last executing test programs: 13.241028049s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 11.868605815s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 11.845896929s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 11.480134547s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 9.652214315s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 9.618099051s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 6.021744929s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 5.814782791s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 4.406218634s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 3.330270404s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380), 0x45, 0x7ac, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 3.255683136s ago: executing program 4: syz_btf_id_by_name$bpf_lsm(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.729232159s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 2.519967362s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x7) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_open_procfs(r4, &(0x7f0000000280)='attr/exec\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r11}, 0x10) 2.338493301s ago: executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00', 0x0) r1 = dup(r0) ioprio_set$pid(0x2, 0x0, 0x6000) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1, 0x0, 0x0, 0x19) 2.329723652s ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.810599784s ago: executing program 2: prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 1.589697139s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 1.559670474s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x400) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) 1.532907968s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21000006}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) 1.505785662s ago: executing program 1: syz_btf_id_by_name$bpf_lsm(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.046210145s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x200000}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 997.952502ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 777.515857ms ago: executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a405dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=r6, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 607.454384ms ago: executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="c608bfa5b4157eb516d1f774ee525817853efa978e2d910ff48d0e2b1e8358bab7af38e9eac3413d2df2ce478881125429b3f005b253cb8a2838220e873b2b1bad6f1981dc04553cdd911999be50e98d6953859739a190dd34b67f1feb476705f613ade753b7db03e03e6bf53c0adb371c06faaf6dd49626dbb10f2438b3e35b164887e3f09bac36eeebf3dbf302a1ea1c33607a53fd12cc", @ANYRESDEC], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xd8b8, 0x9, 0x6, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 137.875428ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) 116.538411ms ago: executing program 3: mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x3d, &(0x7f0000abaff9)={0x0, 0xea60}, 0x8) 94.332535ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x12, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r1, 0x1}, 0x20) 69.698179ms ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000050000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00', r3}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 36.681984ms ago: executing program 3: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 0s ago: executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): 1a7cea9 code=0x7ffc0000 [ 194.859752][ T28] audit: type=1326 audit(1718573117.490:25104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 194.866691][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.883859][ T28] audit: type=1326 audit(1718573117.490:25105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 194.918165][ T28] audit: type=1326 audit(1718573117.490:25106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 194.944021][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.953627][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.962453][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.970930][ T39] usb 3-1: config 0 descriptor?? [ 195.896897][ T39] usb 3-1: string descriptor 0 read error: -71 [ 195.916699][ T39] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 195.925286][ T39] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 195.933230][ T39] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 195.941122][ T39] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 195.948398][ T39] uclogic: probe of 0003:256C:006D.0022 failed with error -71 [ 195.956710][ T39] usb 3-1: USB disconnect, device number 23 [ 197.170561][ T6673] tipc: Enabling of bearer rejected, failed to enable media [ 197.204330][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.254650][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.261913][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.269604][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.276858][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.284002][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.291742][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.299042][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.306193][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.313390][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.320646][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.325442][ T6703] loop2: detected capacity change from 0 to 1024 [ 197.327840][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.334124][ T6703] EXT4-fs: Ignoring removed oldalloc option [ 197.341217][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.354121][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.361292][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.361460][ T6703] EXT4-fs: dax option not supported [ 197.368511][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.368534][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.368555][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.368576][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.402347][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.409523][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.416731][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.423906][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.431150][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.438339][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.445522][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.452764][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.459967][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.467225][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.474336][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.481571][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.488756][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.495955][ T707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 197.504768][ T707] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 197.516609][ T39] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 197.876661][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.886652][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.895413][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.059521][ T6707] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 198.069944][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.078975][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.087085][ T39] usb 4-1: Product: syz [ 198.091135][ T39] usb 4-1: Manufacturer: syz [ 198.095522][ T39] usb 4-1: SerialNumber: syz [ 198.145786][ T6708] loop1: detected capacity change from 0 to 512 [ 198.152551][ T6708] EXT4-fs: Ignoring removed bh option [ 198.158240][ T39] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 198.162339][ T6708] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #11614: comm syz-executor.1: iget: illegal inode # [ 198.164904][ T39] cdc_ncm 4-1:1.0: bind() failure [ 198.178964][ T6708] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 11614 err=-117 [ 198.196478][ T6708] EXT4-fs (loop1): 1 truncate cleaned up [ 198.202007][ T6708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.218565][ T5223] EXT4-fs (loop1): unmounting filesystem. [ 198.268797][ T6724] tipc: Enabling of bearer rejected, failed to enable media [ 198.432325][ T707] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 198.592247][ T6753] overlayfs: failed to resolve './file0': -2 [ 198.956699][ T707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 198.967831][ T707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 198.978736][ T707] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.991383][ T707] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.000227][ T707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.014294][ T707] usb 3-1: config 0 descriptor?? [ 199.036692][ T6710] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.497769][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.505035][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.512208][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.519504][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.526728][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.534201][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.542210][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.549637][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.557045][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.564270][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.571487][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.578707][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.585867][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.593096][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.600319][ T707] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 199.608458][ T707] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 199.627364][ T707] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 199.682306][ T6783] loop1: detected capacity change from 0 to 40427 [ 199.689207][ T6783] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 199.696793][ T6783] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 199.705537][ T6783] F2FS-fs (loop1): invalid crc value [ 199.712264][ T6783] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 199.735757][ T6783] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 199.742679][ T6783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.810919][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 199.810937][ T28] audit: type=1400 audit(1718573122.700:25118): avc: denied { mounton } for pid=6788 comm="syz-executor.1" path="/root/syzkaller-testdir1556355268/syzkaller.6IZgBD/169/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.849397][ T28] audit: type=1400 audit(1718573122.740:25119): avc: denied { search } for pid=5223 comm="syz-executor.1" name="/" dev="configfs" ino=12380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.025203][ T6797] fuse: Bad value for 'fd' [ 200.270228][ T334] usb 3-1: USB disconnect, device number 24 [ 200.288978][ T707] usb 4-1: USB disconnect, device number 19 [ 200.304890][ T6823] loop0: detected capacity change from 0 to 1024 [ 200.322461][ T6823] EXT4-fs: Ignoring removed nobh option [ 200.330627][ T6823] EXT4-fs: test_dummy_encryption requires encrypt feature [ 200.391007][ T28] audit: type=1400 audit(1718573123.280:25120): avc: denied { read } for pid=6822 comm="syz-executor.0" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.427222][ T28] audit: type=1400 audit(1718573123.310:25121): avc: denied { open } for pid=6822 comm="syz-executor.0" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.836687][ T334] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 200.897698][ T6855] loop0: detected capacity change from 0 to 40427 [ 200.904592][ T6855] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 200.912158][ T6855] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 200.921036][ T6855] F2FS-fs (loop0): invalid crc value [ 200.927586][ T6855] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 200.950559][ T6855] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 200.957529][ T6855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.136630][ T707] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 201.236977][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 201.248801][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 201.259858][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.272569][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.281396][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.289939][ T334] usb 3-1: config 0 descriptor?? [ 201.304094][ T28] audit: type=1400 audit(1718573124.190:25122): avc: denied { read } for pid=6893 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.327153][ T6848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 201.496771][ T707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.516611][ T707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.525322][ T707] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.542667][ T6911] loop0: detected capacity change from 0 to 40427 [ 201.550666][ T6911] F2FS-fs (loop0): journaled quota format not specified [ 201.696675][ T707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.711202][ T707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.726669][ T707] usb 4-1: Product: syz [ 201.730668][ T707] usb 4-1: Manufacturer: syz [ 201.735085][ T707] usb 4-1: SerialNumber: syz [ 201.777464][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.784715][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.787032][ T707] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 201.801060][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.812122][ T707] cdc_ncm 4-1:1.0: bind() failure [ 201.816620][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.828297][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.836127][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.843704][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.851138][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.858641][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.866149][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.873446][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.880799][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.881593][ T6927] loop0: detected capacity change from 0 to 40427 [ 201.888066][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.895060][ T6927] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 201.901567][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.909056][ T6927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.916289][ T334] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 201.925077][ T6927] F2FS-fs (loop0): invalid crc value [ 201.931726][ T334] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 201.937929][ T6927] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 201.945184][ T334] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.974958][ T6927] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.979036][ T28] audit: type=1400 audit(1718573124.870:25123): avc: denied { read } for pid=6934 comm="syz-executor.1" name="file0" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 201.996808][ T6927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.021768][ T28] audit: type=1400 audit(1718573124.900:25124): avc: denied { open } for pid=6934 comm="syz-executor.1" path="/root/syzkaller-testdir1556355268/syzkaller.6IZgBD/199/file0" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 202.050217][ T28] audit: type=1400 audit(1718573124.900:25125): avc: denied { ioctl } for pid=6934 comm="syz-executor.1" path="/root/syzkaller-testdir1556355268/syzkaller.6IZgBD/199/file0" dev="sda1" ino=1963 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 202.389594][ T6945] overlayfs: failed to resolve './file0': -2 [ 202.584101][ T28] audit: type=1326 audit(1718573125.440:25126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676ac7cea9 code=0x7ffc0000 [ 202.667794][ T28] audit: type=1326 audit(1718573125.440:25127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676ac7cea9 code=0x7ffc0000 [ 202.707988][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.727782][ T692] usb 3-1: USB disconnect, device number 25 [ 203.312426][ T6983] loop0: detected capacity change from 0 to 512 [ 203.319182][ T6983] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.328923][ T692] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 203.338231][ T6983] EXT4-fs (loop0): 1 orphan inode deleted [ 203.343770][ T6983] EXT4-fs (loop0): 1 truncate cleaned up [ 203.349275][ T6983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.428515][ T334] usb 4-1: USB disconnect, device number 20 [ 203.686686][ T692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 203.698076][ T692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 203.709071][ T692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.721773][ T692] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.730588][ T692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.739243][ T692] usb 3-1: config 0 descriptor?? [ 203.756659][ T6978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 203.947079][ T6431] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 204.058107][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 204.199596][ T7035] request_module fs-rpc_pipefs succeeded, but still no fs? [ 204.217160][ T7037] tipc: Invalid UDP bearer configuration [ 204.217182][ T7037] tipc: Enabling of bearer rejected, failed to enable media [ 204.217516][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.237718][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.244883][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.252352][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.258939][ T7040] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 204.259587][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.274001][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.281189][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.288396][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.295561][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.302841][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.310026][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.313479][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.317184][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.317207][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.317226][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.317244][ T692] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 204.317430][ T692] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 204.326865][ T6431] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.343991][ T692] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 204.354713][ T6431] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.395573][ T6431] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.596729][ T6431] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.605692][ T6431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.614003][ T6431] usb 4-1: Product: syz [ 204.618095][ T6431] usb 4-1: Manufacturer: syz [ 204.622474][ T6431] usb 4-1: SerialNumber: syz [ 204.677083][ T6431] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 204.683691][ T6431] cdc_ncm 4-1:1.0: bind() failure [ 204.989173][ T692] usb 3-1: USB disconnect, device number 26 [ 205.083434][ T7073] overlayfs: failed to resolve './file0': -2 [ 205.301134][ T7085] device batadv_slave_1 entered promiscuous mode [ 205.308169][ T7085] bpf_get_probe_write_proto: 10 callbacks suppressed [ 205.308202][ T7085] syz-executor.2[7085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.314856][ T7085] syz-executor.2[7085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.330380][ T7085] incfs: Error accessing: ./bus. [ 205.346716][ T7085] incfs: mount failed -20 [ 205.392854][ T7084] device batadv_slave_1 left promiscuous mode [ 205.413880][ T7100] device syzkaller0 entered promiscuous mode [ 205.421246][ T7100] device syzkaller0 left promiscuous mode [ 205.543399][ T7121] loop2: detected capacity change from 0 to 128 [ 205.552188][ T7121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.560740][ T7121] ext4 filesystem being mounted at /root/syzkaller-testdir2918318596/syzkaller.6JPkrD/179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 205.613173][ T4727] EXT4-fs (loop2): unmounting filesystem. [ 206.742698][ T3051] usb 4-1: USB disconnect, device number 21 [ 206.962836][ T7165] loop2: detected capacity change from 0 to 128 [ 206.979580][ T7165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.988647][ T7165] ext4 filesystem being mounted at /root/syzkaller-testdir2918318596/syzkaller.6JPkrD/193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 207.147190][ T4727] EXT4-fs (loop2): unmounting filesystem. [ 207.178427][ T7169] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.482400][ T7194] loop3: detected capacity change from 0 to 128 [ 207.490509][ T7194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.499199][ T7194] ext4 filesystem being mounted at /root/syzkaller-testdir2443021031/syzkaller.PytDVR/145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 207.546830][ T5184] EXT4-fs (loop3): unmounting filesystem. [ 207.606707][ T6431] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 207.617111][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 207.617125][ T28] audit: type=1326 audit(1718573130.510:25149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.647194][ T28] audit: type=1326 audit(1718573130.510:25150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.676827][ T28] audit: type=1326 audit(1718573130.510:25151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.692509][ T7202] incfs: Options parsing error. -22 [ 207.700745][ T28] audit: type=1326 audit(1718573130.510:25152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.705764][ T7202] incfs: mount failed -22 [ 207.729552][ T28] audit: type=1326 audit(1718573130.510:25153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.757828][ T28] audit: type=1326 audit(1718573130.510:25154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.781772][ T28] audit: type=1326 audit(1718573130.560:25155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff351a7cea9 code=0x7ffc0000 [ 207.806007][ T28] audit: type=1326 audit(1718573130.560:25156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff351a7a627 code=0x7ffc0000 [ 207.830220][ T28] audit: type=1326 audit(1718573130.560:25157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff351a40309 code=0x7ffc0000 [ 207.854070][ T28] audit: type=1326 audit(1718573130.560:25158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff351a7a627 code=0x7ffc0000 [ 208.006690][ T6431] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.016963][ T6431] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.025887][ T6431] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.098138][ T7219] fuse: Bad value for 'fd' [ 208.216711][ T6431] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.229989][ T6431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.238063][ T6431] usb 3-1: Product: syz [ 208.242042][ T6431] usb 3-1: Manufacturer: syz [ 208.246469][ T6431] usb 3-1: SerialNumber: syz [ 208.296940][ T6431] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 208.303569][ T6431] cdc_ncm 3-1:1.0: bind() failure [ 208.715529][ T7232] overlayfs: failed to resolve './file0': -2 [ 208.846656][ T3051] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.076083][ T7238] device vlan2 entered promiscuous mode [ 209.190784][ T7254] device batadv_slave_1 entered promiscuous mode [ 209.197608][ T7254] syz-executor.1[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.197667][ T7254] syz-executor.1[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.209219][ T3051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.231807][ T3051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.241433][ T3051] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 209.250349][ T3051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.254311][ T7254] incfs: Error accessing: ./bus. [ 209.258871][ T3051] usb 4-1: config 0 descriptor?? [ 209.263085][ T7254] incfs: mount failed -20 [ 209.318997][ T7253] device batadv_slave_1 left promiscuous mode [ 209.486707][ T7262] device vlan2 entered promiscuous mode [ 209.754659][ T3051] hid-led 0003:27B8:01ED.0027: unbalanced delimiter at end of report description [ 209.765272][ T3051] hid-led: probe of 0003:27B8:01ED.0027 failed with error -22 [ 209.953398][ T6431] usb 4-1: USB disconnect, device number 22 [ 210.335249][ T6431] usb 3-1: USB disconnect, device number 27 [ 210.535832][ T7282] loop2: detected capacity change from 0 to 1024 [ 210.542975][ T7282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.555434][ T7282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.186061][ T4727] EXT4-fs (loop2): unmounting filesystem. [ 212.196573][ T7286] loop3: detected capacity change from 0 to 40427 [ 212.204959][ T7286] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 212.213295][ T7286] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 212.233076][ T7286] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 212.261518][ T7286] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.306170][ T7286] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 212.313224][ T7286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.322763][ T7313] overlayfs: failed to get inode (-116) [ 212.328325][ T7313] overlayfs: failed to get inode (-116) [ 212.333527][ T7286] syz-executor.3: attempt to access beyond end of device [ 212.333527][ T7286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.442155][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.561817][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.654313][ T7320] input: syz1 as /devices/virtual/input/input36 [ 212.720143][ T7323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.842194][ T7337] loop2: detected capacity change from 0 to 2048 [ 213.053901][ T7351] input: syz1 as /devices/virtual/input/input37 [ 213.103081][ T7353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.665115][ T7377] loop2: detected capacity change from 0 to 256 [ 213.678308][ T7377] exfat: Unknown parameter 'Öè€bH4 j«‘7Œ_?y¼ ”­ƒ)2"Dk·.I½”ð¤kĸ^É_iÕ»ûóôšìhmØT2y' [ 213.907788][ T7390] hub 6-0:1.0: USB hub found [ 213.912323][ T7390] hub 6-0:1.0: 1 port detected [ 214.008541][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.521233][ T5223] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 214.791392][ T7412] overlayfs: unrecognized mount option "obj_role=" or missing value [ 215.034714][ T7423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.334054][ T7437] input: syz1 as /devices/virtual/input/input38 [ 215.591389][ T28] kauditd_printk_skb: 4292 callbacks suppressed [ 215.591406][ T28] audit: type=1326 audit(1718573138.480:29451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.621365][ T28] audit: type=1326 audit(1718573138.480:29452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.645661][ T28] audit: type=1326 audit(1718573138.480:29453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.670260][ T28] audit: type=1326 audit(1718573138.480:29454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.694150][ T28] audit: type=1326 audit(1718573138.540:29455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.718023][ T28] audit: type=1326 audit(1718573138.540:29456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b90c7cea9 code=0x7ffc0000 [ 215.741859][ T28] audit: type=1326 audit(1718573138.540:29457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b90c7a627 code=0x7ffc0000 [ 215.765546][ T28] audit: type=1326 audit(1718573138.540:29458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b90c40309 code=0x7ffc0000 [ 215.789398][ T28] audit: type=1326 audit(1718573138.540:29459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b90c7a627 code=0x7ffc0000 [ 215.813152][ T28] audit: type=1326 audit(1718573138.540:29460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b90c40309 code=0x7ffc0000 [ 215.851958][ T7446] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 215.970115][ T7452] loop3: detected capacity change from 0 to 256 [ 215.985785][ T7452] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 215.998138][ T7452] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 216.767403][ T7465] overlayfs: unrecognized mount option "obj_role=" or missing value [ 216.872122][ T7479] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 216.886628][ T7479] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 216.940240][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.967093][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.118131][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.125077][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.132348][ T7489] device bridge_slave_0 entered promiscuous mode [ 217.139722][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.146648][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.745468][ T7494] overlayfs: unrecognized mount option "obj_role=" or missing value [ 217.750170][ T7489] device bridge_slave_1 entered promiscuous mode [ 217.851388][ T7516] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 217.889381][ T7516] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 217.915735][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.937222][ T7526] IPv6: sit2: Disabled Multicast RS [ 217.943081][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.990689][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.999701][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.017583][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.025839][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.064569][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.071611][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.079175][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.103526][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.113084][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.121728][ T6431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.226868][ T7535] overlayfs: unrecognized mount option "obj_role=" or missing value [ 218.318178][ T3051] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 218.497291][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.505267][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.513130][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.521210][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.559626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.591123][ T7489] device veth0_vlan entered promiscuous mode [ 218.617392][ T356] device bridge_slave_1 left promiscuous mode [ 218.623355][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.634461][ T356] device bridge_slave_0 left promiscuous mode [ 218.642331][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.653718][ T356] device veth1_macvtap left promiscuous mode [ 218.659638][ T356] device veth0_vlan left promiscuous mode [ 218.686674][ T3051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.700176][ T7541] loop0: detected capacity change from 0 to 512 [ 218.706310][ T3051] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.720694][ T3051] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.729829][ T3051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.738579][ T3051] usb 3-1: config 0 descriptor?? [ 218.757225][ T7541] EXT4-fs (loop0): 1 orphan inode deleted [ 218.762832][ T7541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.771715][ T7541] ext4 filesystem being mounted at /root/syzkaller-testdir2274290502/syzkaller.aoSwXZ/236/file1 supports timestamps until 2038 (0x7fffffff) [ 218.880556][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.888851][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.896238][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.925369][ T7489] device veth1_macvtap entered promiscuous mode [ 218.936931][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.944926][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.959553][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.962138][ T7559] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 218.974799][ T7559] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 218.980722][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 218.994427][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.008805][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.022228][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.030818][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.135214][ T7572] IPv6: sit1: Disabled Multicast RS [ 219.732387][ T3051] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 219.759717][ T7569] input: syz1 as /devices/virtual/input/input39 [ 219.803886][ T3051] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 219.955536][ T3051] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 219.981410][ T3051] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 220.002680][ T7583] loop0: detected capacity change from 0 to 512 [ 220.040603][ T7583] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 220.074367][ T7583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 220.097080][ T7583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 220.113673][ T7583] EXT4-fs (loop0): 1 orphan inode deleted [ 220.119307][ T7583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.189764][ T7597] overlayfs: unrecognized mount option "obj_role=" or missing value [ 220.507891][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.000813][ T7616] syz-executor.3[7616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.000888][ T7616] syz-executor.3[7616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.049039][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 221.118670][ T7625] syz-executor.1[7625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.118780][ T7625] syz-executor.1[7625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.136086][ T7625] syz-executor.1[7625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.147731][ T7625] syz-executor.1[7625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.231632][ T7645] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.316026][ T7649] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 221.714004][ T7654] loop4: detected capacity change from 0 to 40427 [ 221.723257][ T7654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.756258][ T7654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.803758][ T7489] syz-executor.4: attempt to access beyond end of device [ 221.803758][ T7489] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.927990][ T7665] syz-executor.4[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.928040][ T7665] syz-executor.4[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.940163][ T7665] syz-executor.4[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.952308][ T7665] syz-executor.4[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.967658][ T3051] usb 3-1: USB disconnect, device number 28 [ 222.050378][ T7688] device syzkaller0 entered promiscuous mode [ 222.168037][ T7712] loop0: detected capacity change from 0 to 128 [ 222.195094][ T7720] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.218947][ T7723] loop3: detected capacity change from 0 to 16 [ 222.225642][ T7723] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.233437][ T7723] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 222.242746][ T7723] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[49, 4047] out[1851] [ 222.255397][ T7723] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 222.277287][ T7729] IPv6: sit1: Disabled Multicast RS [ 222.446650][ T3051] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.557827][ T7755] loop0: detected capacity change from 0 to 16 [ 222.564512][ T7755] erofs: (device loop0): mounted with root inode @ nid 36. [ 222.572588][ T7755] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 222.581844][ T7755] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[49, 4047] out[1851] [ 222.594840][ T7755] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 222.715160][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.730991][ T7763] loop0: detected capacity change from 0 to 512 [ 222.846104][ T7767] loop3: detected capacity change from 0 to 512 [ 222.857640][ T28] kauditd_printk_skb: 3418 callbacks suppressed [ 222.857850][ T28] audit: type=1400 audit(1718573145.710:32879): avc: denied { remount } for pid=7760 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 222.884776][ T7767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.973060][ T7767] EXT4-fs (loop3): 1 orphan inode deleted [ 222.978839][ T7767] EXT4-fs (loop3): 1 truncate cleaned up [ 222.978854][ T7763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.984287][ T7767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.001767][ T7763] ext4 filesystem being mounted at /root/syzkaller-testdir2274290502/syzkaller.aoSwXZ/268/file0 supports timestamps until 2038 (0x7fffffff) [ 223.016434][ T3051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.035640][ T3051] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.048952][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 223.054598][ T3051] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.063500][ T3051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.073620][ T3051] usb 3-1: config 0 descriptor?? [ 223.110755][ T7777] loop0: detected capacity change from 0 to 1024 [ 223.118517][ T7777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.132160][ T7775] overlayfs: failed to resolve './file1': -2 [ 223.141313][ T7777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.173490][ T4394] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2740: inode #2: comm syz-executor.0: corrupted in-inode xattr [ 223.189720][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 223.190397][ T7786] loop4: detected capacity change from 0 to 16 [ 223.202034][ T7786] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.207928][ T7788] IPv6: sit1: Disabled Multicast RS [ 223.210054][ T7786] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.223483][ T7786] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[49, 4047] out[1851] [ 223.236259][ T7786] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 223.272265][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.454236][ T7802] binder: 7789:7802 ioctl c0306201 20000300 returned -22 [ 223.697876][ T3051] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 