last executing test programs: 15.70639282s ago: executing program 4 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400021d", @ANYRES16=r1, @ANYBLOB="040826bd7000fbdbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x100) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f00000004c0)=@id, &(0x7f0000000500)=0x10, 0x80000) fcntl$dupfd(r5, 0x406, r6) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600009, 0x15) r8 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) ioctl$EVIOCGVERSION(r8, 0x5452, &(0x7f0000002200)=""/188) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 13.50842214s ago: executing program 4 (id=668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12.837143435s ago: executing program 4 (id=671): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@noauto_da_alloc}, {@grpquota}, {@errors_continue}, {@noauto_da_alloc}, {@grpquota}, {@errors_continue}, {@commit={'commit', 0x3d, 0x6d7b2ff9}}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}], [{@appraise_type}]}, 0x1, 0x476, &(0x7f0000000b40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) 10.70984725s ago: executing program 4 (id=675): creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000903001f00000000020001000000000800040001020000", 0x24) 10.191248473s ago: executing program 2 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000840)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000001c5f377dd0ee696be90565fca893e4be3c94f293a47d8e75000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) socket(0x2a, 0x0, 0x0) 9.497731919s ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0x1011, &(0x7f0000000c80)=ANY=[], 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRESHEX, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000280)={'veth0_virt_wifi\x00', @random="5ab057a94a33"}) 8.053083638s ago: executing program 4 (id=683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.117275837s ago: executing program 2 (id=687): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 6.034738944s ago: executing program 2 (id=690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.952278351s ago: executing program 2 (id=691): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@global, @global=@item_4={0x3, 0x1, 0x0, "78e505ee"}]}}, 0x0}, 0x0) 4.511863059s ago: executing program 1 (id=704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000075b2c8f7000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xa}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x360, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 4.469523003s ago: executing program 1 (id=705): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000180)={[{@nobarrier}, {@grpjquota}]}, 0x1, 0x765, &(0x7f0000000800)="$eJzs3c1rHOUfAPDvbJKmv7Q/E0HQegoIGijdmBpbBQ8VDyJYKOjZdtlsQ80mW7Kb0oSAFhG8CCoeBL307Eu9efXlqv+FB2mpmhYrHiQyu7PpNtltN22SRffzgWmf55nZPPPdZ2aeZ/cZdgLoW+PpP7mIQxHxQRIxmpUnETFUTw1GnGhsd2tttZguSayvv/ZbUt/m5tpqMVpekzqQZR6LiO/fjTic21pvdXllrlAulxaz/GRt/vxkdXnlyLn5wmxptrRwbGp6+ujxZ48f27lY//hp5eC1D19+6qsTf73z6JX3f0jiRBzM1rXGsVPGYzx7T4bSt/AOL+10ZT2W9HoHuC/pqTnQOMvjUIzGQD0FAPyXvRUR6wBAn0n0/wDQZ5rfA9xcWy02l95+I7G3rr8YEfsb8TfnNxtrBrM5u/31edCRm0k2M9KYzEwiYmwH6h+PiM++eeOLdIldmocEaOftSxFxZmx86/U/2XLPwnY93cU245vyrn+wd75Nxz/PtRv/5TbGP3HH+KdhuM25ez/uff7nru5ANR2l478XWu5tu9USf2ZsIMv9vz7mG0rOniuX0mvbQxExEUPDaX7qLnVM3Pj7Rqd1reO/3z968/O0/vT/21vkrg4O3/mamUKt8CAxt7p+KeLxwXbxJxvtn7Rp/7TsVJd1vPL8e592WpfGn8bbXLbGv7vWL0c82bb9b9/Rltz1/sTJ+uEw2Two2vj6509G2pUf2dT+6ZLW3/wssBfS9h+5e/xjSev9mtXt1/Hj5dHvOq27d/ztj/99yev19L6s7GKhVlucitiXvLq1/Ojt1zbzze3T+CeeaH/+bz7+11v2If1MeKbL+Aev/frl/ce/u9L4Z7bV/ttPXLk1N9Cp/u7af7qemshKurn+dbuDD/LeAQAAAAAAAAAAAAAAAAAAAAAAAEC3chFxMJJcfiOdy+XzjWd4PxIjuXKlWjt8trK0MBP1Z2WPxVCu+VOXoy2/hzqV/R5+M390U/6ZiHg4Ij4e/l89ny9WyjO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgc6PP8/9ctwr/cOANg1+3u9AwDAntP/A0D/0f8DQP/R/wNA/9H/A0D/0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy06dPJku63+urRbT/MyF5aW5yoUjM6XqXH5+qZgvVhbP52crldlyKV+szN/r75UrlfPTsbB0cbJWqtYmq8srp+crSwu10+fmC7Ol06WhPYkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALanurwyVyiXS4sSEhISG4leX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h3+CQAA///Q6StZ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [{0x20, '(]-,'}, {}, {0x20, ')+\\^:}#'}, {0x20, '\x03({[*'}, {0x20, '@!'}, {0x20, '@})\xb2'}, {0x20, '+/'}], 0xa, "47fda5028adfa2726f071ddbd1cc2a8c2503000000000000008a97777e8d271cc7f6518ac9b1acfd28cc011c87dafd02a7185c3f10635c058defa0273456feba43b516c3616359a18fe720a4f1d5e9131f63"}, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000002ec0)={{0x0, 0x0, 0x80}}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x2000000, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d2, 0x2b}, 0x0, @in6=@loopback, 0x3501, 0x0, 0x2, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGBITSND(r6, 0x80084502, &(0x7f00000001c0)=""/252) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130783000000000000007f00000100000000000027ac239ca094f4a600013c00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001140)={0x2, 0x0, [{0x1000, 0x1000, &(0x7f0000001ec0)=""/4096}, {0x4000, 0xd6, &(0x7f0000001200)=""/214}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.531016102s ago: executing program 1 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x81cb347fd2a77fb3, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) 2.497778875s ago: executing program 0 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "0003000000000102030003030403ffff"}}}]}, 0x48}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000810000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="14000200fe800001000000000000000000000000000000000014000600020000000800"/45], 0x54}}, 0x0) 2.351470047s ago: executing program 1 (id=719): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 2.19756974s ago: executing program 3 (id=720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"/16, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.145652504s ago: executing program 1 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 1.311171062s ago: executing program 2 (id=722): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='|'], 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.299548643s ago: executing program 3 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000e50700000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.241158128s ago: executing program 1 (id=724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000840)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000001c5f377dd0ee696be90565fca893e4be3c94f293a47d8e75000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) socket(0x2a, 0x0, 0x0) 1.178692003s ago: executing program 0 (id=725): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2f, &(0x7f0000000300), &(0x7f0000000000)=0x8) 1.149458036s ago: executing program 2 (id=726): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) lseek(r0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xa, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ptrace$setsig(0x4203, r4, 0xfa5, &(0x7f00000001c0)={0x3a, 0x7, 0x7ff}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peekuser(0x3, r8, 0x6) 1.094668771s ago: executing program 3 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000017000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x2}) 1.09395277s ago: executing program 0 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.031817875s ago: executing program 3 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x81cb347fd2a77fb3, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) 989.189029ms ago: executing program 0 (id=730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 988.440229ms ago: executing program 3 (id=731): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}], 0xa, "ad1323096beb292b360dcdb5eda5f942ae53820460a2f8978019972662a15c30ad7df41dd6297e0a83d8dbe22b2a9eb8af089cc1053f2040d7f5a2e62a398e3d2ad88340e07b2e92270f3f45c41f56e91b6fba146ba124cb6a36344568408c5bdb5687c20285d094a6f1d4dd1a375aea728d07a20d1a29629a263d8297d4016fcfab7caa095fbd75bb35aca25dd29c0ab9769d59c39489c3ac09e595f5d26f5c89a2b0e36f10ceb27a9e4a148c7fa5814a6b7249208583b5717f536b8d003f2a9d11a303d5414e888f49998a35d9e5d1d053f9"}, 0xf0) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x240007fc, &(0x7f0000e68000)={0x2, 0x4e27, @private=0xa010101}, 0x10) r7 = userfaultfd(0x80800) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 947.789563ms ago: executing program 0 (id=732): socket(0x10, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x810, 0xffffffffffffffff, 0x592f5000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x800000fb) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x0, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 37.458387ms ago: executing program 0 (id=733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@global, @global=@item_4={0x3, 0x1, 0x0, "78e505ee"}]}}, 0x0}, 0x0) 0s ago: executing program 3 (id=734): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000540)="ce966893ffb05ffac67725c545826081671e1f50a2f88e2bbe535fe73b6b2333ad91d82dd7c4a8aa9173460b74355ef25afb06273a9681ef7a882a6a55ccb3d3f9a41fe75fbdd647210d3db8e24c9e2b121f6a5f0e4c9256f2c458b547799229a71603df174364af938e18e4b94f01d061ded21a45cdc1ed4a0ceff8e39388d28484123f0ba51b43bf9e07319beeaa63a38101a092397d4f8a7def986475167d66b6755c6262a4c38cfeb29e268f53", 0xaf}, {&(0x7f0000000600)="478497813717f9d817936bd52fe6e6a5a7cee00fcf6063fa6664fccca256fad90ea34e3c78ff04040a5d2c06318825713c5851503e153a331a93579725b8afbee3a827841febbdbf58470345d71ad620923c72ccc6bd4ffb5ff6ee6e9336efc0aa1080e0", 0x64}, {&(0x7f0000001480)="84a13f5db46521d1c680585a417396fa3a38c1036194db971226ddb9a710bbcf04ec5db1348729a48e71ebe5b6977b0d5c27b8991a0256aa96dc6fe189631dde4ef5c8edde469d61a4cd2a16bd7a17f104aac6755c389937c8a6bccb31793727f3bad854fb9e65d04cedaab0547ff72493128387cf385153f6bd2b9bebd164270a2a553631558dfa80fffab821efabc00067a714f433bc044452352b5874d698d1e4c66673dfa299c6ec391f011633bdc00a680a4cdd47bbca124d193178e377352d0225d8e7dbf859d91b9c99dd4d24b9a134ca2e693d01054cabf1d7c3a70b8e7a5045523e761ac7682351fa54", 0xffc6}, {&(0x7f0000000780)="0100f94945de15ae1b313eaa6869b3e26002c9d0d6c7f71ea65cc6e63e970913fdf880198807394b7254e54f274d4a18af84c893d9f8415cea7ad9def74b81ebcc00dabea85cc664b083d7a58a822bc720236070c9d1ed132adc1f41842a9404143a4b4d5fadbb81f57023a5e8396a50ebe5329990e52a0ff67e8174db0aab6dfe2e0eb2edf960", 0x87}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="c485ae5463e7373921aedf2b7f3ae0a8ca79444055ffcf6255979ed13acbb80c6c24ae23d9cd68c29e71179e603b5a7717414c78fd06b7e6fba140d99fb90339afecfcf70226b4c3cb279deade7ea2faac187730d9c71b13baa3785a902a13a2a6eaf38897f74e3f2d95b85e3ed05fcdf8b0f816609ec82877bb99096f1ea9cabeaca507ca87e4d1d4639bef", 0x8c}, {&(0x7f0000000e00)="8b98cc2669d0a84b16b18485e3b802e1a345a2f3c74c6e268b06dafc8d209377a5f6f4f27f66694c92d88c41c6c52719f4111a4789847b715f48d7bfdc03b4349a0943c963db4bc0333edc", 0x4b}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="30000002b5371de60000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0xc040041}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="893958bb763d38091e7e242e6b89748e3ae0e526db912907f759bc2da4327401b44bb9cbd9420fd576eeac9c46c7d3a21d84aa3bbb63db4454d363cb9d87a0a72ec46625171cadc7be01cdcfc4bd17e09d0ffe8e3d65175491881c81a2ef8257beea93031b11889c28a46ec4e5bd48f92f08a9b66a331e00e0b1d5e413b9b1b110fc3619d4ce658d63b1ebca69fca2afa68a8ac0d1339abf12ef5bc3aa5f10223527c3f42aa9d10b4459ed9a54e16836", 0xb0}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x0) kernel console output (not intermixed with test programs): nit_itable=0x0000000000000006,dioread_nolock,,errors=continue [ 110.022686][ T1419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 110.025103][ T799] kernel write not supported for file /ppp (pid: 799 comm: kworker/1:6) [ 110.438557][ T1431] netlink: 176 bytes leftover after parsing attributes in process `syz.4.316'. [ 111.386107][ T799] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 111.521184][ T24] audit: type=1400 audit(1721742216.560:367): avc: denied { relabelfrom } for pid=1452 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.566109][ T24] audit: type=1400 audit(1721742216.580:368): avc: denied { relabelto } for pid=1452 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.695474][ T1449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.321'. [ 111.705306][ T1449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 111.727851][ T1455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 111.738590][ T52] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.756192][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.763410][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.770480][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.776305][ T1455] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 112.067587][ T24] audit: type=1326 audit(1721742217.110:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 112.091222][ T24] audit: type=1326 audit(1721742217.110:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 112.161388][ T24] audit: type=1326 audit(1721742217.110:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 112.266663][ T1447] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 112.280047][ T20] usb 3-1: USB disconnect, device number 7 [ 112.377274][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.447278][ T1447] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.909773][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.920506][ T52] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 112.929923][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.940932][ T52] usb 2-1: config 0 descriptor?? [ 112.960803][ T1447] F2FS-fs (loop4): invalid crc value [ 113.002439][ T1447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.020313][ T24] audit: type=1326 audit(1721742217.140:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.051045][ T24] audit: type=1326 audit(1721742217.160:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.089864][ T24] audit: type=1326 audit(1721742218.050:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.116315][ T24] audit: type=1326 audit(1721742218.050:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.141179][ T24] audit: type=1326 