last executing test programs: 18.553688066s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 18.518722832s ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000700000095000000000000009500a5050000000077d8f3b423cdacc4c0fe2d8524e719105e6d018d80000000000000002be16ad10a48c941ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7525f7866907dc6751dfb2cf9f8bf97b755f8f6965a060499800006953649c1cfd6587d452d66b7cc9d7d77578f4c35235138d5521f9453559c3421eed73d5661cfe6c20c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36ea3792e2f6418f163d1a13ed38ae89d24e1cebfba2f87925bfacba800000000bc6f7d6dd4aed4af7588c8e1b4e810879b70a7000000000000000000d7900a820b5a038f4e9a217b98000000002a92895614cd50cbe43a1ed25268815a00000000000009d27d753a30a147b24a48435bd8a568669596e9e086cab3ce48e90defb6670c3df2624fad0a97aec70700000000000000148871c8d31d24291cf9e326e827e513e96068fd1e8a43e89f9c85c822297b7bd3d420b4ebff1432d08806bc376e3e49eeff182e1f24ed200ada12f7a15a5320e71666f472a97214d0b256596842f3725e18c073a579fb9e0bd4d377f2df5b2d72078e9f40b4ae7dc3b2ae00009474beda25f2e72eab5e188c46425678f8df0b94a0c918fb90862a004dfe2e684dae14babedfb3d7f70d183cd4aa50eca289e7baf8bee3254ba7da679daa84afbf8991fc05b0c7b590994647c30e71ceef8b82ca3d5650b22fad90fa7aa73b5155b9f5a661eea46383c2463d6e950af96a41c14afd7e28bd9a977aa79c6e5848b30bd0f54438d5f7a15712482ad55155d767404f00a6ac86735aa18d6f5d8d56bedb2d463f6c733a182e796a3a2ac8e2cccbd50e682f7f8b71cabe96da5b967410324c13fdc44467b5a47b885f09e5ba8f8a2da165ebcc9c013dbf41c35e5e445071b8c94da8aebe0294ea324858a65ccfdef5e45258e1691bb99b935ac05da6baae4079778787e400e6ed76c42b216ba01e2e71302680ee2b387a8139c894dae9aa7f9b6012e4454a84037a84b314618769e3155ad6301bc1df93a6c03a348105ffe4b6866fdf2cc18c035c013e97e8447468f05129df19207e9d3107bc762e3292220df88f85496587b505817d89ab13f7130db3d845b749a12f4f1b05951c00000000000000ad5ae950eea63d118794860b912044a4918e34e9c903b901a151f13882d7aa7bd3e297a7f241ba0c25a84e72e437d110345538fb2f7d507d3aedab70b6cfeb534b876e165d71d15464f2b24a1fb5c15ed43603d188f9f9e2d54614208a10bd122ca0eaba4d355ddd96c2ad8e85acdbb85ea91c1b37a31c1b14060c3d63d8cfec1765f53f73bff2f99cb9bc4fd994ce7a955bc622f110884f78352ebe4e5d00b7ed86890000000000000000bdd324d660a6ed0160f575651d11573c6463864f142d5f57ddea7a9f5760956469795ca490eadd1b817165acfcf750e814b2ece31b0fc2d755077792308cfadc98de651df8225d81f04da27b3ccfd19517c0a8f5c99499e5be79e5a289bf7b6e876ca212491de9008230654313697a6f8e5642aadf71066ee213c2f1117f0bb3861a5c8f3dad5ad49dff6598da1ea08c1e87336794006cc61b9ec8e2d992aa7d197861ead071dce2ecc27f87d6409f74989ee0faeaea6cfb0995f47bd5b3d92f5a59ee86975ff3a2dd101642675f39dd601e4d104443ad362f1f01ad4cd295524b3a2489518e1a90e81bfeace473c4ea3c58343a6c8c3a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) dup3(r1, r0, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 18.475580568s ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000037ea0f3d000000000018115803", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) 18.431266625s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 18.403015219s ago: executing program 0: socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 18.365487965s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x420a, r1, 0x0, 0x0) 3.653617338s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) 3.632300631s ago: executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f00000004c0)="dc", 0x1}], 0x1) 3.618665903s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xb, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r3}, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 3.584234598s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 3.44411052s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a00009880201000921a2ec91584ad5f4bea061000818000122012000000000", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r4, 0x0) 2.424024907s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x0, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) 2.410571139s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, &(0x7f0000000200)=0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x11) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x12}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.400051581s ago: executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.388015642s ago: executing program 3: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) dup3(r0, r1, 0x0) 2.377257584s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.354524238s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000280)) 1.68238506s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) 1.656270295s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x0, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) 1.62456071s ago: executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 623.496334ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x0, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) 577.876031ms ago: executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) close(r0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) 541.410366ms ago: executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 528.049708ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000080)=ANY=[]) 494.515893ms ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20}, 0x20) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 488.269344ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) 471.537517ms ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) set_robust_list(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x8, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000080)="96fce46f88e3", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2e3ab8f173a3cf419e3d8c57c27c322e92405ca283397cd3592b4924caa22f37cca754d6b49eb29234e3353664238862f7d4767f752dca326b2e5239c2a95195edfb2bc2260cda1197c8697505", @ANYRES16, @ANYBLOB="01002abd7000ffdbdf25280000000c009900040000006500000035002a006512080211000001ffffffffffff0802110000018c1872058533ac444256fc8ed9891252d574b2521a69cd242ac21001dc000000de002a003e010226d50204ab84e6f105a18850f721a7b3129059ad69303e52aeb23919f9a374faf44a0f20077aba21bd12079d8af303c68948416616af05cfbf2b8b00d7c2ab4f3927f09448542a239ee8aada6d24325a18219b8c017aabf9fe842966ab79fdc2984e60a921e64d1d1493494ad9395c9bcda17dd13c56678adcef3f662ca949a5530f771fc1949529a25fd468af6b16ebfc723792e291bcd25c3b729a61d5a097aa2d04d53127a13cfd0856e02146a36cc768ed2314d5b14dfab4d89012c8c568337a6aa19181aaee4f5e9f256327b95cfe85e469e45f7300002b002a000602070068040900fffe000985f7670c99bfc81f558c"], 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 468.859827ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r2, 0x0) write$evdev(r1, &(0x7f00000001c0)=[{}], 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000900)) 438.976092ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20020000) mkdir(0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5, @ANYBLOB="ed5712d82915f42b729883155eb5d0c931a0520590364d5f7444c60c5cc38a33b906a01ee7e635495301a8bc3ee04e63d6210ad161ff7be3998862fedf38", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) kernel console output (not intermixed with test programs): 5.626002][ T1720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.634817][ T1840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.642769][ T1720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.650499][ T1840] usb 3-1: Product: syz [ 795.654460][ T1840] usb 3-1: Manufacturer: syz [ 795.658958][ T1720] usb 2-1: Product: syz [ 795.662880][ T1720] usb 2-1: Manufacturer: syz [ 795.667328][ T1840] usb 3-1: SerialNumber: syz [ 795.672099][ T1720] usb 2-1: SerialNumber: syz [ 795.717564][ T1840] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 795.724983][ T1840] cdc_ncm 3-1:1.0: bind() failure [ 795.730332][ T1720] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 795.737597][ T1720] cdc_ncm 2-1:1.0: bind() failure [ 795.756968][ T753] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 795.767142][ T753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.778089][ T753] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 241, using maximum allowed: 30 [ 795.789181][ T753] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 795.957073][ T753] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.966000][ T753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.973800][ T753] usb 1-1: Product: syz [ 795.977935][ T753] usb 1-1: Manufacturer: syz [ 795.982344][ T753] usb 1-1: SerialNumber: syz [ 796.027395][ T753] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 796.034613][ T753] cdc_ncm 1-1:1.0: bind() failure [ 796.052875][ T3404] loop1: detected capacity change from 0 to 256 [ 796.059922][ T1840] usb 3-1: USB disconnect, device number 65 [ 796.087477][ T3404] exfat: Unknown parameter '' [ 796.137943][ T1720] usb 2-1: USB disconnect, device number 89 [ 796.352904][ T3412] loop0: detected capacity change from 0 to 256 [ 796.397558][ T3412] exfat: Unknown parameter '' [ 796.457796][ T753] usb 1-1: USB disconnect, device number 77 [ 796.578158][ T3414] Source file dentry negative [ 796.606905][ T1840] Bluetooth: hci0: command 0x1009 tx timeout [ 796.708273][ T3424] loop4: detected capacity change from 0 to 256 [ 797.056341][ T3441] syz-executor.0[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.056423][ T3441] syz-executor.0[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.108924][ T3441] loop0: detected capacity change from 0 to 2048 [ 797.227617][ T3441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 797.347682][ T3443] loop4: detected capacity change from 0 to 40427 [ 797.412407][ T3443] F2FS-fs (loop4): invalid crc value [ 797.438800][ T3443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 797.467767][ T3457] loop0: detected capacity change from 0 to 256 [ 797.500541][ T3443] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 797.507832][ T3443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 797.544780][T31093] attempt to access beyond end of device [ 797.544780][T31093] loop4: rw=2049, want=45112, limit=40427 [ 798.016925][ T3283] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 798.110586][ T3477] Invalid ELF header magic: != ELF [ 798.359857][ T3475] loop1: detected capacity change from 0 to 131072 [ 798.397933][ T3475] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 798.404536][ T3475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 798.413653][ T3475] F2FS-fs (loop1): invalid crc value [ 798.420845][ T3475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 798.437019][ T3283] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 798.451573][ T3283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.465342][ T3283] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 241, using maximum allowed: 30 [ 798.476049][ T3283] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 798.476326][ T3475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 798.495924][ T3475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 798.706980][ T3283] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.720678][ T3283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.730474][ T3283] usb 1-1: Product: syz [ 798.736347][ T3283] usb 1-1: Manufacturer: syz [ 798.753736][ T3283] usb 1-1: SerialNumber: syz [ 798.817460][ T3283] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 798.824685][ T3283] cdc_ncm 1-1:1.0: bind() failure [ 799.180457][ T3502] loop0: detected capacity change from 0 to 256 [ 799.217585][ T3502] exfat: Unknown parameter '' [ 799.268769][ T3283] usb 1-1: USB disconnect, device number 78 [ 799.276342][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 799.780654][ T3521] serio: Serial port pts0 [ 799.957700][ T3531] tipc: Failed to remove unknown binding: 66,1,1/0:2018369634/2018369636 [ 799.965981][ T3531] tipc: Failed to remove unknown binding: 66,1,1/0:2018369634/2018369636 [ 799.991223][ T3533] tipc: Failed to remove unknown binding: 66,1,1/0:2565100429/2565100431 [ 799.999543][ T3533] tipc: Failed to remove unknown binding: 66,1,1/0:2565100429/2565100431 [ 800.067810][ T3543] syz-executor.0[3543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.067872][ T3543] syz-executor.0[3543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.087495][ T3543] syz-executor.0[3543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.099119][ T3543] syz-executor.0[3543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.186937][ T3283] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 800.456853][ T3283] usb 2-1: Using ep0 maxpacket: 8 [ 800.625617][ T3570] serio: Serial port pts0 [ 800.667108][ T3283] usb 2-1: unable to get BOS descriptor or descriptor too short [ 800.756949][ T3283] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 800.782337][ T3283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.808595][ T3283] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 800.823493][ T3283] usb 2-1: config 1 has no interface number 1 [ 800.829627][ T3283] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 800.842367][ T3283] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.008694][ T3283] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.022873][ T3283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.036957][ T3283] usb 2-1: Product: syz [ 801.040960][ T3283] usb 2-1: Manufacturer: syz [ 801.045379][ T3283] usb 2-1: SerialNumber: syz [ 801.448874][ T3283] usb 2-1: USB disconnect, device number 90 [ 801.801867][ T3581] loop0: detected capacity change from 0 to 131072 [ 801.868667][ T3581] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 801.876860][ T3581] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 801.895917][ T3581] F2FS-fs (loop0): invalid crc value [ 801.923018][ T3581] F2FS-fs (loop0): Found nat_bits in checkpoint [ 801.971859][ T3581] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 801.978905][ T3581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 802.144752][ T3625] serio: Serial port pts0 [ 802.343139][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 