last executing test programs: 10.794537493s ago: executing program 0: syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 9.897515472s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(r0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0xd571012c}, 0x12c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64], 0x100000530) 8.539072173s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) r2 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) 6.089709554s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_da_update_reserve_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x0, 'memory'}]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 6.083182745s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', 0x0) listen(r6, 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 5.972438353s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="fb", 0x1}, {&(0x7f0000000380)="07bd9b18de8674f528cdbd0643118dce9e285248", 0x14}], 0x2, 0x0, 0x0, 0x20000400}, 0x20040000) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffffcc, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xb0000004}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.959965444s ago: executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x60}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT=r1, @ANYBLOB="00000000ffff0000b7080000000010007b8af8ff002daa1eb6921a3cb2000000bfa200000000000007020000f80008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x29a9, 0x8000, 0x7fff, 0x201c, r3, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x9}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r4, 0x0, 0x0) 4.524600547s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 4.484065344s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x9) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64], 0x100000530) 3.826720876s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000008740)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@uid}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_lower}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x10}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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") 3.705636515s ago: executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) ftruncate(0xffffffffffffffff, 0x0) 3.612421259s ago: executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@test_dummy_encryption}, {@test_dummy_encryption}, {@noauto_da_alloc}, {@minixdf}, {@errors_remount}, {@quota}]}, 0x3, 0x451, &(0x7f00000023c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xb, &(0x7f0000000280)) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00'}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.595629432s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) r2 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) 3.498043807s ago: executing program 1: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) ftruncate(0xffffffffffffffff, 0x0) 2.743707514s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_da_update_reserve_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x0, 'memory'}]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 2.728329696s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x10) mkdir(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000023000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) lseek(r0, 0x0, 0x3) 2.623657173s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 2.591472798s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 2.564802932s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', 0x0) listen(r6, 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 2.221180445s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000200)) 1.817296688s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000008740)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@uid}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_lower}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x10}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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") 1.706402735s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.376317987s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x9) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64], 0x100000530) 1.372097867s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0xd571012c}, 0x12c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64], 0x100000530) 36.447845ms ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.014945ms ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 21.327237ms ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0xaa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000800000000000000001811", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.913027ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 19.369067ms ago: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r1, &(0x7f0000000780), &(0x7f0000000900)=@udp=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = dup(r0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0x40}, 0x0) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b043ebd000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a73c3ffde033b57941ba92cbeb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f037f0b3c3b61f1f6d388072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a4995a430ca7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd7898eda864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4c191d0000000000140000000000c816bbeaa7c8efa7a7e5ee519013434e208fff9bac45b8fc653f68de8e581952e9f6f7284cd39925a9e2515c162d77f2ce25168bbad79ed034bba9226aeb33de4aa528e8f0f53bb9621147355a8ec1f0d67392f340f9f00364defbe60165252a82d1e94719a80a82306b3539a3a936463bac5ab9fdb75ef8b2747dd923fb9d703b02a9aa90490aab821449db6db447af297718481aae1e5a81a4ce5fe116dee0ee21fb6e21460dd11a351e50ae1dfe8190d221d94aa5dc7e9873863c57bc4aa81b993066770f4fd01fba00fd02dd28f9ea0d5857b29bc385700638f2722c0835945a49c2a1c696e0da61b2ecccd16011b842b0fbc49672dbfb53464fe22e78aa3ffad220909db66e951a7bbee66fc605dc5c7ff3481b870e61d88a3b6880e6cee7fbfe9fcd72f2e64d64060152460cea09e5c9b7b55fb87e397a1ea49be53bb1c8ac70192d311d2c08a09b8c9916eec7454f0948ff5dd11ad0c46ca603fd3e4aaf7eb636361ee32bd3058f6fdd5f735c743a0f21d770cbd0dd9f4ece37f78611d3fae73136d6f3555533d50b53e04d880c4f2a11b4406cf344e4c9c326288279584a7dcc3f560bfb3b07e5fd7ca24e8f9c4234a3d361165b746475990189e34415bde43d1f31c1552cd554d20a1d7ed4f5a14b81b427bb39aca2c2cee5b48daaddbdb49e7b26ff773335b8f88e88b919c6d445f5f3ef2926ab35bc9dfba18a51c36685d47066e8b454ae009562f1b4118ffcd517a2ff4e78e22224aff677dcf723ff8f3d92129209205a9e89ad6fc5933ed3384889847932cb29c85c761137ad16bca2743c09dfbc7983ea", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7168) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000100012800b0001006d616373656300001400028005000d0000000000050007000000000008000500", @ANYRES32, @ANYBLOB="08000300"], 0x54}}, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) ftruncate(r3, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3}]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000007340)={0xffffffffffffffff, 0x20, &(0x7f0000007300)={&(0x7f0000006240)=""/4096, 0x1000, 0x0, &(0x7f0000007240)=""/134, 0x86}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): [ T30] audit: type=1326 audit(1717523454.163:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9feca1fee9 code=0x7ffc0000 [ 79.527810][ T30] audit: type=1326 audit(1717523454.163:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9feca1fee9 code=0x7ffc0000 [ 79.659338][ T1331] device veth0_vlan left promiscuous mode [ 79.665462][ T1331] device veth0_vlan entered promiscuous mode [ 79.745235][ T1335] loop1: detected capacity change from 0 to 2048 [ 80.159376][ T26] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 80.169754][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.241641][ T1335] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.342715][ T26] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.351794][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.359796][ T26] usb 4-1: SerialNumber: syz [ 80.656916][ T26] usb 4-1: 0:2 : does not exist [ 80.661930][ T26] usb 4-1: unit 5 not found! [ 80.675100][ T26] usb 4-1: USB disconnect, device number 8 [ 80.931341][ T1357] loop0: detected capacity change from 0 to 512 [ 80.987813][ T1357] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 81.004718][ T1357] ext4 filesystem being mounted at /root/syzkaller-testdir2903118319/syzkaller.oWA8Ua/63/file1 supports timestamps until 2038 (0x7fffffff) [ 81.446049][ T338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 83.007986][ T394] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.095905][ T1381] device veth0_vlan left promiscuous mode [ 83.103417][ T1381] device veth0_vlan entered promiscuous mode [ 83.166554][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.192878][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.216281][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.242079][ T338] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.279818][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.301403][ T338] usb 3-1: config 0 descriptor?? [ 83.321127][ T30] audit: type=1326 audit(1717523458.103:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 83.345161][ T338] usb 3-1: can't set config #0, error -71 [ 83.351469][ T338] usb 3-1: USB disconnect, device number 11 [ 83.359064][ T30] audit: type=1326 audit(1717523458.133:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 83.476275][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 83.476400][ T394] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 83.576276][ T394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.636591][ T20] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.655170][ T20] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.678987][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 83.683020][ T394] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.698899][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.716274][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.724219][ T394] usb 1-1: SerialNumber: syz [ 83.786634][ T20] hub 2-1:4.0: USB hub found [ 83.967432][ T394] usb 1-1: 0:2 : does not exist [ 83.972840][ T394] usb 1-1: unit 5 not found! [ 83.986032][ T394] usb 1-1: USB disconnect, device number 5 [ 83.996747][ T20] hub 2-1:4.0: 2 ports detected [ 84.374528][ T1400] loop3: detected capacity change from 0 to 512 [ 84.437406][ T1400] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 84.466340][ T1400] ext4 filesystem being mounted at /root/syzkaller-testdir159438543/syzkaller.LAsZvP/52/file1 supports timestamps until 2038 (0x7fffffff) [ 84.481186][ T20] hub 2-1:4.0: set hub depth failed [ 84.496325][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 84.517031][ T20] usb 2-1: USB disconnect, device number 4 [ 84.826447][ T394] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 84.906403][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.917204][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.926866][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.935836][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.945429][ T26] usb 3-1: config 0 descriptor?? [ 84.946567][ T1409] loop0: detected capacity change from 0 to 256 [ 85.002320][ T1409] FAT-fs (loop0): Directory bread(block 64) failed [ 85.008772][ T1409] FAT-fs (loop0): Directory bread(block 65) failed [ 85.015045][ T1409] FAT-fs (loop0): Directory bread(block 66) failed [ 85.021607][ T1409] FAT-fs (loop0): Directory bread(block 67) failed [ 85.028551][ T1409] FAT-fs (loop0): Directory bread(block 68) failed [ 85.035248][ T1409] FAT-fs (loop0): Directory bread(block 69) failed [ 85.042107][ T1409] FAT-fs (loop0): Directory bread(block 70) failed [ 85.048747][ T1409] FAT-fs (loop0): Directory bread(block 71) failed [ 85.055465][ T1409] FAT-fs (loop0): Directory bread(block 72) failed [ 85.062081][ T1409] FAT-fs (loop0): Directory bread(block 73) failed [ 85.186476][ T394] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 85.213913][ T394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.306473][ T394] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.315502][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.323335][ T394] usb 4-1: SerialNumber: syz [ 85.587647][ T26] hid (null): bogus close delimiter [ 85.728188][ T394] usb 4-1: 0:2 : does not exist [ 85.732883][ T394] usb 4-1: unit 5 not found! [ 85.738236][ T394] usb 4-1: USB disconnect, device number 9 [ 85.766371][ T26] usb 3-1: language id specifier not provided by device, defaulting to English [ 86.163966][ T1425] fuse: Unknown parameter 'user_id00000000000000000000' [ 86.286372][ T26] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 86.296353][ T338] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.609473][ T26] usb 3-1: USB disconnect, device number 12 [ 86.986378][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.006295][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.012291][ T1423] loop0: detected capacity change from 0 to 131072 [ 87.015959][ T338] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 87.015984][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.057264][ T338] usb 2-1: config 0 descriptor?? [ 87.067054][ T1423] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 87.083975][ T1423] F2FS-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value [ 87.306824][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.313919][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.321580][ T1442] device bridge_slave_0 entered promiscuous mode [ 87.328574][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.335492][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.342884][ T1442] device bridge_slave_1 entered promiscuous mode [ 87.456577][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 87.456590][ T30] audit: type=1400 audit(1717523462.243:7321): avc: denied { read } for pid=1442 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.493713][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.500599][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.507696][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.514461][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.536574][ T338] hid (null): bogus close delimiter [ 87.590998][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.599694][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.611307][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.647392][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.669871][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.676836][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.700212][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.715068][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.721962][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.742205][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.749988][ T338] usb 2-1: language id specifier not provided by device, defaulting to English [ 87.782301][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.792851][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.812328][ T1442] device