last executing test programs: 28.516891302s ago: executing program 4 (id=12): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001400)=""/275, 0x113}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000c00)=""/120, 0x78}, {&(0x7f0000000b40)=""/31, 0x1f}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000c80)=""/162, 0xa2}], 0x9}, 0x1005}], 0x1, 0x0, 0x0) 28.319594365s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 28.215656456s ago: executing program 4 (id=22): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 27.964304109s ago: executing program 4 (id=28): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) 27.728176782s ago: executing program 4 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 27.456110086s ago: executing program 4 (id=43): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 27.455893795s ago: executing program 32 (id=43): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 22.665617957s ago: executing program 3 (id=170): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="92", 0x1}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="a53b0bcf77b9c43f06187bbe4c78a54c22b9b2b68202cc12f4125ece7de72883f0f0904cb3f2d95921caff7ec72fb31d88900c3c649f6809c49d2037ac917a55f83930d6eeecea960fde2663377aa562e9779fde70a554733a4bad5de1a71c653d692184a27d5986d0eb67e6c108d9f91de69ab341e48e8924aaa6f6", 0x7c}, {0x0}], 0x2}}], 0x1, 0x200080d0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="a6", 0x1}], 0x1}}], 0x1, 0xc081) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 22.625719468s ago: executing program 3 (id=172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 22.568794239s ago: executing program 3 (id=173): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffff3bac, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 22.539708699s ago: executing program 3 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008}) ppoll(&(0x7f0000000300)=[{r1, 0x108}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 22.46109037s ago: executing program 3 (id=178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 22.352027981s ago: executing program 3 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000004000000ef22e7a221613d760000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) utime(0x0, 0x0) 22.351898441s ago: executing program 33 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000004000000ef22e7a221613d760000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) utime(0x0, 0x0) 12.290182251s ago: executing program 1 (id=333): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x2, 0x0) 12.228066312s ago: executing program 1 (id=334): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 11.496203322s ago: executing program 1 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa4ebbe25218875b3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x58]}, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") utimes(&(0x7f0000000000)='./file1\x00', 0x0) 11.364660903s ago: executing program 2 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000400b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxqUckChEoM1KHIxmPMk6WXtjSGJH8ecjjea9N46/78Wa9+Kvd/0CGFm3IuIgIiYj4v2ImMvbk/yI++0jfdzjw0erR4ePVpNotd77R5JdT9ui42dSL+TPWYyIH30v4qfJs3Ebe/ubK9VqZaddnV5o1rYXGnv7dzdqK+uV9cpWuby8tLz49r23ypc21tdqk3npy5/+4eBbP0+7NZu3dI7jMrWHPnESJzUeET+4imBDMJaPZ3LYHeH/UoiIVyLi9ez+n4ux7NUEAG6yVmsuWnOddQDgpitkObCkUMpzAbNRKJRK7RzeqzFTqNYbzTsP67tba+1c2XxMFB5uVCuLea5wPiaStL6UlZ/Wy2fq9yLi5Yj4xdR0Vi+t1qtrw/zDBwBG2Atn1v9/T7XXfwDghisOuwMAwMBZ/wFg9Fj/AWD0WP8BYPQ8Xf/vD7UfAMDgeP8PAKPH+g8AI+WH776bHq2j/Puv1z7Y292sf3B3rdLYLNV2V0ur9Z3t0nq9vp59Z0/tvOer1uvbS2/G7ofz395uNBcae/sPavXdreaD7Hu9H1QmBjIqAOB5Xn7tkz8nEXHwznR2RMdeDtZquNkKw+4AMDRjw+4AMDR2+4LRdYH3+NIDcEN02aL3lGJETJ9tbLVaravrEnDFbn9B/h9GVUf+378ChhEj/w+jS/4fRlerlfS753/0+0AA4HqT4wd6fP7/Sn7+bf7hwE/Wzj7i46vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxvx/v/lvK9wGejUCiVIl6MiPmYSB5uVCuLEfFSRPxpamIqrS8Nuc8AwEUV/pbk+3/dnntj9uzVyeTJVHaOiJ/96r1ffrjSbO78MW3/50l78+O8vTyM/gMA5zlep7Nzxxv5x4ePVo+PQfbn79+NiGI7/tHhZBydxB+P8excjImImPlXktfbko7cxUUcfBQRn+82/iRmsxxIe+fTs/HT2C8ONH7hVPxCdq19Tn8Xn7uEvsCo+SSdf+53u/8KcSs7d7//i9kMdXH5/Jc+1epRNgc+jX88/431mP9u9Rvjzd9/v12afvbaRxFfHI84jn3UMf8cx096xH+jz/h/+dJXXu91rfXriNvRPX5nrIVmbXuhsbd/d6O2sl5Zr2yVy8tLy4tv33urvJDlqBd6rwafvXPnpazQ5SHp+Gd6xC+eM/6v9zn+3/zn/R9/tce1NP43v9YtfiFefU78dE38Rp/xV2Z+V+x1LY2/1mP8573+d/qM/+lf95/ZNhwAGJ7G3v7mSrVa2Rlk4fgPiYEGVeivMJW/ONelP6cK17ZjmyvV7wwq1mT8Tz/Vap1u+Wy8r99hrxnjMrJuwHVwctNHxJNhdwYAAAAAAAAAAAAAAOjqSv+jUtIuDHuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Fz/DQAA//+sasqI") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 11.290057765s ago: executing program 1 (id=346): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6288f669, 0x0, 0xc000}}}, 0x78) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 11.119456187s ago: executing program 2 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11.034159608s ago: executing program 1 (id=350): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) 10.995789178s ago: executing program 2 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 10.87994286s ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) 10.725037352s ago: executing program 1 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff81200014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xa, 0xb0, 0xb, '\x00', 0x9}) 10.690829172s ago: executing program 34 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff81200014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xa, 0xb0, 0xb, '\x00', 0x9}) 10.540035724s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 8.384667212s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 6.951004981s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 5.38027732s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 3.403858296s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 2.155309742s ago: executing program 5 (id=403): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2.122831523s ago: executing program 5 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.065251333s ago: executing program 7 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0)=0x6, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001140)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xff}) 2.037103064s ago: executing program 5 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x6}, {0x1, 0x9}, {0x1, 0xfff1}}}, 0x24}}, 0x20040054) 1.987177074s ago: executing program 7 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.938407345s ago: executing program 7 (id=412): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f00000000c0)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x4, 0x2, 0x0, 0x0, "09cee05e86563b94"}, 0x10}}, 0x4000000) 1.914787976s ago: executing program 7 (id=413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0) flock(r2, 0x2) dup3(r2, r1, 0x0) 1.898091726s ago: executing program 5 (id=415): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) 1.870623256s ago: executing program 5 (id=417): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) listen(r1, 0x9) 1.812843647s ago: executing program 7 (id=419): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.516981601s ago: executing program 6 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) shutdown(r2, 0x2) 1.487888191s ago: executing program 6 (id=428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.447326061s ago: executing program 6 (id=429): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 1.411860002s ago: executing program 6 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.393668092s ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x10, 0x0, {0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 69.780089ms ago: executing program 7 (id=431): socket(0x11, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 69.088989ms ago: executing program 2 (id=432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 68.779859ms ago: executing program 6 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 68.552179ms ago: executing program 5 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.42936ms ago: executing program 6 (id=435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 2 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 6.468046][ T30] audit: type=1400 audit(1746176472.853:74): avc: denied { read } for pid=189 comm="getty" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 13.368010][ T30] audit: type=1400 audit(1746176479.773:75): avc: denied { transition } for pid=219 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.376331][ T30] audit: type=1400 audit(1746176479.773:76): avc: denied { noatsecure } for pid=219 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.383093][ T30] audit: type=1400 audit(1746176479.773:77): avc: denied { write } for pid=219 comm="sh" path="pipe:[445]" dev="pipefs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.396631][ T30] audit: type=1400 audit(1746176479.773:78): avc: denied { rlimitinh } for pid=219 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.415608][ T30] audit: type=1400 audit(1746176479.773:79): avc: denied { siginh } for pid=219 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 20.694238][ T30] audit: type=1400 audit(1746176487.093:80): avc: denied { integrity } for pid=267 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.717960][ T30] audit: type=1400 audit(1746176487.123:81): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 20.719817][ T267] cgroup: Unknown subsys name 'net' [ 20.739655][ T30] audit: type=1400 audit(1746176487.123:82): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.767501][ T30] audit: type=1400 audit(1746176487.123:83): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.767744][ T267] cgroup: Unknown subsys name 'devices' [ 20.789625][ T30] audit: type=1400 audit(1746176487.143:84): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.929969][ T267] cgroup: Unknown subsys name 'hugetlb' [ 20.935861][ T267] cgroup: Unknown subsys name 'rlimit' [ 21.194902][ T30] audit: type=1400 audit(1746176487.593:85): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.218288][ T30] audit: type=1400 audit(1746176487.593:86): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.224987][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.243092][ T30] audit: type=1400 audit(1746176487.593:87): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.274986][ T30] audit: type=1400 audit(1746176487.653:88): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.300557][ T30] audit: type=1400 audit(1746176487.653:89): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.336291][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.787061][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.794159][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.801889][ T275] device bridge_slave_0 entered promiscuous mode [ 21.827788][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.834840][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.842366][ T275] device bridge_slave_1 entered promiscuous mode [ 21.904577][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.911669][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.919145][ T277] device bridge_slave_0 entered promiscuous mode [ 21.936554][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.943763][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.951351][ T277] device bridge_slave_1 entered promiscuous mode [ 21.967709][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.974753][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.982322][ T276] device bridge_slave_0 entered promiscuous mode [ 21.997836][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.004878][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.012385][ T278] device bridge_slave_0 entered promiscuous mode [ 22.019292][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.026329][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.033720][ T276] device bridge_slave_1 entered promiscuous mode [ 22.049559][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.056605][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.064131][ T278] device bridge_slave_1 entered promiscuous mode [ 22.160911][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.167985][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.175327][ T279] device bridge_slave_0 entered promiscuous mode [ 22.194539][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.201637][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.209190][ T279] device bridge_slave_1 entered promiscuous mode [ 