802.343156][ T30] audit: type=1326 audit(2000000206.399:23397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x0 [ 802.413049][ T30] audit: type=1326 audit(2000000206.469:23398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.447404][ T30] audit: type=1326 audit(2000000206.469:23399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.483790][ T30] audit: type=1326 audit(2000000206.499:23400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.513449][ T30] audit: type=1326 audit(2000000206.499:23401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.603192][ T30] audit: type=1326 audit(2000000206.499:23402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.627441][ T30] audit: type=1326 audit(2000000206.499:23403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.651479][ T30] audit: type=1326 audit(2000000206.499:23404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 802.675455][ T30] audit: type=1326 audit(2000000206.499:23405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898cb4bee9 code=0x7ffc0000 [ 803.222963][ T3663] tipc: Failed to remove unknown binding: 66,1,1/0:154375984/154375986 [ 803.257894][ T3663] tipc: Failed to remove unknown binding: 66,1,1/0:154375984/154375986 [ 804.086901][ T30] audit: type=1400 audit(2000000208.139:23406): avc: denied { view } for pid=3668 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 804.282656][ T3696] loop1: detected capacity change from 0 to 256 [ 804.704560][ T3651] loop4: detected capacity change from 0 to 131072 [ 804.738220][ T3651] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 804.744734][ T3651] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 804.764896][ T3651] F2FS-fs (loop4): invalid crc value [ 804.792074][ T3651] F2FS-fs (loop4): Found nat_bits in checkpoint [ 804.838518][ T3651] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 804.845547][ T3651] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 804.989846][ T3755] syz-executor.3[3755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.989955][ T3755] syz-executor.3[3755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.728491][ T3776] loop0: detected capacity change from 0 to 131072 [ 805.757620][ T3776] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 805.764221][ T3776] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 805.773133][ T3776] F2FS-fs (loop0): invalid crc value [ 805.780456][ T3776] F2FS-fs (loop0): Found nat_bits in checkpoint [ 805.839009][ T3776] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 805.846298][ T3776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 806.525769][ T3851] loop0: detected capacity change from 0 to 256 [ 806.585723][ T3855] syz-executor.1[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.585814][ T3855] syz-executor.1[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.661289][ T3863] loop0: detected capacity change from 0 to 256 [ 807.005537][ T3878] loop0: detected capacity change from 0 to 256 [ 807.053513][ T3883] syz-executor.1[3883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 807.053599][ T3883] syz-executor.1[3883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 807.109188][ T3893] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 807.130927][ T3893] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 807.632361][ T3939] loop3: detected capacity change from 0 to 40427 [ 807.678494][ T3939] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 807.686122][ T3939] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 807.707489][ T3939] F2FS-fs (loop3): Found nat_bits in checkpoint [ 807.744353][ T3939] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 807.751305][ T3939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 808.139176][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 808.139194][ T30] audit: type=1326 audit(2000000212.199:23415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x0 [ 808.443957][ T30] audit: type=1326 audit(2000000212.499:23416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007d4eee9 code=0x7ffc0000 [ 808.468045][ T30] audit: type=1326 audit(2000000212.499:23417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007d4eee9 code=0x7ffc0000 [ 808.492155][ T30] audit: type=1326 audit(2000000212.499:23418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa007d4eee9 code=0x7ffc0000 [ 808.516308][ T30] audit: type=1326 audit(2000000212.499:23419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007d4eee9 code=0x7ffc0000 [ 808.540456][ T30] audit: type=1326 audit(2000000212.499:23420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007d4eee9 code=0x7ffc0000 [ 808.576881][T31629] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 808.629982][ T4013] loop0: detected capacity change from 0 to 256 [ 808.671020][ T4013] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6842f4db, utbl_chksum : 0xe619d30d) [ 808.816852][T31629] usb 2-1: Using ep0 maxpacket: 32 [ 808.893088][ T30] audit: type=1326 audit(2000000212.949:23421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f7d1cee9 code=0x0 [ 808.935120][ T4035] overlayfs: missing 'lowerdir' [ 808.957196][T31629] usb 2-1: config 0 has no interfaces? [ 808.962602][T31629] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 808.971599][T31629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.987856][T31629] usb 2-1: config 0 descriptor?? [ 809.083848][ T4049] tipc: Failed to remove unknown binding: 66,1,1/0:4065297651/4065297653 [ 809.098622][ T4049] tipc: Failed to remove unknown binding: 66,1,1/0:4065297651/4065297653 [ 809.116026][ T4049] tipc: Failed to remove unknown binding: 66,1,1/0:4065297651/4065297653 [ 809.229690][T24684] usb 2-1: USB disconnect, device number 91 [ 809.284262][ T30] audit: type=1326 audit(2000000213.339:23422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f7d1cee9 code=0x0 [ 809.332754][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.408858][ T4076] tipc: Failed to remove unknown binding: 66,1,1/0:1386418778/1386418780 [ 809.422863][ T4076] tipc: Failed to remove unknown binding: 66,1,1/0:1386418778/1386418780 [ 809.431295][ T4076] tipc: Failed to remove unknown binding: 66,1,1/0:1386418778/1386418780 [ 809.467621][ T30] audit: type=1326 audit(2000000213.529:23423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07f7d1cee9 code=0x0 [ 809.623014][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.640056][ T4100] tipc: Failed to remove unknown binding: 66,1,1/0:2892453361/2892453363 [ 809.653056][ T4100] tipc: Failed to remove unknown binding: 66,1,1/0:2892453361/2892453363 [ 809.661527][ T4100] tipc: Failed to remove unknown binding: 66,1,1/0:2892453361/2892453363 [ 809.709922][ T4108] tipc: Failed to remove unknown binding: 66,1,1/0:2015398414/2015398416 [ 809.719250][ T4108] tipc: Failed to remove unknown binding: 66,1,1/0:2015398414/2015398416 [ 809.727729][ T4108] tipc: Failed to remove unknown binding: 66,1,1/0:2015398414/2015398416 [ 809.780118][ T4117] syz-executor.3[4117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.780180][ T4117] syz-executor.3[4117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.831117][ T4125] xt_hashlimit: invalid rate [ 809.908982][ T1720] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 809.917431][ T1720] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz0] on syz0 [ 810.358200][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.365058][ T4143] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.374200][ T4143] device bridge_slave_0 entered promiscuous mode [ 810.384029][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.391235][ T4143] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.398829][ T4143] device bridge_slave_1 entered promiscuous mode [ 810.532907][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 810.541459][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 810.577652][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 810.596386][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.614332][ T1840] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.621238][ T1840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.651760][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 810.662024][ T30] audit: type=1326 audit(2000000214.729:23424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eff52bee9 code=0x0 [ 810.685897][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 810.694274][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.702462][T31629] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.709346][T31629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.727384][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.735571][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.754314][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 810.766488][T17623] device bridge_slave_1 left promiscuous mode [ 810.773169][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.781030][T17623] device bridge_slave_0 left promiscuous mode [ 810.787190][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.804131][T17623] device veth1_macvtap left promiscuous mode [ 810.810126][T17623] device veth0_vlan left promiscuous mode [ 810.991901][ T4143] device veth0_vlan entered promiscuous mode [ 811.001501][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 811.013768][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 811.022506][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 811.054283][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 811.068902][ T4143] device veth1_macvtap entered promiscuous mode [ 811.114728][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.121664][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.129169][ T4168] device bridge_slave_0 entered promiscuous mode [ 811.137572][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 811.147508][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.154439][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.161767][ T4168] device bridge_slave_1 entered promiscuous mode [ 811.184031][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 811.241789][ T4195] loop3: detected capacity change from 0 to 512 [ 811.287439][ T4195] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 811.304464][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.311374][ T4168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.318465][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.325208][ T4168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.336320][ T4195] EXT4-fs (loop3): 1 truncate cleaned up [ 811.350719][ T4195] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 811.378926][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 811.386421][T24684] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.393684][T24684] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.408618][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 811.416979][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 811.425061][T31629] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.431926][T31629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.440955][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 811.449691][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 811.457732][T24684] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.464649][T24684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.486883][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 811.494891][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.503110][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 811.511083][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.530503][ T4168] device veth0_vlan entered promiscuous mode [ 811.537057][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 811.545277][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 811.553621][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 811.561354][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 811.570123][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 811.577470][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 811.590667][ T4168] device veth1_macvtap entered promiscuous mode [ 811.597377][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 811.605437][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 811.613657][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 811.630203][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 811.639140][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 811.647294][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 811.655296][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 811.878293][T17623] device bridge_slave_1 left promiscuous mode [ 811.884236][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.891944][T17623] device bridge_slave_0 left promiscuous mode [ 811.898031][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.906208][T17623] device veth1_macvtap left promiscuous mode [ 811.912118][T17623] device veth0_vlan left promiscuous mode [ 813.194268][ T4216] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 813.439735][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 813.439752][ T30] audit: type=1326 audit(2000000217.499:23431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac0581cee9 code=0x0 [ 813.696847][T24684] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 813.936886][T24684] usb 2-1: Using ep0 maxpacket: 32 [ 814.077237][T24684] usb 2-1: config 0 has no interfaces? [ 814.082968][T24684] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 814.091996][T24684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.101072][T24684] usb 2-1: config 0 descriptor?? [ 814.121163][ T4241] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 814.349707][ T753] usb 2-1: USB disconnect, device number 92 [ 814.400822][ T4265] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.491269][ T4272] syz-executor.3[4272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.491373][ T4272] syz-executor.3[4272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.562777][ T4282] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 814.630608][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.678425][ T4299] loop4: detected capacity change from 0 to 512 [ 814.712629][ T4299] EXT4-fs (loop4): 1 truncate cleaned up [ 814.718279][ T4299] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 814.807502][ T4319] device veth0_vlan left promiscuous mode [ 814.813509][ T4319] device veth0_vlan entered promiscuous mode [ 814.820730][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.835025][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.844547][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.855016][ T4323] loop4: detected capacity change from 0 to 512 [ 814.898910][ T4323] EXT4-fs (loop4): 1 truncate cleaned up [ 814.904515][ T4323] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 815.012821][ T4335] loop4: detected capacity change from 0 to 512 [ 815.082453][ T4343] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.093813][ T4335] EXT4-fs (loop4): 1 truncate cleaned up [ 815.100584][ T4335] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 815.144182][ T4345] loop1: detected capacity change from 0 to 512 [ 815.176300][ T4345] EXT4-fs (loop1): 1 truncate cleaned up [ 815.181919][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 815.220844][ T4348] incfs: Options parsing error. -22 [ 815.225930][ T4348] incfs: mount failed -22 [ 815.226723][ T4352] loop3: detected capacity change from 0 to 16 [ 815.247061][T31629] Bluetooth: hci0: command 0x1003 tx timeout [ 815.252946][ T47] Bluetooth: hci0: sending frame failed (-49) [ 815.259682][ T4354] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 815.260795][ T4352] erofs: (device loop3): mounted with root inode @ nid 36. [ 815.365024][ T4370] device veth0_vlan left promiscuous mode [ 815.371529][ T4373] loop3: detected capacity change from 0 to 16 [ 815.372913][ T4370] device veth0_vlan entered promiscuous mode [ 815.399315][ T4373] erofs: (device loop3): mounted with root inode @ nid 36. [ 815.560873][ T30] audit: type=1326 audit(2000000219.619:23432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.585457][ T30] audit: type=1326 audit(2000000219.619:23433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.610688][ T30] audit: type=1326 audit(2000000219.649:23434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.634982][ T30] audit: type=1326 audit(2000000219.649:23435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.668414][ T30] audit: type=1326 audit(2000000219.649:23436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.680014][ T4408] loop4: detected capacity change from 0 to 16 [ 815.697391][ T30] audit: type=1326 audit(2000000219.679:23437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.723005][ T30] audit: type=1326 audit(2000000219.679:23438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.750901][ T30] audit: type=1326 audit(2000000219.679:23439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.778327][ T4408] erofs: (device loop4): mounted with root inode @ nid 36. [ 815.780623][ T30] audit: type=1326 audit(2000000219.679:23440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0581cee9 code=0x7ffc0000 [ 815.829292][ T4412] device veth0_vlan left promiscuous mode [ 815.835102][ T4412] device veth0_vlan entered promiscuous mode [ 815.846947][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.857434][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.869386][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.900616][ T4424] loop3: detected capacity change from 0 to 512 [ 815.930652][ T4424] EXT4-fs (loop3): 1 truncate cleaned up [ 815.936194][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 816.031068][ T4442] loop1: detected capacity change from 0 to 512 [ 816.031201][ T4441] loop3: detected capacity change from 0 to 512 [ 816.060060][ T4442] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 816.070004][ T4441] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 816.079897][ T4442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag [ 816.097673][ T4442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117 [ 816.110659][ T4441] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 816.110905][ T4442] EXT4-fs (loop1): 1 orphan inode deleted [ 816.128374][ T4442] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 816.139403][ T4441] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 816.156265][ T4441] EXT4-fs (loop3): 1 orphan inode deleted [ 816.162168][ T4441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 816.237264][ T4450] loop1: detected capacity change from 0 to 256 [ 816.272320][ T4450] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x21ebf3fa, utbl_chksum : 0xe619d30d) [ 816.310342][ T4460] loop4: detected capacity change from 0 to 512 [ 816.340622][ T4460] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 816.354223][ T4460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 816.367862][ T4460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 816.384383][ T4460] EXT4-fs (loop4): 1 orphan inode deleted [ 816.396655][ T4460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 816.407791][ T4468] netem: change failed [ 816.468198][ T4478] netem: change failed [ 816.510056][ T4480] loop1: detected capacity change from 0 to 1024 [ 816.576227][ T4480] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,bsddf,sysvgroups,nojournal_checksum,nodelalloc,. Quota mode: none. [ 816.681771][ T4501] syz-executor.4[4501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.681854][ T4501] syz-executor.4[4501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.745930][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.764318][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.772094][ T4497] device bridge_slave_0 entered promiscuous mode [ 816.779645][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.786668][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.794092][ T4497] device bridge_slave_1 entered promiscuous mode [ 816.888968][ T4523] loop4: detected capacity change from 0 to 1024 [ 816.900875][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 816.908778][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 816.918932][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 816.927389][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 816.935364][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.942321][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.958160][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,bsddf,sysvgroups,nojournal_checksum,nodelalloc,. Quota mode: none. [ 816.959118][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 816.987911][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 817.003188][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 817.026030][ T1840] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.032927][ T1840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.057219][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.065446][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 817.073499][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 817.076574][ T4534] loop1: detected capacity change from 0 to 256 [ 817.092755][ T4497] device veth0_vlan entered promiscuous mode [ 817.099237][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 817.107533][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 817.115034][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 817.128737][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 817.131509][ T4534] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89af510b, utbl_chksum : 0xe619d30d) [ 817.149254][ T4497] device veth1_macvtap entered promiscuous mode [ 817.168532][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.176696][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.185770][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.193961][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.251797][ T4544] device wireguard0 entered promiscuous mode [ 817.261878][T30447] device bridge_slave_1 left promiscuous mode [ 817.268283][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.275681][T30447] device bridge_slave_0 left promiscuous mode [ 817.281798][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.289861][T30447] device veth1_macvtap left promiscuous mode [ 817.295698][T30447] device veth0_vlan left promiscuous mode [ 817.326915][T31629] Bluetooth: hci0: command 0x1001 tx timeout [ 817.332864][ T47] Bluetooth: hci0: sending frame failed (-49) [ 817.654530][ T4578] device syzkaller0 entered promiscuous mode [ 817.750211][ T4589] device veth3 entered promiscuous mode [ 817.755897][ T4589] bridge0: port 3(veth3) entered blocking state [ 817.762078][ T4589] bridge0: port 3(veth3) entered disabled state [ 817.918887][ T4595] loop1: detected capacity change from 0 to 40427 [ 817.960563][ T4595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 817.993016][ T4595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 818.008500][ T1686] attempt to access beyond end of device [ 818.008500][ T1686] loop1: rw=2049, want=45104, limit=40427 [ 818.401633][ T4645] binder: 4644:4645 ioctl c4089434 20001fc0 returned -22 [ 818.452898][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 818.452916][ T30] audit: type=1326 audit(2000000222.509:23463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7fc00000 [ 818.518860][ T4647] loop1: detected capacity change from 0 to 40427 [ 818.548323][ T4647] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 818.558170][ T4647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 818.569721][ T4647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 818.610848][ T4647] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 818.623448][ T4647] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 818.636890][ T4647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 818.897207][ T4681] syz-executor.1[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 818.897280][ T4681] syz-executor.1[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 819.118988][ T4700] binder: 4699:4700 ioctl c4089434 20001fc0 returned -22 [ 819.209085][ T4714] syz-executor.1[4714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 819.209195][ T4714] syz-executor.1[4714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 819.329841][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 819.353870][ T4727] loop1: detected capacity change from 0 to 512 [ 819.397786][ T4727] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 819.407002][ T753] Bluetooth: hci0: command 0x1009 tx timeout [ 819.418075][ T4727] EXT4-fs (loop1): failed to initialize system zone (-117) [ 819.425186][ T4727] EXT4-fs (loop1): mount failed [ 819.656835][T31629] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 819.716092][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 819.896863][T31629] usb 4-1: Using ep0 maxpacket: 16 [ 819.964254][ T4765] loop1: detected capacity change from 0 to 40427 [ 820.001243][ T4765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 820.016963][T31629] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 820.027952][T31629] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 820.039329][T31629] usb 4-1: config 1 interface 0 has no altsetting 0 [ 820.057478][ T4765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 820.097743][ T1686] attempt to access beyond end of device [ 820.097743][ T1686] loop1: rw=2049, want=45104, limit=40427 [ 820.216953][T31629] usb 4-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 820.225905][T31629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.233808][T31629] usb 4-1: Product: и [ 820.237932][T31629] usb 4-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 820.767144][T31629] usbhid 4-1:1.0: can't add hid device: -71 [ 820.772925][T31629] usbhid: probe of 4-1:1.0 failed with error -71 [ 820.779954][T31629] usb 4-1: USB disconnect, device number 60 [ 820.903374][ T4788] binder: 4787:4788 ioctl c4089434 20001fc0 returned -22 [ 821.210137][ T4812] input: syz1 as /devices/virtual/input/input103 [ 822.132219][ T4839] syz-executor.1[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.132316][ T4839] syz-executor.1[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.235993][ T30] audit: type=1400 audit(2000000226.289:23464): avc: denied { create } for pid=4843 comm="syz-executor.1" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 822.351940][ T4852] loop1: detected capacity change from 0 to 256 [ 822.460758][ T4856] loop1: detected capacity change from 0 to 512 [ 822.498790][ T4856] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 822.505817][ T4856] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 822.590002][ T4856] loop1: detected capacity change from 0 to 128 [ 822.611092][ T30] audit: type=1400 audit(2000000226.669:23465): avc: denied { mounton } for pid=4855 comm="syz-executor.1" path="/root/syzkaller-testdir127819693/syzkaller.UnpmB4/308/file0/file0/bus" dev="loop1" ino=1049374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 822.667715][ T4864] syz-executor.3[4864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.667778][ T4864] syz-executor.3[4864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.860426][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.879117][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.886283][ T4866] device bridge_slave_0 entered promiscuous mode [ 822.893356][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.903546][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.911063][ T4866] device bridge_slave_1 entered promiscuous mode [ 822.960193][ T4875] tun0: tun_chr_ioctl cmd 21731 [ 822.993134][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.000101][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.007304][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.014062][ T4866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.042438][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 823.052957][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.060319][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.075740][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.084280][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.091160][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.098369][T31629] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 823.119103][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.127459][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.134333][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.141634][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.149840][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.169937][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 823.184231][ T4866] device veth0_vlan entered promiscuous mode [ 823.191919][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 823.199853][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 823.207830][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 823.223696][ T4866] device veth1_macvtap entered promiscuous mode [ 823.231191][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 823.248075][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 823.256308][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 823.281610][ T30] audit: type=1326 audit(2000000227.339:23466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc93564ee9 code=0x0 [ 823.318118][T30447] bridge0: port 3(veth3) entered disabled state [ 823.324701][T30447] device bridge_slave_1 left promiscuous mode [ 823.330680][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.338144][T30447] device bridge_slave_0 left promiscuous mode [ 823.344143][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.352319][T30447] device veth1_macvtap left promiscuous mode [ 823.358253][T30447] device veth0_vlan left promiscuous mode [ 823.506963][T31629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.517012][T31629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.597142][T31629] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 823.606098][T31629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 823.613991][T31629] usb 4-1: SerialNumber: syz [ 823.679928][ T4886] loop0: detected capacity change from 0 to 512 [ 823.698150][ T4886] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 823.705158][ T4886] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 823.781332][ T4886] loop0: detected capacity change from 0 to 128 [ 823.897631][T31629] usb 4-1: 0:2 : does not exist [ 823.902941][T31629] usb 4-1: USB disconnect, device number 61 [ 824.036370][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.043482][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.051106][ T4888] device bridge_slave_0 entered promiscuous mode [ 824.060092][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.067593][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.075040][ T4888] device bridge_slave_1 entered promiscuous mode [ 824.149166][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.156039][ T4888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.163199][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.170074][ T4888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.208600][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 824.216285][T31629] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.223665][T31629] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.244079][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 824.252215][T31629] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.259103][T31629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.266351][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.274505][T31629] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.281509][T31629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.298224][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.306770][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.324801][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 824.341007][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.349307][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 824.356570][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 824.365117][ T4888] device veth0_vlan entered promiscuous mode [ 824.384179][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 824.394361][ T4888] device veth1_macvtap entered promiscuous mode [ 824.410457][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 824.430260][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 824.466135][ T4911] loop0: detected capacity change from 0 to 512 [ 824.518057][ T4911] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 824.525175][ T4911] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 824.549955][T30447] device bridge_slave_1 left promiscuous mode [ 824.555899][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.563346][T30447] device bridge_slave_0 left promiscuous mode [ 824.569418][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.577628][T30447] device veth1_macvtap left promiscuous mode [ 824.583470][T30447] device veth0_vlan left promiscuous mode [ 824.592782][ T4911] loop0: detected capacity change from 0 to 128 [ 824.680808][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.688178][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.695503][ T4916] device bridge_slave_0 entered promiscuous mode [ 824.708511][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.715423][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.722825][ T4916] device bridge_slave_1 entered promiscuous mode [ 824.818565][ T4931] loop3: detected capacity change from 0 to 512 [ 824.836167][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 824.844806][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 824.868209][ T4931] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 824.878954][ T4931] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 824.886274][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 824.894497][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 824.902546][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.909389][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.917280][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.925655][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.934314][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.941183][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.948462][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.957220][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.964862][ T4931] loop3: detected capacity change from 0 to 128 [ 824.965324][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 824.993715][ T4916] device veth0_vlan entered promiscuous mode [ 825.008299][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 825.016642][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 825.025052][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 825.032829][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 825.068390][ T4938] device syzkaller0 entered promiscuous mode [ 825.099035][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.109593][ T4916] device veth1_macvtap entered promiscuous mode [ 825.128675][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.160504][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.225185][ T30] audit: type=1326 audit(2000000229.279:23467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.256470][ T4950] loop1: detected capacity change from 0 to 512 [ 825.265119][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.272203][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.276970][ T30] audit: type=1326 audit(2000000229.279:23468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.279794][ T4932] device bridge_slave_0 entered promiscuous mode [ 825.309644][ T30] audit: type=1326 audit(2000000229.279:23469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.310900][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.341565][ T4950] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 825.342551][ T30] audit: type=1326 audit(2000000229.279:23470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.348546][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.372499][ T4950] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 825.380281][ T4932] device bridge_slave_1 entered promiscuous mode [ 825.395149][ T4951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 825.395684][ T30] audit: type=1326 audit(2000000229.279:23471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.432195][ T30] audit: type=1326 audit(2000000229.279:23472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.456346][ T30] audit: type=1326 audit(2000000229.279:23473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.495312][ T30] audit: type=1326 audit(2000000229.279:23474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.520861][ T30] audit: type=1326 audit(2000000229.279:23475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.544877][ T30] audit: type=1326 audit(2000000229.279:23476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4c895bbee9 code=0x7ffc0000 [ 825.589849][ T4950] loop1: detected capacity change from 0 to 128 [ 825.667999][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.674869][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.683259][ T4952] device bridge_slave_0 entered promiscuous mode [ 825.691845][ T4952] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.698852][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.706176][ T4952] device bridge_slave_1 entered promiscuous mode [ 825.826776][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 825.834167][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 825.860865][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 825.869163][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 825.878664][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.885496][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.892815][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 825.901366][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 825.909388][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.916217][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.924008][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 825.962286][ T4961] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.969389][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.976621][ T4961] device bridge_slave_0 entered promiscuous mode [ 825.989497][ T4961] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.996630][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.004075][ T4961] device bridge_slave_1 entered promiscuous mode [ 826.039519][T30447] device bridge_slave_1 left promiscuous mode [ 826.045491][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.054930][T30447] device bridge_slave_0 left promiscuous mode [ 826.060964][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.068794][T30447] device bridge_slave_1 left promiscuous mode [ 826.074883][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.082346][T30447] device bridge_slave_0 left promiscuous mode [ 826.088372][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.096496][T30447] device veth1_macvtap left promiscuous mode [ 826.102509][T30447] device veth0_vlan left promiscuous mode [ 826.108244][T30447] device veth1_macvtap left promiscuous mode [ 826.114132][T30447] device veth0_vlan left promiscuous mode [ 826.281158][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 826.289183][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 826.307023][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 826.314949][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 826.362568][ T4963] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.369640][ T4963] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.377364][ T4963] device bridge_slave_0 entered promiscuous mode [ 826.394429][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.401395][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.408638][ T4963] device bridge_slave_1 entered promiscuous mode [ 826.418304][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.426916][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.482374][ T4932] device veth0_vlan entered promiscuous mode [ 826.496382][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.504288][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.514262][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.522145][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.541502][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 826.548921][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 826.556114][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 826.564255][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 826.572643][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.579592][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.586778][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 826.595122][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 826.603219][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.610052][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.617428][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 826.637323][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 826.645396][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 826.655407][ T4932] device veth1_macvtap entered promiscuous mode [ 826.684151][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 826.692495][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 826.701135][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 826.708949][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 826.742931][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 826.751753][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 