audit(1721742218.050:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.156127][ T1447] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.179433][ T1447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.199479][ T24] audit: type=1326 audit(1721742218.050:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.208257][ T1472] device pim6reg1 entered promiscuous mode [ 113.282862][ T24] audit: type=1326 audit(1721742218.050:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 113.419874][ T52] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 113.587278][ T1478] 9pnet: Insufficient options for proto=fd [ 113.736548][ T52] usb 2-1: USB disconnect, device number 5 [ 114.925635][ T1500] netlink: 176 bytes leftover after parsing attributes in process `syz.3.331'. [ 115.797482][ T1494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'. [ 115.817221][ T1494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 115.846068][ T1494] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.865127][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.873951][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.909319][ T1510] device pim6reg1 entered promiscuous mode [ 116.145937][ T1513] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.081299][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.126240][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.164786][ T1511] device bridge_slave_0 entered promiscuous mode [ 117.174354][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.182380][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.192369][ T1511] device bridge_slave_1 entered promiscuous mode [ 117.208901][ T1524] tipc: Started in network mode [ 117.216482][ T1524] tipc: Own node identity 1, cluster identity 4711 [ 117.231775][ T1524] tipc: 32-bit node address hash set to 1 [ 117.600990][ T1532] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 117.618777][ T1532] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 117.633722][ T1532] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 117.651771][ T1532] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 117.661378][ T1532] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 118.278898][ T110] bridge0: port 3(erspan0) entered disabled state [ 118.308033][ T110] device erspan0 left promiscuous mode [ 118.313714][ T110] bridge0: port 3(erspan0) entered disabled state [ 118.345211][ T310] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.436285][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.445270][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.473733][ T1535] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.474685][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.500699][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.510191][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.519483][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.530178][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.542060][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.555149][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.568981][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.606207][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.626633][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.655796][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.701252][ T110] device bridge_slave_1 left promiscuous mode [ 118.708165][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.717637][ T110] device bridge_slave_0 left promiscuous mode [ 118.724802][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.736209][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.756071][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.768862][ T110] device veth1_macvtap left promiscuous mode [ 118.774864][ T110] device veth0_vlan left promiscuous mode [ 118.775461][ T310] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 118.810002][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.831109][ T310] usb 5-1: config 0 descriptor?? [ 118.912094][ T1528] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 118.929127][ T1528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.043502][ T1528] F2FS-fs (loop3): invalid crc value [ 119.083747][ T1528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.117852][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.126776][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.162446][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.173451][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.312523][ T1551] netlink: 176 bytes leftover after parsing attributes in process `syz.2.348'. [ 119.725873][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.916622][ T1528] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.924976][ T1528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.940658][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.958892][ T1511] device veth0_vlan entered promiscuous mode [ 119.969912][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.979000][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.998400][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.007644][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.019421][ T1511] device veth1_macvtap entered promiscuous mode [ 120.035907][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.044648][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.055675][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.085568][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.091189][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 120.091225][ T24] audit: type=1400 audit(1721742225.110:380): avc: denied { getopt } for pid=1554 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.123123][ T310] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 120.144217][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.391923][ T900] usb 5-1: USB disconnect, device number 9 [ 120.936551][ T319] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.478629][ T24] audit: type=1326 audit(1721742226.520:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174bccaf19 code=0x7ffc0000 [ 121.519662][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 121.559376][ T24] audit: type=1326 audit(1721742226.550:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7f174bccaf19 code=0x7ffc0000 [ 121.642777][ T1558] netlink: 44 bytes leftover after parsing attributes in process `syz.2.350'. [ 121.647667][ T24] audit: type=1326 audit(1721742226.550:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174bccaf19 code=0x7ffc0000 [ 121.680993][ T319] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 121.697596][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 121.716713][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.730526][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.740715][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.769996][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.789155][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.799731][ T319] usb 1-1: SerialNumber: syz [ 121.858433][ T319] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 122.260191][ T1563] raw-gadget.0 gadget: fail, usb_ep_set_halt returned -11 [ 122.275766][ T24] audit: type=1400 audit(1721742227.310:384): avc: denied { execute_no_trans } for pid=1593 comm="syz.2.361" path="/53/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.287777][ T319] usb 1-1: USB disconnect, device number 8 [ 122.338788][ T24] audit: type=1326 audit(1721742227.360:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1593 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 122.365309][ T24] audit: type=1326 audit(1721742227.370:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1593 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 122.686123][ T52] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.696207][ T900] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.006084][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 123.016104][ T900] usb 5-1: Using ep0 maxpacket: 8 [ 123.236536][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.307270][ T900] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 123.334469][ T900] usb 5-1: config 135 has an invalid interface descriptor of length 4, skipping [ 123.349919][ T900] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 123.362547][ T52] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 123.379026][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 123.389425][ T900] usb 5-1: config 135 has no interface number 0 [ 123.399026][ T900] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.508322][ T52] usb 4-1: SerialNumber: syz [ 123.584531][ T52] usb 4-1: config 0 descriptor?? [ 123.831280][ T24] audit: type=1326 audit(1721742228.870:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1610 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 123.865672][ T24] audit: type=1326 audit(1721742228.900:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1610 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 123.900031][ T24] audit: type=1326 audit(1721742228.930:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1610 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7f9919ad1f19 code=0x7ffc0000 [ 123.944241][ T1613] capability: warning: `syz.2.367' uses deprecated v2 capabilities in a way that may be insecure [ 123.956237][ T900] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 123.981922][ T900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.003844][ T900] usb 5-1: Product: syz [ 124.009533][ T900] usb 5-1: Manufacturer: syz [ 124.014213][ T900] usb 5-1: SerialNumber: syz [ 124.116694][ T1619] netlink: 56 bytes leftover after parsing attributes in process `syz.0.368'. [ 124.138443][ T1619] xt_time: unknown flags 0xc [ 124.916177][ T52] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 124.923203][ T52] uvcvideo: No valid video chain found. [ 124.934486][ T52] usb 4-1: USB disconnect, device number 9 [ 125.031276][ T319] usb 5-1: USB disconnect, device number 10 [ 125.232731][ T1624] attempt to access beyond end of device [ 125.232731][ T1624] loop0: rw=2049, want=1041, limit=128 [ 125.274542][ T1623] attempt to access beyond end of device [ 125.274542][ T1623] loop0: rw=524288, want=369, limit=128 [ 125.287698][ T1624] attempt to access beyond end of device [ 125.287698][ T1624] loop0: rw=0, want=217, limit=128 [ 125.298830][ T1624] attempt to access beyond end of device [ 125.298830][ T1624] loop0: rw=0, want=217, limit=128 [ 125.311926][ T1624] attempt to access beyond end of device [ 125.311926][ T1624] loop0: rw=0, want=217, limit=128 [ 125.325769][ T1624] attempt to access beyond end of device [ 125.325769][ T1624] loop0: rw=0, want=217, limit=128 [ 125.458333][ T1623] attempt to access beyond end of device [ 125.458333][ T1623] loop0: rw=0, want=161, limit=128 [ 125.489446][ T1623] attempt to access beyond end of device [ 125.489446][ T1623] loop0: rw=0, want=161, limit=128 [ 125.507095][ T1623] attempt to access beyond end of device [ 125.507095][ T1623] loop0: rw=0, want=161, limit=128 [ 125.519613][ T1623] attempt to access beyond end of device [ 125.519613][ T1623] loop0: rw=0, want=161, limit=128 [ 125.868762][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 125.868818][ T24] audit: type=1400 audit(1721742230.900:391): avc: denied { connect } for pid=1623 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.198769][ T1640] EXT4-fs (loop4): Unrecognized mount option "subj_role=(@" or missing value [ 126.212158][ T1640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.524422][ T24] audit: type=1400 audit(1721742231.560:392): avc: denied { map } for pid=1645 comm="syz.2.376" path="socket:[21465]" dev="sockfs" ino=21465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 126.693587][ T24] audit: type=1400 audit(1721742231.730:393): avc: denied { read } for pid=1651 comm="syz.4.378" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.792986][ T24] audit: type=1400 audit(1721742231.730:394): avc: denied { open } for pid=1651 comm="syz.4.378" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.663458][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 127.674816][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 127.677975][ T24] audit: type=1326 audit(1721742232.720:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 127.712869][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 127.715389][ T24] audit: type=1326 audit(1721742232.750:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 127.805099][ T1668] netlink: 56 bytes leftover after parsing attributes in process `syz.3.381'. [ 127.826046][ T1668] xt_time: unknown flags 0xc [ 128.033653][ T24] audit: type=1326 audit(1721742232.750:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 128.098641][ T1661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.346261][ T15] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.357142][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.406786][ T24] audit: type=1326 audit(1721742232.750:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 128.453295][ T1661] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #3: comm syz.2.379: mark_inode_dirty error [ 128.510571][ T24] audit: type=1326 audit(1721742232.750:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 128.535007][ T24] audit: type=1326 audit(1721742232.800:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 128.560870][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.573861][ T1661] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.379: mark_inode_dirty error [ 128.585978][ T1661] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.379: Failed to acquire dquot type 0 [ 128.619778][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.628793][ T1661] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #16: comm syz.2.379: mark_inode_dirty error [ 128.647973][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 128.703438][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.711959][ T1661] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.379: mark_inode_dirty error [ 128.724601][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.733266][ T1661] EXT4-fs error (device loop2) in