veth0_vlan entered promiscuous mode [ 87.823820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.834022][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.849229][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.871722][ T1442] device veth1_macvtap entered promiscuous mode [ 87.885737][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.901133][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.927716][ T30] audit: type=1400 audit(1717523462.713:7322): avc: denied { mounton } for pid=1442 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.963707][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.017723][ T45] device bridge_slave_1 left promiscuous mode [ 88.027098][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.078826][ T45] device bridge_slave_0 left promiscuous mode [ 88.107521][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.115495][ T45] device veth1_macvtap left promiscuous mode [ 88.121599][ T45] device veth0_vlan left promiscuous mode [ 88.535807][ T338] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 88.748502][ T338] usb 2-1: USB disconnect, device number 5 [ 90.997948][ T30] audit: type=1326 audit(1717523465.783:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.022423][ T30] audit: type=1326 audit(1717523465.783:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.635332][ T30] audit: type=1326 audit(1717523465.783:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.684387][ T30] audit: type=1326 audit(1717523466.263:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.750037][ T30] audit: type=1326 audit(1717523466.263:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.802299][ T30] audit: type=1326 audit(1717523466.293:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.880651][ T30] audit: type=1326 audit(1717523466.423:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 91.971356][ T30] audit: type=1326 audit(1717523466.463:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b44ff4ee9 code=0x7ffc0000 [ 92.108807][ T1483] loop3: detected capacity change from 0 to 40427 [ 92.778404][ T1483] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 92.818610][ T1483] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.841238][ T1483] F2FS-fs (loop3): invalid crc value [ 92.927347][ T1483] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.043881][ T1483] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.055221][ T1483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.176304][ T318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.403514][ T309] attempt to access beyond end of device [ 94.403514][ T309] loop3: rw=2051, want=53248, limit=40427 [ 94.415362][ T309] attempt to access beyond end of device [ 94.415362][ T309] loop3: rw=2051, want=77824, limit=40427 [ 94.426598][ T309] attempt to access beyond end of device [ 94.426598][ T309] loop3: rw=2051, want=86016, limit=40427 [ 94.454965][ T309] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 94.454996][ T309] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 94.470673][ T309] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 94.849662][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.868374][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.896278][ T318] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.906868][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.915321][ T318] usb 2-1: config 0 descriptor?? [ 94.943468][ T1538] loop2: detected capacity change from 0 to 40427 [ 94.989557][ T1538] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 95.004960][ T1538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.058057][ T1538] F2FS-fs (loop2): invalid crc value [ 95.151840][ T1538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.230945][ T1538] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.238105][ T1538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.386679][ T318] hid (null): bogus close delimiter [ 95.398288][ T311] attempt to access beyond end of device [ 95.398288][ T311] loop2: rw=2051, want=53248, limit=40427 [ 95.413095][ T311] attempt to access beyond end of device [ 95.413095][ T311] loop2: rw=2051, want=77824, limit=40427 [ 95.425585][ T311] attempt to access beyond end of device [ 95.425585][ T311] loop2: rw=2051, want=86016, limit=40427 [ 95.473741][ T311] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 95.473773][ T311] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 95.481638][ T311] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 96.456538][ T318] usb 2-1: string descriptor 0 read error: -71 [ 96.507768][ T318] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 96.522334][ T318] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 96.547411][ T318] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 96.561969][ T318] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 96.576945][ T318] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 96.579922][ T1578] loop4: detected capacity change from 0 to 2048 [ 96.606421][ T318] usb 2-1: USB disconnect, device number 6 [ 96.686682][ T1578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.116522][ T1572] loop0: detected capacity change from 0 to 40427 [ 97.146304][ T318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.180591][ T1572] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 97.188837][ T1572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.202838][ T1572] F2FS-fs (loop0): invalid crc value [ 97.214165][ T1572] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.266433][ T1572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.277456][ T1572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.508948][ T312] attempt to access beyond end of device [ 97.508948][ T312] loop0: rw=2051, want=53248, limit=40427 [ 97.520652][ T312] attempt to access beyond end of device [ 97.520652][ T312] loop0: rw=2051, want=77824, limit=40427 [ 97.531920][ T318] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 97.542051][ T312] attempt to access beyond end of device [ 97.542051][ T312] loop0: rw=2051, want=86016, limit=40427 [ 97.553422][ T318] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.562623][ T312] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 97.562660][ T312] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 97.570392][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.594485][ T312] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 97.637052][ T318] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 98.108416][ T318] usb 2-1: USB disconnect, device number 7 [ 98.247963][ T1611] loop0: detected capacity change from 0 to 2048 [ 98.334361][ T1611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.457138][ T1620] loop1: detected capacity change from 0 to 512 [ 98.795238][ T1620] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 98.895341][ T1620] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/74/file1 supports timestamps until 2038 (0x7fffffff) [ 99.543835][ T1643] loop2: detected capacity change from 0 to 512 [ 99.889156][ T1643] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 99.915489][ T1639] loop4: detected capacity change from 0 to 40427 [ 99.936335][ T1643] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/62/file1 supports timestamps until 2038 (0x7fffffff) [ 99.967289][ T1639] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.974962][ T1639] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.002052][ T1639] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.079649][ T1639] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.086640][ T1639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.096968][ T1639] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 100.105762][ T1639] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 100.256396][ T704] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 100.373471][ T1655] loop0: detected capacity change from 0 to 40427 [ 100.417767][ T1655] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.426483][ T1586] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.434331][ T1655] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.477694][ T1655] F2FS-fs (loop0): invalid crc value [ 100.497066][ T1655] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.616422][ T704] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 100.647924][ T1655] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.657076][ T704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.669731][ T1655] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.786418][ T704] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.806296][ T704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.814285][ T704] usb 3-1: SerialNumber: syz [ 100.860092][ T312] attempt to access beyond end of device [ 100.860092][ T312] loop0: rw=2051, want=53248, limit=40427 [ 100.871346][ T338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.878699][ T312] attempt to access beyond end of device [ 100.878699][ T312] loop0: rw=2051, want=77824, limit=40427 [ 100.889760][ T312] attempt to access beyond end of device [ 100.889760][ T312] loop0: rw=2051, want=86016, limit=40427 [ 100.900954][ T312] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 100.900982][ T312] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 100.908722][ T312] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 101.107022][ T704] usb 3-1: 0:2 : does not exist [ 101.119826][ T704] usb 3-1: unit 5 not found! [ 101.197027][ T704] usb 3-1: USB disconnect, device number 13 [ 101.373674][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.377210][ T1679] loop4: detected capacity change from 0 to 256 [ 101.384421][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.400062][ T338] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.408876][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.417173][ T338] usb 2-1: config 0 descriptor?? [ 101.442508][ T1679] FAT-fs (loop4): Directory bread(block 64) failed [ 101.448937][ T1679] FAT-fs (loop4): Directory bread(block 65) failed [ 101.455238][ T1679] FAT-fs (loop4): Directory bread(block 66) failed [ 101.462213][ T1679] FAT-fs (loop4): Directory bread(block 67) failed [ 101.468627][ T1679] FAT-fs (loop4): Directory bread(block 68) failed [ 101.474900][ T1679] FAT-fs (loop4): Directory bread(block 69) failed [ 101.481305][ T1679] FAT-fs (loop4): Directory bread(block 70) failed [ 101.487542][ T1679] FAT-fs (loop4): Directory bread(block 71) failed [ 101.493886][ T1679] FAT-fs (loop4): Directory bread(block 72) failed [ 101.501551][ T1679] FAT-fs (loop4): Directory bread(block 73) failed [ 101.658025][ T1681] loop2: detected capacity change from 0 to 512 [ 101.736461][ T1681] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 101.753474][ T1681] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/63/file1 supports timestamps until 2038 (0x7fffffff) [ 102.396796][ T338] hid (null): bogus close delimiter [ 102.457008][ T1693] loop4: detected capacity change from 0 to 512 [ 102.506812][ T1693] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.513596][ T1693] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.520312][ T1693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.530355][ T1693] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 102.539923][ T1693] EXT4-fs (loop4): group descriptors corrupted! [ 102.626377][ T338] usb 2-1: language id specifier not provided by device, defaulting to English [ 102.640124][ T1693] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 102.656310][ T343] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.702164][ T39] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 103.241472][ T39] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 103.251707][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.266418][ T338] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 103.286351][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.297626][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.307263][ T343] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.316087][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.332474][ T343] usb 1-1: config 0 descriptor?? [ 103.336483][ T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.346207][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.354927][ T39] usb 3-1: SerialNumber: syz [ 103.639648][ T39] usb 3-1: 0:2 : does not exist [ 103.644679][ T39] usb 3-1: unit 5 not found! [ 103.665400][ T39] usb 3-1: USB disconnect, device number 14 [ 103.680075][ T394] usb 2-1: USB disconnect, device number 8 [ 103.816641][ T343] hid (null): bogus close delimiter [ 104.026361][ T343] usb 1-1: language id specifier not provided by device, defaulting to English [ 104.193000][ T1717] loop2: detected capacity change from 0 to 256 [ 104.596391][ T343] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 104.836149][ T704] usb 1-1: USB disconnect, device number 6 [ 104.976280][ T394] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.416861][ T394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.497096][ T394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.506793][ T394] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.508101][ T1749] loop1: detected capacity change from 0 to 512 [ 105.515739][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.530925][ T394] usb 4-1: config 0 descriptor?? [ 105.587582][ T1749] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 105.626431][ T1749] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/81/file1 supports timestamps until 2038 (0x7fffffff) [ 105.966410][ T704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.046582][ T394] hid (null): bogus close delimiter [ 106.346680][ T394] usb 4-1: language id specifier not provided by device, defaulting to English [ 106.446353][ T704] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 106.456551][ T704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.526327][ T1676] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.536371][ T704] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.545289][ T704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.553234][ T704] usb 2-1: SerialNumber: syz [ 106.586713][ T1768] loop0: detected capacity change from 0 to 256 [ 106.836700][ T394] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 106.846409][ T704] usb 2-1: 0:2 : does not exist [ 106.851240][ T704] usb 2-1: unit 5 not found! [ 106.858312][ T704] usb 2-1: USB disconnect, device number 9 [ 106.886357][ T1676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.897832][ T1676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.910326][ T1676] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.919241][ T1676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.927655][ T1676] usb 5-1: config 0 descriptor?? [ 106.965308][ T1772] loop2: detected capacity change from 0 to 256 [ 107.045798][ T394] usb 4-1: USB disconnect, device number 10 [ 107.406505][ T1676] hid (null): bogus close delimiter [ 107.617184][ T1778] loop0: detected capacity change from 0 to 40427 [ 107.626392][ T1676] usb 5-1: language id specifier not provided by device, defaulting to English [ 107.646318][ T343] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 