223.708400][ T3051] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 223.716240][ T3051] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 223.716351][ T5184] EXT4-fs (loop3): unmounting filesystem. [ 223.724954][ T3051] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 223.780614][ T7809] overlayfs: failed to resolve './file1': -2 [ 224.210074][ T7825] IPv6: sit1: Disabled Multicast RS [ 225.095738][ T28] audit: type=1326 audit(1718573147.980:32880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676ac7cea9 code=0x0 [ 225.165403][ T7846] overlayfs: failed to resolve './file1': -2 [ 225.231004][ T7847] loop3: detected capacity change from 0 to 512 [ 225.242006][ T7847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.287509][ T7850] loop0: detected capacity change from 0 to 1024 [ 225.297546][ T7850] EXT4-fs: Ignoring removed orlov option [ 225.304619][ T7850] EXT4-fs (loop0): Test dummy encryption mode enabled [ 225.392030][ T7847] EXT4-fs (loop3): 1 orphan inode deleted [ 225.397761][ T7847] EXT4-fs (loop3): 1 truncate cleaned up [ 225.403246][ T7847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.461843][ T7850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.712803][ T7853] loop4: detected capacity change from 0 to 2048 [ 225.723239][ T7850] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 225.782960][ T28] audit: type=1400 audit(1718573148.670:32881): avc: denied { mounton } for pid=7842 comm="syz-executor.0" path="/root/syzkaller-testdir2274290502/syzkaller.aoSwXZ/274/file0/bus/bus" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.815357][ T7856] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 225.849411][ T28] audit: type=1400 audit(1718573148.730:32882): avc: denied { map } for pid=7842 comm="syz-executor.0" path="/root/syzkaller-testdir2274290502/syzkaller.aoSwXZ/274/file0/bus/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.907033][ T7857] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 225.918493][ T5184] EXT4-fs (loop3): unmounting filesystem. [ 225.964104][ T28] audit: type=1400 audit(1718573148.850:32883): avc: denied { unlink } for pid=4394 comm="syz-executor.0" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.994518][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 226.007533][ T28] audit: type=1400 audit(1718573148.880:32884): avc: denied { unmount } for pid=4394 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 226.030582][ T7853] loop4: unable to read partition table [ 226.036930][ T7853] loop4: partition table beyond EOD, truncated [ 226.045774][ T7853] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 226.191980][ T692] usb 3-1: USB disconnect, device number 29 [ 226.214214][ T7871] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 226.267693][ T28] audit: type=1400 audit(1718573149.130:32885): avc: denied { getopt } for pid=7872 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.295659][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.334095][ T7883] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 226.392195][ T7885] bpf_get_probe_write_proto: 18 callbacks suppressed [ 226.392228][ T7885] syz-executor.1[7885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.399118][ T7885] syz-executor.1[7885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.817232][ T28] audit: type=1326 audit(1718573149.710:32886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676ac7cea9 code=0x0 [ 227.085225][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.092328][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.099713][ T7894] device bridge_slave_0 entered promiscuous mode [ 227.107070][ T7903] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 227.117411][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.125357][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.135783][ T7894] device bridge_slave_1 entered promiscuous mode [ 227.186609][ T334] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 227.227253][ T7913] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 227.261245][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.268782][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.286851][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.295088][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.304222][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.311072][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.318388][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.326443][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.334533][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.341393][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.348596][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.356485][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.364225][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.372035][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.379945][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.392235][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.400573][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.417367][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.425471][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.433479][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.441710][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.449831][ T7894] device veth0_vlan entered promiscuous mode [ 227.456924][ T664] device bridge_slave_1 left promiscuous mode [ 227.462857][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.470307][ T664] device bridge_slave_0 left promiscuous mode [ 227.476254][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.484708][ T664] device veth1_macvtap left promiscuous mode [ 227.500786][ T664] device veth0_vlan left promiscuous mode [ 227.578151][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.588886][ T334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.601864][ T334] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.610935][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.624316][ T7894] device veth1_macvtap entered promiscuous mode [ 227.631102][ T334] usb 5-1: config 0 descriptor?? [ 227.637142][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.645159][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.653882][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.661405][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.669949][ T28] audit: type=1400 audit(1718573150.570:32887): avc: denied { unlink } for pid=7935 comm="syz-executor.1" name="#61" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.670700][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.283635][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.291971][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.422215][ T7946] loop0: detected capacity change from 0 to 512 [ 228.437425][ T7946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.536293][ T7946] EXT4-fs (loop0): 1 orphan inode deleted [ 228.541933][ T7946] EXT4-fs (loop0): 1 truncate cleaned up [ 228.547406][ T7946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.598663][ T334] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 228.672483][ T334] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 228.697693][ T334] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 228.706195][ T334] plantronics 0003:047F:FFFF.002A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 228.731744][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 228.763338][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.799477][ T7968] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 228.907702][ T7968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.676862][ T28] audit: type=1326 audit(1718573152.570:32888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b90c7cea9 code=0x0 [ 229.906615][ T692] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 230.118711][ T8001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.212974][ T8005] loop0: detected capacity change from 0 to 512 [ 230.223530][ T8005] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.308943][ T8005] EXT4-fs (loop0): 1 orphan inode deleted [ 230.314660][ T8005] EXT4-fs (loop0): 1 truncate cleaned up [ 230.320180][ T8005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.357503][ T8010] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 230.366676][ T692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.367021][ T8010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.408329][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.417488][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.556640][ T692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.565667][ T692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.573453][ T692] usb 4-1: Product: syz [ 230.577471][ T692] usb 4-1: Manufacturer: syz [ 230.581865][ T692] usb 4-1: SerialNumber: syz [ 230.832887][ T3051] usb 5-1: USB disconnect, device number 20 [ 230.916354][ T28] audit: type=1326 audit(1718573153.800:32889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 230.941159][ T28] audit: type=1326 audit(1718573153.800:32890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 230.965426][ T4394] EXT4-fs (loop0): unmounting filesystem. [ 230.965506][ T28] audit: type=1326 audit(1718573153.800:32891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 230.996984][ T28] audit: type=1326 audit(1718573153.800:32892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.021349][ T28] audit: type=1326 audit(1718573153.800:32893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.035450][ T8038] loop4: detected capacity change from 0 to 256 [ 231.052260][ T28] audit: type=1326 audit(1718573153.800:32894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.059246][ T8039] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 231.078493][ T28] audit: type=1326 audit(1718573153.800:32895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.087421][ T8038] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 231.109211][ T28] audit: type=1326 audit(1718573153.800:32896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.121464][ T8039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.144563][ T28] audit: type=1326 audit(1718573153.800:32897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 231.475392][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.516675][ T3051] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.595078][ T8068] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 231.604759][ T8068] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.806681][ T692] cdc_ncm 4-1:1.0: failed to get mac address [ 231.886669][ T3051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.897654][ T3051] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.910477][ T3051] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.919711][ T3051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.928009][ T3051] usb 5-1: config 0 descriptor?? [ 232.026638][ T692] cdc_ncm 4-1:1.0: bind() failure [ 232.046614][ T692] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 232.066630][ T692] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 232.074155][ T692] usb 4-1: USB disconnect, device number 23 [ 232.272594][ T8099] device syzkaller0 entered promiscuous mode [ 233.667480][ T3051] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 233.681390][ T3051] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 233.689014][ T3051] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 233.701121][ T3051] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 233.788424][ T8109] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 234.637643][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.222213][ T8140] loop3: detected capacity change from 0 to 1024 [ 235.230863][ T8140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.258416][ T7894] EXT4-fs (loop3): unmounting filesystem. [ 235.319597][ T8144] overlayfs: unrecognized mount option "obj_role=" or missing value [ 235.586736][ T8152] device syzkaller0 entered promiscuous mode [ 235.888805][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.367414][ T333] usb 5-1: USB disconnect, device number 21 [ 236.392802][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 236.392818][ T28] audit: type=1326 audit(1718573159.280:33021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.437142][ T28] audit: type=1326 audit(1718573159.300:33022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.440883][ T8180] input: syz1 as /devices/virtual/input/input40 [ 236.461216][ T28] audit: type=1326 audit(1718573159.300:33023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.491036][ T28] audit: type=1326 audit(1718573159.300:33024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.515105][ T28] audit: type=1326 audit(1718573159.320:33025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.539080][ T28] audit: type=1326 