ext4_orphan_del:3246: error 27 [ 128.742196][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 128.750701][ T1661] EXT4-fs error (device loop2): ext4_truncate:4361: inode #16: comm syz.2.379: mark_inode_dirty error [ 128.762952][ T1661] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 128.771976][ T1661] EXT4-fs (loop2): 1 truncate cleaned up [ 128.781076][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 128.794076][ T1661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 128.803863][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 128.814137][ T1661] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 128.824510][ T15] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 128.870181][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.920186][ T15] usb 1-1: config 0 descriptor?? [ 128.938745][ T1684] syz.3.387[1684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.938867][ T1684] syz.3.387[1684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.969309][ T1695] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.388: casefold flag without casefold feature [ 129.998674][ T1695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.388: missing EA_INODE flag [ 130.012076][ T1695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.388: error while reading EA inode 12 err=-117 [ 130.026293][ T1695] EXT4-fs (loop2): 1 orphan inode deleted [ 130.032325][ T1695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 130.069283][ T1663] udc-core: couldn't find an available UDC or it's busy [ 130.082007][ T1663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.103590][ T1663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 130.167108][ T15] hid (null): bogus close delimiter [ 130.181730][ T15] hid (null): invalid report_size 29797 [ 130.199885][ T15] hid (null): invalid report_count 58028 [ 130.211905][ T15] hid (null): unknown global tag 0xd [ 130.237988][ T1698] handle_bad_sector: 200 callbacks suppressed [ 130.238017][ T1698] attempt to access beyond end of device [ 130.238017][ T1698] loop4: rw=0, want=161, limit=128 [ 130.241042][ T15] hid-generic 0003:0158:0100.0015: unknown main item tag 0x0 [ 130.245448][ T1698] attempt to access beyond end of device [ 130.245448][ T1698] loop4: rw=0, want=161, limit=128 [ 130.276246][ T15] hid-generic 0003:0158:0100.0015: unknown main item tag 0x0 [ 130.278244][ T1698] attempt to access beyond end of device [ 130.278244][ T1698] loop4: rw=0, want=161, limit=128 [ 130.283814][ T15] hid-generic 0003:0158:0100.0015: bogus close delimiter [ 130.296338][ T1698] attempt to access beyond end of device [ 130.296338][ T1698] loop4: rw=0, want=161, limit=128 [ 130.315812][ T1698] attempt to access beyond end of device [ 130.315812][ T1698] loop4: rw=0, want=161, limit=128 [ 130.320732][ T15] hid-generic 0003:0158:0100.0015: item 0 0 2 10 parsing failed [ 130.335796][ T1698] attempt to access beyond end of device [ 130.335796][ T1698] loop4: rw=0, want=161, limit=128 [ 130.336441][ T15] hid-generic: probe of 0003:0158:0100.0015 failed with error -22 [ 130.348971][ T1698] attempt to access beyond end of device [ 130.348971][ T1698] loop4: rw=0, want=161, limit=128 [ 130.374478][ T1698] attempt to access beyond end of device [ 130.374478][ T1698] loop4: rw=0, want=161, limit=128 [ 130.386476][ T1698] attempt to access beyond end of device [ 130.386476][ T1698] loop4: rw=0, want=161, limit=128 [ 130.398332][ T1698] attempt to access beyond end of device [ 130.398332][ T1698] loop4: rw=0, want=161, limit=128 [ 130.473221][ T1663] udc-core: couldn't find an available UDC or it's busy [ 130.487148][ T1663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.531242][ T15] usb 1-1: USB disconnect, device number 9 [ 130.560126][ T1711] netlink: 56 bytes leftover after parsing attributes in process `syz.2.394'. [ 130.580045][ T1711] xt_time: unknown flags 0xc [ 131.339381][ T24] kauditd_printk_skb: 100 callbacks suppressed [ 131.339417][ T24] audit: type=1326 audit(1721742236.380:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 131.458440][ T24] audit: type=1326 audit(1721742236.380:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 131.517994][ T24] audit: type=1326 audit(1721742236.380:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 131.588618][ T24] audit: type=1326 audit(1721742236.380:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 131.614160][ T24] audit: type=1326 audit(1721742236.380:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 131.639728][ T24] audit: type=1326 audit(1721742236.380:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 132.373293][ T1728] syz.4.398[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.373416][ T1728] syz.4.398[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.353084][ T24] audit: type=1326 audit(1721742236.380:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 133.427397][ T24] audit: type=1326 audit(1721742236.380:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 134.336493][ T24] audit: type=1326 audit(1721742236.380:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 134.420274][ T24] audit: type=1326 audit(1721742236.390:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 134.432010][ T1738] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.402: casefold flag without casefold feature [ 134.458981][ T1738] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.402: missing EA_INODE flag [ 134.476332][ T1738] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.402: error while reading EA inode 12 err=-117 [ 134.493076][ T1738] EXT4-fs (loop4): 1 orphan inode deleted [ 134.499543][ T1738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 134.685274][ T1740] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.693062][ T1740] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.727319][ T1740] device bridge_slave_0 entered promiscuous mode [ 134.752544][ T1740] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.762074][ T1740] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.777194][ T1740] device bridge_slave_1 entered promiscuous mode [ 135.828682][ T1740] device veth0_vlan entered promiscuous mode [ 135.854252][ T1740] device veth1_macvtap entered promiscuous mode [ 135.930399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.943703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.968654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.128805][ T614] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.148000][ T614] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.671564][ T15] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.680939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.694263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.705037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.721663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.733958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.743420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.759409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.770760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.780408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.792955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.803557][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.812228][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.820746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.834650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.845174][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.855594][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.868823][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.907029][ T1559] device bridge_slave_1 left promiscuous mode [ 136.920578][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.930000][ T1559] device bridge_slave_0 left promiscuous mode [ 136.937281][ T15] usb 3-1: Using ep0 maxpacket: 8 [ 136.942855][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.953910][ T1559] device veth1_macvtap left promiscuous mode [ 136.961636][ T1559] device veth0_vlan left promiscuous mode [ 137.024805][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 137.024854][ T24] audit: type=1326 audit(1721742242.060:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.060222][ T24] audit: type=1326 audit(1721742242.060:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.097968][ T15] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.110926][ T24] audit: type=1326 audit(1721742242.060:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.136638][ T24] audit: type=1326 audit(1721742242.060:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.162915][ T24] audit: type=1326 audit(1721742242.060:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.188480][ T24] audit: type=1326 audit(1721742242.060:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.214422][ T24] audit: type=1326 audit(1721742242.060:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.238755][ T15] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 137.242420][ T24] audit: type=1326 audit(1721742242.060:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.250932][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 137.286767][ T15] usb 3-1: SerialNumber: syz [ 137.293469][ T15] usb 3-1: config 0 descriptor?? [ 137.299748][ T24] audit: type=1326 audit(1721742242.060:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.331417][ T24] audit: type=1326 audit(1721742242.060:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2965b63f19 code=0x7ffc0000 [ 137.416098][ T480] Bluetooth: hci1: sending frame failed (-49) [ 137.606141][ T15] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 137.613736][ T15] uvcvideo: No valid video chain found. [ 137.643092][ T15] usb 3-1: USB disconnect, device number 8 [ 138.156098][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 138.236347][ T480] Bluetooth: hci0: sending frame failed (-49) [ 138.911980][ T1816] device pim6reg1 entered promiscuous mode [ 140.563184][ T15] Bluetooth: hci1: command 0x1003 tx timeout [ 140.571891][ T900] Bluetooth: hci0: command 0x1001 tx timeout [ 140.586148][ T480] Bluetooth: hci0: sending frame failed (-49) [ 140.805293][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 140.843445][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 140.853422][ T480] Bluetooth: hci1: sending frame failed (-49) [ 140.917643][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 140.950307][ T1833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 140.961486][ T110] tipc: Left network mode [ 140.971095][ T1833] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 141.072329][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.083490][ T1831] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #3: comm syz.0.433: mark_inode_dirty error [ 141.099978][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.102121][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.117016][ T1836] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.125239][ T1836] device bridge_slave_0 entered promiscuous mode [ 141.126601][ T1831] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #3: comm syz.0.433: mark_inode_dirty error [ 141.149861][ T1831] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.433: Failed to acquire dquot type 0 [ 141.152161][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.164429][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.168814][ T1836] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.180197][ T1831] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #16: comm syz.0.433: mark_inode_dirty error [ 141.188504][ T1836] device bridge_slave_1 entered promiscuous mode [ 141.200526][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.218791][ T1831] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.433: mark_inode_dirty error [ 141.232219][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.242462][ T1831] EXT4-fs error (device loop0) in ext4_orphan_del:3246: error 27 [ 141.254355][ T1831] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 141.264521][ T1831] EXT4-fs error (device loop0): ext4_truncate:4361: inode #16: comm syz.0.433: mark_inode_dirty error [ 141.292599][ T1831] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 141.312095][ T1831] EXT4-fs (loop0): 1 truncate cleaned up [ 141.321033][ T1831] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 141.330838][ T1831] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 141.402036][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.409701][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.417718][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.425147][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.491688][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.501210][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.517161][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.537160][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.547920][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.556253][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.564025][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.574179][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.581945][ T900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.610457][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.621675][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.663723][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.682168][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.713996][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.723247][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.733245][ T1836] device veth0_vlan entered promiscuous mode [ 141.742100][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.760856][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.788413][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.797839][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.839754][ T1836] device veth1_macvtap entered promiscuous mode [ 141.854077][ T110] device bridge_slave_1 left promiscuous mode [ 141.863229][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.881368][ T110] device bridge_slave_0 left promiscuous mode [ 141.896432][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.914134][ T110] device veth1_macvtap left promiscuous mode [ 141.920886][ T110] device veth0_vlan left promiscuous mode [ 142.636473][ T52] Bluetooth: hci0: command 0x1009 tx timeout [ 143.051160][ T52] Bluetooth: hci1: command 0x1001 tx timeout [ 143.060286][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.070430][ T480] Bluetooth: hci1: sending frame failed (-49) [ 143.077823][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.087410][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.098934][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.109751][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.286365][ T1860] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 143.298365][ T1860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.307724][ T1860] F2FS-fs (loop2): Unrecognized mount option "0x0000000000000003" or missing value [ 143.429885][ T24] kauditd_printk_skb: 42 callbacks suppressed [ 143.429920][ T24] audit: type=1326 audit(1721742248.470:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 143.492367][ T24] audit: type=1326 audit(1721742248.500:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 143.521182][ T24] audit: type=1326 audit(1721742248.500:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 143.548147][ T24] audit: type=1326 audit(1721742248.500:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 143.573870][ T24] audit: type=1326 audit(1721742248.500:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.254562][ T24] audit: type=1326 audit(1721742248.500:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.329131][ T24] audit: type=1326 audit(1721742248.500:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.457838][ T24] audit: type=1326 audit(1721742248.500:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.491739][ T24] audit: type=1326 audit(1721742248.510:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.529060][ T24] audit: type=1326 audit(1721742248.510:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094f89af19 code=0x7ffc0000 [ 144.662975][ T1902] netlink: 68 bytes leftover after parsing attributes in process `syz.3.453'. [ 144.672477][ T15] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.694138][ T1901] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 144.738471][ T1902] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,bsdgroups,,errors=continue [ 144.750499][ T1902] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 145.116529][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 145.706954][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.735484][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.751915][ T15] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 145.776214][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.805202][ T15] usb 3-1: config 0 descriptor?? [ 145.911858][ T1919] kernel read not supported for file /policy (pid: 1919 comm: syz.0.462) [ 146.007477][ T1919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 146.016160][ T1919] System zones: 0-2, 18-18, 34-35 [ 146.022723][ T1919] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue [ 146.035023][ T1919] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 146.044553][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.052851][ T1920] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.063858][ T1914] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 146.077581][ T1920] device bridge_slave_0 entered promiscuous mode [ 146.083965][ T1914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.084064][ T1914] F2FS-fs (loop3): Unrecognized mount option "0x0000000000000003" or missing value [ 146.107577][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.123996][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.132294][ T1920] device bridge_slave_1 entered promiscuous mode [ 146.198406][ T1928] incfs: mount failed -22 [ 146.242404][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.249430][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.256870][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.263757][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.298218][ T15] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 146.305705][ T15] holtek_kbd 0003:04D9:A055.0016: item fetching failed at offset 3/5 [ 146.315006][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.324310][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.326822][ T15] holtek_kbd: probe of 0003:04D9:A055.0016 failed with error -22 [ 146.344230][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.364286][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.388525][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.397404][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.404422][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.531115][ T15] usb 3-1: USB disconnect, device number 9 [ 146.601406][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.610765][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.617874][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.841749][ T901] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.501300][ T1920] device veth0_vlan entered promiscuous mode [ 147.517696][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.528152][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.538879][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.553604][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.576993][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.586465][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.596401][ T901] usb 1-1: device descriptor read/64, error -71 [ 147.718362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.732274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.770562][ T1920] device veth1_macvtap entered promiscuous mode [ 147.811397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.820619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.851933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.932348][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.942515][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.051033][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.071828][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.088358][ T1933] device bridge_slave_0 entered promiscuous mode [ 148.156405][ T901] usb 1-1: device descriptor read/64, error -71 [ 148.230937][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.247116][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.437592][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 148.437644][ T24] audit: type=1326 audit(1721742253.470:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 148.475871][ T1933] device bridge_slave_1 entered promiscuous mode [ 148.536243][ T901] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.568889][ T1953] tipc: Started in network mode [ 148.574322][ T1953] tipc: Own node identity ac1414aa, cluster identity 4711 [ 148.583055][ T1953] tipc: New replicast peer: 100.1.1.1 [ 148.589921][ T1953] tipc: Enabled bearer , priority 10 [ 148.921792][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 148.987175][ T24] audit: type=1326 audit(1721742253.540:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.017340][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 149.055062][ T24] audit: type=1326 audit(1721742253.550:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.085031][ T24] audit: type=1326 audit(1721742253.550:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.112646][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 149.278281][ T24] audit: type=1326 audit(1721742253.570:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.456841][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 149.701761][ T24] audit: type=1326 audit(1721742253.590:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.732326][ T20] tipc: 32-bit node address hash set to aa1414ac [ 149.832241][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 149.844916][ T24] audit: type=1326 audit(1721742253.610:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.888360][ T1559] device bridge_slave_1 left promiscuous mode [ 149.907260][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.927947][ T1559] device bridge_slave_0 left promiscuous mode [ 149.934544][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.948876][ T24] audit: type=1326 audit(1721742253.920:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 149.977654][ T24] audit: type=1326 audit(1721742253.920:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 150.003728][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 150.027706][ T1511] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 150.049992][ T1511] EXT4-fs error (device loop0): ext4_map_blocks:600: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 150.067105][ T24] audit: type=1326 audit(1721742253.920:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4077548f19 code=0x7ffc0000 [ 150.068432][ T1559] device veth1_macvtap left promiscuous mode [ 150.109364][ T1559] device veth0_vlan left promiscuous mode [ 150.543988][ T1975] netem: incorrect ge model size [ 150.552319][ T1975] netem: change failed [ 150.740050][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.758296][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.788393][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.798891][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.810072][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.817286][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.825580][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.835165][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.844532][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.852113][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.871659][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.893516][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.935418][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.968415][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.020549][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.059768][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.073711][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.088112][ T1986] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 151.096625][ T1986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 151.107708][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.155053][ T1933] device veth0_vlan entered promiscuous mode [ 151.181884][ T1933] device veth1_macvtap entered promiscuous mode [ 151.195471][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.277285][ T1992] input: syz0 as /devices/virtual/input/input9 [ 151.304150][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.317303][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.327483][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.336831][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.354580][ T1994] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 151.399375][ T1994] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038 (0x7fffffff) [ 151.856292][ T312] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.190934][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 152.233672][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.253407][ T1984] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.263692][ T1984] device bridge_slave_0 entered promiscuous mode [ 152.274543][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.283653][ T1984] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.292481][ T1984] device bridge_slave_1 entered promiscuous mode [ 152.316330][ T312] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 152.546277][ T900] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.967044][ T900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.030721][ T900] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.163679][ T900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.166978][ T312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.220283][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.236511][ T900] usb 4-1: config 0 descriptor?? [ 153.252142][ T312] usb 5-1: SerialNumber: syz [ 153.298153][ T312] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 153.348077][ T1559] device bridge_slave_1 left promiscuous mode [ 153.355624][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.384509][ T1559] device bridge_slave_0 left promiscuous mode [ 153.394273][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.426736][ T1559] device bridge_slave_1 left promiscuous mode [ 153.433439][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.463045][ T1559] device bridge_slave_0 left promiscuous mode [ 153.482453][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.516485][ T1559] device veth1_macvtap left promiscuous mode [ 153.522505][ T1559] device veth0_vlan left promiscuous mode [ 153.556860][ T1559] device veth1_macvtap left promiscuous mode [ 153.566810][ T1559] device veth0_vlan left promiscuous mode [ 153.669957][ T2025] 9pnet: Insufficient options for proto=fd [ 153.770699][ T900] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 154.017783][ T900] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0017/input/input10 [ 154.264172][ T1997] raw-gadget.0 gadget: fail, usb_ep_set_halt returned -11 [ 154.298031][ T20] usb 5-1: USB disconnect, device number 11 [ 154.402749][ T900] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 154.678486][ T2030] erofs: (device loop2): mounted with root inode @ nid 36. [ 154.696542][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 154.696572][ T24] audit: type=1400 audit(1721742259.730:664): avc: denied { write } for pid=2029 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.719649][ T2030] request_module fs-v7 succeeded, but still no fs? [ 155.163936][ T312] usb 4-1: USB disconnect, device number 10 [ 156.019363][ T2051] tipc: Started in network mode [ 156.024239][ T2051] tipc: Own node identity ac1414aa, cluster identity 4711 [ 156.031870][ T2051] tipc: New replicast peer: 100.1.1.1 [ 156.037524][ T2051] tipc: Enabled bearer , priority 10 [ 156.175774][ T24] audit: type=1400 audit(1721742261.210:665): avc: denied { connect } for pid=2056 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.202847][ T1786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.234848][ T1786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.380507][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.396115][ T24] audit: type=1400 audit(1721742261.410:666): avc: denied { write } for pid=2056 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.478433][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.614006][ T2066] 9pnet: Insufficient options for proto=fd [ 157.056215][ T901] tipc: 32-bit node address hash set to aa1414ac [ 157.290929][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.298230][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.439259][ T1786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.456858][ T1786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.465837][ T1786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.487952][ T1786] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.495286][ T1786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.536636][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.547221][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.583952][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.596851][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.607499][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.617577][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.644375][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.653715][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.666867][ T1984] device veth0_vlan entered promiscuous mode [ 157.674909][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.684864][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.721910][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.741209][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.753527][ T1984] device veth1_macvtap entered promiscuous mode [ 157.798253][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.812570][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.832814][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.856177][ T5] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.880883][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.890031][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.993350][ T2084] cgroup2: Unknown parameter 'smackfstransmute' [ 158.216352][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.236159][ T5] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.266058][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.292521][ T5] usb 5-1: config 0 descriptor?? [ 158.671479][ T2093] FAT-fs (loop2): Unrecognized mount option "shortname=l0¦-Kø" or missing value [ 159.238471][ T5] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 159.276194][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input11 [ 159.394032][ T5] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 159.678714][ T5] usb 5-1: USB disconnect, device number 12 [ 160.744951][ T2114] kvm: emulating exchange as write [ 160.886914][ T24] audit: type=1400 audit(1721742265.930:667): avc: denied { mounton } for pid=2118 comm="syz.4.520" path="/14/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 161.052673][ T2127] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.140962][ T2127] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 161.289379][ T2127] EXT4-fs (loop2): Remounting filesystem read-only [ 161.297845][ T2127] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.523: invalid indirect mapped block 1 (level 1) [ 161.312397][ T2127] EXT4-fs (loop2): 1 truncate cleaned up [ 161.319317][ T2127] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock, [ 161.387109][ T2134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 161.397331][ T2134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 161.600171][ T2140] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.246328][ T24] audit: type=1400 audit(1721742266.800:668): avc: denied { nlmsg_read } for pid=2132 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.626995][ T20] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.151081][ T317] tipc: Disabling bearer [ 163.157347][ T317] tipc: Left network mode [ 163.376791][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 163.505885][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 163.872437][ T2159] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.902562][ T2159] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.117073][ T2159] device bridge_slave_0 entered promiscuous mode [ 164.130521][ T2159] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.356085][ T2159] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.375956][ T2159] device bridge_slave_1 entered promiscuous mode [ 165.202086][ T20] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 165.216082][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.224305][ T20] usb 1-1: Product: syz [ 165.228712][ T20] usb 1-1: Manufacturer: syz [ 165.233702][ T20] usb 1-1: SerialNumber: syz [ 165.260935][ T20] usb 1-1: config 0 descriptor?? [ 165.375352][ T2172] device syzkaller0 entered promiscuous mode [ 165.487781][ T2177] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 165.499322][ T20] usb 1-1: can't set config #0, error -71 [ 165.510225][ T20] usb 1-1: USB disconnect, device number 12 [ 165.522626][ T2177] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,quota,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue [ 165.666541][ T2185] tmpfs: Cannot retroactively limit size [ 165.686409][ T2185] 9pnet: Could not find request transport: rdma [ 166.608670][ T2197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.540'. [ 166.632184][ T2197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.540'. [ 166.747628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.767231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.861856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.877669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.896816][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.904376][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.987954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.000471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.011093][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.020329][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.033277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.043769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.054475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.065690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.076041][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.126127][ T317] device bridge_slave_1 left promiscuous mode [ 168.144423][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.176894][ T24] audit: type=1400 audit(1721742273.220:669): avc: denied { setopt } for pid=2212 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.216505][ T317] device bridge_slave_0 left promiscuous mode [ 168.223395][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.489550][ T317] device veth1_macvtap left promiscuous mode [ 168.513088][ T317] device veth0_vlan left promiscuous mode [ 169.726120][ T24] audit: type=1400 audit(1721742274.740:670): avc: denied { listen } for pid=2225 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.781121][ T24] audit: type=1400 audit(1721742274.750:671): avc: denied { create } for pid=2225 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.848453][ T24] audit: type=1400 audit(1721742274.750:672): avc: denied { connect } for pid=2225 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.872844][ T24] audit: type=1400 audit(1721742274.750:673): avc: denied { getopt } for pid=2225 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.900106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.917583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.004984][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.069184][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.088284][ T2159] device veth0_vlan entered promiscuous mode [ 171.096651][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.104933][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.143459][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.154888][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.223159][ T2235] netlink: 165 bytes leftover after parsing attributes in process `syz.2.550'. [ 171.245638][ T2159] device veth1_macvtap entered promiscuous mode [ 171.271004][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.280592][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.302863][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.886654][ T2256] exfat: Deprecated parameter 'utf8' [ 171.892131][ T2256] exfat: Deprecated parameter 'namecase' [ 171.907903][ T2256] exfat: Deprecated parameter 'utf8' [ 171.995854][ T2256] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 172.042911][ T2256] syz.1.556[2256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.043030][ T2256] syz.1.556[2256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.139113][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.159331][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.928400][ T2289] device pim6reg1 entered promiscuous mode [ 174.263679][ T2311] syz.0.572[2311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.263802][ T2311] syz.0.572[2311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.591651][ T15] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.770188][ T24] audit: type=1400 audit(1721742279.810:674): avc: denied { getopt } for pid=2315 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.838281][ T2318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 174.873347][ T2318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 174.966232][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.989851][ T15] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.001753][ T24] audit: type=1400 audit(1721742280.040:675): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.060619][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.088095][ T15] usb 5-1: config 0 descriptor?? [ 175.534979][ T2328] rtc_cmos 00:00: Alarms can be up to one day in the future [ 176.050758][ T15] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 176.068540][ T15] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input12 [ 176.152465][ T15] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 176.183036][ T2333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.250148][ T2339] cgroup2: Unknown parameter 'smackfstransmute' [ 176.265779][ T2333] EXT4-fs (loop3): 1 orphan inode deleted [ 176.271538][ T2333] EXT4-fs (loop3): 1 truncate cleaned up [ 176.277588][ T2333] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,quota,journal_ioprio=0x0000000000000001,,errors=continue [ 176.323241][ T2337] EXT4-fs (loop2): 1 orphan inode deleted [ 176.329169][ T2333] EXT4-fs error (device loop3): ext4_search_dir:1520: inode #12: block 7: comm syz.3.580: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 176.366341][ T2337] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 176.421187][ T2333] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #12: block 7: comm syz.3.580: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 176.440793][ T2337] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038 (0x7fffffff) [ 176.780006][ T2360] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 176.804769][ T2360] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.589: iget: bad i_size value: -67835469387268086 [ 176.819165][ T308] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.849587][ T2360] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.589: couldn't read orphan inode 15 (err -117) [ 176.884878][ T2360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 176.906795][ T2360] ext2 filesystem being mounted at /121/file0 supports timestamps until 2038 (0x7fffffff) [ 177.144383][ T24] audit: type=1400 audit(1721742282.180:676): avc: denied { connect } for pid=2367 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.335823][ T2369] 9pnet: Insufficient options for proto=fd [ 177.507528][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.001202][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.033025][ T1786] usb 5-1: USB disconnect, device number 13 [ 178.122207][ T308] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.132841][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.237953][ T2374] exfat: Deprecated parameter 'utf8' [ 178.254144][ T2374] exfat: Deprecated parameter 'namecase' [ 178.284095][ T2374] exfat: Deprecated parameter 'utf8' [ 178.336981][ T308] usb 1-1: config 0 descriptor?? [ 178.673229][ T2374] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 179.313569][ T2374] syz.4.593[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.313691][ T2374] syz.4.593[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.850756][ T2381] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.873664][ T2381] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.883783][ T2381] device bridge_slave_0 entered promiscuous mode [ 180.891994][ T2381] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.901961][ T2381] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.930346][ T2381] device bridge_slave_1 entered promiscuous mode [ 180.976930][ T2396] FAT-fs (loop1): Unrecognized mount option "uni_xlatå=0" or missing value [ 181.057884][ T317] device bridge_slave_1 left promiscuous mode [ 181.064760][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.101702][ T317] device veth1_macvtap left promiscuous mode [ 181.121186][ T317] device veth0_vlan left promiscuous mode [ 181.167650][ T308] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 181.304010][ T308] usb 1-1: USB disconnect, device number 13 [ 182.116226][ T1786] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 182.456418][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.779466][ T2411] EXT4-fs (loop1): Invalid commit interval 1836789753, must be smaller than 21474836 [ 182.790734][ T24] audit: type=1400 audit(1721742287.600:677): avc: denied { mounton } for pid=2408 