107.657007][ T1778] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.664595][ T1778] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.737114][ T1786] device veth0_vlan left promiscuous mode [ 107.744529][ T1786] device veth0_vlan entered promiscuous mode [ 107.820415][ T1778] F2FS-fs (loop0): invalid crc value [ 107.888397][ T1778] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.925014][ T1778] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.931949][ T1778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.056379][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.079605][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.089312][ T343] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 108.098281][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.106752][ T343] usb 2-1: config 0 descriptor?? [ 108.117196][ T312] attempt to access beyond end of device [ 108.117196][ T312] loop0: rw=2051, want=53248, limit=40427 [ 108.128504][ T312] attempt to access beyond end of device [ 108.128504][ T312] loop0: rw=2051, want=77824, limit=40427 [ 108.246769][ T312] attempt to access beyond end of device [ 108.246769][ T312] loop0: rw=2051, want=86016, limit=40427 [ 108.259665][ T312] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 108.259736][ T312] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 108.267754][ T312] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 108.436414][ T1676] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 109.747985][ T39] usb 5-1: USB disconnect, device number 11 [ 109.840337][ T343] hid (null): bogus close delimiter [ 109.846461][ T1807] loop3: detected capacity change from 0 to 512 [ 109.856502][ T1809] loop0: detected capacity change from 0 to 512 [ 110.035309][ T1809] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 110.052978][ T1809] ext4 filesystem being mounted at /root/syzkaller-testdir2903118319/syzkaller.oWA8Ua/86/file1 supports timestamps until 2038 (0x7fffffff) [ 110.056381][ T343] usb 2-1: language id specifier not provided by device, defaulting to English [ 110.077494][ T1807] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 110.094519][ T1807] ext4 filesystem being mounted at /root/syzkaller-testdir159438543/syzkaller.LAsZvP/77/file1 supports timestamps until 2038 (0x7fffffff) [ 110.379696][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 110.379711][ T30] audit: type=1400 audit(1717523485.163:7395): avc: denied { setattr } for pid=1816 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.406363][ T704] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.414737][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.856357][ T343] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 111.015781][ T394] usb 2-1: USB disconnect, device number 10 [ 111.046415][ T704] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 111.056586][ T39] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 111.066708][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.075383][ T704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.106306][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 111.156387][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.165301][ T704] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.174180][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.181956][ T704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.189777][ T39] usb 4-1: SerialNumber: syz [ 111.194415][ T704] usb 1-1: SerialNumber: syz [ 111.393735][ T1828] loop4: detected capacity change from 0 to 40427 [ 111.446907][ T1828] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 111.454531][ T1828] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.463561][ T1828] F2FS-fs (loop4): invalid crc value [ 111.468773][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.476548][ T1828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.480004][ T39] usb 4-1: 0:2 : does not exist [ 111.490721][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.500320][ T39] usb 4-1: unit 5 not found! [ 111.505139][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 111.514272][ T704] usb 1-1: 0:2 : does not exist [ 111.514932][ T1828] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 111.518989][ T704] usb 1-1: unit 5 not found! [ 111.531007][ T39] usb 4-1: USB disconnect, device number 11 [ 111.536195][ T1828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.539717][ T1834] loop1: detected capacity change from 0 to 256 [ 111.550358][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.559870][ T704] usb 1-1: USB disconnect, device number 7 [ 111.567640][ T26] usb 3-1: config 0 descriptor?? [ 111.658912][ T1442] attempt to access beyond end of device [ 111.658912][ T1442] loop4: rw=2051, want=53248, limit=40427 [ 111.670048][ T1442] attempt to access beyond end of device [ 111.670048][ T1442] loop4: rw=2051, want=77824, limit=40427 [ 111.681136][ T1442] attempt to access beyond end of device [ 111.681136][ T1442] loop4: rw=2051, want=86016, limit=40427 [ 111.692189][ T1442] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 111.692215][ T1442] F2FS-fs (loop4): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 111.699995][ T1442] F2FS-fs (loop4): Issue discard(10240, 10240, 512) failed, ret: -5 [ 112.012527][ T1840] loop3: detected capacity change from 0 to 2048 [ 112.056491][ T26] hid (null): bogus close delimiter [ 112.063470][ T1840] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.153677][ T1848] device veth0_vlan left promiscuous mode [ 112.161446][ T1848] device veth0_vlan entered promiscuous mode [ 112.281849][ T26] usb 3-1: language id specifier not provided by device, defaulting to English [ 112.746470][ T1676] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.776342][ T26] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 112.806323][ T343] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.977366][ T26] usb 3-1: USB disconnect, device number 15 [ 113.306397][ T1676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.317237][ T332] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.324552][ T1676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.334110][ T1676] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.343001][ T1676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.351193][ T1676] usb 2-1: config 0 descriptor?? [ 113.356357][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.367142][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.376694][ T343] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.385540][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.394165][ T343] usb 1-1: config 0 descriptor?? [ 113.868137][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.879026][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.888769][ T332] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.897823][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.906410][ T332] usb 5-1: config 0 descriptor?? [ 113.916569][ T1676] hid (null): bogus close delimiter [ 113.975969][ T1872] loop3: detected capacity change from 0 to 40427 [ 114.026913][ T1872] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.034941][ T1872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.044120][ T1872] F2FS-fs (loop3): invalid crc value [ 114.050570][ T1872] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.056928][ T343] hid (null): bogus close delimiter [ 114.079895][ T1872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.086954][ T1872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.146378][ T1676] usb 2-1: language id specifier not provided by device, defaulting to English [ 114.169047][ T309] attempt to access beyond end of device [ 114.169047][ T309] loop3: rw=2051, want=53248, limit=40427 [ 114.180210][ T309] attempt to access beyond end of device [ 114.180210][ T309] loop3: rw=2051, want=77824, limit=40427 [ 114.191350][ T309] attempt to access beyond end of device [ 114.191350][ T309] loop3: rw=2051, want=86016, limit=40427 [ 114.202473][ T309] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 114.202501][ T309] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 114.210333][ T309] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 114.266369][ T343] usb 1-1: language id specifier not provided by device, defaulting to English [ 114.356923][ T1880] loop2: detected capacity change from 0 to 512 [ 114.504010][ T1880] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 114.521495][ T1880] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/74/file1 supports timestamps until 2038 (0x7fffffff) [ 114.552964][ T332] hid (null): bogus close delimiter [ 114.626385][ T1676] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 114.696397][ T332] usb 5-1: language id specifier not provided by device, defaulting to English [ 114.736370][ T343] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 114.829724][ T343] usb 2-1: USB disconnect, device number 11 [ 114.866288][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 114.946531][ T1676] usb 1-1: USB disconnect, device number 8 [ 115.180106][ T1886] loop3: detected capacity change from 0 to 512 [ 115.217905][ T1886] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 115.226379][ T26] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 115.234769][ T1886] ext4 filesystem being mounted at /root/syzkaller-testdir159438543/syzkaller.LAsZvP/82/file1 supports timestamps until 2038 (0x7fffffff) [ 115.244866][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.342965][ T1890] loop1: detected capacity change from 0 to 256 [ 115.346365][ T26] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.349136][ T332] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 115.358000][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.366590][ T332] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 115.374583][ T26] usb 3-1: SerialNumber: syz [ 115.382448][ T332] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 115.394984][ T332] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 115.402260][ T332] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 115.411325][ T332] usb 5-1: USB disconnect, device number 12 [ 115.596439][ T39] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 115.689619][ T26] usb 3-1: 0:2 : does not exist [ 115.694653][ T26] usb 3-1: unit 5 not found! [ 115.725316][ T26] usb 3-1: USB disconnect, device number 16 [ 115.913061][ T1899] loop0: detected capacity change from 0 to 40427 [ 115.931538][ T1901] loop4: detected capacity change from 0 to 2048 [ 115.956465][ T39] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 115.963850][ T1899] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.966753][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.974192][ T1899] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.991932][ T1899] F2FS-fs (loop0): invalid crc value [ 115.999223][ T1899] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.007863][ T1901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.036526][ T1899] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.043511][ T1899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.056427][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.065292][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.073571][ T39] usb 4-1: SerialNumber: syz [ 116.086502][ T1753] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 116.155545][ T312] attempt to access beyond end of device [ 116.155545][ T312] loop0: rw=2051, want=53248, limit=40427 [ 116.167723][ T312] attempt to access beyond end of device [ 116.167723][ T312] loop0: rw=2051, want=77824, limit=40427 [ 116.203331][ T312] attempt to access beyond end of device [ 116.203331][ T312] loop0: rw=2051, want=86016, limit=40427 [ 116.236562][ T312] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 116.236593][ T312] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 116.244222][ T312] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 116.263297][ T1912] loop1: detected capacity change from 0 to 256 [ 116.397312][ T39] usb 4-1: 0:2 : does not exist [ 116.402145][ T39] usb 4-1: unit 5 not found! [ 116.413717][ T39] usb 4-1: USB disconnect, device number 12 [ 117.900784][ T1938] loop4: detected capacity change from 0 to 256 [ 118.406228][ T1940] loop2: detected capacity change from 0 to 40427 [ 118.732330][ T1940] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.750888][ T1940] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.802347][ T1940] F2FS-fs (loop2): invalid crc value [ 118.887096][ T1940] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.933853][ T1940] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.946340][ T1940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.026273][ T332] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 119.031160][ T311] attempt to access beyond end of device [ 119.031160][ T311] loop2: rw=2051, want=53248, limit=40427 [ 119.044859][ T311] attempt to access beyond end of device [ 119.044859][ T311] loop2: rw=2051, want=77824, limit=40427 [ 119.056466][ T311] attempt to access beyond end of device [ 119.056466][ T311] loop2: rw=2051, want=86016, limit=40427 [ 119.067777][ T311] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 119.067804][ T311] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 119.075596][ T311] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 119.206515][ T1962] loop3: detected capacity change from 0 to 256 [ 119.487350][ T1967] loop0: detected capacity change from 0 to 512 [ 119.517845][ T1969] loop2: detected capacity change from 0 to 512 [ 119.692123][ T1969] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 119.709962][ T1969] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/79/file1 supports timestamps until 2038 (0x7fffffff) [ 119.755265][ T1967] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 119.772334][ T1967] ext4 filesystem being mounted at /root/syzkaller-testdir2903118319/syzkaller.oWA8Ua/94/file1 supports timestamps until 2038 (0x7fffffff) [ 119.796453][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.807318][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.817048][ T332] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.826020][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.834667][ T332] usb 2-1: config 0 descriptor?? [ 120.091465][ T1921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 120.166288][ T330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.386623][ T332] hid (null): bogus close delimiter [ 120.456412][ T1921] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 120.466710][ T1921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.566382][ T330] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 120.576754][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.586479][ T1921] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.595527][ T1921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.603608][ T1921] usb 3-1: SerialNumber: syz [ 120.677355][ T330] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.687871][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.696103][ T330] usb 1-1: SerialNumber: syz [ 120.729241][ T332] usb 2-1: language id