audit(1718573159.320:33026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e4387a627 code=0x7ffc0000 [ 236.562976][ T28] audit: type=1326 audit(1718573159.320:33027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e43840309 code=0x7ffc0000 [ 236.586958][ T28] audit: type=1326 audit(1718573159.320:33028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5e4387cea9 code=0x7ffc0000 [ 236.629450][ T8182] device syzkaller0 entered promiscuous mode [ 236.635312][ T28] audit: type=1326 audit(1718573159.320:33029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e4387a627 code=0x7ffc0000 [ 236.671888][ T28] audit: type=1326 audit(1718573159.320:33030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e43840309 code=0x7ffc0000 [ 236.909229][ T8206] input: syz1 as /devices/virtual/input/input41 [ 236.996294][ T8211] overlayfs: unrecognized mount option "obj_role=" or missing value [ 237.311539][ T8228] loop3: detected capacity change from 0 to 512 [ 237.328258][ T8228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.420720][ T8233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 237.525493][ T7894] EXT4-fs (loop3): unmounting filesystem. [ 237.910417][ T8249] loop4: detected capacity change from 0 to 40427 [ 237.918314][ T8249] F2FS-fs (loop4): invalid crc value [ 237.924846][ T8249] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.976931][ T8249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 237.999759][ T8249] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 238.013829][ T8249] syz-executor.4: attempt to access beyond end of device [ 238.013829][ T8249] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 238.076633][ T336] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.159317][ T8272] overlayfs: unrecognized mount option "obj_role=" or missing value [ 238.316621][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 238.436669][ T336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.446347][ T336] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.456282][ T336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.465849][ T336] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 238.656654][ T336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.666287][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.674697][ T336] usb 4-1: Product: syz [ 238.678829][ T336] usb 4-1: Manufacturer: syz [ 238.683280][ T336] usb 4-1: SerialNumber: syz [ 238.728490][ T336] usb 4-1: bad CDC descriptors [ 238.750727][ T8307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 238.989306][ T3051] usb 4-1: USB disconnect, device number 24 [ 239.146278][ T8311] loop2: detected capacity change from 0 to 40427 [ 239.154316][ T8311] F2FS-fs (loop2): invalid crc value [ 239.161513][ T8311] F2FS-fs (loop2): Found nat_bits in checkpoint [ 239.202826][ T8311] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 239.220267][ T8311] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 239.229929][ T8311] syz-executor.2: attempt to access beyond end of device [ 239.229929][ T8311] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 239.590923][ T8333] loop4: detected capacity change from 0 to 512 [ 239.607788][ T8333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.635355][ T7489] EXT4-fs (loop4): unmounting filesystem. [ 239.709135][ T8344] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 239.851301][ T8348] overlayfs: unrecognized mount option "obj_role=" or missing value [ 240.131723][ T8347] loop4: detected capacity change from 0 to 40427 [ 240.143513][ T8347] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 240.151235][ T8347] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.160388][ T8347] F2FS-fs (loop4): invalid crc value [ 240.171228][ T8347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.210994][ T8347] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 240.217953][ T8347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 240.465961][ T8369] loop0: detected capacity change from 0 to 40427 [ 240.473818][ T8369] F2FS-fs (loop0): invalid crc value [ 240.532734][ T8369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 240.589404][ T8369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 240.620014][ T8369] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 240.633442][ T8369] syz-executor.0: attempt to access beyond end of device [ 240.633442][ T8369] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 240.787472][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 240.799303][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 241.874550][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.880591][ T4019] Bluetooth: hci0: command 0x1003 tx timeout [ 242.850169][ T8465] overlayfs: unrecognized mount option "obj_role=" or missing value [ 243.426611][ T6431] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 243.867921][ T8485] loop4: detected capacity change from 0 to 512 [ 243.874767][ T8485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.890232][ T8485] EXT4-fs (loop4): 1 orphan inode deleted [ 243.895855][ T8485] EXT4-fs (loop4): 1 truncate cleaned up [ 243.901628][ T8485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.926301][ T8494] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.966795][ T6431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.136925][ T6431] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.145946][ T6431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.154809][ T6431] usb 3-1: Product: syz [ 244.159317][ T6431] usb 3-1: Manufacturer: syz [ 244.163770][ T6431] usb 3-1: SerialNumber: syz [ 244.408452][ T7489] EXT4-fs (loop4): unmounting filesystem. [ 244.423694][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 244.423709][ T28] audit: type=1400 audit(1718573167.310:33126): avc: denied { link } for pid=8516 comm="syz-executor.4" name="file1" dev="incremental-fs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.090577][ T8556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 245.386636][ T6431] cdc_ncm 3-1:1.0: failed to get mac address [ 245.492776][ T8564] kvm [8563]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 245.501485][ T8564] kvm [8563]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 245.805213][ T6431] cdc_ncm 3-1:1.0: bind() failure [ 245.826648][ T6431] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 245.846629][ T6431] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 245.856649][ T6431] usb 3-1: USB disconnect, device number 30 [ 246.015256][ T8582] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.210700][ T8596] loop3: detected capacity change from 0 to 256 [ 246.230628][ T8596] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 246.249032][ T8596] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006005) [ 246.796719][ T3051] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 246.998066][ T28] audit: type=1400 audit(1718573169.890:33127): avc: denied { create } for pid=8639 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.081959][ T8636] kvm [8635]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 247.091048][ T8636] kvm [8635]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 247.196710][ T3051] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.496652][ T3051] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.505802][ T3051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.513821][ T3051] usb 5-1: Product: syz [ 247.517964][ T3051] usb 5-1: Manufacturer: syz [ 247.522483][ T3051] usb 5-1: SerialNumber: syz [ 248.319900][ T8680] loop2: detected capacity change from 0 to 2048 [ 248.359439][ T8680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.369814][ T28] audit: type=1400 audit(1718573171.260:33128): avc: denied { read } for pid=8679 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 248.437889][ T8688] usb usb8: usbfs: process 8688 (syz-executor.2) did not claim interface 0 before use [ 248.479275][ T4727] EXT4-fs (loop2): unmounting filesystem. [ 248.681536][ T8713] loop2: detected capacity change from 0 to 256 [ 248.692626][ T8713] FAT-fs (loop2): Directory bread(block 64) failed [ 248.697027][ T8703] kvm [8702]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 248.699229][ T8713] FAT-fs (loop2): Directory bread(block 65) failed [ 248.710218][ T8703] kvm [8702]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 248.714010][ T8713] FAT-fs (loop2): Directory bread(block 66) failed [ 248.730060][ T8713] FAT-fs (loop2): Directory bread(block 67) failed [ 248.736741][ T8713] FAT-fs (loop2): Directory bread(block 68) failed [ 248.745274][ T8713] FAT-fs (loop2): Directory bread(block 69) failed [ 248.752232][ T8713] FAT-fs (loop2): Directory bread(block 70) failed [ 248.759356][ T8713] FAT-fs (loop2): Directory bread(block 71) failed [ 248.766778][ T3051] cdc_ncm 5-1:1.0: failed to get mac address [ 248.829392][ T8713] FAT-fs (loop2): Directory bread(block 72) failed [ 248.836119][ T8713] FAT-fs (loop2): Directory bread(block 73) failed [ 248.986708][ T3051] cdc_ncm 5-1:1.0: bind() failure [ 249.006611][ T3051] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 249.026630][ T3051] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 249.036400][ T3051] usb 5-1: USB disconnect, device number 22 [ 249.212380][ T8717] loop2: detected capacity change from 0 to 40427 [ 249.227944][ T8717] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 249.242283][ T8717] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 249.256177][ T8717] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 249.275124][ T8717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.376870][ T8717] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 249.383767][ T8717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.427379][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.427412][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.444340][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.458796][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.467084][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.482323][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.493934][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.534252][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.552443][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.567990][ T28] audit: type=1326 audit(1718573172.460:33129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8741 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676ac7cea9 code=0x0 [ 249.573134][ T8717] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 249.682222][ T8747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.730593][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8748 comm=syz-executor.0 [ 249.871275][ T8758] sch_fq: defrate 0 ignored. [ 250.038157][ T8776] 9pnet_fd: Insufficient options for proto=fd [ 250.076633][ T6431] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 250.756634][ T6431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.926633][ T6431] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.935614][ T6431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.943485][ T6431] usb 5-1: Product: syz [ 250.947546][ T6431] usb 5-1: Manufacturer: syz [ 251.005578][ T6431] usb 5-1: SerialNumber: syz [ 251.016997][ T28] audit: type=1326 audit(1718573173.910:33130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e31a7cea9 code=0x0 [ 251.080135][ T8818] loop0: detected capacity change from 0 to 40427 [ 251.088098][ T8818] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 251.095684][ T8818] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 251.104517][ T8818] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 251.111917][ T8818] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.153177][ T8842] syz-executor.2[8842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.153254][ T8842] syz-executor.2[8842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.159081][ T8818] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 251.180342][ T8844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8844 comm=syz-executor.1 [ 251.183132][ T8818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.226175][ T8846] device syzkaller0 entered promiscuous mode [ 251.317094][ T8850] mmap: syz-executor.2 (8850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.371506][ T28] audit: type=1400 audit(1718573174.260:33131): avc: denied { wake_alarm } for pid=8853 comm="syz-executor.2" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.681549][ T8876] device syzkaller0 entered promiscuous mode [ 251.861662][ T8895] 9pnet_fd: Insufficient options for proto=fd [ 251.948560][ T8911] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 251.991164][ T8914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8914 comm=syz-executor.1 [ 252.102057][ T8931] loop2: detected capacity change from 0 to 256 [ 252.111656][ T8931] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 252.134795][ T28] audit: type=1400 audit(1718573175.020:33132): avc: denied { rename } for