826.775850][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.784200][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.808809][ T4952] device veth0_vlan entered promiscuous mode [ 826.816953][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.824719][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.833393][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.841134][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.855084][ T4952] device veth1_macvtap entered promiscuous mode [ 826.876061][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 826.884299][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 826.893390][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 826.900902][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 826.908207][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 826.921815][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 826.930108][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 826.947873][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 826.956048][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 826.964294][T31629] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.971138][T31629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.979613][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 826.987139][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 826.995340][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.016677][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.025544][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.033552][ T1840] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.040398][ T1840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.075659][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.083791][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.096085][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.104065][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.129642][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 827.138074][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 827.161810][ T4961] device veth0_vlan entered promiscuous mode [ 827.168925][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.176927][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.185467][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.196653][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 827.207979][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.215831][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.247207][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.255598][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.263743][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.270603][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.278740][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.287464][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.295596][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.302535][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.309758][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.317706][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.325518][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.333503][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.350625][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 827.358205][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.366321][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.375934][ T4961] device veth1_macvtap entered promiscuous mode [ 827.398230][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.405829][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 827.414808][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 827.430987][ T4963] device veth0_vlan entered promiscuous mode [ 827.438369][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.446490][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.454505][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.462984][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.471991][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.479402][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 827.501876][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 827.510213][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.523725][ T4963] device veth1_macvtap entered promiscuous mode [ 827.531597][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.576493][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.585093][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.612215][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 827.631514][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.652767][T30447] device bridge_slave_1 left promiscuous mode [ 827.666693][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.675673][ T4990] incfs: mount failed -22 [ 827.682417][T30447] device bridge_slave_0 left promiscuous mode [ 827.689697][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.699267][T30447] device bridge_slave_1 left promiscuous mode [ 827.705480][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.713198][T30447] device bridge_slave_0 left promiscuous mode [ 827.719498][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.728098][T30447] device bridge_slave_1 left promiscuous mode [ 827.743243][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.755973][T30447] device bridge_slave_0 left promiscuous mode [ 827.762424][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.771914][T30447] device veth1_macvtap left promiscuous mode [ 827.778151][T30447] device veth0_vlan left promiscuous mode [ 827.783982][T30447] device veth1_macvtap left promiscuous mode [ 827.789930][T30447] device veth0_vlan left promiscuous mode [ 827.804731][T30447] device veth1_macvtap left promiscuous mode [ 827.815159][T30447] device veth0_vlan left promiscuous mode [ 827.867091][ T5002] syz-executor.1[5002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.867196][ T5002] syz-executor.1[5002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.908378][ T5000] loop0: detected capacity change from 0 to 1024 [ 827.943875][ T4986] loop4: detected capacity change from 0 to 40427 [ 827.956600][ T5000] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,noblock_validity,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 827.998480][ T4986] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 828.006027][ T4986] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 828.020493][ T5009] loop1: detected capacity change from 0 to 256 [ 828.022694][ T4986] F2FS-fs (loop4): Found nat_bits in checkpoint [ 828.066664][ T5014] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.074160][ T4986] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 828.085401][ T4986] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 828.140975][ T4986] attempt to access beyond end of device [ 828.140975][ T4986] loop4: rw=2049, want=45104, limit=40427 [ 828.497840][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.504701][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.521666][ T4982] device bridge_slave_0 entered promiscuous mode [ 828.551064][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.558670][ T5028] loop0: detected capacity change from 0 to 40427 [ 828.565153][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.573008][ T4982] device bridge_slave_1 entered promiscuous mode [ 828.597666][ T5028] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 828.610794][ T5028] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 828.634559][ T5028] F2FS-fs (loop0): Found nat_bits in checkpoint [ 828.683908][ T5028] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 828.691156][ T5028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 828.704625][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.711502][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.718622][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.725498][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.760805][ T5028] attempt to access beyond end of device [ 828.760805][ T5028] loop0: rw=2049, want=45104, limit=40427 [ 828.775440][ T5049] loop4: detected capacity change from 0 to 256 [ 828.778532][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 828.790703][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.798364][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 828.805998][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.828110][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 828.836144][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.843005][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.859299][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.867428][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.894070][ T4982] device veth0_vlan entered promiscuous mode [ 828.901740][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 828.910986][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 828.922463][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 828.930015][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 828.957947][ T5052] tap0: tun_chr_ioctl cmd 1074025692 [ 828.964211][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 828.975005][ T4982] device veth1_macvtap entered promiscuous mode [ 828.989438][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.996287][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.004176][ T5047] device bridge_slave_0 entered promiscuous mode [ 829.017405][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.025792][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 829.035526][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.042659][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.050284][ T5047] device bridge_slave_1 entered promiscuous mode [ 829.110950][ T5063] loop0: detected capacity change from 0 to 256 [ 829.177592][ T5063] exfat: Deprecated parameter 'utf8' [ 829.183654][ T5067] loop3: detected capacity change from 0 to 1024 [ 829.200832][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.207707][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.214835][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.221697][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.229924][ T5063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 829.244130][ T5067] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 829.246532][ T5058] loop4: detected capacity change from 0 to 40427 [ 829.265874][ T5067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f00cc01c, mo2=0002] [ 829.273730][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.277596][ T5067] System zones: [ 829.282187][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.287150][ T5067] 0-1, 3-36 [ 829.295982][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.297381][ T5067] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,debug,,errors=continue. Quota mode: writeback. [ 829.339996][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.348456][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.355344][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.367781][ T5058] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 829.377690][ T5058] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 829.386035][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.397717][ T5058] F2FS-fs (loop4): Found nat_bits in checkpoint [ 829.401178][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.410664][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.448114][ T5058] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 829.455031][ T5058] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 829.478788][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 829.487235][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 829.495127][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 829.498617][ T5058] attempt to access beyond end of device [ 829.498617][ T5058] loop4: rw=2049, want=45104, limit=40427 [ 829.502707][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 829.525921][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 829.534029][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 829.548458][ T5047] device veth0_vlan entered promiscuous mode [ 829.558191][ T5079] tap0: tun_chr_ioctl cmd 1074025692 [ 829.575239][ T5047] device veth1_macvtap entered promiscuous mode [ 829.582692][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 829.590834][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.599517][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 829.621668][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 829.629884][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.638532][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 829.646650][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 829.687753][ T5083] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 829.799066][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.805945][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.813428][ T5087] device bridge_slave_0 entered promiscuous mode [ 829.820338][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.827250][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.834586][ T5087] device bridge_slave_1 entered promiscuous mode [ 829.841461][ T5091] x_tables: unsorted underflow at hook 2 [ 829.999758][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.006734][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.013858][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.020629][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.068284][T30447] device bridge_slave_1 left promiscuous mode [ 830.074248][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.088697][T30447] device bridge_slave_0 left promiscuous mode [ 830.094952][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.115867][T30447] device bridge_slave_1 left promiscuous mode [ 830.124877][ T5118] x_tables: unsorted underflow at hook 2 [ 