22.284666][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.291748][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.299079][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.306121][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.348212][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.355271][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.362566][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.369603][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.380177][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.387238][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.394539][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.401573][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.417634][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.424688][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.431997][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.439037][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.479496][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.486551][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.493868][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.500924][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.513301][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.520725][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.528130][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.535304][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.542582][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.549842][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.556983][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.564188][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.571769][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.579154][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.586815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.594342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.617909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.625608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.634106][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.641200][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.675445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.684314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.692846][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.699933][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.708355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.716516][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.723559][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.730950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.738904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.746303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.754565][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.761603][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.769120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.777255][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.784308][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.791742][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.799814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.807988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.816109][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.823202][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.830654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.838881][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.845900][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.874108][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.882546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.890865][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.897909][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.905320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.914370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.922401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.930459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.938479][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.946657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.954678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.962729][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.970752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.978794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.998136][ T277] device veth0_vlan entered promiscuous mode [ 23.006512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.014535][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.022047][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.030518][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.038952][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.045991][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.053417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.061767][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.070071][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.077102][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.084701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.093037][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.101381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.109296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.117228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.125453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.133773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.141352][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.155080][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.163890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.172358][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.180814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.200234][ T278] device veth0_vlan entered promiscuous mode [ 23.210094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.218340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.226186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.234755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.242863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.251010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.259339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.268039][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.275515][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.283287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.290884][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.300379][ T276] device veth0_vlan entered promiscuous mode [ 23.310163][ T277] device veth1_macvtap entered promiscuous mode [ 23.317330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.325724][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.334285][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.345626][ T278] device veth1_macvtap entered promiscuous mode [ 23.360302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.368844][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.377001][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.385627][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.394281][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.402773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.419282][ T276] device veth1_macvtap entered promiscuous mode [ 23.432112][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.440464][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.440712][ T277] request_module fs-gadgetfs succeeded, but still no fs? [ 23.449285][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.464173][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.472721][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.481164][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.493330][ T275] device veth0_vlan entered promiscuous mode [ 23.511801][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.525844][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.534294][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.543367][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.551106][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.561215][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.568978][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.578183][ T279] device veth0_vlan entered promiscuous mode [ 23.591365][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.599769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.608861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.617178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.626399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.634770][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.649964][ T279] device veth1_macvtap entered promiscuous mode [ 23.659411][ T275] device veth1_macvtap entered promiscuous mode [ 23.666558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.675926][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.703157][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.712170][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.723624][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.732140][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.748432][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.773300][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.782186][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.790721][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.827596][ T313] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 24.008303][ T310] loop1: detected capacity change from 0 to 40427 [ 24.023181][ T310] F2FS-fs (loop1): fault_injection options not supported [ 24.032114][ T310] F2FS-fs (loop1): invalid crc value [ 24.059814][ T310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.096361][ T325] loop0: detected capacity change from 0 to 256 [ 24.125125][ T310] F2FS-fs (loop1): Start checkpoint disabled! [ 24.142358][ T310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 24.152163][ T329] loop4: detected capacity change from 0 to 256 [ 24.178180][ T329] ======================================================= [ 24.178180][ T329] WARNING: The mand mount option has been deprecated and [ 24.178180][ T329] and is ignored by this kernel. Remove the mand [ 24.178180][ T329] option from the mount to silence this warning. [ 24.178180][ T329] ======================================================= [ 24.242794][ T331] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13'. [ 24.273025][ T195] attempt to access beyond end of device [ 24.273025][ T195] loop1: rw=2049, want=40976, limit=40427 [ 24.293906][ T329] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 24.310957][ T323] loop3: detected capacity change from 0 to 40427 [ 24.357123][ T323] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 24.366813][ T323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 24.445704][ T347] loop0: detected capacity change from 0 to 256 [ 24.462432][ T323] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.506141][ T358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.542765][ T347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 24.569491][ T323] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 24.582886][ T323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.713217][ T367] loop4: detected capacity change from 0 to 128 [ 24.802602][ T367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.813903][ T367] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.850607][ T367] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 24.994422][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.001740][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.133496][ T406] loop3: detected capacity change from 0 to 256 [ 25.138866][ T279] syz-executor (279) used greatest stack depth: 21472 bytes left [ 25.232813][ T406] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 25.278689][ T406] exFAT-fs (loop3): hint_cluster is invalid (17) [ 25.298847][ T406] exFAT-fs (loop3): error, broken FAT chain. [ 25.304871][ T406] exFAT-fs (loop3): Filesystem has been set read-only [ 25.323850][ T391] syz.2.38 (391) used greatest stack depth: 21120 bytes left [ 25.331540][ T406] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812851abf0 iblock : 8, err : -5) [ 25.452128][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.483828][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.510416][ T408] device bridge_slave_0 entered promiscuous mode [ 25.545335][ T356] loop1: detected capacity change from 0 to 131072 [ 25.555910][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.567971][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.576074][ T408] device bridge_slave_1 entered promiscuous mode [ 25.612055][ T356] F2FS-fs (loop1): Test dummy encryption mode enabled [ 25.644130][ T356] F2FS-fs (loop1): invalid crc value [ 25.670923][ T356] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.702619][ T195] device bridge_slave_1 left promiscuous mode [ 25.717495][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.727986][ T195] device bridge_slave_0 left promiscuous mode [ 25.734143][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.754086][ T356] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.789257][ T195] device veth1_macvtap left promiscuous mode [ 25.796522][ T195] device veth0_vlan left promiscuous mode [ 25.837527][ T356] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 25.855767][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 25.855781][ T30] audit: type=1400 audit(2000000001.490:196): avc: denied { write } for pid=355 comm="syz.1.20" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.887638][ T356] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.911925][ T30] audit: type=1400 audit(2000000001.490:197): avc: denied { add_name } for pid=355 comm="syz.1.20" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.932142][ T30] audit: type=1400 audit(2000000001.550:198): avc: denied { remove_name } for pid=355 comm="syz.1.20" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.966169][ T30] audit: type=1400 audit(2000000001.550:199): avc: denied { rename } for pid=355 comm="syz.1.20" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.988305][ T30] audit: type=1326 audit(2000000001.600:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=449 comm="syz.0.