T479] Bluetooth: hci1: command 0x1009 tx timeout [ 58.938324][ T1467] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.945059][ T1467] EXT4-fs (loop0): Ignoring removed orlov option [ 58.952541][ T1467] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,inlinecrypt,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 59.051140][ T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.061995][ T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.071809][ T436] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 59.080812][ T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.089763][ T436] usb 4-1: config 0 descriptor?? [ 59.155681][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.393669][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 59.526835][ T5] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 59.538889][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.545004][ T1484] device syzkaller0 entered promiscuous mode [ 59.550056][ T5] usb 3-1: config 0 descriptor?? [ 59.581642][ T436] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 59.639141][ T1489] EXT4-fs (loop0): Ignoring removed oldalloc option [ 59.651739][ T1489] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue [ 59.766395][ T1498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 59.775353][ T1498] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 59.984338][ T436] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 59.991763][ T436] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 60.005563][ T436] pyra: probe of 0003:1E7D:2CF6.000D failed with error -71 [ 60.017420][ T436] usb 4-1: USB disconnect, device number 10 [ 60.550013][ T1520] binder: 1511:1520 ioctl 4018620d 0 returned -22 [ 60.653361][ T1524] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 61.136599][ T15] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.517962][ T15] usb 5-1: config 0 has no interfaces? [ 61.543535][ T1537] device syzkaller0 entered promiscuous mode [ 61.574057][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 61.574069][ T24] audit: type=1326 audit(1728574414.368:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.603459][ T24] audit: type=1326 audit(1728574414.368:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.626804][ T24] audit: type=1326 audit(1728574414.368:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.653552][ T24] audit: type=1326 audit(1728574414.379:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.676741][ T24] audit: type=1326 audit(1728574414.379:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.700002][ T15] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 61.700276][ T24] audit: type=1326 audit(1728574414.379:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.709029][ T15] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 61.733619][ T24] audit: type=1326 audit(1728574414.400:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.740530][ T15] usb 5-1: Manufacturer: syz [ 61.763826][ T24] audit: type=1326 audit(1728574414.410:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.772002][ T15] usb 5-1: SerialNumber: syz [ 61.800234][ T24] audit: type=1326 audit(1728574414.410:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.824282][ T24] audit: type=1326 audit(1728574414.410:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ab76ddff9 code=0x7ffc0000 [ 61.849599][ T1546] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 61.857086][ T1546] netlink: 208 bytes leftover after parsing attributes in process `syz.3.394'. [ 62.022459][ T15] usb 5-1: config 0 descriptor?? [ 62.029273][ T436] usb 3-1: USB disconnect, device number 3 [ 62.090386][ T1551] binder: 1550:1551 ioctl c0306201 20000380 returned -14 [ 62.297046][ T25] usb 5-1: USB disconnect, device number 7 [ 62.868665][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.876276][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.883826][ T1577] device bridge_slave_0 entered promiscuous mode [ 62.893951][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.900844][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.908422][ T1577] device bridge_slave_1 entered promiscuous mode [ 62.975988][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.982864][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.989992][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.996750][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.068701][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.075962][ T15] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.090301][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.097530][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.105657][ T462] device bridge_slave_1 left promiscuous mode [ 63.114112][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.127114][ T462] device bridge_slave_0 left promiscuous mode [ 63.134959][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.143670][ T462] device veth1_macvtap left promiscuous mode [ 63.149615][ T462] device veth0_vlan left promiscuous mode [ 63.243863][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.251856][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.258678][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.266064][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.274126][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.280983][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.309701][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.317972][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 63.323173][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.337436][ T55] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 63.338440][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.370068][ T1577] device veth0_vlan entered promiscuous mode [ 63.379151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.388074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.395907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.404806][ T1599] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.409145][ T1577] device veth1_macvtap entered promiscuous mode [ 63.431866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.439844][ T15] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.439858][ T15] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.439888][ T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 63.470422][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.479284][ T1599] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.488692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.499311][ T1389] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 63.506864][ T1389] FAT-fs (loop2): Filesystem has been set read-only [ 63.507363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.513847][ T15] hub 5-1:4.0: USB hub found [ 63.528224][ T1389] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 63.585152][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 63.605440][ T1389] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.718203][ T15] hub 5-1:4.0: 2 ports detected [ 63.851483][ T55] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 63.860346][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.868210][ T55] usb 1-1: Product: syz [ 63.872138][ T55] usb 1-1: Manufacturer: syz [ 63.876543][ T55] usb 1-1: SerialNumber: syz [ 63.881831][ T55] usb 1-1: config 0 descriptor?? [ 64.081329][ T462] device bridge_slave_1 left promiscuous mode [ 64.087359][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.094706][ T462] device bridge_slave_0 left promiscuous mode [ 64.100764][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.108281][ T462] device bridge_slave_1 left promiscuous mode [ 64.114317][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.121709][ T462] device bridge_slave_0 left promiscuous mode [ 64.127654][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.136243][ T462] device veth1_macvtap left promiscuous mode [ 64.142255][ T462] device veth0_vlan left promiscuous mode [ 64.148295][ T462] device veth1_macvtap left promiscuous mode [ 64.154156][ T462] device veth0_vlan left promiscuous mode SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=416 state=1 status=67 (errno 9: Bad file descriptor) [ 64.594866][ T55] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:51:cb:83:d8:ee [ 64.606780][ T55] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 64.625027][ T55] usb 1-1: USB disconnect, device number 9 [ 64.778091][ T25] usb 5-1: USB disconnect, device number 8 [ 64.907064][ T1677] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.913930][ T1677] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.921303][ T1677] device bridge_slave_0 entered promiscuous mode [ 64.927878][ T1677] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.934964][ T1677] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.942155][ T1677] device bridge_slave_1 entered promiscuous mode [ 64.972102][ T1677] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.978949][ T1677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.986037][ T1677] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.992819][ T1677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.010377][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.017839][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.024924][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.035357][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.043311][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.050130][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.058689][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.066844][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.073696][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.086168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.095360][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.107895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.120457][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.128170][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.135528][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.145007][ T1677] device veth0_vlan entered promiscuous mode [ 65.154303][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.164441][ T1677] device veth1_macvtap entered promiscuous mode [ 65.173904][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.183492][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.192296][ T462] device bridge_slave_1 left promiscuous mode [ 65.198287][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.205763][ T462] device bridge_slave_0 left promiscuous mode [ 65.211677][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.219474][ T462] device veth1_macvtap left promiscuous mode [ 65.225440][ T462] device veth0_vlan left promiscuous mode [ 66.444290][ T462] device bridge_slave_1 left promiscuous mode [ 66.450215][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.457532][ T462] device bridge_slave_0 left promiscuous mode [ 66.463575][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.470975][ T462] device veth1_macvtap left promiscuous mode [ 66.476823][ T462] device veth0_vlan left promiscuous mode