830.131593][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.139218][T30447] device bridge_slave_0 left promiscuous mode [ 830.145192][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.168774][ T5120] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 830.178980][T30447] device veth1_macvtap left promiscuous mode [ 830.183445][ T5099] loop4: detected capacity change from 0 to 40427 [ 830.191548][T30447] device veth0_vlan left promiscuous mode [ 830.197597][T30447] device veth1_macvtap left promiscuous mode [ 830.203492][T30447] device veth0_vlan left promiscuous mode [ 830.266366][ T5099] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 830.275494][ T5099] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 830.299132][ T5099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 830.341793][ T5099] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 830.348863][ T5099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 830.381160][ T5099] attempt to access beyond end of device [ 830.381160][ T5099] loop4: rw=2049, want=45104, limit=40427 [ 830.469961][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 830.477847][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 830.486076][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 830.506948][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 830.515025][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 830.525039][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 830.533717][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 830.552199][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.571021][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.584211][ T5087] device veth0_vlan entered promiscuous mode [ 830.592843][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.601200][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.616724][ T5087] device veth1_macvtap entered promiscuous mode [ 830.625996][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.633648][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.640927][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 830.649331][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 830.657419][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 830.676600][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 830.685129][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 830.694780][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 830.703041][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 831.045799][ T5180] loop0: detected capacity change from 0 to 128 [ 831.098078][ T5180] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 831.214399][ T5182] SELinux: Context system_u: is not valid (left unmapped). [ 831.221949][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 831.221962][ T30] audit: type=1400 audit(2000000235.289:23528): avc: denied { relabelto } for pid=5181 comm="syz-executor.0" name="" dev="pipefs" ino=201378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 831.276342][ T5184] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 831.367729][T30447] device bridge_slave_1 left promiscuous mode [ 831.374943][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.391902][T30447] device bridge_slave_0 left promiscuous mode [ 831.398431][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.413929][T30447] device veth1_macvtap left promiscuous mode [ 831.427254][T30447] device veth0_vlan left promiscuous mode [ 831.626957][ T30] audit: type=1400 audit(2000000235.679:23529): avc: denied { create } for pid=5217 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 831.668840][ T5223] loop1: detected capacity change from 0 to 128 [ 831.707581][ T5223] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 831.859853][ T5232] loop1: detected capacity change from 0 to 128 [ 831.897877][ T5232] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 832.301505][ T5248] incfs: mount failed -22 [ 832.370034][ T5256] loop1: detected capacity change from 0 to 128 [ 832.388051][ T5256] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 832.501803][ T30] audit: type=1326 audit(2000000236.559:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.528490][ T30] audit: type=1326 audit(2000000236.559:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.552568][ T30] audit: type=1326 audit(2000000236.589:23532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.578233][ T30] audit: type=1326 audit(2000000236.619:23533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.602648][ T30] audit: type=1326 audit(2000000236.619:23534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.627645][ T30] audit: type=1326 audit(2000000236.639:23535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 832.654880][ T30] audit: type=1326 audit(2000000236.639:23536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff62a8f0667 code=0x7ffc0000 [ 832.681654][ T30] audit: type=1326 audit(2000000236.639:23537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff62a8b6329 code=0x7ffc0000 [ 833.033583][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.040680][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.048534][ T5309] device bridge_slave_0 entered promiscuous mode [ 833.056337][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.063770][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.071733][ T5309] device bridge_slave_1 entered promiscuous mode [ 833.174079][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.180972][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.188072][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.194829][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.227951][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.235638][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.243022][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.257936][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.266072][T24684] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.272953][T24684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.280465][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 833.289657][T24684] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.296520][T24684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.312507][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 833.322239][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 833.356396][ T5309] device veth0_vlan entered promiscuous mode [ 833.362962][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 833.371287][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 833.379217][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 833.386520][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 833.403008][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 833.415778][ T5309] device veth1_macvtap entered promiscuous mode [ 833.429490][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 833.444494][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 833.453976][ T8] device bridge_slave_1 left promiscuous mode [ 833.460388][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.468166][ T8] device bridge_slave_0 left promiscuous mode [ 833.474269][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.482786][ T8] device veth1_macvtap left promiscuous mode [ 833.488920][ T8] device veth0_vlan left promiscuous mode [ 833.644703][ T5349] loop1: detected capacity change from 0 to 256 [ 833.750654][ T5354] incfs: mount failed -22 [ 834.529147][ T5387] loop3: detected capacity change from 0 to 2048 [ 834.547763][ T5385] loop1: detected capacity change from 0 to 2048 [ 834.564100][ T5387] EXT4-fs (loop3): blocks per group (16777216) and clusters per group (16384) inconsistent [ 834.588632][ T5385] EXT4-fs (loop1): blocks per group (16777216) and clusters per group (16384) inconsistent [ 834.617313][ T5409] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 834.759348][ T5417] loop4: detected capacity change from 0 to 512 [ 834.802116][ T5417] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 834.819102][ T5417] ext4 filesystem being mounted at /root/syzkaller-testdir256071399/syzkaller.5l4uAE/32/file1 supports timestamps until 2038 (0x7fffffff) [ 834.854707][ T5430] syz-executor.3[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.854837][ T5430] syz-executor.3[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.900759][ T5436] loop3: detected capacity change from 0 to 512 [ 834.964371][ T5436] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 834.978115][ T5436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: casefold flag without casefold feature [ 834.991528][ T5436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: ea_inode with extended attributes [ 834.992776][ T5439] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 835.011980][ T5436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 835.026057][ T5436] EXT4-fs (loop3): 1 orphan inode deleted [ 835.032713][ T5436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 835.240667][ T5455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5455 comm=syz-executor.1 [ 835.673552][ T5475] syz-executor.1[5475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.673616][ T5475] syz-executor.1[5475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.699284][ T5477] loop1: detected capacity change from 0 to 512 [ 835.769225][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 835.786084][ T5477] ext4 filesystem being mounted at /root/syzkaller-testdir145950975/syzkaller.lzXlJl/72/file1 supports timestamps until 2038 (0x7fffffff) [ 836.049468][ T5494] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.060470][ T5492] netlink: 41402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.060518][ T5494] FAT-fs (loop9): unable to read boot sector [ 836.088013][ T5497] syz-executor.3[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.088095][ T5497] syz-executor.3[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.183793][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.270586][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 836.363834][ T5521] netlink: 41402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.398287][ T5524] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.409273][ T5524] FAT-fs (loop7): unable to read boot sector [ 836.451962][ T5532] syz-executor.3[5532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.452048][ T5532] syz-executor.3[5532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.686869][ T300] Bluetooth: hci0: command 0x1003 tx timeout [ 836.713290][ T47] Bluetooth: hci0: sending frame failed (-49) [ 836.783921][ T30] kauditd_printk_skb: 579 callbacks suppressed [ 836.783937][ T30] audit: type=1326 audit(2000000240.839:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x0 [ 836.817979][ T5542] loop1: detected capacity change from 0 to 40427 [ 836.872049][ T5542] F2FS-fs (loop1): Found nat_bits in checkpoint [ 836.904627][ T5542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 837.065842][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.092536][ T5583] cTdKz ȱ4j&rngA  [ 837.092536][ T5583] ٖZuu`ջ(K[rO`}@)=31%Kt{Fg RxyDX"sƷԂV~ :4 &,0FtEe`ݣW [ 837.092536][ T5583] v_ m?gppL~`s3]-KVԌAEP.\X:z{9y;q><ڨUTͷ\JSPk_*roe ) BUQ/O=-7j3u[SpT PECRaQ[5 [ 837.092536][ T5583] Yt==μL>vjwN,\%Cd(+Up0~@o JP>Z/t~ԍ5uph_ԛ.%g?"Wq [ 837.092536][ T5583] au\CFV_~4l*}&3΄dC֫ܙm!eݖ=GmKHϗˣ6ZzD'tj'T"'4Ŏ(TLM/vż [ 837.301697][ T5604] loop1: detected capacity change from 0 to 1024 [ 837.323542][ T5606] loop3: detected capacity change from 0 to 1024 [ 837.349001][ T5604] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.368871][ T5606] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.451514][ T5613] loop1: detected capacity change from 0 to 512 [ 837.478611][ T5613] EXT4-fs (loop1): Ignoring removed bh option [ 837.484687][ T5613] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 837.494684][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 837.506144][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 837.515825][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 837.526183][ T5613] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 837.534377][ T5613] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 837.539635][ T5616] loop3: detected capacity change from 0 to 512 [ 837.542889][ T5613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 837.555118][ T5613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 34: padding at end of block bitmap is not set [ 837.569699][ T5613] Quota error (device loop1): write_blk: dquota write failed [ 837.576942][ T5613] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 837.587601][ T5613] EXT4-fs (loop1): 1 truncate cleaned up [ 837.594022][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,discard,usrjquota=./file0,noblock_validity,,errors=continue. Quota mode: writeback. [ 837.610063][ T5616] EXT4-fs (loop3): Ignoring removed bh option [ 837.616122][ T5616] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 837.620586][ T5613] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 837.633147][ T5613] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 837.642015][ T5616] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 837.651791][ T5616] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 837.661646][ T5616] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 837.676314][ T5616] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 837.686737][ T5616] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 837.695328][ T5616] EXT4-fs (loop3): orphan cleanup on readonly fs [ 837.702364][ T5616] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 34: padding at end of block bitmap is not set [ 837.723931][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 837.733217][ T5616] Quota error (device loop3): write_blk: dquota write failed [ 837.743139][ T5616] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 837.758894][ T5616] EXT4-fs (loop3): 1 truncate cleaned up [ 