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f658c56f969 code=0x0 [ 26.024551][ T30] audit: type=1400 audit(2000000001.660:201): avc: denied { read } for pid=453 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.086517][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.108019][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.127271][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.138723][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.147140][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.154315][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.169802][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.177544][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.186317][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.198788][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.205839][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.215541][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.223841][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.253726][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.263197][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.277275][ T408] device veth0_vlan entered promiscuous mode [ 26.288217][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.302043][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.310936][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.319261][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.327499][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.334957][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.349746][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.359931][ T30] audit: type=1400 audit(2000000002.000:202): avc: denied { create } for pid=465 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.360675][ T408] device veth1_macvtap entered promiscuous mode [ 26.387885][ T30] audit: type=1400 audit(2000000002.020:203): avc: denied { read } for pid=467 comm="syz.3.65" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.397838][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.417767][ T30] audit: type=1400 audit(2000000002.020:204): avc: denied { open } for pid=467 comm="syz.3.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.419173][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.450094][ T30] audit: type=1400 audit(2000000002.020:205): avc: denied { ioctl } for pid=467 comm="syz.3.65" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.476624][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.485273][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.512393][ T476] Invalid ELF header magic: != ELF [ 26.695150][ T482] loop5: detected capacity change from 0 to 40427 [ 26.719862][ T482] F2FS-fs (loop5): fault_injection options not supported [ 26.729607][ T482] F2FS-fs (loop5): invalid crc value [ 26.736488][ T482] F2FS-fs (loop5): Found nat_bits in checkpoint [ 26.793402][ T482] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 26.880044][ T482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852399476 (237107132928 ns) > initial count (217889159680 ns). Using initial count to start timer. [ 27.244435][ T532] loop0: detected capacity change from 0 to 512 [ 27.290633][ T537] overlayfs: unrecognized mount option "\" or missing value [ 27.337783][ T532] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.392489][ T532] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.90: corrupted inode contents [ 27.414625][ T532] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #16: comm syz.0.90: mark_inode_dirty error [ 27.451979][ T532] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.90: corrupted inode contents [ 27.469489][ T530] loop3: detected capacity change from 0 to 40427 [ 27.477774][ T532] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.90: mark_inode_dirty error [ 27.506843][ T532] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.90: corrupted inode contents [ 27.535174][ T532] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 27.551032][ T532] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.90: corrupted inode contents [ 27.571894][ T532] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.90: mark_inode_dirty error [ 27.584009][ T530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.597706][ T532] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 27.617310][ T532] EXT4-fs (loop0): 1 truncate cleaned up [ 27.626909][ T532] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.647571][ T532] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.661256][ T530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.758066][ T563] loop0: detected capacity change from 0 to 256 [ 27.796905][ T564] attempt to access beyond end of device [ 27.796905][ T564] loop3: rw=2049, want=79960, limit=40427 [ 27.815259][ T564] attempt to access beyond end of device [ 27.815259][ T564] loop3: rw=2049, want=81920, limit=40427 [ 27.833577][ T564] attempt to access beyond end of device [ 27.833577][ T564] loop3: rw=2049, want=51200, limit=40427 [ 27.850478][ T563] exfat: Bad value for 'uid' [ 27.896574][ T564] attempt to access beyond end of device [ 27.896574][ T564] loop3: rw=2049, want=53248, limit=40427 [ 27.962020][ T564] attempt to access beyond end of device [ 27.962020][ T564] loop3: rw=2049, want=59400, limit=40427 [ 27.981015][ T578] loop0: detected capacity change from 0 to 128 [ 28.053033][ T564] attempt to access beyond end of device [ 28.053033][ T564] loop3: rw=2049, want=61448, limit=40427 [ 28.083127][ T585] attempt to access beyond end of device [ 28.083127][ T585] loop3: rw=524288, want=80384, limit=40427 [ 28.100214][ T564] attempt to access beyond end of device [ 28.100214][ T564] loop3: rw=2049, want=61840, limit=40427 [ 28.187272][ T571] loop5: detected capacity change from 0 to 40427 [ 28.236007][ T571] F2FS-fs (loop5): invalid crc value [ 28.245183][ T593] futex_wake_op: syz.2.114 tries to shift op by -1; fix this program [ 28.255196][ T571] F2FS-fs (loop5): Found nat_bits in checkpoint [ 28.299976][ T278] attempt to access beyond end of device [ 28.299976][ T278] loop3: rw=2049, want=45104, limit=40427 [ 28.305171][ T596] loop2: detected capacity change from 0 to 128 [ 28.337567][ T596] EXT4-fs (loop2): Ignoring removed nobh option [ 28.347880][ T571] F2FS-fs (loop5): Start checkpoint disabled! [ 28.358682][ T596] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 28.377580][ T571] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 28.397345][ T596] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.518827][ T608] loop2: detected capacity change from 0 to 256 [ 28.620805][ T608] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 28.662172][ T608] FAT-fs (loop2): Filesystem has been set read-only [ 28.672777][ T608] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 28.757458][ T621] tipc: Started in network mode [ 28.775550][ T621] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 28.785642][ T621] tipc: Enabling of bearer rejected, failed to enable media [ 28.794583][ T625] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 28.892697][ T633] SELinux: failed to load policy [ 28.929579][ T640] tipc: Failed to remove unknown binding: 66,1,1/0:3548089718/3548089720 [ 28.955989][ T640] tipc: Failed to remove unknown binding: 66,1,1/0:3548089718/3548089720 [ 29.261682][ T673] syz.0.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 29.651873][ T706] loop0: detected capacity change from 0 to 512 [ 29.769100][ T706] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 29.808396][ T706] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 29.831975][ T706] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.844130][ T693] loop5: detected capacity change from 0 to 40427 [ 29.887452][ T693] F2FS-fs (loop5): invalid crc value [ 29.929014][ T693] F2FS-fs (loop5): Found nat_bits in checkpoint [ 30.041494][ T693] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 30.280840][ T738] loop1: detected capacity change from 0 to 40427 [ 30.348339][ T738] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 30.356155][ T738] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.384043][ T743] loop0: detected capacity change from 0 to 40427 [ 30.391661][ T738] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.422914][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.430039][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.437902][ T745] device bridge_slave_0 entered promiscuous mode [ 30.438569][ T738] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.451310][ T738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.460234][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.467289][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.478282][ T743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 30.486102][ T743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.495151][ T745] device bridge_slave_1 entered promiscuous mode [ 30.497041][ T738] handle_bad_sector: 3 callbacks suppressed [ 30.497060][ T738] attempt to access beyond end of device [ 30.497060][ T738] loop1: rw=2049, want=45104, limit=40427 [ 30.512533][ T743] F2FS-fs (loop0): invalid crc value [ 30.539423][ T743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.601564][ T743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.608782][ T743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.649125][ T408] attempt to access beyond end of device [ 30.649125][ T408] loop5: rw=2049, want=45104, limit=40427 [ 30.677590][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.684668][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.692040][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.699095][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.735072][ T455] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 30.747932][ T455] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 30.773927][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.795543][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.803017][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.821422][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.834078][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841161][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.868269][ T45] device bridge_slave_1 left promiscuous mode [ 30.874469][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.897710][ T45] device bridge_slave_0 left promiscuous mode [ 30.912441][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.954616][ T45] device veth1_macvtap left promiscuous mode [ 30.961764][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 30.961778][ T30] audit: type=1326 audit(2000000006.610:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 30.977693][ T45] device veth0_vlan left promiscuous mode [ 31.006908][ T767] loop1: detected capacity change from 0 to 512 [ 31.037199][ T30] audit: type=1326 audit(2000000006.640:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 31.063753][ T30] audit: type=1326 audit(2000000006.640:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 31.101218][ T30] audit: type=1326 audit(2000000006.640:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 31.111584][ T773] process 'syz.5.182' launched './file0' with NULL argv: empty string added [ 31.138448][ T767] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.140998][ T30] audit: type=1326 audit(2000000006.640:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 31.168018][ T30] audit: type=1326 audit(2000000006.640:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22454f9969 code=0x7ffc0000 [ 31.180592][ T767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.181: bg 0: block 248: padding at end of block bitmap is not set [ 31.191679][ T30] audit: type=1326 audit(2000000006.640:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22454f99a3 code=0x7ffc0000 [ 31.233184][ T30] audit: type=1326 audit(2000000006.640:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22454f841f code=0x7ffc0000 [ 31.256429][ T30] audit: type=1326 audit(2000000006.640:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22454f99f7 code=0x7ffc0000 [ 31.280156][ T30] audit: type=1326 audit(2000000006.640:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22454f82d0 code=0x7ffc0000 [ 31.303779][ T767] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.181: Failed to acquire dquot type 1 [ 31.316448][ T767] EXT4-fs (loop1): 1 truncate cleaned up [ 31.322361][ T767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.358981][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.374673][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.381762][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.392353][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.407704][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.426786][ T745] device veth0_vlan entered promiscuous mode [ 31.434796][ T783] netlink: 'syz.5.191': attribute type 2 has an invalid length. [ 31.434797][ T781] loop0: detected capacity change from 0 to 128 [ 31.449773][ T783] netlink: 64 bytes leftover after parsing attributes in process `syz.5.191'. [ 31.460256][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.475902][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.496059][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.507194][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.522799][ T745] device veth1_macvtap entered promiscuous mode [ 31.528987][ T781] attempt to access beyond end of device [ 31.528987][ T781] loop0: rw=2049, want=1041, limit=128 [ 31.546306][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.556792][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.565326][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.574432][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.583027][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.596501][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.605172][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.614048][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.622918][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.697641][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.958389][ T765] loop2: detected capacity change from 0 to 131072 [ 32.018964][ T815] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.026235][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.035005][ T815] device bridge_slave_0 entered promiscuous mode [ 32.042381][ T815] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.049517][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.056844][ T765] F2FS-fs (loop2): Test dummy encryption mode enabled [ 32.057096][ T815] device bridge_slave_1 entered promiscuous mode [ 32.075074][ T765] F2FS-fs (loop2): invalid crc value [ 32.095625][ T765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.110939][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.130884][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.140863][ T6] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 32.150273][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.159793][ T6] usb 2-1: config 0 descriptor?? [ 32.189100][ T765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.266978][ T815] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.274072][ T815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.281533][ T815] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.288605][ T815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.321163][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.339472][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.353143][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.389288][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.401002][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.411941][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.419023][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.427455][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.435875][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.457573][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.464657][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.484337][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.492825][ T839] hub 4-0:1.0: USB hub found [ 32.499622][ T839] hub 4-0:1.0: 1 port detected [ 32.502780][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.527853][ T45] device bridge_slave_1 left promiscuous mode [ 32.534341][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.542288][ T45] device bridge_slave_0 left promiscuous mode [ 32.548720][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.565757][ T45] device veth1_macvtap left promiscuous mode [ 32.587544][ T45] device veth0_vlan left promiscuous mode [ 32.599218][ T841] loop5: detected capacity change from 0 to 1024 [ 32.638351][ T841] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext3 [ 32.709757][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.719090][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.739584][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.748176][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.756736][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.765184][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.786453][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.796297][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.816347][ T815] device veth0_vlan entered promiscuous mode [ 32.849071][ T6] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 32.867248][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.881083][ T6] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 32.889968][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.909539][ T815] device veth1_macvtap entered promiscuous mode [ 32.950221][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.967597][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.972467][ T852] loop2: detected capacity change from 0 to 8192 [ 32.984037][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.998519][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.007399][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.039540][ T852] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 33.061172][ T852] FAT-fs (loop2): Filesystem has been set read-only [ 33.070427][ T26] usb 2-1: USB disconnect, device number 2 [ 33.160991][ T860] loop2: detected capacity change from 0 to 256 [ 33.245378][ T860] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 33.302223][ T860] exFAT-fs (loop2): hint_cluster is invalid (17) [ 33.431100][ T866] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.444143][ T866] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.452093][ T866] device bridge_slave_0 entered promiscuous mode [ 33.459744][ T866] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.467348][ T866] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.475527][ T866] device bridge_slave_1 entered promiscuous mode [ 33.532267][ T880] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.543784][ T880] FAT-fs (loop11): unable to read boot sector [ 33.660446][ T866] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.667634][ T866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.674934][ T866] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.682003][ T866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.716298][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.727903][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.736129][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.744270][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.755794][ T45] device bridge_slave_1 left promiscuous mode [ 33.762078][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.769745][ T45] device bridge_slave_0 left promiscuous mode [ 33.775938][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.784194][ T45] device veth1_macvtap left promiscuous mode [ 33.790361][ T45] device veth0_vlan left promiscuous mode [ 33.871836][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.880120][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.887195][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.894807][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.903226][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.910311][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.924268][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.933531][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.948760][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.961056][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.969471][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.976917][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.985632][ T866] device veth0_vlan entered promiscuous mode [ 33.996641][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.005048][ T283] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 34.008484][ T866] device veth1_macvtap entered promiscuous mode [ 34.022999][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.037216][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.193252][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.200502][ T899] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.208430][ T899] device bridge_slave_0 entered promiscuous mode [ 34.217244][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.224614][ T899] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.232391][ T899] device bridge_slave_1 entered promiscuous mode [ 34.267527][ T283] usb 7-1: Using ep0 maxpacket: 32 [ 34.326049][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.333138][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.340455][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.347503][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.389061][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.396729][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.404610][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.411869][ T283] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.433540][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.447553][ T283] usb 7-1: config 0 has no interface number 0 [ 34.450667][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.463514][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.470613][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.471064][ T913] serio: Serial port ptm0 [ 34.478190][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.490814][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.499051][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.506065][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.518651][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.526782][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.536163][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.544498][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.562193][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.570754][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.584531][ T899] device veth0_vlan entered promiscuous mode [ 34.600145][ T45] device bridge_slave_1 left promiscuous mode [ 34.614222][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.628242][ T283] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.640579][ T45] device bridge_slave_0 left promiscuous mode [ 34.646864][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.652691][ T283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.662063][ T283] usb 7-1: Product: syz [ 34.666300][ T283] usb 7-1: Manufacturer: syz [ 34.671427][ T283] usb 7-1: SerialNumber: syz [ 34.678048][ T920] xt_bpf: check failed: parse error [ 34.679923][ T283] usb 7-1: config 0 descriptor?? [ 34.688532][ T45] device veth1_macvtap left promiscuous mode [ 34.698841][ T45] device veth0_vlan left promiscuous mode [ 34.737925][ T283] smsc95xx v2.0.0 [ 34.741610][ T283] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 34.759799][ T283] smsc95xx: probe of 7-1:0.67 failed with error -22 [ 34.779153][ T927] loop2: detected capacity change from 0 to 256 [ 34.809965][ T926] tmpfs: Unknown parameter 'nolazyt+>eRë0-~ÿí^¢ˆ~µÍ1"ôÐÙVøIêÿYÎ' [ 34.843220][ T927] exfat: Bad value for 'uid' [ 34.873175][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.881115][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.889306][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.896886][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.915601][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.925906][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.960428][ T305] usb 7-1: USB disconnect, device number 2 [ 34.968859][ T899] device veth1_macvtap entered promiscuous mode [ 34.989187][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.000733][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.009784][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.019728][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.028484][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.588770][ T955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.267'. [ 35.637818][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.644916][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.652571][ T956] device bridge_slave_0 entered promiscuous mode [ 35.661363][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.668631][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.676059][ T956] device bridge_slave_1 entered promiscuous mode [ 35.707846][ T45] device bridge_slave_1 left promiscuous mode [ 35.714004][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.747776][ T45] device bridge_slave_0 left promiscuous mode [ 35.753948][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.768825][ T45] device veth1_macvtap left promiscuous mode [ 35.774899][ T45] device veth0_vlan left promiscuous mode [ 35.967435][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.989081][ T970] syz.5.262[970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.989154][ T970] syz.5.262[970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.028900][ T970] loop5: detected capacity change from 0 to 512 [ 36.071603][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.078680][ T956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.085963][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.093012][ T956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.172782][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.188538][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.199176][ T970] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.217955][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.217949][ T970] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.288092][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.316668][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.323768][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.353399][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.367663][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.374751][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.382190][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.403485][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.438747][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.447133][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.454915][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.478102][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.487176][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.501109][ T962] loop2: detected capacity change from 0 to 131072 [ 36.507762][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.516479][ T6] usb 2-1: config 0 descriptor?? [ 36.520037][ T956] device veth0_vlan entered promiscuous mode [ 36.529425][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.537792][ T977] fuse: root generation should be zero [ 36.543732][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.557833][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.566187][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.573878][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 36.573890][ T30] audit: type=1400 audit(2000065777.213:371): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.604767][ T30] audit: type=1400 audit(2000065777.213:372): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.617730][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.628795][ T962] F2FS-fs (loop2): Test dummy encryption mode enabled [ 36.647996][ T962] F2FS-fs (loop2): invalid crc value [ 36.654278][ T30] audit: type=1400 audit(2000065777.213:373): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.663544][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.676850][ T962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.706043][ T956] device veth1_macvtap entered promiscuous mode [ 36.726189][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.734361][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.746871][ T30] audit: type=1326 audit(2000065777.383:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c83bc969 code=0x7ffc0000 [ 36.777316][ T962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.777815][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.817591][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.838061][ T30] audit: type=1326 audit(2000065777.413:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c83bc969 code=0x7ffc0000 [ 36.842359][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.891644][ T30] audit: type=1326 audit(2000065777.413:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe5c83bc969 code=0x7ffc0000 [ 36.965837][ T30] audit: type=1326 audit(2000065777.413:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c83bc969 code=0x7ffc0000 [ 37.015495][ T30] audit: type=1326 audit(2000065777.413:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c83bc969 code=0x7ffc0000 [ 37.046076][ T30] audit: type=1400 audit(2000065777.523:379): avc: denied { create } for pid=989 comm="syz.5.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 37.066537][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.076371][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.084098][ T6] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 2/15 [ 37.092591][ T6] plantronics 0003:047F:FFFF.0002: parse failed [ 37.112172][ T6] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 37.279764][ T6] usb 2-1: USB disconnect, device number 3 [ 37.333758][ T965] loop6: detected capacity change from 0 to 262144 [ 37.422054][ T965] F2FS-fs (loop6): invalid crc value [ 37.429066][ T965] F2FS-fs (loop6): Found nat_bits in checkpoint [ 37.458655][ T965] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 37.518062][ T195] device bridge_slave_1 left promiscuous mode [ 37.527416][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.545261][ T195] device bridge_slave_0 left promiscuous mode [ 37.552033][ T30] audit: type=1326 audit(2000065778.193:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd455a969 code=0x7ffc0000 [ 37.563891][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.593859][ T195] device veth1_macvtap left promiscuous mode [ 37.600614][ T195] device veth0_vlan left promiscuous mode [ 37.745225][ T1003] netlink: 96 bytes leftover after parsing attributes in process `syz.5.274'. [ 37.863959][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.879596][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.918478][ T1007] device bridge_slave_0 entered promiscuous mode [ 37.953881][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.959693][ T1013] loop5: detected capacity change from 0 to 40427 [ 37.967806][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.975397][ T1007] device bridge_slave_1 entered promiscuous mode [ 38.052785][ T1025] capability: warning: `syz.1.283' uses deprecated v2 capabilities in a way that may be insecure [ 38.078505][ T1013] F2FS-fs (loop5): Found nat_bits in checkpoint [ 38.164128][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.171339][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.178688][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.185720][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.203287][ T1013] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 38.252456][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.262399][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.277050][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.304981][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.318270][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.325380][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.338021][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.346358][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.353544][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.366778][ T1038] attempt to access beyond end of device [ 38.366778][ T1038] loop5: rw=2049, want=81920, limit=40427 [ 38.378977][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.390900][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.401084][ T1038] attempt to access beyond end of device [ 38.401084][ T1038] loop5: rw=2049, want=50424, limit=40427 [ 38.417465][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.431753][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.452090][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.462489][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.476540][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.491801][ T1007] device veth0_vlan entered promiscuous mode [ 38.513127][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.537296][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.558184][ T1007] device veth1_macvtap entered promiscuous mode [ 38.585089][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.598696][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.607179][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.620402][ T1013] attempt to access beyond end of device [ 38.620402][ T1013] loop5: rw=524288, want=80384, limit=40427 [ 38.635330][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.653883][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.677601][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 38.689899][ T408] attempt to access beyond end of device [ 38.689899][ T408] loop5: rw=2049, want=45104, limit=40427 [ 38.740346][ T1007] syz-executor (1007) used greatest stack depth: 19904 bytes left [ 38.797551][ T6] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 38.805841][ T6] usb 2-1: config 179 has no interface number 0 [ 38.812187][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 38.828038][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 38.839343][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.850506][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 38.861955][ T6] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 38.875568][ T6] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 38.884669][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.907513][ T1031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 39.148424][ T6] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 39.248346][ T195] device bridge_slave_1 left promiscuous mode [ 39.254802][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.262421][ T195] device bridge_slave_0 left promiscuous mode [ 39.268765][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.276726][ T195] device veth1_macvtap left promiscuous mode [ 39.282770][ T195] device veth0_vlan left promiscuous mode [ 39.334716][ T1031] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.342160][ T1031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.412823][ T1065] loop5: detected capacity change from 0 to 128 [ 39.541482][ T1078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.305'. [ 39.551905][ T60] usb 2-1: USB disconnect, device number 4 [ 39.567420][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 39.612748][ T1091] syz.6.308[1091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.612814][ T1091] syz.6.308[1091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.624852][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.643394][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.653670][ T1091] loop6: detected capacity change from 0 to 512 [ 39.678319][ T1072] device bridge_slave_0 entered promiscuous mode [ 39.685547][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.693185][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.701192][ T1072] device bridge_slave_1 entered promiscuous mode [ 39.722612][ T1091] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.733850][ T1091] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.839694][ T1107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.314'. [ 39.911104][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.918182][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.925522][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.932646][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.988526][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.996538][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.005836][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.044031][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.059171][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.066253][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.081692][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.090408][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.097509][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.105957][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.116322][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.132203][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.158262][ T1072] device veth0_vlan entered promiscuous mode [ 40.167621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.179110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.186701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.211088][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.236244][ T1072] device veth1_macvtap entered promiscuous mode [ 40.253858][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.272903][ T1141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 40.287600][ T1141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 40.300989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.325786][ T1137] device veth0_vlan left promiscuous mode [ 40.333378][ T1137] device veth0_vlan entered promiscuous mode [ 40.667468][ T305] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 40.997921][ T455] device bridge_slave_1 left promiscuous mode [ 41.004087][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.011605][ T455] device bridge_slave_0 left promiscuous mode [ 41.017900][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.025881][ T455] device veth1_macvtap left promiscuous mode [ 41.032104][ T455] device veth0_vlan left promiscuous mode [ 41.038131][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.049191][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.058985][ T305] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 41.068088][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.076801][ T305] usb 7-1: config 0 descriptor?? [ 41.188983][ T1158] loop1: detected capacity change from 0 to 1024 [ 41.284149][ T1158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.294936][ T1177] syz.2.344[1177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.295011][ T1177] syz.2.344[1177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.310059][ T1158] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.351034][ T1180] loop2: detected capacity change from 0 to 512 [ 41.368849][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.375967][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.384331][ T1168] device bridge_slave_0 entered promiscuous mode [ 41.391821][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.399530][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.409429][ T1185] loop1: detected capacity change from 0 to 2048 [ 41.425074][ T1168] device bridge_slave_1 entered promiscuous mode [ 41.437498][ T1180] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.453352][ T1180] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.508357][ T1185] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.542293][ T1185] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.557146][ T1185] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 16: comm syz.1.346: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=1920, size=2036 fake=0 [ 41.618264][ T275] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 41.629625][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.637065][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.639561][ T275] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 41.653148][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.663874][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.673912][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.680989][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.688672][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.697103][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.705539][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.712620][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.731033][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.738824][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.746973][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.755667][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.769634][ T8] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm kworker/u4:0: bg 0: bad block bitmap checksum [ 41.782520][ T8] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.788442][ T305] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.6-1/input0 [ 41.795350][ T8] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.795350][ T8] [ 41.811984][ T1168] device veth0_vlan entered promiscuous mode [ 41.816368][ T8] EXT4-fs (loop1): Total free blocks count 0 [ 41.822598][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.827959][ T8] EXT4-fs (loop1): Free/Dirty block details [ 41.837917][ T305] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 41.841894][ T8] EXT4-fs (loop1): free_blocks=0 [ 41.855688][ T8] EXT4-fs (loop1): dirty_blocks=16 [ 41.861348][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.869330][ T8] EXT4-fs (loop1): Block reservation details [ 41.875454][ T8] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 41.875962][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.889287][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.901345][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.929250][ T1168] device veth1_macvtap entered promiscuous mode [ 41.942719][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.951550][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.964889][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.974954][ T195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.016271][ T305] usb 7-1: USB disconnect, device number 3 [ 42.069431][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.076560][ T1208] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.084171][ T1208] device bridge_slave_0 entered promiscuous mode [ 42.091282][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.098449][ T1208] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.105903][ T1208] device bridge_slave_1 entered promiscuous mode [ 42.166629][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.173697][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.180991][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.188045][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.212266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.220130][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.228019][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.241896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.250360][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.257443][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.270453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.278819][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.285836][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.297618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.307050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.324319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.336315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.344416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.352096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.362574][ T1208] device veth0_vlan entered promiscuous mode [ 42.375358][ T1208] device veth1_macvtap entered promiscuous mode [ 42.386632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.396548][ T45] device bridge_slave_1 left promiscuous mode [ 42.402920][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.411166][ T45] device bridge_slave_0 left promiscuous mode [ 42.417295][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.425346][ T45] device veth1_macvtap left promiscuous mode [ 42.431444][ T45] device veth0_vlan left promiscuous mode [ 42.511170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.521097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.959684][ T1215] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 43.011889][ T1222] loop5: detected capacity change from 0 to 256 [ 43.055460][ T1221] loop6: detected capacity change from 0 to 1024 [ 43.056086][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 43.056103][ T30] audit: type=1400 audit(2000065783.693:471): avc: denied { bind } for pid=1223 comm="syz.7.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.089089][ T1221] EXT4-fs (loop6): Mount option "delalloc" incompatible with ext3 [ 43.119163][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.121503][ T1233] syz.7.362[1233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.126279][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.126297][ T1233] syz.7.362[1233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.138105][ T1225] device bridge_slave_0 entered promiscuous mode [ 43.166000][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.173124][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.180874][ T1225] device bridge_slave_1 entered promiscuous mode [ 43.448688][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.455779][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.463123][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.470177][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.508985][ T45] device bridge_slave_1 left promiscuous mode [ 43.524198][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.570142][ T45] device bridge_slave_0 left promiscuous mode [ 43.576323][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.594945][ T45] device veth1_macvtap left promiscuous mode [ 43.604044][ T45] device veth0_vlan left promiscuous mode [ 43.670640][ T30] audit: type=1400 audit(2000065784.313:472): avc: denied { mount } for pid=1243 comm="syz.7.368" name="/" dev="ramfs" ino=22593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 43.790400][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.797982][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.828085][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 43.834160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.841677][ T1206] Bluetooth: hci0: sending frame failed (-49) [ 43.842148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.865546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.887801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.906341][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.913543][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.928302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.947037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.955678][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.962781][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.987474][ T305] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.995394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.004017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.029634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.038143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.046218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.055805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.063997][ T283] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.075058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.083149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.092353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.100126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.108739][ T1225] device veth0_vlan entered promiscuous mode [ 44.121427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.129769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.139224][ T1225] device veth1_macvtap entered promiscuous mode [ 44.155332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.163169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.171708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.181845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.190270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.347550][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.358577][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.368384][ T305] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 44.377500][ T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.386568][ T305] usb 8-1: config 0 descriptor?? [ 44.437566][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.448549][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.458299][ T283] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.471395][ T283] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.480500][ T283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.489237][ T283] usb 6-1: config 0 descriptor?? [ 44.777990][ T45] device bridge_slave_1 left promiscuous mode [ 44.784156][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.791958][ T45] device bridge_slave_0 left promiscuous mode [ 44.798251][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.806338][ T45] device veth1_macvtap left promiscuous mode [ 44.812425][ T45] device veth0_vlan left promiscuous mode [ 44.978305][ T283] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 44.985714][ T283] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 44.993135][ T283] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 2/15 [ 45.001690][ T283] plantronics 0003:047F:FFFF.0005: parse failed [ 45.007995][ T283] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 45.078105][ T305] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.7-1/input0 [ 45.090256][ T305] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized [ 45.184938][ T283] usb 6-1: USB disconnect, device number 2 [ 45.292384][ T305] usb 8-1: USB disconnect, device number 2 [ 45.322080][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.329183][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.336558][ T1262] device bridge_slave_0 entered promiscuous mode [ 45.344166][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.351387][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.358898][ T1262] device bridge_slave_1 entered promiscuous mode [ 45.408465][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.415530][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.422855][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.430010][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.451294][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.458997][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.466240][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.475730][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.484037][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.491096][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.500372][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.508775][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.515808][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.529454][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.538873][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.553693][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.565307][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.573709][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.581348][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.589729][ T1262] device veth0_vlan entered promiscuous mode [ 45.602340][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.611620][ T1262] device veth1_macvtap entered promiscuous mode [ 45.621456][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.631662][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.907544][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 45.913584][ T1206] Bluetooth: hci0: sending frame failed (-49) [ 46.428074][ T411] device bridge_slave_1 left promiscuous mode [ 46.434219][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.441856][ T411] device bridge_slave_0 left promiscuous mode [ 46.448102][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.456141][ T411] device veth1_macvtap left promiscuous mode [ 46.462266][ T411] device veth0_vlan left promiscuous mode [ 46.831117][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.838345][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.845857][ T1278] device bridge_slave_0 entered promiscuous mode [ 46.853770][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.861098][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.868984][ T1278] device bridge_slave_1 entered promiscuous mode [ 46.963149][ T1277] loop6: detected capacity change from 0 to 40427 [ 46.986440][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.994106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.997451][ T397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.008437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.017327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.026020][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.033109][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.040663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.049097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.057241][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.064458][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.084916][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.091063][ T1277] F2FS-fs (loop6): Found nat_bits in checkpoint [ 47.092764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.108198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.124275][ T1278] device veth0_vlan entered promiscuous mode [ 47.131008][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.135215][ T1277] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 47.140525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.155161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.162948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.178913][ T1278] device veth1_macvtap entered promiscuous mode [ 47.186035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.199400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.218527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.227255][ T745] attempt to access beyond end of device [ 47.227255][ T745] loop6: rw=2049, want=45104, limit=40427 [ 47.257575][ T283] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 47.358753][ T1294] device pim6reg1 entered promiscuous mode [ 47.387526][ T397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.567900][ T397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.577037][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.585230][ T397] usb 6-1: Product: syz [ 47.589600][ T397] usb 6-1: Manufacturer: syz [ 47.594215][ T397] usb 6-1: SerialNumber: syz [ 47.627521][ T283] usb 8-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.638948][ T283] usb 8-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.648834][ T283] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 47.657951][ T283] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.853734][ T45] device bridge_slave_1 left promiscuous mode [ 47.860092][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.867775][ T45] device bridge_slave_0 left promiscuous mode [ 47.873993][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.881953][ T45] device veth1_macvtap left promiscuous mode [ 47.888036][ T45] device veth0_vlan left promiscuous mode [ 47.987633][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 48.128612][ T283] hid-led 0003:27B8:01ED.0006: unbalanced collection at end of report description [ 48.138081][ T283] hid-led: probe of 0003:27B8:01ED.0006 failed with error -22 [ 48.334708][ T283] usb 8-1: USB disconnect, device number 3 [ 48.486095][ T30] audit: type=1400 audit(2000065789.123:473): avc: denied { mount } for pid=1307 comm="syz.6.388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.508651][ T30] audit: type=1400 audit(2000065789.123:474): avc: denied { mounton } for pid=1307 comm="syz.6.388" path="/56/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.508906][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.532600][ T30] audit: type=1400 audit(2000065789.123:475): avc: denied { read } for pid=1307 comm="syz.6.388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.539202][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.560668][ T30] audit: type=1400 audit(2000065789.123:476): avc: denied { open } for pid=1307 comm="syz.6.388" path="/56/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.567643][ T1301] device bridge_slave_0 entered promiscuous mode [ 48.596094][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.603211][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.605521][ T30] audit: type=1400 audit(2000065789.233:477): avc: denied { unmount } for pid=745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.612409][ T1301] device bridge_slave_1 entered promiscuous mode [ 48.678432][ T1314] loop6: detected capacity change from 0 to 1024 [ 48.706177][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.713241][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.720552][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.727605][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.749108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.758935][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.761930][ T1314] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.776681][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.798086][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.806284][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.813374][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.821090][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.829184][ T30] audit: type=1400 audit(2000065789.463:478): avc: denied { execute } for pid=1313 comm="syz.6.391" path="/59/file1/cpuacct.usage_percpu_user" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.836167][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.853884][ T30] audit: type=1400 audit(2000065789.473:479): avc: denied { getopt } for pid=1313 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.860720][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.896779][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.905112][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.943158][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.946910][ T30] audit: type=1400 audit(2000065789.583:480): avc: denied { bind } for pid=1322 comm="syz.6.