comm="syz.0.604" path="/17/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 183.170115][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.246898][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.262022][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.275436][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.282755][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.292569][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.303066][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.313523][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.321184][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.340108][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.361223][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.436221][ T1786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.462889][ T1786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.474318][ T1786] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 183.484869][ T1786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.501313][ T1786] usb 4-1: config 0 descriptor?? [ 183.539928][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.548579][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.557385][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.602249][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.616661][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.287692][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.300226][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.319209][ T2381] device veth0_vlan entered promiscuous mode [ 184.331821][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.340453][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.352993][ T2428] exfat: Deprecated parameter 'utf8' [ 184.361358][ T2428] exfat: Deprecated parameter 'namecase' [ 184.391664][ T2428] exfat: Deprecated parameter 'utf8' [ 184.404762][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.418536][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.437398][ T2428] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 184.480293][ T1786] wacom 0003:056A:0315.001B: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 184.487357][ T2381] device veth1_macvtap entered promiscuous mode [ 184.497507][ T2428] syz.4.610[2428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.497627][ T2428] syz.4.610[2428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.525905][ T1786] wacom 0003:056A:0315.001B: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 184.553867][ T1786] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.001B/input/input13 [ 184.613192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.625560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.690780][ T319] usb 4-1: USB disconnect, device number 11 [ 184.725493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.741641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.549746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.878632][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.885901][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.974863][ T2449] syz.3.615[2449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.974981][ T2449] syz.3.615[2449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.664597][ T2449] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.682958][ T2449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.690202][ T2449] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.697112][ T2449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.796317][ T2449] device bridge0 entered promiscuous mode [ 186.886325][ T20] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 186.968202][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.386736][ T20] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 187.424602][ T20] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 187.537778][ T20] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 187.635717][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 187.774057][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.176108][ T24] audit: type=1326 audit(1721742293.200:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.216109][ T20] usb 2-1: string descriptor 0 read error: -71 [ 188.226148][ T20] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 188.244071][ T24] audit: type=1326 audit(1721742293.250:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.273130][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.287343][ T20] usb 2-1: config 0 descriptor?? [ 188.356337][ T317] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.413515][ T24] audit: type=1326 audit(1721742293.310:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.442283][ T2485] syz.0.629[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.442406][ T2485] syz.0.629[2485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.463565][ T24] audit: type=1326 audit(1721742293.310:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.486200][ T20] usb 2-1: can't set config #0, error -71 [ 188.505304][ T24] audit: type=1326 audit(1721742293.450:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.533885][ T24] audit: type=1326 audit(1721742293.450:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.692521][ T20] usb 2-1: USB disconnect, device number 6 [ 188.707728][ T24] audit: type=1326 audit(1721742293.450:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.748448][ T24] audit: type=1326 audit(1721742293.450:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f9333ba2f19 code=0x7ffc0000 [ 188.850629][ T24] audit: type=1400 audit(1721742293.640:686): avc: denied { map_create } for pid=2475 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.891284][ T24] audit: type=1400 audit(1721742293.640:687): avc: denied { bpf } for pid=2475 comm="syz.4.626" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.082309][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.224485][ T2493] device bridge_slave_1 left promiscuous mode [ 189.231736][ T2493] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.240908][ T2493] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 189.366096][ T319] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.587363][ T20] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 189.599829][ T20] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 189.611409][ T20] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 189.621006][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.646341][ T2483] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.716307][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 190.127411][ T319] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 190.484899][ T1786] Bluetooth: hci0: command 0x1003 tx timeout [ 190.490981][ T391] Bluetooth: hci0: sending frame failed (-49) [ 190.755189][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.765264][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.773767][ T319] usb 1-1: SerialNumber: syz [ 190.817480][ T319] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 191.705599][ T2488] raw-gadget.1 gadget: fail, usb_ep_set_halt returned -11 [ 191.715711][ T319] usb 1-1: USB disconnect, device number 14 [ 191.966257][ T20] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 191.976539][ T20] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input16 [ 191.989393][ T20] usb 2-1: USB disconnect, device number 7 [ 192.116144][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 192.136144][ T1786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.366141][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 192.486259][ T5] usb 5-1: config 0 has an invalid interface number: 255 but max is 7 [ 192.498422][ T5] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 192.507482][ T1786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.520521][ T1786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.531380][ T5] usb 5-1: config 0 has no interface number 0 [ 192.538646][ T1786] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 192.550925][ T1786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.560964][ T312] Bluetooth: hci0: command 0x1001 tx timeout [ 192.567059][ T391] Bluetooth: hci0: sending frame failed (-49) [ 192.579431][ T1786] usb 3-1: config 0 descriptor?? [ 192.726289][ T5] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 192.735307][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.743426][ T5] usb 5-1: Product: syz [ 192.747537][ T5] usb 5-1: Manufacturer: syz [ 192.752175][ T5] usb 5-1: SerialNumber: syz [ 192.766501][ T5] usb 5-1: config 0 descriptor?? [ 192.807763][ T5] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 192.817628][ T5] usb 5-1: Detected FT232RL [ 193.058500][ T1786] zydacron 0003:13EC:0006.001C: unknown main item tag 0x0 [ 193.066582][ T1786] zydacron 0003:13EC:0006.001C: unknown main item tag 0x0 [ 193.073585][ T1786] zydacron 0003:13EC:0006.001C: unknown main item tag 0x0 [ 193.081686][ T1786] zydacron 0003:13EC:0006.001C: unknown main item tag 0x0 [ 193.089282][ T1786] zydacron 0003:13EC:0006.001C: item fetching failed at offset 4/5 [ 193.098426][ T1786] zydacron 0003:13EC:0006.001C: parse failed [ 193.104813][ T1786] zydacron: probe of 0003:13EC:0006.001C failed with error -22 [ 193.136180][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 193.167320][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 193.186260][ T5] ftdi_sio 5-1:0.255: GPIO initialisation failed: -71 [ 193.206920][ T5] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.237003][ T5] usb 5-1: USB disconnect, device number 14 [ 193.255072][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.266684][ T5] ftdi_sio 5-1:0.255: device disconnected [ 193.272886][ T20] usb 3-1: USB disconnect, device number 10 [ 193.510323][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 193.510356][ T24] audit: type=1400 audit(1721742298.550:746): avc: denied { connect } for pid=2539 comm="syz.0.648" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.540766][ T2540] 9pnet: Insufficient options for proto=fd [ 193.547157][ T24] audit: type=1400 audit(1721742298.550:747): avc: denied { setopt } for pid=2539 comm="syz.0.648" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.570134][ T24] audit: type=1400 audit(1721742298.580:748): avc: denied { write } for pid=2539 comm="syz.0.648" path="socket:[26883]" dev="sockfs" ino=26883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.595205][ T24] audit: type=1400 audit(1721742298.580:749): avc: denied { read } for pid=2539 comm="syz.0.648" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.636084][ T52] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.666698][ T24] audit: type=1400 audit(1721742298.710:750): avc: denied { unmount } for pid=2159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 193.834118][ T24] audit: type=1400 audit(1721742298.870:751): avc: denied { setopt } for pid=2550 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.167041][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.191075][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.243019][ T52] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.293978][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.414322][ T52] usb 2-1: config 0 descriptor?? [ 194.708283][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 194.914178][ T24] audit: type=1400 audit(1721742299.950:752): avc: denied { create } for pid=2560 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.935654][ T24] audit: type=1400 audit(1721742299.960:753): avc: denied { write } for pid=2560 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.958232][ T24] audit: type=1400 audit(1721742299.960:754): avc: denied { read } for pid=2560 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.979367][ T24] audit: type=1400 audit(1721742299.970:755): avc: denied { module_request } for pid=2556 comm="syz.0.654" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 195.001394][ T52] hid (null): bogus close delimiter [ 195.186124][ T20] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.206319][ T52] usb 2-1: string descriptor 0 read error: -22 [ 195.534549][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 195.544685][ T2581] overlayfs: missing 'lowerdir' [ 195.555697][ T2582] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 195.592336][ T2582] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 195.657541][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.708724][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 195.746803][ T52] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input17 [ 195.779030][ T20] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 195.885235][ T2582] overlayfs: empty lowerdir [ 195.951082][ T52] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 195.987508][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 196.057862][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.154845][ T52] usb 2-1: USB disconnect, device number 8 [ 196.162313][ T20] usb 5-1: SerialNumber: syz [ 196.186235][ T2561] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 196.207220][ T20] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 196.218710][ T20] usb-storage 5-1:1.0: USB Mass Storage device detected [ 196.287214][ T20] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 196.355482][ T2591] fuse: Bad value for 'fd' [ 196.382870][ T2589] Illegal XDP return value 4294967274, expect packet loss! [ 196.478035][ T2601] udc-core: couldn't find an available UDC or it's busy [ 196.495777][ T2601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.669260][ T2600] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 196.677735][ T2600] System zones: 0-2, 18-18, 34-35 [ 196.685327][ T2600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 196.696395][ T2600] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 196.779735][ T2617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.788904][ T2617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 197.058069][ T308] usb 5-1: USB disconnect, device number 15 [ 197.535960][ T312] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.640338][ T2621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 197.683452][ T2621] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 197.759788][ T2628] EXT4-fs (loop4): Invalid commit interval 1836789753, must be smaller than 21474836 [ 197.946266][ T312] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 197.958994][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.796786][ T308] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.036759][ T312] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.047611][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.057132][ T312] usb 1-1: SerialNumber: syz [ 199.186324][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 199.766492][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 199.788505][ T308] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 199.826074][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.859568][ T9] tipc: Disabling bearer [ 199.874296][ T9] tipc: Left network mode [ 199.878967][ T308] usb 2-1: config 0 descriptor?? [ 199.902847][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 199.902883][ T24] audit: type=1400 audit(1721742304.940:770): avc: denied { mounton } for pid=2643 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 199.940977][ T24] audit: type=1400 audit(1721742304.980:771): avc: denied { mounton } for pid=2643 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 199.968315][ T312] usb 1-1: 0:2 : does not exist [ 200.085103][ T312] usb 1-1: USB disconnect, device number 15 [ 200.147054][ T24] audit: type=1400 audit(1721742305.190:772): avc: denied { write } for pid=2649 comm="syz.2.677" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.238613][ T24] audit: type=1400 audit(1721742305.210:773): avc: denied { add_name } for pid=2649 comm="syz.2.677" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.259958][ T24] audit: type=1400 audit(1721742305.260:774): avc: denied { create } for pid=2649 comm="syz.2.677" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.280927][ T24] audit: type=1400 audit(1721742305.260:775): avc: denied { associate } for pid=2649 comm="syz.2.677" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 200.343192][ T24] audit: type=1400 audit(1721742305.280:776): avc: denied { execute } for pid=2634 comm="syz.1.672" path="/34/hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.931836][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.958223][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.967360][ T2643] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.997251][ T2643] device bridge_slave_0 entered promiscuous mode [ 201.073532][ T24] audit: type=1326 audit(1721742306.110:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2660 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647cb74f19 code=0x7ffc0000 [ 201.134891][ T2643] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.141058][ T24] audit: type=1326 audit(1721742306.170:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2660 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647cb74f19 code=0x7ffc0000 [ 201.143576][ T2643] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.188221][ T2661] overlayfs: failed to resolve './file2': -2 [ 201.203133][ T24] audit: type=1326 audit(1721742306.210:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2660 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f647cb74f19 code=0x7ffc0000 [ 201.207380][ T2643] device bridge_slave_1 entered promiscuous mode [ 201.336341][ T52] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 201.954170][ T2671] udc-core: couldn't find an available UDC or it's busy [ 201.965570][ T2671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.992900][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 202.022080][ T308] hid-generic 0003:0158:0100.001E: unknown main item tag 0x1 [ 202.030247][ T308] hid-generic 0003:0158:0100.001E: unexpected long global item [ 202.045491][ T308] hid-generic: probe of 0003:0158:0100.001E failed with error -22 [ 202.061033][ T2673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.069987][ T2673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.496355][ T312] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 202.542571][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 202.557156][ T308] usb 2-1: USB disconnect, device number 9 [ 202.565908][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 202.578584][ T52] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.588139][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.600997][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.612267][ T52] usb 3-1: config 0 descriptor?? [ 202.617996][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.627054][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.636468][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.636887][ T2659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.645190][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.659379][ T52] hub 3-1:0.0: USB hub found [ 202.665092][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.672828][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.680988][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.688616][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.697087][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.705211][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.712884][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.721173][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.730035][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.739236][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.746251][ T900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.754344][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.775172][ T2643] device veth0_vlan entered promiscuous mode [ 202.795469][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.807112][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.819881][ T9] device bridge_slave_1 left promiscuous mode [ 202.827173][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.846404][ T9] device bridge_slave_0 left promiscuous mode [ 202.852530][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.862642][ T9] device veth1_macvtap left promiscuous mode [ 202.868683][ T9] device veth0_vlan left promiscuous mode [ 202.938355][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.950910][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.957874][ T52] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 202.965963][ T312] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 202.979021][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.988284][ T312] usb 1-1: config 0 descriptor?? [ 203.091134][ T2643] device veth1_macvtap entered promiscuous mode [ 203.107578][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.115436][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.123638][ T900] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.132942][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.144998][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.154020][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.350567][ T52] hid-generic 0003:046D:C314.001F: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 203.686930][ T900] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 203.708441][ T900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.758144][ T900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.801394][ T900] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.997176][ T1482] usb 3-1: USB disconnect, device number 11 [ 204.161954][ T900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.188055][ T900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.197553][ T900] usb 2-1: Product: syz [ 204.202186][ T900] usb 2-1: Manufacturer: syz [ 204.207855][ T900] usb 2-1: SerialNumber: syz [ 204.328260][ T312] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 204.341882][ T312] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 204.350426][ T312] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 204.358994][ T312] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0 [ 204.368500][ T312] zydacron 0003:13EC:0006.0020: item fetching failed at offset 4/5 [ 204.377955][ T312] zydacron 0003:13EC:0006.0020: parse failed [ 204.384360][ T312] zydacron: probe of 0003:13EC:0006.0020 failed with error -22 [ 204.395218][ T312] usb 1-1: USB disconnect, device number 16 [ 204.576400][ T900] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 204.584415][ T900] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 6 bytes [ 204.636123][ T312] Bluetooth: hci0: command 0x1003 tx timeout [ 204.648030][ T391] Bluetooth: hci0: sending frame failed (-49) [ 204.783282][ T900] usb 2-1: USB disconnect, device number 10 [ 205.052509][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.631454][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 205.631488][ T24] audit: type=1326 audit(1721742310.670:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2709 comm="syz.0.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f647cb74f19 code=0x0 [ 205.771646][ T312] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.800775][ T2714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 205.808300][ T2714] EXT4-fs error (device loop1): ext4_quota_enable:6419: comm syz.1.695: Bad quota inum: 11, type: 1 [ 205.826077][ T2714] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 205.843576][ T2714] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 205.851112][ T2714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 205.875527][ T2714] EXT4-fs (loop1): re-mounted. Opts: (null) [ 205.914398][ T2719] device pim6reg1 entered promiscuous mode [ 206.022578][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 206.146332][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.166910][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.191057][ T312] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 206.230317][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.278477][ T312] usb 3-1: config 0 descriptor?? [ 206.300314][ T2737] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,grpjquota=,,errors=continue [ 206.503769][ T2745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.702'. [ 207.425509][ T15] Bluetooth: hci0: command 0x1001 tx timeout [ 207.455406][ T391] Bluetooth: hci0: sending frame failed (-49) [ 207.466158][ T24] audit: type=1400 audit(1721742312.500:828): avc: denied { write } for pid=2736 comm="syz.1.705" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.548292][ T24] audit: type=1400 audit(1721742312.500:829): avc: denied { add_name } for pid=2736 comm="syz.1.705" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.548345][ T24] audit: type=1400 audit(1721742312.500:830): avc: denied { read append open } for pid=2736 comm="syz.1.705" path="/41/file0/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 207.548402][ T24] audit: type=1400 audit(1721742312.530:831): avc: denied { ioctl } for pid=2736 comm="syz.1.705" path="/41/file0/blkio.bfq.avg_queue_size" dev="loop1" ino=18 ioctlcmd=0xaebe scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 207.548447][ T24] audit: type=1400 audit(1721742312.530:832): avc: denied { create } for pid=2736 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.548494][ T24] audit: type=1400 audit(1721742312.540:833): avc: denied { bind } for pid=2736 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.662524][ T24] audit: type=1400 audit(1721742312.690:834): avc: denied { write } for pid=2736 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.668758][ T2756] netlink: 72 bytes leftover after parsing attributes in process `syz.1.705'. [ 207.692942][ T24] audit: type=1400 audit(1721742312.710:835): avc: denied { nlmsg_write } for pid=2736 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.813160][ T24] audit: type=1400 audit(1721742312.850:836): avc: denied { map } for pid=2736 comm="syz.1.705" path="/41/file0/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 207.978128][ T312] lenovo 0003:17EF:6009.0021: item fetching failed at offset 1/5 [ 207.991341][ T312] lenovo 0003:17EF:6009.0021: hid_parse failed [ 207.998782][ T312] lenovo: probe of 0003:17EF:6009.0021 failed with error -22 [ 208.179703][ T308] usb 3-1: USB disconnect, device number 12 [ 208.391413][ T2783] incfs: Error accessing: ./file0. [ 208.399651][ T2783] incfs: mount failed -20 [ 208.527737][ T2787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 209.516194][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 209.543128][ T2805] device pim6reg1 entered promiscuous mode [ 209.824551][ T312] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.214265][ T2813] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 210.366112][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 210.496209][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 210.507735][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 210.595969][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.607989][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.621259][ T312] usb 2-1: config 0 descriptor?? [ 210.646404][ T2803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.667389][ T312] hub 2-1:0.0: USB hub found [ 210.846133][ T901] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.086121][ T901] usb 1-1: Using ep0 maxpacket: 16 [ 211.207837][ T901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.222092][ T901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.235616][ T901] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 211.247607][ T901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.264927][ T901] usb 1-1: config 0 descriptor?? [ 310.685998][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 310.693079][ C0] rcu: 0-...!: (10001 ticks this GP) idle=102/1/0x4000000000000000 softirq=16241/16241 fqs=0 last_accelerate: dccc/03dd dyntick_enabled: 1 [ 310.707075][ C0] (t=10003 jiffies g=19677 q=53) [ 310.712075][ C0] rcu: rcu_preempt kthread starved for 10003 jiffies! g19677 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 310.723597][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 310.733312][ C0] rcu: RCU grace-period kthread stack dump: [ 310.739045][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 310.748335][ C0] Call Trace: [ 