specifier not provided by device, defaulting to English [ 120.996785][ T1921] usb 3-1: 0:2 : does not exist [ 121.001474][ T1921] usb 3-1: unit 5 not found! [ 121.016489][ T330] usb 1-1: 0:2 : does not exist [ 121.021187][ T330] usb 1-1: unit 5 not found! [ 121.026389][ T1921] usb 3-1: USB disconnect, device number 17 [ 121.033104][ T330] usb 1-1: USB disconnect, device number 9 [ 121.386355][ T332] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 121.395076][ T332] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 121.416350][ T332] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 121.424314][ T332] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 121.446295][ T332] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 121.493664][ T332] usb 2-1: USB disconnect, device number 12 [ 121.654092][ T1996] loop3: detected capacity change from 0 to 40427 [ 121.717782][ T1996] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.725480][ T1996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.734789][ T1996] F2FS-fs (loop3): invalid crc value [ 121.741826][ T1996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.030361][ T2017] loop4: detected capacity change from 0 to 2048 [ 122.039190][ T1996] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.049512][ T1996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.097733][ T2017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.192360][ T309] attempt to access beyond end of device [ 122.192360][ T309] loop3: rw=2051, want=53248, limit=40427 [ 122.209132][ T309] attempt to access beyond end of device [ 122.209132][ T309] loop3: rw=2051, want=77824, limit=40427 [ 122.237688][ T309] attempt to access beyond end of device [ 122.237688][ T309] loop3: rw=2051, want=86016, limit=40427 [ 122.249177][ T309] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 122.249206][ T309] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 122.257067][ T309] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 122.948808][ T2041] loop1: detected capacity change from 0 to 512 [ 123.052657][ T2041] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 123.076572][ T2041] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/90/file1 supports timestamps until 2038 (0x7fffffff) [ 123.486360][ T330] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 123.747214][ T2053] loop2: detected capacity change from 0 to 512 [ 123.807941][ T2053] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 123.824947][ T2053] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/85/file1 supports timestamps until 2038 (0x7fffffff) [ 123.906358][ T330] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 123.916483][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.945426][ T2057] loop3: detected capacity change from 0 to 40427 [ 123.987092][ T2057] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 123.994967][ T2057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.996366][ T330] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.011956][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.016697][ T2057] F2FS-fs (loop3): invalid crc value [ 124.019836][ T330] usb 2-1: SerialNumber: syz [ 124.030850][ T2057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.054734][ T2057] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.061694][ T2057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.165430][ T309] attempt to access beyond end of device [ 124.165430][ T309] loop3: rw=2051, want=53248, limit=40427 [ 124.176296][ T704] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 124.176913][ T309] attempt to access beyond end of device [ 124.176913][ T309] loop3: rw=2051, want=77824, limit=40427 [ 124.195924][ T309] attempt to access beyond end of device [ 124.195924][ T309] loop3: rw=2051, want=86016, limit=40427 [ 124.209415][ T309] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 124.209694][ T309] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 124.218098][ T309] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 124.309802][ T330] usb 2-1: 0:2 : does not exist [ 124.333318][ T330] usb 2-1: unit 5 not found! [ 124.366989][ T330] usb 2-1: USB disconnect, device number 13 [ 124.536337][ T704] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 124.546925][ T704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.626389][ T704] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.635408][ T704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.644218][ T1973] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 124.658858][ T704] usb 3-1: SerialNumber: syz [ 124.946833][ T704] usb 3-1: 0:2 : does not exist [ 124.951763][ T704] usb 3-1: unit 5 not found! [ 124.964486][ T704] usb 3-1: USB disconnect, device number 18 [ 125.206384][ T39] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 125.590443][ T2093] loop0: detected capacity change from 0 to 256 [ 127.106649][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.154698][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.165953][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 127.175031][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.205551][ T39] usb 4-1: config 0 descriptor?? [ 127.350635][ T30] audit: type=1326 audit(1717523502.133:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x7ffc0000 [ 127.375665][ T30] audit: type=1326 audit(1717523502.133:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x7ffc0000 [ 127.399741][ T30] audit: type=1326 audit(1717523502.133:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f10e144bee9 code=0x7ffc0000 [ 127.737097][ T30] audit: type=1326 audit(1717523502.133:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x7ffc0000 [ 127.776857][ T2113] loop1: detected capacity change from 0 to 512 [ 127.786438][ T30] audit: type=1326 audit(1717523502.133:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x7ffc0000 [ 127.852439][ T2113] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 127.869624][ T2113] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/94/file1 supports timestamps until 2038 (0x7fffffff) [ 127.933346][ T39] hid (null): bogus close delimiter [ 127.946309][ T318] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.136401][ T39] usb 4-1: language id specifier not provided by device, defaulting to English [ 128.206383][ T330] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.590904][ T330] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 128.620106][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.707137][ T330] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.716405][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.724602][ T330] usb 2-1: SerialNumber: syz [ 128.736533][ T1973] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 128.786402][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.797231][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.806774][ T318] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.815573][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.823908][ T318] usb 1-1: config 0 descriptor?? [ 128.856328][ T39] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #100: -71 [ 128.865021][ T39] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 128.873035][ T39] uclogic 0003:256C:006D.0018: failed probing pen v1 parameters: -71 [ 128.880901][ T39] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 128.888187][ T39] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 128.896001][ T39] usb 4-1: USB disconnect, device number 13 [ 128.972423][ T2130] loop2: detected capacity change from 0 to 512 [ 129.006747][ T330] usb 2-1: 0:2 : does not exist [ 129.011439][ T330] usb 2-1: unit 5 not found! [ 129.017415][ T330] usb 2-1: USB disconnect, device number 14 [ 129.024370][ T2130] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 129.041556][ T2130] ext4 filesystem being mounted at /root/syzkaller-testdir2468477706/syzkaller.4J9tKT/90/file1 supports timestamps until 2038 (0x7fffffff) [ 129.336560][ T318] hid (null): bogus close delimiter [ 129.376177][ T60] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 129.976344][ T318] usb 1-1: language id specifier not provided by device, defaulting to English [ 129.997246][ T2143] loop1: detected capacity change from 0 to 512 [ 130.039490][ T2143] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 130.056421][ T2143] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/95/file1 supports timestamps until 2038 (0x7fffffff) [ 130.316451][ T60] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 130.326776][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.344467][ T2154] loop4: detected capacity change from 0 to 256 [ 130.406641][ T60] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.415858][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.424028][ T60] usb 3-1: SerialNumber: syz [ 130.506467][ T318] uclogic 0003:256C:006D.0019: interface is invalid, ignoring [ 130.516342][ T332] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.680143][ T30] audit: type=1326 audit(1717523505.463:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27edf9dee9 code=0x7ffc0000 [ 130.704359][ T30] audit: type=1326 audit(1717523505.463:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27edf9dee9 code=0x7ffc0000 [ 130.732093][ T60] usb 3-1: 0:2 : does not exist [ 130.746042][ T60] usb 3-1: unit 5 not found! [ 130.751559][ T30] audit: type=1326 audit(1717523505.463:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f27edf9dee9 code=0x7ffc0000 [ 130.779662][ T39] usb 1-1: USB disconnect, device number 10 [ 130.789114][ T60] usb 3-1: USB disconnect, device number 19 [ 130.801355][ T30] audit: type=1326 audit(1717523505.463:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27edf9dee9 code=0x7ffc0000 [ 130.826893][ T30] audit: type=1326 audit(1717523505.463:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27edf9dee9 code=0x7ffc0000 [ 130.916456][ T332] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 130.927582][ T332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.966741][ T2133] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 131.080125][ T332] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.090734][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.098648][ T332] usb 2-1: SerialNumber: syz [ 131.400187][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.776451][ T60] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 131.787005][ T60] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.796220][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.850167][ T60] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 132.006327][ T318] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 132.047358][ T60] usb 5-1: USB disconnect, device number 13 [ 132.396360][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.407136][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.416661][ T318] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.425473][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.433894][ T318] usb 3-1: config 0 descriptor?? [ 133.025120][ T318] hid (null): bogus close delimiter [ 133.040740][ T30] audit: type=1326 audit(1717523507.823:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec5f27ee9 code=0x0 [ 133.067716][ T332] usb 2-1: 0:2 : does not exist [ 133.072423][ T332] usb 2-1: unit 5 not found! [ 133.078161][ T332] usb 2-1: USB disconnect, device number 15 [ 133.238335][ T2194] device veth0_vlan left promiscuous mode [ 133.245855][ T2194] device veth0_vlan entered promiscuous mode [ 133.406524][ T318] usb 3-1: language id specifier not provided by device, defaulting to English [ 133.499135][ T30] audit: type=1400 audit(1717523508.283:7407): avc: denied { getattr } for pid=2199 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.499896][ T2200] overlayfs: statfs failed on './file0' [ 133.976488][ T318] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 134.231871][ T704] usb 3-1: USB disconnect, device number 20 [ 134.596280][ T332] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.608260][ T2223] loop4: detected capacity change from 0 to 2048 [ 134.647802][ T2223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.756308][ T1921] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.897841][ T2228] loop0: detected capacity change from 0 to 512 [ 134.957676][ T2228] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 134.974593][ T2228] ext4 filesystem being mounted at /root/syzkaller-testdir2903118319/syzkaller.oWA8Ua/105/file1 supports timestamps until 2038 (0x7fffffff) [ 134.992890][ T2239] overlayfs: statfs failed on './file0' [ 135.136384][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.266392][ T704] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 135.276336][ T1921] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 135.278334][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.295871][ T332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.300514][ T1921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.304718][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.310031][ T332] usb 4-1: config 0 descriptor?? [ 135.313779][ T1921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.366692][ T1921] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 135.476316][ T39] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.568189][ T1921] usb 2-1: USB disconnect, device number 16 [ 135.626346][ T704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.637077][ T704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.646620][ T704] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.655688][ T704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.663994][ T704] usb 3-1: config 0 descriptor?? [ 135.796576][ T332] hid (null): bogus close delimiter [ 135.836352][ T39] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 135.846500][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.918747][ T30] audit: type=1326 audit(1717523510.703:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2245 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c12f02ee9 code=0x0 [ 135.946356][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.955251][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.963091][ T39] usb 1-1: SerialNumber: syz [ 136.006375][ T332] usb 4-1: language id specifier not provided by device, defaulting to English [ 136.146474][ T704] hid (null): bogus close delimiter [ 136.486833][ T704] usb 3-1: language id specifier not provided by device, defaulting to English [ 136.764702][ T2254] loop4: detected capacity change from 0 to 256 [ 136.770912][ T332] uclogic 0003:256C:006D.001B: interface is invalid, ignoring [ 136.966453][ T704] uclogic 0003:256C:006D.001C: interface is invalid, ignoring [ 136.984026][ T1676] usb 4-1: USB disconnect, device number 14 [ 137.112062][ T2262] loop1: detected capacity change from 0 to 256 [ 137.162398][ T2262] FAT-fs (loop1): Directory bread(block 64) failed [ 137.168880][ T2262] FAT-fs (loop1): Directory bread(block 65) failed [ 137.170323][ T704] usb 3-1: USB disconnect, device number 21 [ 137.175329][ T2262] FAT-fs (loop1): Directory bread(block 66) failed [ 137.187623][ T2262] FAT-fs (loop1): Directory bread(block 