837.765695][ T5616] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,discard,usrjquota=./file0,noblock_validity,,errors=continue. Quota mode: writeback. [ 837.787067][ T5616] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 837.794850][ T5616] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 837.929623][ T5644] loop4: detected capacity change from 0 to 512 [ 837.975193][ T5644] EXT4-fs (loop4): Ignoring removed bh option [ 837.985197][ T5644] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 837.994887][ T5644] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 838.005148][ T5644] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 838.015534][ T5644] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 838.032073][ T5644] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 838.045148][ T5644] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 838.058816][ T5644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 838.060501][ T5636] loop1: detected capacity change from 0 to 40427 [ 838.073556][ T5644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 34: padding at end of block bitmap is not set [ 838.088271][ T5644] Quota error (device loop4): write_blk: dquota write failed [ 838.095590][ T5644] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 838.106354][ T5644] EXT4-fs (loop4): 1 truncate cleaned up [ 838.117856][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,discard,usrjquota=./file0,noblock_validity,,errors=continue. Quota mode: writeback. [ 838.129008][ T5654] syz-executor.3[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 838.132751][ T5654] syz-executor.3[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 838.136654][ T5644] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 838.157937][ T5636] F2FS-fs (loop1): Found nat_bits in checkpoint [ 838.180782][ T5644] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 838.206361][ T5636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 838.312775][ T5673] loop1: detected capacity change from 0 to 256 [ 838.361867][ T5679] loop4: detected capacity change from 0 to 128 [ 838.514644][ T5696] cgroup: No subsys list or none specified [ 838.570422][ T5704] loop1: detected capacity change from 0 to 256 [ 838.580604][ T5684] loop3: detected capacity change from 0 to 40427 [ 838.620536][ T5684] F2FS-fs (loop3): Found nat_bits in checkpoint [ 838.652459][ T5684] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 838.776870][ T300] Bluetooth: hci0: command 0x1001 tx timeout [ 838.782768][ T47] Bluetooth: hci0: sending frame failed (-49) [ 838.804342][ T5723] loop1: detected capacity change from 0 to 512 [ 838.851159][ T5723] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 838.870231][ T5734] loop3: detected capacity change from 0 to 128 [ 838.904176][ T5734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 838.915272][ T5734] ext4 filesystem being mounted at /root/syzkaller-testdir985263581/syzkaller.Q58hoG/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 839.120870][ T5757] loop1: detected capacity change from 0 to 256 [ 839.391625][ T5778] loop1: detected capacity change from 0 to 128 [ 839.598394][ T5803] tipc: Started in network mode [ 839.603124][ T5803] tipc: Node identity ac1414aa, cluster identity 4711 [ 839.609856][ T5803] tipc: New replicast peer: 100.1.1.1 [ 839.615144][ T5803] tipc: Enabled bearer , priority 10 [ 839.682536][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.689901][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.697458][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.704720][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.711880][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.719190][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.726361][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.733607][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.740835][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.748066][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.755192][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.762524][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.769773][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.776958][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.784227][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.791487][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.798749][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.805943][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.813217][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.820423][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.827699][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.835043][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.842274][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.849567][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.856713][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.863965][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.871166][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.878382][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.885547][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.892831][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.899982][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.907177][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.914443][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.921660][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.928891][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.936137][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.943363][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.950563][ T753] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 839.958362][ T753] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz0] on syz0 [ 840.726892][ T1840] tipc: Node number set to 2886997162 [ 840.738501][ T5855] device bridge_slave_0 left promiscuous mode [ 840.744482][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.752811][ T5855] device bridge_slave_1 left promiscuous mode [ 840.758992][T31629] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 840.763040][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.846903][ T1840] Bluetooth: hci0: command 0x1009 tx timeout [ 841.011507][ T30] audit: type=1326 audit(2000000245.069:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 841.036207][ T30] audit: type=1326 audit(2000000245.079:24119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 841.060611][ T30] audit: type=1326 audit(2000000245.079:24120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff62a8f2ee9 code=0x7ffc0000 [ 841.116979][T31629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.120585][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.128070][T31629] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.135188][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.147805][T31629] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.154770][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.154796][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.163952][T31629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.171281][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.179175][T31629] usb 4-1: config 0 descriptor?? [ 841.186538][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.205252][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.212622][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.219773][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.226956][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.234139][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.241369][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.248588][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.255768][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.262974][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.270274][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.277480][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.284667][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.292052][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.299367][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.306622][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.313868][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.321059][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.328266][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.335436][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.342671][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.349855][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.357082][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.364250][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.371479][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.378703][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.385861][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.393082][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.400492][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.407732][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.414855][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.422066][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.429303][ T3283] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 841.437981][ T3283] hid-generic 0000:0000:0000.00A8: hidraw0: HID v0.00 Device [syz0] on syz0 [ 841.489530][ T5875] input: syz0 as /devices/virtual/input/input106 [ 841.571704][ T5878] input: syz0 as /devices/virtual/input/input107 [ 841.668440][T31629] plantronics 0003:047F:FFFF.00A9: No inputs registered, leaving [ 841.681224][T31629] plantronics 0003:047F:FFFF.00A9: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 842.177831][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 842.177848][ T30] audit: type=1326 audit(2000000246.239:24129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.208361][ T30] audit: type=1326 audit(2000000246.239:24130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.233601][ T30] audit: type=1326 audit(2000000246.239:24131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.257891][ T30] audit: type=1326 audit(2000000246.239:24132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.282010][ T30] audit: type=1326 audit(2000000246.239:24133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.306338][ T30] audit: type=1326 audit(2000000246.239:24134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.330483][ T30] audit: type=1326 audit(2000000246.239:24135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.354676][ T30] audit: type=1326 audit(2000000246.299:24136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.378802][ T30] audit: type=1326 audit(2000000246.299:24137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.428141][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 842.457985][ T30] audit: type=1326 audit(2000000246.519:24138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbed217ee9 code=0x7ffc0000 [ 842.529195][ T5900] loop4: detected capacity change from 0 to 512 [ 842.555176][T31629] usb 4-1: USB disconnect, device number 62 [ 842.573595][ T5900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 842.584529][ T5900] ext4 filesystem being mounted at /root/syzkaller-testdir256071399/syzkaller.5l4uAE/73/bus supports timestamps until 2038 (0x7fffffff) [ 843.117869][ T5916] input: syz0 as /devices/virtual/input/input108 [ 843.244184][ T5927] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 843.337234][ T5935] loop3: detected capacity change from 0 to 512 [ 843.414831][ T5935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 843.425864][ T5935] ext4 filesystem being mounted at /root/syzkaller-testdir985263581/syzkaller.Q58hoG/138/bus supports timestamps until 2038 (0x7fffffff) [ 843.963286][ T5947] loop1: detected capacity change from 0 to 512 [ 843.999198][ T5947] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 844.010165][ T5947] ext4 filesystem being mounted at /root/syzkaller-testdir145950975/syzkaller.lzXlJl/147/bus supports timestamps until 2038 (0x7fffffff) [ 844.805183][T31629] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 844.868582][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 845.084188][ T5979] device wireguard0 entered promiscuous mode [ 845.175109][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 845.207006][T31629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.218060][T31629] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 845.231061][T31629] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 845.240490][T31629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.249229][T31629] usb 4-1: config 0 descriptor?? [ 845.540316][ T6015] device pim6reg1 entered promiscuous mode [ 845.602040][ T6019] loop1: detected capacity change from 0 to 256 [ 845.684511][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.728582][T31629] plantronics 0003:047F:FFFF.00AA: No inputs registered, leaving [ 845.737313][T31629] plantronics 0003:047F:FFFF.00AA: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 846.074802][ T6043] device pim6reg1 entered promiscuous mode [ 846.269994][ T6051] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 846.598378][ T753] usb 4-1: USB disconnect, device number 63 [ 846.746832][ T738] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 846.856391][ T6063] loop4: detected capacity change from 0 to 128 [ 846.898034][ T6063] EXT4-fs (loop4): Ignoring removed oldalloc option [ 846.904474][ T6063] EXT4-fs (loop4): Unrecognized mount option "obj_user=" or missing value [ 847.054360][ T738] usb 2-1: Using ep0 maxpacket: 32 [ 847.093144][ T6063] fscrypt_msg: 2 callbacks suppressed [ 847.093175][ T6063] fscrypt: sda1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 1956 [ 847.436930][ T738] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 847.447732][ T738] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 