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.951481][ T397] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 48.971054][ T30] audit: type=1400 audit(2000065789.583:481): avc: denied { name_bind } for pid=1322 comm="syz.6.392" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 48.978714][ T397] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 49.004023][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.011997][ T30] audit: type=1400 audit(2000065789.583:482): avc: denied { node_bind } for pid=1322 comm="syz.6.392" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.014246][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.041533][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.049889][ T1301] device veth0_vlan entered promiscuous mode [ 49.080945][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.094824][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.105230][ T1301] device veth1_macvtap entered promiscuous mode [ 49.126896][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.135256][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.144566][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.172220][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.182579][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.209637][ T397] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 49.231734][ T397] usb 6-1: USB disconnect, device number 3 [ 49.238060][ T397] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 49.818390][ T411] device bridge_slave_1 left promiscuous mode [ 49.824542][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.832414][ T411] device bridge_slave_0 left promiscuous mode [ 49.838592][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.846475][ T411] device veth1_macvtap left promiscuous mode [ 49.852554][ T411] device veth0_vlan left promiscuous mode [ 50.602023][ T1355] netlink: 64 bytes leftover after parsing attributes in process `syz.6.407'. [ 50.786214][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.793431][ T1352] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.801058][ T1352] device bridge_slave_0 entered promiscuous mode [ 50.808251][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.815310][ T1352] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.823207][ T1352] device bridge_slave_1 entered promiscuous mode [ 50.830170][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.418'. [ 50.840751][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.851255][ T1380] device bridge_slave_1 left promiscuous mode [ 50.857721][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.911937][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.919009][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.926268][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.933319][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.960188][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.968646][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.976008][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.000144][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.008712][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.015764][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.023242][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.031645][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.038730][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.047296][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.055765][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.071599][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.085184][ T1352] device veth0_vlan entered promiscuous mode [ 51.092749][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.101505][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.110074][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.117804][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.131992][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.140654][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.151129][ T1352] device veth1_macvtap entered promiscuous mode [ 51.162190][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.170006][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.178715][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.196952][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.206427][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.728522][ T45] device bridge_slave_1 left promiscuous mode [ 51.734660][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.742258][ T45] device bridge_slave_0 left promiscuous mode [ 51.748594][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.756447][ T45] device veth1_macvtap left promiscuous mode [ 51.762612][ T45] device veth0_vlan left promiscuous mode [ 52.591914][ T1413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.431'. [ 52.602903][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.612846][ T1413] device bridge_slave_1 left promiscuous mode [ 52.619041][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.690415][ C0] ================================================================== [ 52.698520][ C0] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6b0 [ 52.706529][ C0] Read of size 8 at addr ffff888105fa9c80 by task kworker/u4:5/455 [ 52.714436][ C0] [ 52.716779][ C0] CPU: 0 PID: 455 Comm: kworker/u4:5 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0 [ 52.726768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.736929][ C0] Workqueue: tipc_send tipc_conn_send_work [ 52.742782][ C0] Call Trace: [ 52.746074][ C0] [ 52.748965][ C0] __dump_stack+0x21/0x30 [ 52.753307][ C0] dump_stack_lvl+0xee/0x150 [ 52.757911][ C0] ? show_regs_print_info+0x20/0x20 [ 52.763110][ C0] ? load_image+0x3a0/0x3a0 [ 52.767609][ C0] print_address_description+0x7f/0x2c0 [ 52.773151][ C0] ? dev_map_generic_redirect+0xa0/0x6b0 [ 52.778782][ C0] kasan_report+0xf1/0x140 [ 52.783203][ C0] ? dev_map_generic_redirect+0xa0/0x6b0 [ 52.788832][ C0] __asan_report_load8_noabort+0x14/0x20 [ 52.794462][ C0] dev_map_generic_redirect+0xa0/0x6b0 [ 52.799921][ C0] ? __kasan_slab_free+0x11/0x20 [ 52.804855][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 52.810395][ C0] ? bq_enqueue+0x3a0/0x3a0 [ 52.814897][ C0] ? bpf_prog_run_generic_xdp+0x919/0x1020 [ 52.820718][ C0] xdp_do_generic_redirect+0x40e/0xa80 [ 52.826179][ C0] do_xdp_generic+0x516/0x7a0 [ 52.830850][ C0] ? generic_xdp_tx+0x470/0x470 [ 52.835697][ C0] ? migrate_disable+0xd6/0x180 [ 52.840545][ C0] __netif_receive_skb_core+0x12ac/0x2f10 [ 52.846352][ C0] ? check_preempt_wakeup+0x719/0xb80 [ 52.851718][ C0] ? set_rps_cpu+0x5d0/0x5d0 [ 52.856296][ C0] ? probe_sched_wakeup+0x64/0x80 [ 52.861333][ C0] ? ttwu_do_wakeup+0x447/0x470 [ 52.866174][ C0] ? __kasan_check_write+0x14/0x20 [ 52.871277][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 52.875948][ C0] __netif_receive_skb+0x72/0x280 [ 52.880962][ C0] process_backlog+0x368/0x600 [ 52.885719][ C0] __napi_poll+0xbe/0x590 [ 52.890038][ C0] net_rx_action+0x371/0x8e0 [ 52.894627][ C0] ? net_tx_action+0x520/0x520 [ 52.899402][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 52.904247][ C0] ? irqtime_account_irq+0x76/0x390 [ 52.909439][ C0] handle_softirqs+0x250/0x560 [ 52.914196][ C0] __do_softirq+0xb/0xd [ 52.918346][ C0] do_softirq+0xc6/0x120 [ 52.922580][ C0] [ 52.925503][ C0] [ 52.928434][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 52.933649][ C0] ? eth_get_headlen+0x1f0/0x1f0 [ 52.938586][ C0] netif_rx_ni+0x61/0x2a0 [ 52.942907][ C0] tipc_clone_to_loopback+0x39e/0x480 [ 52.948271][ C0] tipc_conn_send_work+0x67d/0x7e0 [ 52.953380][ C0] ? tipc_topsrv_exit_net+0x340/0x340 [ 52.958746][ C0] ? read_word_at_a_time+0x12/0x20 [ 52.963854][ C0] ? strscpy+0x9b/0x290 [ 52.968088][ C0] process_one_work+0x6be/0xba0 [ 52.972936][ C0] worker_thread+0xa59/0x1200 [ 52.977618][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 52.983074][ C0] kthread+0x411/0x500 [ 52.987131][ C0] ? worker_clr_flags+0x190/0x190 [ 52.992146][ C0] ? kthread_blkcg+0xd0/0xd0 [ 52.996726][ C0] ret_from_fork+0x1f/0x30 [ 53.001136][ C0] [ 53.004145][ C0] [ 53.006456][ C0] Allocated by task 1396: [ 53.010769][ C0] __kasan_kmalloc+0xda/0x110 [ 53.015437][ C0] __kmalloc+0x13d/0x2c0 [ 53.019672][ C0] bpf_map_kmalloc_node+0xb9/0x140 [ 53.024776][ C0] __dev_map_alloc_node+0x5a/0x4d0 [ 53.029880][ C0] dev_map_hash_update_elem+0x2cd/0x710 [ 53.035418][ C0] bpf_map_update_value+0x30e/0x3e0 [ 53.040627][ C0] map_update_elem+0x5bb/0x740 [ 53.045383][ C0] __sys_bpf+0x40c/0x730 [ 53.049616][ C0] __x64_sys_bpf+0x7c/0x90 [ 53.054020][ C0] x64_sys_call+0x4b9/0x9a0 [ 53.058511][ C0] do_syscall_64+0x4c/0xa0 [ 53.062920][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.068804][ C0] [ 53.071114][ C0] Freed by task 305: [ 53.074988][ C0] kasan_set_track+0x4a/0x70 [ 53.079591][ C0] kasan_set_free_info+0x23/0x40 [ 53.084521][ C0] ____kasan_slab_free+0x125/0x160 [ 53.089618][ C0] __kasan_slab_free+0x11/0x20 [ 53.094373][ C0] slab_free_freelist_hook+0xc2/0x190 [ 53.099736][ C0] kfree+0xc4/0x270 [ 53.103537][ C0] dev_map_free+0x397/0x6b0 [ 53.108029][ C0] bpf_map_free_deferred+0x10e/0x1e0 [ 53.113301][ C0] process_one_work+0x6be/0xba0 [ 53.118178][ C0] worker_thread+0xa59/0x1200 [ 53.122849][ C0] kthread+0x411/0x500 [ 53.126905][ C0] ret_from_fork+0x1f/0x30 [ 53.131317][ C0] [ 53.133629][ C0] The buggy address belongs to the object at ffff888105fa9c80 [ 53.133629][ C0] which belongs to the cache kmalloc-96 of size 96 [ 53.147503][ C0] The buggy address is located 0 bytes inside of [ 53.147503][ C0] 96-byte region [ffff888105fa9c80, ffff888105fa9ce0) [ 53.160526][ C0] The buggy address belongs to the page: [ 53.166168][ C0] page:ffffea000417ea40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105fa9 [ 53.176404][ C0] flags: 0x4000000000000200(slab|zone=1) [ 53.182050][ C0] raw: 4000000000000200 ffffea000453ec00 0000001a0000001a ffff888100042900 [ 53.190629][ C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 53.199199][ C0] page dumped because: kasan: bad access detected [ 53.205601][ C0] page_owner tracks the page as allocated [ 53.211300][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1411700953, free_ts 0 [ 53.226145][ C0] post_alloc_hook+0x192/0x1b0 [ 53.230920][ C0] prep_new_page+0x1c/0x110 [ 53.235416][ C0] get_page_from_freelist+0x2cc5/0x2d50 [ 53.240951][ C0] __alloc_pages+0x18f/0x440 [ 53.245529][ C0] new_slab+0xa1/0x4d0 [ 53.249589][ C0] ___slab_alloc+0x381/0x810 [ 53.254169][ C0] __slab_alloc+0x49/0x90 [ 53.258486][ C0] kmem_cache_alloc_trace+0x146/0x270 [ 53.263845][ C0] acpi_ut_evaluate_object+0xd8/0x4b0 [ 53.269206][ C0] acpi_ut_execute_power_methods+0x9b/0x1c0 [ 53.275097][ C0] acpi_get_object_info+0x523/0xfa0 [ 53.280471][ C0] acpi_init_device_object+0x569/0x2580 [ 53.286016][ C0] acpi_add_single_object+0xee/0x16f0 [ 53.291398][ C0] acpi_bus_check_add+0x314/0x790 [ 53.296419][ C0] acpi_bus_check_add_1+0x22/0x30 [ 53.301438][ C0] acpi_ns_walk_namespace+0x23e/0x680 [ 53.306797][ C0] page_owner free stack trace missing [ 53.312145][ C0] [ 53.314455][ C0] Memory state around the buggy address: [ 53.320089][ C0] ffff888105fa9b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.328135][ C0] ffff888105fa9c00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 53.336183][ C0] >ffff888105fa9c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.344238][ C0] ^ [ 53.348290][ C0] ffff888105fa9d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.356341][ C0] ffff888105fa9d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.364386][ C0] ================================================================== [ 53.372450][ C0] Disabling lock debugging due to kernel taint [ 53.432356][ T1429] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.439482][ T1429] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.446960][ T1429] device bridge_slave_0 entered promiscuous mode [ 53.454679][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.461903][ T1429] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.469395][ T1429] device bridge_slave_1 entered promiscuous mode [ 53.518066][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.525102][ T1429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.532397][ T1429] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.539441][ T1429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.560222][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.568572][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.576246][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.583736][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.593305][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.601514][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.608579][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.617579][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.625825][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.632877][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.646287][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.655735][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.670607][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.682323][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.690566][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.698056][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.706403][ T1429] device veth0_vlan entered promiscuous mode [ 53.717357][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.726687][ T1429] device veth1_macvtap entered promiscuous mode [ 53.736598][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.746816][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.308122][ T455] device bridge_slave_1 left promiscuous mode [ 54.314305][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.322000][ T455] device bridge_slave_0 left promiscuous mode [ 54.328294][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.336581][ T455] device veth1_macvtap left promiscuous mode [ 54.342684][ T455] device veth0_vlan left promiscuous mode