67) failed [ 137.195549][ T2262] FAT-fs (loop1): Directory bread(block 68) failed [ 137.201993][ T2262] FAT-fs (loop1): Directory bread(block 69) failed [ 137.208466][ T2262] FAT-fs (loop1): Directory bread(block 70) failed [ 137.215190][ T2262] FAT-fs (loop1): Directory bread(block 71) failed [ 137.221721][ T2262] FAT-fs (loop1): Directory bread(block 72) failed [ 137.228345][ T2262] FAT-fs (loop1): Directory bread(block 73) failed [ 137.796934][ T39] usb 1-1: 0:2 : does not exist [ 137.804874][ T39] usb 1-1: unit 5 not found! [ 137.814100][ T39] usb 1-1: USB disconnect, device number 11 [ 137.908399][ T2272] loop2: detected capacity change from 0 to 256 [ 138.059655][ T2276] overlayfs: statfs failed on './file0' [ 138.102772][ T2264] loop3: detected capacity change from 0 to 40427 [ 138.128788][ T2264] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 138.141878][ T2264] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.175099][ T2264] F2FS-fs (loop3): invalid crc value [ 138.200917][ T2264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.326361][ T39] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.348518][ T2264] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.358084][ T2264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.683694][ T30] audit: type=1326 audit(1717523513.463:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x0 [ 138.741809][ T309] attempt to access beyond end of device [ 138.741809][ T309] loop3: rw=2051, want=53248, limit=40427 [ 138.748734][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.755737][ T309] attempt to access beyond end of device [ 138.755737][ T309] loop3: rw=2051, want=77824, limit=40427 [ 138.763714][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.774727][ T309] attempt to access beyond end of device [ 138.774727][ T309] loop3: rw=2051, want=86016, limit=40427 [ 138.784287][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.796072][ T309] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 138.804153][ T309] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 138.804287][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.812717][ T309] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 138.836474][ T39] usb 1-1: config 0 descriptor?? [ 139.326533][ T39] hid (null): bogus close delimiter [ 139.346284][ T1676] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.546372][ T39] usb 1-1: language id specifier not provided by device, defaulting to English [ 139.976332][ T1676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.002902][ T1676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.012575][ T1676] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.016399][ T39] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 140.021513][ T1676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.037447][ T1676] usb 4-1: config 0 descriptor?? [ 140.239589][ T39] usb 1-1: USB disconnect, device number 12 [ 140.556777][ T1676] hid (null): bogus close delimiter [ 140.659387][ T2321] loop1: detected capacity change from 0 to 256 [ 141.586399][ T1676] usb 4-1: language id specifier not provided by device, defaulting to English [ 141.802710][ T30] audit: type=1326 audit(1717523516.583:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x0 [ 141.826759][ T2330] loop4: detected capacity change from 0 to 2048 [ 141.888531][ T2330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.366346][ T1676] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #100: -71 [ 142.375031][ T1676] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 142.382945][ T1676] uclogic 0003:256C:006D.001E: failed probing pen v1 parameters: -71 [ 142.390827][ T1676] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 142.398085][ T1676] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 142.406270][ T1676] usb 4-1: USB disconnect, device number 15 [ 143.379954][ T338] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 143.591529][ T2377] loop0: detected capacity change from 0 to 256 [ 143.626345][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 143.928271][ T338] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.605771][ T338] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.623910][ T338] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.633040][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.686778][ T338] hub 3-1:4.0: USB hub found [ 145.693753][ T30] audit: type=1326 audit(1717523520.473:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2388 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x0 [ 145.769604][ T2391] loop4: detected capacity change from 0 to 2048 [ 145.996484][ T2391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.056336][ T338] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 146.097139][ T338] usb 3-1: USB disconnect, device number 22 [ 146.564733][ T2423] loop1: detected capacity change from 0 to 256 [ 146.599783][ T2413] syz-executor.4 (2413) used greatest stack depth: 20536 bytes left [ 149.059358][ T2440] loop4: detected capacity change from 0 to 256 [ 149.368216][ T2452] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.588618][ T704] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 149.796461][ T2444] loop1: detected capacity change from 0 to 40427 [ 149.826363][ T704] usb 3-1: Using ep0 maxpacket: 32 [ 149.834496][ T30] audit: type=1326 audit(1717523524.613:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c12f02ee9 code=0x0 [ 149.872970][ T2444] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 149.880706][ T2444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.889772][ T2444] F2FS-fs (loop1): invalid crc value [ 149.896361][ T2444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.920062][ T2444] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 149.926982][ T2444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.956367][ T704] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.970453][ T704] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.980121][ T704] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 149.989068][ T704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.006946][ T310] attempt to access beyond end of device [ 150.006946][ T310] loop1: rw=2049, want=40968, limit=40427 [ 150.061940][ T704] hub 3-1:4.0: USB hub found [ 150.267057][ T704] hub 3-1:4.0: 2 ports detected [ 153.360635][ T704] hub 3-1:4.0: set hub depth failed [ 153.472204][ T2506] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.486373][ T343] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.644583][ T704] usb 3-1: USB disconnect, device number 23 [ 154.695844][ T30] audit: type=1326 audit(1717523529.473:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2515 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c12f02ee9 code=0x0 [ 154.933223][ T2525] device veth0_vlan left promiscuous mode [ 154.940679][ T2525] device veth0_vlan entered promiscuous mode [ 154.984202][ T332] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.356405][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.367397][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.377561][ T332] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.381388][ T2505] loop1: detected capacity change from 0 to 131072 [ 155.387019][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.401541][ T332] usb 1-1: config 0 descriptor?? [ 155.436666][ T2505] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 155.447394][ T2505] F2FS-fs (loop1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 155.614159][ T2530] loop3: detected capacity change from 0 to 256 [ 155.712899][ T2533] overlayfs: failed to resolve './file0': -2 [ 156.006851][ T332] hid (null): bogus close delimiter [ 156.226361][ T332] usb 1-1: language id specifier not provided by device, defaulting to English [ 156.766418][ T332] uclogic 0003:256C:006D.001F: interface is invalid, ignoring [ 156.876567][ T704] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.976431][ T60] usb 1-1: USB disconnect, device number 13 [ 157.266626][ T704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.279526][ T704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.289332][ T704] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.298403][ T704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.307655][ T704] usb 5-1: config 0 descriptor?? [ 157.366690][ T30] audit: type=1326 audit(1717523532.153:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2562 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x0 [ 157.786537][ T704] hid (null): bogus close delimiter [ 158.006392][ T704] usb 5-1: language id specifier not provided by device, defaulting to English [ 158.015747][ T2578] loop3: detected capacity change from 0 to 2048 [ 158.068024][ T2578] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.536309][ T332] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 158.668877][ T704] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #100: -71 [ 158.686359][ T704] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 158.699928][ T704] uclogic 0003:256C:006D.0020: failed probing pen v1 parameters: -71 [ 158.715057][ T704] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 158.717705][ T2593] loop1: detected capacity change from 0 to 256 [ 158.722375][ T704] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 158.736585][ T704] usb 5-1: USB disconnect, device number 15 [ 158.926428][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.938753][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.940095][ T2597] loop3: detected capacity change from 0 to 256 [ 158.948438][ T332] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.963355][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.971815][ T332] usb 3-1: config 0 descriptor?? [ 159.520445][ T2603] loop0: detected capacity change from 0 to 2048 [ 159.657634][ T332] hid (null): bogus close delimiter [ 159.704190][ T2603] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.736400][ T332] usb 3-1: language id specifier not provided by device, defaulting to English [ 160.276392][ T332] uclogic 0003:256C:006D.0021: interface is invalid, ignoring [ 160.479868][ T338] usb 3-1: USB disconnect, device number 24 [ 160.736159][ T30] audit: type=1326 audit(1717523535.513:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2626 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27edf9dee9 code=0x0 [ 161.201753][ T30] audit: type=1326 audit(1717523535.983:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x0 [ 161.260160][ T2638] loop4: detected capacity change from 0 to 256 [ 162.616303][ T562] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 162.896762][ T2664] loop0: detected capacity change from 0 to 2048 [ 162.948107][ T2664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.016436][ T562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.027424][ T562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.037062][ T562] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.045871][ T562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.054650][ T562] usb 3-1: config 0 descriptor?? [ 163.189734][ T2674] device veth0_vlan left promiscuous mode [ 163.197771][ T2674] device veth0_vlan entered promiscuous mode [ 163.225228][ T39] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.556720][ T562] hid (null): bogus close delimiter [ 163.616364][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.627118][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.636667][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.645466][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.653775][ T39] usb 4-1: config 0 descriptor?? [ 163.776382][ T562] usb 3-1: language id specifier not provided by device, defaulting to English [ 163.796376][ T338] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.872309][ T30] audit: type=1326 audit(1717523538.653:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x0 [ 164.136472][ T39] hid (null): bogus close delimiter [ 164.286388][ T562] uclogic 0003:256C:006D.0022: interface is invalid, ignoring [ 164.356366][ T39] usb 4-1: language id specifier not provided by device, defaulting to English [ 164.376348][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.387097][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.396716][ T338] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.405685][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.414078][ T338] usb 5-1: config 0 descriptor?? [ 164.490124][ T562] usb 3-1: USB disconnect, device number 25 [ 164.856527][ T39] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 164.896558][ T338] hid (null): bogus close delimiter [ 165.057810][ T562] usb 4-1: USB disconnect, device number 16 [ 165.116406][ T338] usb 5-1: language id specifier not provided by device, defaulting to English [ 166.013493][ T2702] device veth0_vlan left promiscuous mode [ 166.019587][ T2702] device veth0_vlan entered promiscuous mode [ 166.040465][ T2706] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.057685][ T338] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #100: -71 [ 166.059805][ T2710] loop2: detected capacity change from 0 to 256 [ 166.066368][ T338] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 166.066386][ T338] uclogic 0003:256C:006D.0024: failed probing pen v1 parameters: -71 [ 166.066406][ T338] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 166.066431][ T338] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 166.104081][ T338] usb 5-1: USB disconnect, device number 16 [ 166.120786][ T2710] FAT-fs (loop2): Directory bread(block 64) failed [ 166.127261][ T2710] FAT-fs (loop2): Directory bread(block 65) failed [ 166.133744][ T2710] FAT-fs (loop2): Directory bread(block 66) failed [ 166.146655][ T2710] FAT-fs (loop2): Directory bread(block 67) failed [ 166.155753][ T2710] FAT-fs (loop2): Directory bread(block 68) failed [ 166.162283][ T2710] FAT-fs (loop2): Directory bread(block 69) failed [ 166.168790][ T2710] FAT-fs (loop2): Directory bread(block 70) failed [ 166.175093][ T2710] FAT-fs (loop2): Directory bread(block 71) failed [ 166.181477][ T2710] FAT-fs (loop2): Directory bread(block 72) failed [ 166.187810][ T2710] FAT-fs (loop2): Directory bread(block 73) failed [ 166.416350][ T2495] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.799565][ T2715] device veth0_vlan left promiscuous mode [ 166.805553][ T2715] device veth0_vlan entered promiscuous mode [ 166.819874][ T2719] loop3: detected capacity change from 0 to 256 [ 166.862122][ T2719] FAT-fs (loop3): Directory bread(block 64) failed [ 166.868708][ T2719] FAT-fs (loop3): Directory bread(block 65) failed [ 166.875186][ T2719] FAT-fs (loop3): Directory bread(block 66) failed [ 166.881711][ T2719] FAT-fs (loop3): Directory bread(block 67) failed [ 166.888323][ T2719] FAT-fs (loop3): Directory bread(block 68) failed [ 166.894792][ T2719] FAT-fs (loop3): Directory bread(block 69) failed [ 166.904029][ T2719] FAT-fs (loop3): Directory bread(block 70) failed [ 166.912389][ T2719] FAT-fs (loop3): Directory bread(block 71) failed [ 166.918956][ T2719] FAT-fs (loop3): Directory bread(block 72) failed [ 166.925363][ T2719] FAT-fs (loop3): Directory bread(block 73) failed [ 166.932338][ T30] audit: type=1326 audit(1717523541.723:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2721 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c12f02ee9 code=0x0 [ 167.136367][ T2495] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.146529][ T2495] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.155779][ T2495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.288061][ T2495] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 167.471613][ T343] usb 2-1: USB disconnect, device number 17 [ 167.987319][ T2743] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.987887][ T2740] loop3: detected capacity change from 0 to 2048 [ 168.174651][ T2740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.689648][ T2495] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.174651][ T30] audit: type=1400 audit(1717523543.953:7419): avc: denied { create } for pid=2760 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.346532][ T2495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.358011][ T2495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.368165][ T2495] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 169.377483][ T2495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.389988][ T2495] usb 5-1: config 0 descriptor?? [ 169.618479][ T2771] device veth0_vlan left promiscuous mode [ 169.643660][ T2771] device veth0_vlan entered promiscuous mode [ 169.867961][ T30] audit: type=1326 audit(1717523544.643:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec5f27ee9 code=0x0 [ 170.323591][ T2495] hid (null): bogus close delimiter [ 170.332648][ T2781] device veth0_vlan left promiscuous mode [ 170.338745][ T2781] device veth0_vlan entered promiscuous mode [ 170.406371][ T2495] usb 5-1: language id specifier not provided by device, defaulting to English [ 170.808331][ T2792] loop1: detected capacity change from 0 to 512 [ 170.836902][ T2792] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.843597][ T2792] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.868164][ T2792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.880993][ T2792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 170.890640][ T2792] EXT4-fs (loop1): group descriptors corrupted! [ 170.960411][ T2792] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 171.001619][ T2495] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 171.277633][ T562] usb 5-1: USB disconnect, device number 17 [ 171.582285][ T2812] overlayfs: failed to resolve './file1': -2 [ 172.558962][ T2836] loop2: detected capacity change from 0 to 256 [ 172.637949][ T2838] device veth0_vlan left promiscuous mode [ 172.644050][ T2838] device veth0_vlan entered promiscuous mode [ 174.683122][ T2852] loop3: detected capacity change from 0 to 512 [ 174.706627][ T2854] loop1: detected capacity change from 0 to 256 [ 174.767248][ T2852] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.773955][ T2852] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.785585][ T2854] FAT-fs (loop1): Directory bread(block 64) failed [ 174.796316][ T2854] FAT-fs (loop1): Directory bread(block 65) failed [ 174.802689][ T2854] FAT-fs (loop1): Directory bread(block 66) failed [ 174.809143][ T39] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.816425][ T2852] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.816584][ T2852] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 174.826321][ T2854] FAT-fs (loop1): Directory bread(block 67) failed [ 174.841931][ T2854] FAT-fs (loop1): Directory bread(block 68) failed [ 174.848391][ T2852] EXT4-fs (loop3): group descriptors corrupted! [ 174.854515][ T2854] FAT-fs (loop1): Directory bread(block 69) failed [ 174.860868][ T2854] FAT-fs (loop1): Directory bread(block 70) failed [ 174.867402][ T2854] FAT-fs (loop1): Directory bread(block 71) failed [ 174.873752][ T2854] FAT-fs (loop1): Directory bread(block 72) failed [ 174.880107][ T2854] FAT-fs (loop1): Directory bread(block 73) failed [ 174.949226][ T2852] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 174.996271][ T562] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 175.186772][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.219826][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.274446][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.286835][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.301494][ T39] usb 5-1: config 0 descriptor?? [ 175.556416][ T562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.574918][ T562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.584564][ T562] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.593689][ T562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.602099][ T562] usb 1-1: config 0 descriptor?? [ 176.106516][ T39] hid (null): bogus close delimiter [ 177.105681][ T562] hid (null): bogus close delimiter [ 177.143115][ T39] usb 5-1: language id specifier not provided by device, defaulting to English [ 177.166354][ T562] usb 1-1: language id specifier not provided by device, defaulting to English [ 177.308568][ T2886] loop1: detected capacity change from 0 to 40427 [ 177.339205][ T2886] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 177.346841][ T2886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.356155][ T2886] F2FS-fs (loop1): invalid crc value [ 177.362719][ T2886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.385885][ T2886] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.392820][ T2886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.400203][ T332] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 177.447654][ T310] attempt to access beyond end of device [ 177.447654][ T310] loop1: rw=2051, want=53248, limit=40427 [ 177.458849][ T310] attempt to access beyond end of device [ 177.458849][ T310] loop1: rw=2051, want=77824, limit=40427 [ 177.470095][ T310] attempt to access beyond end of device [ 177.470095][ T310] loop1: rw=2051, want=86016, limit=40427 [ 177.481329][ T310] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 177.481355][ T310] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 177.488987][ T310] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 177.646313][ T39] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 177.662934][ T39] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 177.670966][ T39] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 177.671033][ T562] uclogic 0003:256C:006D.0027: interface is invalid, ignoring [ 177.679031][ T39] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 177.693573][ T39] uclogic: probe of 0003:256C:006D.0026 failed with error -71 [ 177.701807][ T39] usb 5-1: USB disconnect, device number 18 [ 177.846353][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.857182][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.866723][ T332] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.875173][ T704] usb 1-1: USB disconnect, device number 14 [ 177.875647][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.890149][ T332] usb 3-1: config 0 descriptor?? [ 178.389119][ T2898] loop4: detected capacity change from 0 to 40427 [ 178.400570][ T2902] loop0: detected capacity change from 0 to 512 [ 178.426923][ T2898] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 178.434484][ T2898] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.437437][ T2902] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.442825][ T332] hid (null): bogus close delimiter [ 178.449681][ T2902] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.460813][ T2902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.472165][ T2902] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 178.481627][ T2898] F2FS-fs (loop4): invalid crc value [ 178.486871][ T2902] EXT4-fs (loop0): group descriptors corrupted! [ 178.494340][ T2898] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.529994][ T2898] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 178.537047][ T2898] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.570031][ T2902] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 178.666353][ T332] usb 3-1: string descriptor 0 read error: -22 [ 179.007705][ T332] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input6 [ 179.032557][ T332] uclogic 0003:256C:006D.0028: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 180.821572][ T562] usb 3-1: USB disconnect, device number 26 [ 181.678810][ T30] audit: type=1326 audit(1717523556.463:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e144bee9 code=0x0 [ 181.763339][ T2961] loop0: detected capacity change from 0 to 512 [ 181.811347][ T2961] EXT4-fs (loop0): Test dummy encryption mode enabled [ 181.818675][ T2961] EXT4-fs (loop0): Test dummy encryption mode enabled [ 181.825381][ T2961] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.835458][ T2961] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 181.845055][ T2961] EXT4-fs (loop0): group descriptors corrupted! [ 182.345989][ T2968] loop1: detected capacity change from 0 to 512 [ 182.377690][ T2961] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 182.735492][ T562] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 182.857611][ T2968] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 182.874739][ T2968] ext4 filesystem being mounted at /root/syzkaller-testdir2612251911/syzkaller.Pk66sc/144/file1 supports timestamps until 2038 (0x7fffffff) [ 183.172211][ T332] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 183.331434][ T562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.342387][ T562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.352015][ T562] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.360852][ T562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.369341][ T562] usb 3-1: config 0 descriptor?? [ 183.626673][ T343] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 183.856490][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.867635][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.877659][ T562] hid (null): bogus close delimiter [ 183.883636][ T332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.892598][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.905707][ T332] usb 4-1: config 0 descriptor?? [ 184.036388][ T343] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 184.048534][ T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.086380][ T562] usb 3-1: language id specifier not provided by device, defaulting to English [ 184.166466][ T343] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.175331][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.184823][ T343] usb 2-1: SerialNumber: syz [ 184.475099][ T332] hid (null): bogus close delimiter [ 184.556384][ T562] uclogic 0003:256C:006D.0029: interface is invalid, ignoring [ 184.626362][ T332] usb 4-1: string descriptor 0 read error: -22 [ 184.757904][ T562] usb 3-1: USB disconnect, device number 27 [ 185.087997][ T332] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002A/input/input7 [ 185.100810][ T332] uclogic 0003:256C:006D.002A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 185.439955][ T30] audit: type=1326 audit(1717523560.223:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b44ff4ee9 code=0x0 [ 185.506766][ T343] usb 2-1: 0:2 : does not exist [ 185.511487][ T343] usb 2-1: unit 5 not found! [ 185.516984][ T343] usb 2-1: USB disconnect, device number 18 [ 186.708322][ T704] usb 4-1: USB disconnect, device number 17 [ 186.735843][ T3030] loop3: detected capacity change from 0 to 256 [ 186.817763][ T3021] loop1: detected capacity change from 0 to 40427 [ 186.857093][ T3021] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 186.864734][ T3021] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 186.875715][ T3021] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.915726][ T3021] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 186.922988][ T3021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.936148][ T3021] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 186.947056][ T3021] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 188.271520][ T3045] device veth0_vlan left promiscuous mode [ 188.277602][ T3045] device veth0_vlan entered promiscuous mode [ 189.492812][ T704] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.366719][ T540] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.486327][ T704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.502060][ T704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.518563][ T704] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.529379][ T704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.537897][ T704] usb 5-1: config 0 descriptor?? [ 190.741130][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.752788][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.763007][ T540] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.772265][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.781764][ T540] usb 4-1: config 0 descriptor?? [ 191.126506][ T704] hid (null): bogus close delimiter [ 191.267617][ T540] hid (null): bogus close delimiter [ 191.507484][ T3094] device veth0_vlan left promiscuous mode [ 191.555763][ T3094] device veth0_vlan entered promiscuous mode [ 192.625537][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.637568][ T704] usb 5-1: language id specifier not provided by device, defaulting to English [ 192.659190][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.667925][ T3098] loop3: detected capacity change from 0 to 256 [ 192.674439][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.677134][ T3101] loop0: detected capacity change from 0 to 2048 [ 192.687894][ T704] uclogic 0003:256C:006D.002B: failed retrieving Huion firmware version: -71 [ 192.696581][ T540] usb 4-1: string descriptor 0 read error: -71 [ 192.702703][ T704] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 192.710089][ T704] uclogic: probe of 0003:256C:006D.002B failed with error -71 [ 192.717457][ T540] uclogic 0003:256C:006D.002C: failed retrieving string descriptor #200: -71 [ 192.725960][ T540] uclogic 0003:256C:006D.002C: failed retrieving pen parameters: -71 [ 192.733616][ T3101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.865061][ T3107] device veth0_vlan left promiscuous mode [ 192.872557][ T3107] device veth0_vlan entered promiscuous mode [ 193.101730][ T704] usb 5-1: USB disconnect, device number 19 [ 194.330209][ T540] uclogic 0003:256C:006D.002C: failed probing pen v2 parameters: -71 [ 194.378567][ T540] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 194.390017][ T540] uclogic: probe of 0003:256C:006D.002C failed with error -71 [ 194.403428][ T540] usb 4-1: USB disconnect, device number 18 [ 194.753160][ T3125] loop2: detected capacity change from 0 to 40427 [ 194.822801][ T3125] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.834906][ T3125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.855013][ T3125] F2FS-fs (loop2): invalid crc value [ 194.878026][ T3125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.953455][ T3125] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.963763][ T3125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.117303][ T311] attempt to access beyond end of device [ 195.117303][ T311] loop2: rw=2049, want=40968, limit=40427 [ 195.255211][ T3143] loop1: detected capacity change from 0 to 256 [ 196.640431][ T343] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.589016][ T3169] loop2: detected capacity change from 0 to 512 [ 197.613421][ T3172] loop3: detected capacity change from 0 to 2048 [ 197.646967][ T3169] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.653758][ T3169] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.663918][ T3172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.674371][ T3169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.706356][ T3169] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 197.715832][ T3169] EXT4-fs (loop2): group descriptors corrupted! [ 197.836394][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.848110][ T3169] EXT4-fs (sda1): Can't set test_dummy_encryption on remount [ 197.852572][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.883461][ T3170] loop4: detected capacity change from 0 to 40427 [ 197.895210][ T343] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.913837][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.933911][ T343] usb 1-1: config 0 descriptor?? [ 197.967074][ T3170] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 197.974703][ T3170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.161215][ T3170] F2FS-fs (loop4): invalid crc value [ 198.235240][ T3170] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.239703][ T3177] loop1: detected capacity change from 0 to 40427 [ 198.284959][ T3170] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 198.292110][ T3170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.299541][ T3177] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 198.311261][ T3177] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 198.327559][ T3177] F2FS-fs (loop1): invalid crc value [ 198.349756][ T3177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.422157][ T3177] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.429790][ T3177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.450860][ T1442] attempt to access beyond end of device [ 198.450860][ T1442] loop4: rw=2049, want=40968, limit=40427 [ 198.506565][ T343] hid (null): bogus close delimiter [ 198.602392][ T310] attempt to access beyond end of device [ 198.602392][ T310] loop1: rw=2049, want=40968, limit=40427 [ 198.926777][ T343] usb 1-1: string descriptor 0 read error: -22 [ 199.207289][ T343] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input8 [ 199.219561][ T343] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 199.433130][ T3212] loop2: detected capacity change from 0 to 256 [ 201.161330][ T343] usb 1-1: USB disconnect, device number 15 [ 301.196267][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 301.202692][ C0] rcu: 0-...!: (10000 ticks this GP) idle=4a3/1/0x4000000000000000 softirq=14214/14214 fqs=0 last_accelerate: d913/0028 dyntick_enabled: 1 [ 301.216747][ C0] (t=10002 jiffies g=17093 q=116) [ 301.221682][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g17093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 301.233834][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=7253 [ 301.241472][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g17093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 301.252669][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 301.262482][ C0] rcu: RCU grace-period kthread stack dump: [ 301.268205][ C0] task:rcu_preempt state:I stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 301.277238][ C0] Call Trace: [ 301.280358][ C0] [ 301.283138][ C0] __schedule+0xccc/0x1590 [ 301.287405][ C0] ? __sched_text_start+0x8/0x8 [ 301.292073][ C0] ? __kasan_check_write+0x14/0x20 [ 301.297023][ C0] schedule+0x11f/0x1e0 [ 301.301016][ C0] schedule_timeout+0x18c/0x370 [ 301.305699][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 301.310736][ C0] ? console_conditional_schedule+0x30/0x30 [ 301.316463][ C0] ? update_process_times+0x200/0x200 [ 301.321669][ C0] ? prepare_to_swait_event+0x308/0x320 [ 301.327054][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 301.331653][ C0] ? debug_smp_processor_id+0x17/0x20 [ 301.336861][ C0] ? __note_gp_changes+0x4ab/0x920 [ 301.341805][ C0] ? rcu_gp_init+0xc30/0xc30 [ 301.346234][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 301.351269][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 301.355692][ C0] rcu_gp_kthread+0xa4/0x350 [ 301.360120][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 301.364807][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 301.369319][ C0] ? __kasan_check_read+0x11/0x20 [ 301.374205][ C0] ? __kthread_parkme+0xb2/0x200 [ 301.378958][ C0] kthread+0x421/0x510 [ 301.382861][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 301.387375][ C0] ? kthread_blkcg+0xd0/0xd0 [ 301.391799][ C0] ret_from_fork+0x1f/0x30 [ 301.396055][ C0] [ 301.398917][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 301.405088][ C0] NMI backtrace for cpu 0 [ 301.409252][ C0] CPU: 0 PID: 3232 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 301.419314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 301.429209][ C0] Call Trace: [ 301.432334][ C0] [ 301.435022][ C0] dump_stack_lvl+0x151/0x1b7 [ 301.439661][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 301.445101][ C0] dump_stack+0x15/0x17 [ 301.449092][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 301.453869][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 301.459854][ C0] ? panic+0x751/0x751 [ 301.463762][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 301.469664][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 301.475478][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 301.481379][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 301.487107][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 301.493095][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 301.499866][ C0] print_cpu_stall+0x310/0x5f0 [ 301.504477][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 301.509504][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 301.515490][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 301.520522][ C0] update_process_times+0x198/0x200 [ 301.525556][ C0] tick_sched_timer+0x188/0x240 [ 301.530562][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 301.535945][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 301.540975][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 301.545921][ C0] ? clockevents_program_event+0x22f/0x300 [ 301.551560][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 301.557473][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 301.562236][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 301.567963][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 301.573431][ C0] [ 301.576209][ C0] [ 301.579026][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 301.584808][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 301.589582][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d cb 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 301.609015][ C0] RSP: 0018:ffffc90000b978c0 EFLAGS: 00000246 [ 301.614916][ C0] RAX: 0000000000000001 RBX: 1ffff92000172f1c RCX: 1ffffffff0d1aa9c [ 301.622727][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 301.630541][ C0] RBP: ffffc90000b97970 R08: dffffc0000000000 R09: ffffed103ee0715b [ 301.638356][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 301.646162][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff92000172f20 [ 301.653980][ C0] ? asm_common_interrupt+0x27/0x40 [ 301.659011][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 301.663955][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 301.669859][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 301.676109][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 301.680881][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 301.685915][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 301.691209][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 301.696248][ C0] ? kvfree+0x35/0x40 [ 301.700062][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 301.705446][ C0] bpf_trace_run2+0xec/0x210 [ 301.709873][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 301.714557][ C0] ? kvfree+0x35/0x40 [ 301.718378][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 301.724018][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 301.730016][ C0] ? kvfree+0x35/0x40 [ 301.733827][ C0] __bpf_trace_kfree+0x6f/0x90 [ 301.738426][ C0] ? kvfree+0x35/0x40 [ 301.742244][ C0] kfree+0x1f3/0x220 [ 301.745977][ C0] ? memset+0x35/0x40 [ 301.749795][ C0] kvfree+0x35/0x40 [ 301.753442][ C0] btf_new_fd+0x443/0x910 [ 301.757607][ C0] bpf_btf_load+0x6f/0x90 [ 301.761779][ C0] __sys_bpf+0x50e/0x760 [ 301.765854][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 301.771063][ C0] ? __kasan_check_read+0x11/0x20 [ 301.775920][ C0] __x64_sys_bpf+0x7c/0x90 [ 301.780173][ C0] do_syscall_64+0x3d/0xb0 [ 301.784426][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 301.790155][ C0] RIP: 0033:0x7f6c12f02ee9 [ 301.794411][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 301.813849][ C0] RSP: 002b:00007f6c1227d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.822097][ C0] RAX: ffffffffffffffda RBX: 00007f6c13039f80 RCX: 00007f6c12f02ee9 [ 301.829907][ C0] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 301.837717][ C0] RBP: 00007f6c12f606fe R08: 0000000000000000 R09: 0000000000000000 [ 301.845616][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.853426][ C0] R13: 000000000000000b R14: 00007f6c13039f80 R15: 00007fff77c1f538 [ 301.861241][ C0] [ 301.864124][ C0] NMI backtrace for cpu 0 [ 301.868358][ C0] CPU: 0 PID: 3232 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 301.878425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 301.888318][ C0] Call Trace: [ 301.891444][ C0] [ 301.894133][ C0] dump_stack_lvl+0x151/0x1b7 [ 301.898647][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 301.904118][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 301.908802][ C0] dump_stack+0x15/0x17 [ 301.912795][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 301.917579][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 301.923560][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 301.928851][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 301.933539][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 301.939442][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 301.945279][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 301.951158][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 301.956885][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 301.961833][ C0] print_cpu_stall+0x315/0x5f0 [ 301.966433][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 301.971468][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 301.977456][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 301.982492][ C0] update_process_times+0x198/0x200 [ 301.987525][ C0] tick_sched_timer+0x188/0x240 [ 301.992210][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 301.997594][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 302.002760][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 302.007699][ C0] ? clockevents_program_event+0x22f/0x300 [ 302.013341][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 302.019247][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 302.024019][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 302.029745][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 302.035214][ C0] [ 302.037987][ C0] [ 302.040767][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 302.046582][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 302.051397][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d cb 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 302.070795][ C0] RSP: 0018:ffffc90000b978c0 EFLAGS: 00000246 [ 302.076697][ C0] RAX: 0000000000000001 RBX: 1ffff92000172f1c RCX: 1ffffffff0d1aa9c [ 302.084687][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 302.092489][ C0] RBP: ffffc90000b97970 R08: dffffc0000000000 R09: ffffed103ee0715b [ 302.100302][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 302.108111][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff92000172f20 [ 302.115931][ C0] ? asm_common_interrupt+0x27/0x40 [ 302.120959][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 302.125909][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 302.131816][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 302.138059][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 302.142916][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 302.147951][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 302.153247][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 302.158279][ C0] ? kvfree+0x35/0x40 [ 302.162099][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 302.167480][ C0] bpf_trace_run2+0xec/0x210 [ 302.171909][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 302.176594][ C0] ? kvfree+0x35/0x40 [ 302.180413][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 302.186186][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 302.192167][ C0] ? kvfree+0x35/0x40 [ 302.195982][ C0] __bpf_trace_kfree+0x6f/0x90 [ 302.200585][ C0] ? kvfree+0x35/0x40 [ 302.204599][ C0] kfree+0x1f3/0x220 [ 302.208251][ C0] ? memset+0x35/0x40 [ 302.212069][ C0] kvfree+0x35/0x40 [ 302.215722][ C0] btf_new_fd+0x443/0x910 [ 302.219886][ C0] bpf_btf_load+0x6f/0x90 [ 302.224045][ C0] __sys_bpf+0x50e/0x760 [ 302.228123][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 302.233333][ C0] ? __kasan_check_read+0x11/0x20 [ 302.238193][ C0] __x64_sys_bpf+0x7c/0x90 [ 302.242627][ C0] do_syscall_64+0x3d/0xb0 [ 302.246870][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 302.252596][ C0] RIP: 0033:0x7f6c12f02ee9 [ 302.256855][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 302.276295][ C0] RSP: 002b:00007f6c1227d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.284535][ C0] RAX: ffffffffffffffda RBX: 00007f6c13039f80 RCX: 00007f6c12f02ee9 [ 302.292348][ C0] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 302.300160][ C0] RBP: 00007f6c12f606fe R08: 0000000000000000 R09: 0000000000000000 [ 302.307970][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.315781][ C0] R13: 000000000000000b R14: 00007f6c13039f80 R15: 00007fff77c1f538 [ 302.323596][ C0] [ 302.326461][ C0] Sending NMI from CPU 0 to CPUs 1: [ 302.331520][ C1] NMI backtrace for cpu 1 [ 302.331529][ C1] CPU: 1 PID: 3233 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 302.331545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 302.331554][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 302.331574][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d cb 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 302.331587][ C1] RSP: 0018:ffffc90000ac7040 EFLAGS: 00000246 [ 302.331600][ C1] RAX: 0000000000000003 RBX: 1ffff92000158e0c RCX: ffffffff8154fa3f [ 302.331611][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810c0bb988 [ 302.331626][ C1] RBP: ffffc90000ac70f0 R08: dffffc0000000000 R09: ffffed1021817732 [ 