847.456685][ T738] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 847.465910][ T738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.473792][ T6079] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 847.482449][ T738] usb 2-1: config 0 descriptor?? [ 847.840769][T31629] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 847.896743][ T6093] loop4: detected capacity change from 0 to 40427 [ 847.917697][ T6093] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 847.924520][ T6093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 847.934123][ T6093] F2FS-fs (loop4): invalid crc value [ 847.956679][ T6093] F2FS-fs (loop4): Found nat_bits in checkpoint [ 847.999732][ T6093] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 848.007032][ T6093] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 848.013998][ T6093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 848.046761][ T4961] attempt to access beyond end of device [ 848.046761][ T4961] loop4: rw=524288, want=45072, limit=40427 [ 848.058414][ T4961] attempt to access beyond end of device [ 848.058414][ T4961] loop4: rw=0, want=45072, limit=40427 [ 848.075248][ T4961] attempt to access beyond end of device [ 848.075248][ T4961] loop4: rw=2049, want=45104, limit=40427 [ 848.247012][T31629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.276811][T31629] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.295317][T31629] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.317408][T31629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.337925][T31629] usb 4-1: config 0 descriptor?? [ 848.417646][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.424507][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.431878][ T6105] device bridge_slave_0 entered promiscuous mode [ 848.438984][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.445911][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.453330][ T6105] device bridge_slave_1 entered promiscuous mode [ 848.511806][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.519116][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.526429][ T6106] device bridge_slave_0 entered promiscuous mode [ 848.535542][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.542501][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.549759][ T6106] device bridge_slave_1 entered promiscuous mode [ 848.623890][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.630773][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.640295][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.647074][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.666865][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.673740][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.680829][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.687613][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.696713][ T8] device bridge_slave_1 left promiscuous mode [ 848.703005][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.710599][ T8] device bridge_slave_0 left promiscuous mode [ 848.716527][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.724786][ T8] device veth1_macvtap left promiscuous mode [ 848.808785][T31629] plantronics 0003:047F:FFFF.00AB: No inputs registered, leaving [ 848.819037][T31629] plantronics 0003:047F:FFFF.00AB: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 848.852927][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 848.860468][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.867855][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.875409][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.882840][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.897649][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 848.905658][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.912498][ T738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.928338][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 848.936408][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.943260][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.951092][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 848.961658][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 848.977358][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 848.988071][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 848.998797][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.007076][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.013951][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.025982][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.034295][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.041158][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.051604][ T6105] device veth0_vlan entered promiscuous mode [ 849.059392][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.076990][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 849.084277][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 849.091647][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 849.099600][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 849.107398][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 849.115251][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 849.123016][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 849.130964][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 849.141632][ T6105] device veth1_macvtap entered promiscuous mode [ 849.153020][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 849.161227][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.169442][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.183887][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.192107][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.203846][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 849.212365][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 849.232016][ T6106] device veth0_vlan entered promiscuous mode [ 849.239959][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 849.247832][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.261030][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 849.268353][T31629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 849.280900][ T6106] device veth1_macvtap entered promiscuous mode [ 849.294848][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 849.302992][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 849.312016][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 849.329429][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.338018][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.346461][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.354817][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.469414][ T6133] loop4: detected capacity change from 0 to 512 [ 849.552378][ T6133] EXT4-fs (loop4): 1 orphan inode deleted [ 849.558156][ T6133] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 849.579284][ T6133] ext4 filesystem being mounted at /root/syzkaller-testdir430250374/syzkaller.4MPpCE/3/file1 supports timestamps until 2038 (0x7fffffff) [ 849.821114][ T753] usb 4-1: USB disconnect, device number 64 [ 849.845445][ T8] device bridge_slave_1 left promiscuous mode [ 849.877364][ T6141] EXT4-fs error (device loop4): ext4_free_blocks:6190: comm syz-executor.4: Freeing blocks not in datazone - block = 41, count = 1 [ 849.891512][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.891532][T31587] usb 2-1: USB disconnect, device number 93 [ 849.904415][ T8] device bridge_slave_0 left promiscuous mode [ 849.915069][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.922609][ T6141] EXT4-fs (loop4): Remounting filesystem read-only [ 849.930288][ T8] device veth1_macvtap left promiscuous mode [ 849.936144][ T6141] ================================================================== [ 849.944074][ T6141] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x2149/0x4a60 [ 849.951802][ T6141] Read of size 18446744073709551604 at addr ffff88813a087018 by task syz-executor.4/6141 [ 849.961433][ T6141] [ 849.963605][ T6141] CPU: 0 PID: 6141 Comm: syz-executor.4 Tainted: G W 5.15.149-syzkaller-00055-g424f92bcbe8f #0 [ 849.975064][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 849.984961][ T6141] Call Trace: [ 849.988076][ T6141] [ 849.990860][ T6141] dump_stack_lvl+0x151/0x1b7 [ 849.995370][ T6141] ? io_uring_drop_tctx_refs+0x190/0x190 [ 850.000835][ T6141] ? panic+0x751/0x751 [ 850.004761][ T6141] print_address_description+0x87/0x3b0 [ 850.010124][ T6141] ? __kasan_check_read+0x11/0x20 [ 850.014988][ T6141] kasan_report+0x179/0x1c0 [ 850.019338][ T6141] ? __ext4_journal_get_write_access+0x2d5/0x690 [ 850.025483][ T6141] ? ext4_ext_remove_space+0x2149/0x4a60 [ 850.030959][ T6141] ? ext4_ext_remove_space+0x2149/0x4a60 [ 850.036509][ T6141] kasan_check_range+0x293/0x2a0 [ 850.041290][ T6141] ? ext4_ext_remove_space+0x2149/0x4a60 [ 850.046750][ T6141] memmove+0x2d/0x70 [ 850.050499][ T6141] ext4_ext_remove_space+0x2149/0x4a60 [ 850.055789][ T6141] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 850.061591][ T6141] ? ext4_es_remove_extent+0x297/0x460 [ 850.066896][ T6141] ext4_punch_hole+0x794/0xbf0 [ 850.071492][ T6141] ext4_fallocate+0x30c/0x1f10 [ 850.076088][ T6141] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 850.081554][ T6141] ? ext4_ext_truncate+0x240/0x240 [ 850.086500][ T6141] ? vfs_fallocate+0x308/0x570 [ 850.091106][ T6141] ? file_start_write+0x10d/0x1c0 [ 850.095961][ T6141] ? file_start_write+0x171/0x1c0 [ 850.100824][ T6141] vfs_fallocate+0x492/0x570 [ 850.105249][ T6141] __x64_sys_fallocate+0xc0/0x110 [ 850.110111][ T6141] do_syscall_64+0x3d/0xb0 [ 850.114367][ T6141] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 850.120092][ T6141] RIP: 0033:0x7f43ab876ee9 [ 850.124341][ T6141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 850.143807][ T6141] RSP: 002b:00007f43aa5ca0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 850.152031][ T6141] RAX: ffffffffffffffda RBX: 00007f43ab9ae070 RCX: 00007f43ab876ee9 [ 850.159846][ T6141] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 850.167651][ T6141] RBP: 00007f43ab8c347f R08: 0000000000000000 R09: 0000000000000000 [ 850.175466][ T6141] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 850.183279][ T6141] R13: 000000000000006e R14: 00007f43ab9ae070 R15: 00007fff741339c8 [ 850.191103][ T6141] [ 850.193958][ T6141] [ 850.196117][ T6141] The buggy address belongs to the page: [ 850.201590][ T6141] page:ffffea0004e821c0 refcount:2 mapcount:0 mapping:ffff8881091924d8 index:0x27 pfn:0x13a087 [ 850.211743][ T6141] memcg:ffff88810bb28000 [ 850.215828][ T6141] aops:def_blk_aops ino:700004 [ 850.220441][ T6141] flags: 0x4000000000002036(referenced|uptodate|lru|active|private|zone=1) [ 850.228850][ T6141] raw: 4000000000002036 ffffea0004c14c48 ffffea0004e4cd88 ffff8881091924d8 [ 850.237267][ T6141] raw: 0000000000000027 ffff88812ba17dc8 00000002ffffffff ffff88810bb28000 [ 850.245690][ T6141] page dumped because: kasan: bad access detected [ 850.251943][ T6141] page_owner tracks the page as allocated [ 850.257568][ T6141] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 6132, ts 849610598294, free_ts 848231730233 [ 850.274668][ T6141] post_alloc_hook+0x1a3/0x1b0 [ 850.279271][ T6141] prep_new_page+0x1b/0x110 [ 850.283701][ T6141] get_page_from_freelist+0x3550/0x35d0 [ 850.289084][ T6141] __alloc_pages+0x27e/0x8f0 [ 850.293500][ T6141] pagecache_get_page+0xb18/0xeb0 [ 850.298382][ T6141] __getblk_gfp+0x21e/0x7c0 [ 850.302702][ T6141] ext4_ext_insert_extent+0xf7a/0x4b10 [ 850.308179][ T6141] ext4_split_extent_at+0x80e/0x10f0 [ 850.313367][ T6141] ext4_split_extent+0x1bd/0x4e0 [ 850.318130][ T6141] ext4_ext_map_blocks+0x2147/0x7250 [ 850.323258][ T6141] ext4_map_blocks+0xaa7/0x1e00 [ 850.327936][ T6141] _ext4_get_block+0x23b/0x660 [ 850.332707][ T6141] ext4_get_block_unwritten+0x2a/0x40 [ 850.337917][ T6141] __block_write_begin_int+0x58a/0x1580 [ 850.343295][ T6141] block_page_mkwrite+0x205/0x270 [ 850.348157][ T6141] ext4_page_mkwrite+0x4c1/0x13a0 [ 850.353020][ T6141] page last free stack trace: [ 850.357534][ T6141] free_unref_page_prepare+0x7c8/0x7d0 [ 850.362822][ T6141] free_unref_page_list+0x14b/0xa60 [ 850.367860][ T6141] release_pages+0x1310/0x1370 [ 850.372456][ T6141] __pagevec_release+0x84/0x100 [ 850.377144][ T6141] shmem_undo_range+0x604/0x1560 [ 850.381917][ T6141] shmem_evict_inode+0x215/0x9d0 [ 850.386690][ T6141] evict+0x2a3/0x630 [ 850.390424][ T6141] iput+0x63b/0x7e0 [ 850.394068][ T6141] dentry_unlink_inode+0x34f/0x440 [ 850.399016][ T6141] __dentry_kill+0x447/0x660 [ 850.403444][ T6141] dentry_kill+0xc0/0x2a0 [ 850.407606][ T6141] dput+0x45/0x80 [ 850.411080][ T6141] __fput+0x662/0x910 [ 850.414901][ T6141] ____fput+0x15/0x20 [ 850.418743][ T6141] task_work_run+0x129/0x190 [ 850.423143][ T6141] do_exit+0xc48/0x2ca0 [ 850.427225][ T6141] [ 850.429395][ T6141] Memory state around the buggy address: [ 850.434868][ T6141] ffff88813a086f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.442870][ T6141] ffff88813a086f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.450762][ T6141] >ffff88813a087000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.458655][ T6141] ^ [ 850.463430][ T6141] ffff88813a087080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.471329][ T6141] ffff88813a087100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2033/05/18 03:37:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 850.479222][ T6141] ================================================================== [ 850.487124][ T6141] Disabling lock debugging due to kernel taint [ 850.516624][ T6141] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 850.567432][ T6141] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz-executor.4: mark_inode_dirty error [ 850.579616][ T6141] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 850.589132][ T6141] EXT4-fs error (device loop4): ext4_punch_hole:4132: inode #16: comm syz-executor.4: mark_inode_dirty error