pid=8930 comm="syz-executor.2" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.166655][ T6431] cdc_ncm 5-1:1.0: failed to get mac address [ 252.254400][ T8942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8942 comm=syz-executor.0 [ 252.273165][ T8945] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 252.329882][ T8956] loop2: detected capacity change from 0 to 2048 [ 252.376635][ T6431] cdc_ncm 5-1:1.0: bind() failure [ 252.382085][ T8956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 252.402315][ T8956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.417084][ T6431] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 252.424214][ T8956] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 252.436634][ T8956] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.436634][ T8956] [ 252.439561][ T6431] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 252.446164][ T8956] EXT4-fs (loop2): Total free blocks count 0 [ 252.454178][ T6431] usb 5-1: USB disconnect, device number 23 [ 252.458338][ T8956] EXT4-fs (loop2): Free/Dirty block details [ 252.469796][ T8956] EXT4-fs (loop2): free_blocks=2415919104 [ 252.475244][ T8956] EXT4-fs (loop2): dirty_blocks=48 [ 252.480327][ T8956] EXT4-fs (loop2): Block reservation details [ 252.486182][ T8956] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 252.508055][ T4727] EXT4-fs (loop2): unmounting filesystem. [ 252.515509][ T28] audit: type=1400 audit(1718573175.400:33133): avc: denied { mount } for pid=8966 comm="syz-executor.0" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 252.525476][ T8969] syz-executor.2[8969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.537532][ T8969] syz-executor.2[8969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.538381][ T28] audit: type=1400 audit(1718573175.430:33134): avc: denied { remount } for pid=8966 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 253.046792][ T8980] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.157688][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.164720][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.171888][ T8987] device bridge_slave_0 entered promiscuous mode [ 253.178778][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.185625][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.193098][ T8987] device bridge_slave_1 entered promiscuous mode [ 253.466612][ T28] audit: type=1400 audit(1718573176.320:33135): avc: denied { unmount } for pid=4394 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 253.556648][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.585470][ T9001] device syzkaller0 entered promiscuous mode [ 253.597060][ T9000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=9000 comm=syz-executor.3 [ 253.628357][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.726394][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.733271][ T8987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.743659][ T9015] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 253.760814][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.768748][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.775925][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.784106][ T9018] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.793597][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.802047][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.810351][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.817340][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.824485][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.832455][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.839302][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.855879][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.863764][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.880640][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.891791][ T8987] device veth0_vlan entered promiscuous mode [ 253.899126][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.909868][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.917693][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.968466][ T8987] device veth1_macvtap entered promiscuous mode [ 253.977483][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.989056][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.243294][ T4394] bridge0: port 3(syz_tun) entered disabled state [ 254.250965][ T4394] device syz_tun left promiscuous mode [ 254.256276][ T4394] bridge0: port 3(syz_tun) entered disabled state [ 254.268710][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.541682][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.554279][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.567318][ T9054] device bridge_slave_0 entered promiscuous mode [ 254.574966][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.581955][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.589403][ T9054] device bridge_slave_1 entered promiscuous mode [ 254.670467][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.677523][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.685053][ T9058] device bridge_slave_0 entered promiscuous mode [ 254.692022][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.699210][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.706709][ T9058] device bridge_slave_1 entered promiscuous mode [ 254.720942][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.727828][ T9054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.734901][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.741704][ T9054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.824103][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.831015][ T9058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.838079][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.844849][ T9058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.881112][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.888959][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.896451][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.904165][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.911374][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.232354][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.247532][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.269491][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.280968][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.285136][ T9071] serio: Serial port pts0 [ 255.287934][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.299634][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.308041][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.314902][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.322462][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.330524][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.338445][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.346464][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.353318][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.360617][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.368640][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.375489][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.382817][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.433549][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.443148][ T9058] device veth0_vlan entered promiscuous mode [ 255.456055][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.465782][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.473079][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.501320][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.514554][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.525463][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.534439][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.543087][ T9058] device veth1_macvtap entered promiscuous mode [ 255.551514][ T28] audit: type=1400 audit(1718573178.440:33136): avc: denied { remount } for pid=9073 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 255.576974][ T664] device bridge_slave_1 left promiscuous mode [ 255.583505][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.591895][ T664] device bridge_slave_0 left promiscuous mode [ 255.599226][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.649544][ T9084] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 255.665140][ T664] device veth1_macvtap left promiscuous mode [ 255.671874][ T664] device veth0_vlan left promiscuous mode [ 255.795958][ T9095] loop4: detected capacity change from 0 to 2048 [ 255.808236][ T9095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.836415][ T9095] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 255.856770][ T9095] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 255.869237][ T9095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 255.869237][ T9095] [ 255.878827][ T9095] EXT4-fs (loop4): Total free blocks count 0 [ 255.884708][ T9095] EXT4-fs (loop4): Free/Dirty block details [ 255.890593][ T9095] EXT4-fs (loop4): free_blocks=2415919104 [ 255.896235][ T9095] EXT4-fs (loop4): dirty_blocks=48 [ 255.901223][ T9095] EXT4-fs (loop4): Block reservation details [ 255.907850][ T9095] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 255.922668][ T7489] EXT4-fs (loop4): unmounting filesystem. [ 255.961556][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.969232][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.977297][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.985345][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.993377][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.005018][ T9054] device veth0_vlan entered promiscuous mode [ 256.016791][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.029299][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.037593][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.044932][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.060995][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.069801][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.086505][ T9054] device veth1_macvtap entered promiscuous mode [ 256.102318][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.110785][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.119148][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.133495][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.141660][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.232456][ T9118] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 256.301255][ T28] audit: type=1400 audit(1718573179.190:33137): avc: denied { unmount } for pid=5223 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 256.359067][ T28] audit: type=1400 audit(1718573179.250:33138): avc: denied { read } for pid=9128 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.396606][ T28] audit: type=1400 audit(1718573179.270:33139): avc: denied { nlmsg_read } for pid=9130 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 256.485070][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.492218][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.499626][ T9133] device bridge_slave_0 entered promiscuous mode [ 256.508607][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.515482][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.522844][ T9133] device bridge_slave_1 entered promiscuous mode [ 256.618526][ T28] audit: type=1326 audit(1718573179.490:33140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.788011][ T28] audit: type=1326 audit(1718573179.500:33141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.812432][ T28] audit: type=1326 audit(1718573179.500:33142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.839517][ T28] audit: type=1326 audit(1718573179.500:33143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.863481][ T28] audit: type=1326 audit(1718573179.500:33144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.887490][ T28] audit: type=1326 audit(1718573179.500:33145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e31a7cea9 code=0x7ffc0000 [ 256.925991][ T9151] loop4: detected capacity change from 0 to 512 [ 256.944792][ T9151] EXT4-fs (loop4): 1 orphan inode deleted [ 256.950424][ T9151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.959320][ T9151] ext4 filesystem being mounted at /root/syzkaller-testdir2137898813/syzkaller.wL5tr6/115/file1 supports timestamps until 2038 (0x7fffffff) [ 257.007935][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.014941][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.023056][ T9136] device bridge_slave_0 entered promiscuous mode [ 257.039065][ T9157] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 257.054608][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.061708][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.069475][ T9136] device bridge_slave_1 entered promiscuous mode [ 258.239825][ T9150] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 258.254394][ T9150] EXT4-fs (loop4): Remounting filesystem read-only [ 258.260874][ T9150] EXT4-fs error (device loop4): ext4_discard_preallocations:5109: comm syz-executor.4: Error -117 reading block bitmap for 0 [ 258.305355][ T7489] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.363001][ T7489] EXT4-fs (loop4): unmounting filesystem. [ 258.477223][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.484518][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.492335][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.500478][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.508684][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.515522][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.523436][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.531693][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.540475][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.547766][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.554894][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.562946][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.570821][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.578726][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.626930][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.650287][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.666912][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.680549][ T9133] device veth0_vlan entered promiscuous mode [ 258.696798][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.704622][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.747862][ T664] device bridge_slave_1 left promiscuous mode [ 258.753953][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.761690][ T664] device bridge_slave_0 left promiscuous mode [ 258.767935][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.775981][ T664] device bridge_slave_1 left promiscuous mode [ 258.782146][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.789583][ T664] device bridge_slave_0 left promiscuous mode [ 258.795546][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.817564][ T664] device bridge_slave_1 left promiscuous mode [ 258.823619][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.831087][ T664] device bridge_slave_0 left promiscuous mode [ 258.837153][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.845796][ T664] device veth1_macvtap left promiscuous mode [ 258.851765][ T664] device veth0_vlan left promiscuous mode [ 258.857634][ T664] device veth1_macvtap left promiscuous mode [ 258.863479][ T664] device veth0_vlan left promiscuous mode [ 258.869436][ T664] device veth1_macvtap left promiscuous mode [ 258.875277][ T664] device veth0_vlan left promiscuous mode [ 259.298226][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.305600][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.313672][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.327982][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.336370][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.345381][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.354067][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.360929][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.368577][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.377497][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.386035][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.392890][ T692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.400168][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.409468][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.430755][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.437664][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.444786][ T9170] device bridge_slave_0 entered promiscuous mode [ 259.452346][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.459384][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.466992][ T9170] device bridge_slave_1 entered promiscuous mode [ 259.476571][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.484629][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.509726][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.517910][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.525953][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.533958][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.542878][ T9133] device veth1_macvtap entered promiscuous mode [ 259.556260][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.563862][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.571811][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.579708][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.587028][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.605961][ T9136] device veth0_vlan entered promiscuous mode [ 259.636033][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.644271][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.656283][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.663241][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.670854][ T9185] device bridge_slave_0 entered promiscuous mode [ 259.678109][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.684987][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.692213][ T9185] device bridge_slave_1 entered promiscuous mode [ 259.702307][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.710588][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.746267][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.754373][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.776330][ T9136] device veth1_macvtap entered promiscuous mode [ 259.800636][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.808571][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.816684][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.877389][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.885463][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.950646][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.958437][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.979241][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.987326][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.994144][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.001380][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.009393][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.016213][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.024155][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.097976][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.105887][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.140945][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.148919][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.156963][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.163818][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.171736][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.179703][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.186547][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.200756][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.207669][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.214826][ T9206] device bridge_slave_0 entered promiscuous mode [ 260.222442][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.231060][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.247231][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.254113][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.261636][ T9206] device bridge_slave_1 entered promiscuous mode [ 260.270442][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.293496][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.301583][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.309638][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.317171][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.340212][ T9170] device veth0_vlan entered promiscuous mode [ 260.394105][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.409568][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.421810][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.428860][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.435941][ T9214] device bridge_slave_0 entered promiscuous mode [ 260.463321][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.470530][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.477714][ T9214] device bridge_slave_1 entered promiscuous mode [ 260.491160][ T9170] device veth1_macvtap entered promiscuous mode [ 260.498306][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.505979][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.513954][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.521256][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.554825][ T9185] device veth0_vlan entered promiscuous mode [ 260.574114][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.582955][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.627957][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.636100][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.644362][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.651689][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.659089][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.667316][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.675246][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.682086][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.689415][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.697523][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.705430][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.712267][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.725881][ T9185] device veth1_macvtap entered promiscuous mode [ 260.742131][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.750103][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.758140][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.766060][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.773470][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.781296][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.827757][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.835777][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.843839][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.852828][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.875599][ T9206] device veth0_vlan entered promiscuous mode [ 260.912966][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.923808][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.932219][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.940743][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.948407][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.147533][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.155652][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.165450][ T9206] device veth1_macvtap entered promiscuous mode [ 261.226783][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.234264][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.244495][ T9226] device wg2 entered promiscuous mode [ 261.275391][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.287009][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.301633][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.315399][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.407403][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.414760][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.450459][ T9249] loop4: detected capacity change from 0 to 512 [ 261.458314][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.468348][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.476504][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.483384][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.490858][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.499296][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.506158][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.513542][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.521937][ T664] device bridge_slave_1 left promiscuous mode [ 261.528140][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.534125][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.543895][ T664] device bridge_slave_0 left promiscuous mode [ 261.544207][ T9249] ext4 filesystem being mounted at /root/syzkaller-testdir1264461882/syzkaller.yZPcIO/6/bus supports timestamps until 2038 (0x7fffffff) [ 261.552133][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.579893][ T664] device bridge_slave_1 left promiscuous mode [ 261.596257][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.618193][ T664] device bridge_slave_0 left promiscuous mode [ 261.636369][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.656940][ T664] device bridge_slave_1 left promiscuous mode [ 261.685373][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.695619][ T664] device bridge_slave_0 left promiscuous mode [ 261.701802][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.714969][ T664] device bridge_slave_1 left promiscuous mode [ 261.721528][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.729593][ T664] device bridge_slave_0 left promiscuous mode [ 261.735705][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.744662][ T664] device veth1_macvtap left promiscuous mode [ 261.751186][ T664] device veth0_vlan left promiscuous mode [ 261.757206][ T664] device veth1_macvtap left promiscuous mode [ 261.763146][ T664] device veth0_vlan left promiscuous mode [ 261.771238][ T664] device veth1_macvtap left promiscuous mode [ 261.777568][ T664] device veth0_vlan left promiscuous mode [ 261.816830][ T664] device veth1_macvtap left promiscuous mode [ 261.822853][ T664] device veth0_vlan left promiscuous mode [ 261.972502][ T9268] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.305417][ T9185] EXT4-fs (loop4): unmounting filesystem. [ 262.423981][ T9262] device sit0 entered promiscuous mode [ 262.464957][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.472934][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.481915][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.489872][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.511000][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.519416][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.526327][ T9285] loop4: detected capacity change from 0 to 2048 [ 262.546182][ T9280] device syzkaller0 entered promiscuous mode [ 262.553269][ T9214] device veth0_vlan entered promiscuous mode [ 262.565758][ T9285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 262.574169][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.582584][ T9185] EXT4-fs (loop4): unmounting filesystem. [ 262.583005][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.615033][ T9214] device veth1_macvtap entered promiscuous mode [ 262.655358][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.663333][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.671157][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.679209][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.687274][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.717260][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.724275][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.731839][ T9254] device bridge_slave_0 entered promiscuous mode [ 262.742125][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.750817][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.763850][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.772204][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.805919][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.815474][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.823169][ T9254] device bridge_slave_1 entered promiscuous mode [ 262.849923][ T9301] loop3: detected capacity change from 0 to 512 [ 263.068689][ T9301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.127223][ T9301] ext4 filesystem being mounted at /root/syzkaller-testdir1207544602/syzkaller.DwPIjG/7/bus supports timestamps until 2038 (0x7fffffff) [ 263.158449][ T9307] device wg2 entered promiscuous mode [ 263.188822][ T9312] device sit0 entered promiscuous mode [ 263.267306][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.274318][ T9254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.281457][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.288227][ T9254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.353699][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.361272][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.368472][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.381864][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.390046][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.396891][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.503931][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.515331][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.523792][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.530681][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.555533][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.563528][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.575867][ T9254] device veth0_vlan entered promiscuous mode [ 263.601390][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.614218][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.641609][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.661973][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.687151][ T9316] device bridge_slave_0 entered promiscuous mode [ 263.695528][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.703663][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.713831][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.726742][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.743967][ T9254] device veth1_macvtap entered promiscuous mode [ 263.752961][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.775059][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.782628][ T9316] device bridge_slave_1 entered promiscuous mode [ 263.868189][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.878219][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.894011][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.915295][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.931270][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.951974][ T9170] EXT4-fs (loop3): unmounting filesystem. [ 264.061664][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.077554][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.085066][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.102312][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.109204][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.138917][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.155704][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.163915][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.170791][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.198558][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.216912][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.263016][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.301743][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.317050][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.324512][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.399808][ T9349] device syzkaller0 entered promiscuous mode [ 264.413193][ T9316] device veth0_vlan entered promiscuous mode [ 264.431019][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.448063][ T9316] device veth1_macvtap entered promiscuous mode [ 264.601794][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.687269][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.770540][ T9358] device wg2 left promiscuous mode [ 264.838122][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.845100][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.867079][ T9355] device bridge_slave_0 entered promiscuous mode [ 264.874010][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.886581][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.893977][ T9355] device bridge_slave_1 entered promiscuous mode [ 265.002967][ T9361] loop3: detected capacity change from 0 to 40427 [ 265.010131][ T9361] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 265.011112][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.024551][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.031704][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.033659][ T9361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 265.038565][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.062478][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.077552][ T1798] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.082472][ T9373] loop4: detected capacity change from 0 to 512 [ 265.090726][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.092615][ T9361] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.111816][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.123096][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.130071][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.143149][ T9373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.160277][ T9373] ext4 filesystem being mounted at /root/syzkaller-testdir1264461882/syzkaller.yZPcIO/18/bus supports timestamps until 2038 (0x7fffffff) [ 265.175593][ T9361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 265.182645][ T9361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.204004][ T9361] syz-executor.3: attempt to access beyond end of device [ 265.204004][ T9361] loop3: rw=2049, sector=53248, nr_sectors = 240 limit=40427 [ 265.230871][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.243076][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.250037][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.286339][ T664] device bridge_slave_1 left promiscuous mode [ 265.292681][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.301740][ T664] device bridge_slave_0 left promiscuous mode [ 265.308963][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.327188][ T664] device bridge_slave_1 left promiscuous mode [ 265.333133][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.347023][ T664] device bridge_slave_0 left promiscuous mode [ 265.363315][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.376872][ T664] device veth1_macvtap left promiscuous mode [ 265.392100][ T664] device veth0_vlan left promiscuous mode [ 265.398069][ T664] device veth1_macvtap left promiscuous mode [ 265.403909][ T664] device veth0_vlan left promiscuous mode [ 265.745345][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.756889][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.775899][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.808003][ T9355] device veth0_vlan entered promiscuous mode [ 265.815192][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.831069][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.843847][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.860212][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.883379][ T9405] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 265.894929][ T9405] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] 2033/05/18 03:33:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 265.903175][ T9405] CPU: 1 PID: 9405 Comm: syz-executor.3 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 265.913065][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 265.922975][ T9405] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 265.929039][ T9405] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 04 25 00 48 89 5c 24 18 4c 8b [ 265.948482][ T9405] RSP: 0018:ffffc90000a176c0 EFLAGS: 00010246 [ 265.954379][ T9405] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 265.962194][ T9405] RDX: ffffc90007be4000 RSI: 0000000000000426 RDI: 0000000000000427 [ 265.970020][ T9405] RBP: ffffc90000a17818 R08: 0000000000000005 R09: ffffffff8411e7b3 [ 265.977814][ T9405] R10: 0000000000000004 R11: ffff888119852880 R12: dffffc0000000000 [ 265.985627][ T9405] R13: ffff88812b3c43c0 R14: 1ffff92000142ee4 R15: 0000000000000000 [ 265.993438][ T9405] FS: 00007fe148b3f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 266.002201][ T9405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.008625][ T9405] CR2: 0000000020010000 CR3: 000000011a203000 CR4: 00000000003506a0 [ 266.016435][ T9405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.024249][ T9405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.032059][ T9405] Call Trace: [ 266.035184][ T9405] [ 266.037962][ T9405] ? __die_body+0x62/0xb0 [ 266.042124][ T9405] ? die_addr+0x9f/0xd0 [ 266.046120][ T9405] ? exc_general_protection+0x317/0x4c0 [ 266.051514][ T9405] ? asm_exc_general_protection+0x27/0x30 [ 266.057076][ T9405] ? xdp_do_generic_redirect+0x303/0xad0 [ 266.062523][ T9405] ? dev_map_generic_redirect+0x90/0x7d0 [ 266.067991][ T9405] ? __free_pages_core+0x180/0x180 [ 266.072940][ T9405] ? __this_cpu_preempt_check+0x13/0x20 [ 266.078318][ T9405] ? bq_enqueue+0x3e0/0x3e0 [ 266.082658][ T9405] ? bpf_prog_run_generic_xdp+0x9aa/0x1110 [ 266.088320][ T9405] xdp_do_generic_redirect+0x411/0xad0 [ 266.093597][ T9405] do_xdp_generic+0x53e/0x800 [ 266.098124][ T9405] ? generic_xdp_tx+0x560/0x560 [ 266.102800][ T9405] ? tun_get_user+0x2340/0x3a90 [ 266.107483][ T9405] tun_get_user+0x238a/0x3a90 [ 266.111997][ T9405] ? cpu_curr_snapshot+0x90/0x90 [ 266.116777][ T9405] ? tun_do_read+0x1ee0/0x1ee0 [ 266.121367][ T9405] ? ref_tracker_alloc+0x31d/0x450 [ 266.126313][ T9405] ? ref_tracker_dir_print+0x160/0x160 [ 266.131618][ T9405] ? avc_policy_seqno+0x1b/0x70 [ 266.136297][ T9405] ? tun_get+0xe9/0x120 [ 266.140291][ T9405] tun_chr_write_iter+0x129/0x210 [ 266.145152][ T9405] vfs_write+0x902/0xeb0 [ 266.149228][ T9405] ? __x64_sys_prctl+0xd0/0xd0 [ 266.153829][ T9405] ? file_end_write+0x1c0/0x1c0 [ 266.158519][ T9405] ? __fget_files+