302.331638][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 302.331648][ C1] R13: ffff88810c0bb988 R14: 0000000000000003 R15: 1ffff92000158e10 [ 302.331659][ C1] FS: 00007f4ec52a26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 302.331672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.331683][ C1] CR2: 00005555560bd818 CR3: 00000001298c5000 CR4: 00000000003506a0 [ 302.331696][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.331705][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.331715][ C1] Call Trace: [ 302.331720][ C1] [ 302.331725][ C1] ? show_regs+0x58/0x60 [ 302.331741][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 302.331759][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 302.331777][ C1] ? kvm_wait+0x147/0x180 [ 302.331789][ C1] ? kvm_wait+0x147/0x180 [ 302.331802][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 302.331818][ C1] ? nmi_handle+0xa8/0x280 [ 302.331833][ C1] ? kvm_wait+0x147/0x180 [ 302.331846][ C1] ? default_do_nmi+0x69/0x160 [ 302.331862][ C1] ? exc_nmi+0xaf/0x120 [ 302.331876][ C1] ? end_repeat_nmi+0x16/0x31 [ 302.331891][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 302.331910][ C1] ? kvm_wait+0x147/0x180 [ 302.331923][ C1] ? kvm_wait+0x147/0x180 [ 302.331936][ C1] ? kvm_wait+0x147/0x180 [ 302.331949][ C1] [ 302.331953][ C1] [ 302.331958][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 302.331973][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 302.331988][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 302.332005][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 302.332022][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 302.332040][ C1] ? reweight_entity+0x7a/0x4b0 [ 302.332057][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 302.332073][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 302.332089][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 302.332105][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 302.332124][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 302.332140][ C1] ? sock_map_unref+0x352/0x4d0 [ 302.332155][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 302.332168][ C1] bpf_trace_run2+0xec/0x210 [ 302.332184][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 302.332198][ C1] ? sock_map_unref+0x352/0x4d0 [ 302.332213][ C1] ? sched_clock+0x9/0x10 [ 302.332227][ C1] ? sock_map_unref+0x352/0x4d0 [ 302.332242][ C1] __bpf_trace_kfree+0x6f/0x90 [ 302.332257][ C1] ? sock_map_unref+0x352/0x4d0 [ 302.332271][ C1] kfree+0x1f3/0x220 [ 302.332288][ C1] sock_map_unref+0x352/0x4d0 [ 302.332304][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 302.332320][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 302.332336][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 302.332348][ C1] bpf_trace_run2+0xec/0x210 [ 302.332363][ C1] ? unwind_get_return_address+0x4d/0x90 [ 302.332379][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 302.332394][ C1] ? arch_stack_walk+0xf3/0x140 [ 302.332410][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 302.332425][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 302.332440][ C1] __bpf_trace_kfree+0x6f/0x90 [ 302.332453][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 302.332468][ C1] kfree+0x1f3/0x220 [ 302.332484][ C1] raw_sendmsg+0x147e/0x1ec0 [ 302.332501][ C1] ? avc_has_perm+0x16f/0x260 [ 302.332517][ C1] ? compat_raw_ioctl+0x10/0x10 [ 302.332534][ C1] ? selinux_socket_sendmsg+0x243/0x340 [ 302.332552][ C1] ? __kasan_kmalloc+0x9/0x10 [ 302.332566][ C1] ? inet_send_prepare+0x5e/0x4a0 [ 302.332582][ C1] inet_sendmsg+0xa1/0xc0 [ 302.332596][ C1] ? inet_send_prepare+0x4a0/0x4a0 [ 302.332611][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 302.332633][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 302.332647][ C1] ? alloc_file_pseudo+0x280/0x2f0 [ 302.332663][ C1] ? import_iovec+0xe5/0x120 [ 302.332679][ C1] ___sys_sendmsg+0x252/0x2e0 [ 302.332693][ C1] ? preempt_count_add+0x92/0x1a0 [ 302.332709][ C1] ? __sys_sendmsg+0x260/0x260 [ 302.332724][ C1] ? bpf_raw_tracepoint_open+0x8a0/0x950 [ 302.332745][ C1] ? __fdget+0x1bc/0x240 [ 302.332758][ C1] __se_sys_sendmsg+0x19a/0x260 [ 302.332773][ C1] ? __x64_sys_sendmsg+0x90/0x90 [ 302.332787][ C1] ? switch_fpu_return+0x1ed/0x3d0 [ 302.332804][ C1] ? __kasan_check_read+0x11/0x20 [ 302.332820][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 302.332834][ C1] do_syscall_64+0x3d/0xb0 [ 302.332848][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 302.332862][ C1] RIP: 0033:0x7f4ec5f27ee9 [ 302.332875][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 302.332888][ C1] RSP: 002b:00007f4ec52a20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.332903][ C1] RAX: ffffffffffffffda RBX: 00007f4ec605ef80 RCX: 00007f4ec5f27ee9 [ 302.332913][ C1] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000008 [ 302.332923][ C1] RBP: 00007f4ec5f856fe R08: 0000000000000000 R09: 0000000000000000 [ 302.332932][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.332941][ C1] R13: 000000000000000b R14: 00007f4ec605ef80 R15: 00007ffeafba1f18 [ 302.332954][ C1] [ 441.061317][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz-executor.4:3232] [ 441.069734][ C0] Modules linked in: [ 441.073459][ C0] CPU: 0 PID: 3232 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 441.083525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.093421][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 441.098194][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d cb 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 441.118155][ C0] RSP: 0018:ffffc90000b978c0 EFLAGS: 00000246 [ 441.124055][ C0] RAX: 0000000000000001 RBX: 1ffff92000172f1c RCX: 1ffffffff0d1aa9c [ 441.131869][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 441.139680][ C0] RBP: ffffc90000b97970 R08: dffffc0000000000 R09: ffffed103ee0715b [ 441.147490][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 441.155300][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff92000172f20 [ 441.163114][ C0] FS: 00007f6c1227d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 441.171879][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.178302][ C0] CR2: 0000000000000000 CR3: 000000011476a000 CR4: 00000000003506b0 [ 441.186128][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.193924][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.201738][ C0] Call Trace: [ 441.204949][ C0] [ 441.207648][ C0] ? show_regs+0x58/0x60 [ 441.211719][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 441.216668][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 441.221875][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 441.227087][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 441.232032][ C0] ? clockevents_program_event+0x22f/0x300 [ 441.237756][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 441.243657][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 441.248606][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 441.254509][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 441.260150][ C0] [ 441.262925][ C0] [ 441.265705][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.271702][ C0] ? kvm_wait+0x147/0x180 [ 441.275867][ C0] ? asm_common_interrupt+0x27/0x40 [ 441.280894][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 441.285843][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 441.291745][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 441.297992][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 441.302764][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 441.307798][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 441.313092][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 441.318129][ C0] ? kvfree+0x35/0x40 [ 441.321947][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 441.327328][ C0] bpf_trace_run2+0xec/0x210 [ 441.331754][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.336526][ C0] ? kvfree+0x35/0x40 [ 441.340346][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 441.345987][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.351977][ C0] ? kvfree+0x35/0x40 [ 441.355794][ C0] __bpf_trace_kfree+0x6f/0x90 [ 441.360525][ C0] ? kvfree+0x35/0x40 [ 441.364352][ C0] kfree+0x1f3/0x220 [ 441.368078][ C0] ? memset+0x35/0x40 [ 441.371892][ C0] kvfree+0x35/0x40 [ 441.375536][ C0] btf_new_fd+0x443/0x910 [ 441.379703][ C0] bpf_btf_load+0x6f/0x90 [ 441.383870][ C0] __sys_bpf+0x50e/0x760 [ 441.387949][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 441.393158][ C0] ? __kasan_check_read+0x11/0x20 [ 441.398019][ C0] __x64_sys_bpf+0x7c/0x90 [ 441.402269][ C0] do_syscall_64+0x3d/0xb0 [ 441.406523][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.412253][ C0] RIP: 0033:0x7f6c12f02ee9 [ 441.416509][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 441.436032][ C0] RSP: 002b:00007f6c1227d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.444277][ C0] RAX: ffffffffffffffda RBX: 00007f6c13039f80 RCX: 00007f6c12f02ee9 [ 441.452090][ C0] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 441.459900][ C0] RBP: 00007f6c12f606fe R08: 0000000000000000 R09: 0000000000000000 [ 441.467712][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.475524][ C0] R13: 000000000000000b R14: 00007f6c13039f80 R15: 00007fff77c1f538 [ 441.483337][ C0] [ 441.486201][ C0] Sending NMI from CPU 0 to CPUs 1: [ 441.491254][ C1] NMI backtrace for cpu 1 [ 441.491263][ C1] CPU: 1 PID: 3233 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 441.491279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.491287][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 441.491307][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d cb 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 441.491324][ C1] RSP: 0018:ffffc90000ac7040 EFLAGS: 00000246 [ 441.491337][ C1] RAX: 0000000000000003 RBX: 1ffff92000158e0c RCX: ffffffff8154fa3f [ 441.491347][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810c0bb988 [ 441.491357][ C1] RBP: ffffc90000ac70f0 R08: dffffc0000000000 R09: ffffed1021817732 [ 441.491368][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 441.491379][ C1] R13: ffff88810c0bb988 R14: 0000000000000003 R15: 1ffff92000158e10 [ 441.491389][ C1] FS: 00007f4ec52a26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 441.491403][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.491413][ C1] CR2: 00005555560bd818 CR3: 00000001298c5000 CR4: 00000000003506a0 [ 441.491427][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.491435][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.491445][ C1] Call Trace: [ 441.491450][ C1] [ 441.491455][ C1] ? show_regs+0x58/0x60 [ 441.491471][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 441.491488][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 441.491506][ C1] ? kvm_wait+0x147/0x180 [ 441.491519][ C1] ? kvm_wait+0x147/0x180 [ 441.491532][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 441.491548][ C1] ? nmi_handle+0xa8/0x280 [ 441.491563][ C1] ? kvm_wait+0x147/0x180 [ 441.491576][ C1] ? kvm_wait+0x147/0x180 [ 441.491589][ C1] ? default_do_nmi+0x69/0x160 [ 441.491604][ C1] ? exc_nmi+0xaf/0x120 [ 441.491618][ C1] ? end_repeat_nmi+0x16/0x31 [ 441.491634][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 441.491652][ C1] ? kvm_wait+0x147/0x180 [ 441.491665][ C1] ? kvm_wait+0x147/0x180 [ 441.491679][ C1] ? kvm_wait+0x147/0x180 [ 441.491691][ C1] [ 441.491695][ C1] [ 441.491700][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.491715][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 441.491730][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 441.491746][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 441.491764][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 441.491782][ C1] ? reweight_entity+0x7a/0x4b0 [ 441.491798][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 441.491815][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 441.491830][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 441.491847][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 441.491865][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 441.491881][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.491896][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 441.491908][ C1] bpf_trace_run2+0xec/0x210 [ 441.491924][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.491939][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.491953][ C1] ? sched_clock+0x9/0x10 [ 441.491966][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.491982][ C1] __bpf_trace_kfree+0x6f/0x90 [ 441.491996][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.492010][ C1] kfree+0x1f3/0x220 [ 441.492026][ C1] sock_map_unref+0x352/0x4d0 [ 441.492042][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 441.492058][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 441.492074][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xec8 [ 441.492086][ C1] bpf_trace_run2+0xec/0x210 [ 441.492100][ C1] ? unwind_get_return_address+0x4d/0x90 [ 441.492117][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.492131][ C1] ? arch_stack_walk+0xf3/0x140 [ 441.492147][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 441.492162][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 441.492177][ C1] __bpf_trace_kfree+0x6f/0x90 [ 441.492191][ C1] ? raw_sendmsg+0x147e/0x1ec0 [ 441.492205][ C1] kfree+0x1f3/0x220 [ 441.492221][ C1] raw_sendmsg+0x147e/0x1ec0 [ 441.492238][ C1] ? avc_has_perm+0x16f/0x260 [ 441.492254][ C1] ? compat_raw_ioctl+0x10/0x10 [ 441.492272][ C1] ? selinux_socket_sendmsg+0x243/0x340 [ 441.492288][ C1] ? __kasan_kmalloc+0x9/0x10 [ 441.492302][ C1] ? inet_send_prepare+0x5e/0x4a0 [ 441.492322][ C1] inet_sendmsg+0xa1/0xc0 [ 441.492336][ C1] ? inet_send_prepare+0x4a0/0x4a0 [ 441.492351][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 441.492367][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 441.492381][ C1] ? alloc_file_pseudo+0x280/0x2f0 [ 441.492397][ C1] ? import_iovec+0xe5/0x120 [ 441.492414][ C1] ___sys_sendmsg+0x252/0x2e0 [ 441.492427][ C1] ? preempt_count_add+0x92/0x1a0 [ 441.492443][ C1] ? __sys_sendmsg+0x260/0x260 [ 441.492458][ C1] ? bpf_raw_tracepoint_open+0x8a0/0x950 [ 441.492479][ C1] ? __fdget+0x1bc/0x240 [ 441.492492][ C1] __se_sys_sendmsg+0x19a/0x260 [ 441.492506][ C1] ? __x64_sys_sendmsg+0x90/0x90 [ 441.492520][ C1] ? switch_fpu_return+0x1ed/0x3d0 [ 441.492536][ C1] ? __kasan_check_read+0x11/0x20 [ 441.492552][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 441.492566][ C1] do_syscall_64+0x3d/0xb0 [ 441.492580][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.492594][ C1] RIP: 0033:0x7f4ec5f27ee9 [ 441.492607][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 441.492619][ C1] RSP: 002b:00007f4ec52a20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.492634][ C1] RAX: ffffffffffffffda RBX: 00007f4ec605ef80 RCX: 00007f4ec5f27ee9 [ 441.492645][ C1] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000008 [ 441.492654][ C1] RBP: 00007f4ec5f856fe R08: 0000000000000000 R09: 0000000000000000 [ 441.492663][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.492672][ C1] R13: 000000000000000b R14: 00007f4ec605ef80 R15: 00007ffeafba1f18 [ 441.492684][ C1]