310.751695][ C0] __schedule+0xbe6/0x1330 [ 310.756072][ C0] ? release_firmware_map_entry+0x192/0x192 [ 310.761856][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 310.767162][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 310.771836][ C0] schedule+0x13d/0x1d0 [ 310.775822][ C0] schedule_timeout+0x18c/0x360 [ 310.780511][ C0] ? prepare_to_swait_event+0x39f/0x3e0 [ 310.785905][ C0] ? console_conditional_schedule+0x10/0x10 [ 310.791623][ C0] ? run_local_timers+0x160/0x160 [ 310.796490][ C0] ? __note_gp_changes+0x2d8/0x6f0 [ 310.801438][ C0] rcu_gp_kthread+0xefc/0x23a0 [ 310.806151][ C0] ? dump_blkd_tasks+0x7e0/0x7e0 [ 310.810892][ C0] ? rcu_barrier_callback+0x50/0x50 [ 310.815925][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 310.820649][ C0] ? __kasan_check_read+0x11/0x20 [ 310.825473][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 310.830257][ C0] kthread+0x34b/0x3d0 [ 310.834150][ C0] ? rcu_barrier_callback+0x50/0x50 [ 310.839195][ C0] ? kthread_blkcg+0xd0/0xd0 [ 310.843634][ C0] ret_from_fork+0x1f/0x30 [ 310.848236][ C0] NMI backtrace for cpu 0 [ 310.852389][ C0] CPU: 0 PID: 2826 Comm: syz.3.734 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 310.862007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 310.872053][ C0] Call Trace: [ 310.875139][ C0] [ 310.877840][ C0] dump_stack_lvl+0x1e2/0x24b [ 310.882404][ C0] ? panic+0x812/0x812 [ 310.886723][ C0] ? bfq_pos_tree_add_move+0x43b/0x43b [ 310.892001][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 310.897292][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 310.901980][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 310.907881][ C0] dump_stack+0x15/0x17 [ 310.911874][ C0] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 310.917689][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 310.923685][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 310.929612][ C0] rcu_dump_cpu_stacks+0x199/0x2b0 [ 310.934601][ C0] rcu_sched_clock_irq+0xf8a/0x1890 [ 310.939723][ C0] ? rcutree_dead_cpu+0x340/0x340 [ 310.944609][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 310.949610][ C0] update_process_times+0x198/0x200 [ 310.955262][ C0] tick_sched_timer+0x188/0x240 [ 310.959940][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 310.965323][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 310.970376][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 310.975303][ C0] ? clockevents_program_event+0x214/0x2c0 [ 310.981193][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 310.987085][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 310.991902][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 310.997607][ C0] asm_call_irq_on_stack+0xf/0x20 [ 311.002427][ C0] [ 311.005220][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 311.010831][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 311.016612][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x60 [ 311.022585][ C0] Code: 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 8b 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d 66 90 55 48 89 e5 4c 8b 45 08 65 48 8b 15 50 c5 97 7e 65 8b 05 [ 311.042452][ C0] RSP: 0018:ffffc9000095ea38 EFLAGS: 00000246 [ 311.048353][ C0] RAX: ffffffff84988ca9 RBX: 0000000000000005 RCX: 0000000000040000 [ 311.056183][ C0] RDX: ffffc900025a5000 RSI: 000000000003ffff RDI: 0000000000040000 [ 311.064084][ C0] RBP: ffffc9000095ecd0 R08: ffffffff84988c9c R09: ffffed1022280331 [ 311.071881][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 311.079793][ C0] R13: ffff888111401900 R14: 000000005bd14a57 R15: ffffc9000095ee80 [ 311.087773][ C0] ? tipc_sk_rcv+0x17cc/0x1e30 [ 311.092366][ C0] ? tipc_sk_rcv+0x17d9/0x1e30 [ 311.096976][ C0] ? tipc_sk_rcv+0x17d9/0x1e30 [ 311.101574][ C0] ? __stack_depot_save+0x468/0x4d0 [ 311.106690][ C0] ? kasan_set_track+0x5d/0x70 [ 311.111553][ C0] ? kasan_set_track+0x4b/0x70 [ 311.116171][ C0] ? kasan_set_free_info+0x23/0x40 [ 311.121097][ C0] ? __kasan_slab_free+0x11/0x20 [ 311.125874][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 311.131364][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 311.136054][ C0] ? kfree_skbmem+0x104/0x170 [ 311.140666][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 311.145262][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 311.149955][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 311.155156][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 311.159674][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 311.164896][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 311.170002][ C0] ? __fput+0x309/0x760 [ 311.174112][ C0] ? ____fput+0x15/0x20 [ 311.178368][ C0] ? __skb_queue_purge+0x180/0x180 [ 311.183322][ C0] ? bpf_get_current_uid_gid+0xa7/0xf0 [ 311.188690][ C0] ? bpf_trace_run2+0xf4/0x280 [ 311.193293][ C0] tipc_node_xmit+0x34b/0xe30 [ 311.197795][ C0] ? kfree_skbmem+0x104/0x170 [ 311.202317][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 311.207694][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 311.212841][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 311.217628][ C0] ? kfree_skbmem+0x104/0x170 [ 311.222290][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 311.227140][ C0] ? __skb_queue_purge+0x180/0x180 [ 311.232086][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 311.237389][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 311.242002][ C0] ? __skb_queue_purge+0x180/0x180 [ 311.246941][ C0] tipc_node_xmit+0x34b/0xe30 [ 311.251444][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 311.256484][ C0] ? __kernel_text_address+0x9b/0x110 [ 311.261688][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 311.267156][ C0] ? __kasan_check_write+0x14/0x20 [ 311.272100][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 311.277393][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 311.282092][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 311.287236][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 311.291717][ C0] ? __kasan_check_write+0x14/0x20 [ 311.296673][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 311.301539][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 311.306603][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 311.311041][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 311.316220][ C0] ? __skb_queue_purge+0x180/0x180 [ 311.321132][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 311.326713][ C0] tipc_node_xmit+0x34b/0xe30 [ 311.331221][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 311.336699][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 311.341734][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 311.346836][ C0] ? __kasan_check_write+0x14/0x20 [ 311.351792][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 311.357079][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 311.361942][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 311.366981][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 311.371757][ C0] __release_sock+0x148/0x410 [ 311.376286][ C0] release_sock+0x65/0x1b0 [ 311.380517][ C0] tipc_release+0xb6b/0x1440 [ 311.384948][ C0] sock_close+0xdf/0x270 [ 311.389015][ C0] ? sock_mmap+0xa0/0xa0 [ 311.393098][ C0] __fput+0x309/0x760 [ 311.396930][ C0] ____fput+0x15/0x20 [ 311.400801][ C0] task_work_run+0x129/0x190 [ 311.405173][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 311.410210][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 311.415808][ C0] do_syscall_64+0x40/0x70 [ 311.420150][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 311.425864][ C0] RIP: 0033:0x7f0755852f19 [ 311.430123][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.449754][ C0] RSP: 002b:00007f07544d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.458131][ C0] RAX: 00000000000203a0 RBX: 00007f07559e2f60 RCX: 00007f0755852f19 [ 311.465939][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 311.473751][ C0] RBP: 00007f07558c1e68 R08: 0000000000000000 R09: 0000000000000000 [ 311.481563][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.489464][ C0] R13: 000000000000000b R14: 00007f07559e2f60 R15: 00007ffe98fabf68 [ 330.973268][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.3.734:2825] [ 330.981277][ C1] Modules linked in: [ 330.985022][ C1] CPU: 1 PID: 2825 Comm: syz.3.734 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 330.994648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 331.004567][ C1] RIP: 0010:kvm_wait+0xfc/0x150 [ 331.009243][ C1] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 75 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 66 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 331.029372][ C1] RSP: 0018:ffffc90000f5f9e0 EFLAGS: 00000246 [ 331.035534][ C1] RAX: 0000000000000003 RBX: 1ffff920001ebf40 RCX: ffffffff8150b1f4 [ 331.043432][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000f5fa20 [ 331.051508][ C1] RBP: ffffc90000f5fa90 R08: dffffc0000000000 R09: ffffed1022280332 [ 331.059316][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 331.067126][ C1] R13: ffff888111401988 R14: 0000000000000003 R15: 0000000000000246 [ 331.074941][ C1] FS: 0000555555fa4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 331.083714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.090128][ C1] CR2: 0000001b30f1aff8 CR3: 0000000116f58000 CR4: 00000000003506a0 [ 331.098045][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.105865][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.113655][ C1] Call Trace: [ 331.116776][ C1] [ 331.119492][ C1] ? show_regs+0x58/0x60 [ 331.123655][ C1] ? watchdog_timer_fn+0x471/0x590 [ 331.128600][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 331.133732][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 331.139042][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 331.143984][ C1] ? clockevents_program_event+0x214/0x2c0 [ 331.149625][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 331.155533][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 331.160489][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 331.166381][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 331.171386][ C1] [ 331.174190][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 331.179852][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 331.186142][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 331.192183][ C1] ? kvm_wait+0xfc/0x150 [ 331.196239][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 331.202314][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 331.207273][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 331.213342][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 331.219250][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 331.225502][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 331.230282][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 331.235304][ C1] ? memset+0x35/0x40 [ 331.239115][ C1] lock_sock_nested+0x92/0x300 [ 331.243905][ C1] ? locks_remove_posix+0x610/0x610 [ 331.248936][ C1] ? sock_init_data+0xc0/0xc0 [ 331.253550][ C1] ? __kasan_check_read+0x11/0x20 [ 331.258410][ C1] tipc_release+0x57/0x1440 [ 331.262750][ C1] sock_close+0xdf/0x270 [ 331.266825][ C1] ? sock_mmap+0xa0/0xa0 [ 331.270984][ C1] __fput+0x309/0x760 [ 331.274811][ C1] ____fput+0x15/0x20 [ 331.278619][ C1] task_work_run+0x129/0x190 [ 331.283058][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 331.288086][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 331.293556][ C1] do_syscall_64+0x40/0x70 [ 331.297814][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.303528][ C1] RIP: 0033:0x7f0755852f19 [ 331.307790][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.327748][ C1] RSP: 002b:00007ffe98fac048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.335993][ C1] RAX: 0000000000000000 RBX: 00007f07559e4a60 RCX: 00007f0755852f19 [ 331.343808][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.351618][ C1] RBP: 00007f07559e4a60 R08: 0000000000000006 R09: 0000000998fac36f [ 331.359430][ C1] R10: 00000000005fa3e8 R11: 0000000000000246 R12: 00000000000339eb [ 331.367246][ C1] R13: 0000000000000032 R14: 00007f07559e4a60 R15: 00007f07559e3038 [ 331.375069][ C1] Sending NMI from CPU 1 to CPUs 0: [ 331.382726][ C0] NMI backtrace for cpu 0 [ 331.382746][ C0] CPU: 0 PID: 2826 Comm: syz.3.734 Not tainted 5.10.221-syzkaller-01371-g1240968f7644 #0 [ 331.382765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 331.382776][ C0] RIP: 0010:preempt_count_sub+0x6/0x160 [ 331.382811][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 78 ff ff ff 48 c7 c7 88 b9 e3 86 e8 db 2d 5f 00 e9 67 ff ff ff 66 0f 1f 44 00 00 55 48 89 e5 41 56 <53> 89 fb 48 c7 c0 00 99 08 87 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 331.382823][ C0] RSP: 0018:ffffc9000095ea00 EFLAGS: 00000206 [ 331.382846][ C0] RAX: 0000000000000202 RBX: ffffc9000095ee94 RCX: 0000000000000402 [ 331.382861][ C0] RDX: ffffc900025a5000 RSI: 0000000000000201 RDI: 0000000000000001 [ 331.382875][ C0] RBP: ffffc9000095ea08 R08: ffffffff849877d5 R09: 0000000000000003 [ 331.382891][ C0] R10: fffff5200012bd38 R11: dffffc0000000001 R12: dffffc0000000000 [ 331.382906][ C0] R13: ffffc9000095ee80 R14: 000000005bd14a57 R15: ffffc9000095ee80 [ 331.382922][ C0] FS: 00007f07544d46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 331.382935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.382950][ C0] CR2: 0000001b30f1cff8 CR3: 0000000116f58000 CR4: 00000000003506b0 [ 331.382966][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.382981][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.382988][ C0] Call Trace: [ 331.382995][ C0] [ 331.383004][ C0] ? show_regs+0x58/0x60 [ 331.383014][ C0] ? nmi_cpu_backtrace+0x133/0x160 [ 331.383024][ C0] ? preempt_count_sub+0x6/0x160 [ 331.383036][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 331.383045][ C0] ? nmi_handle+0xa8/0x280 [ 331.383056][ C0] ? preempt_count_sub+0x6/0x160 [ 331.383065][ C0] ? default_do_nmi+0x69/0x160 [ 331.383075][ C0] ? exc_nmi+0xad/0x100 [ 331.383084][ C0] ? end_repeat_nmi+0x16/0x31 [ 331.383096][ C0] ? tipc_sk_rcv+0x305/0x1e30 [ 331.383107][ C0] ? preempt_count_sub+0x6/0x160 [ 331.383118][ C0] ? preempt_count_sub+0x6/0x160 [ 331.383130][ C0] ? preempt_count_sub+0x6/0x160 [ 331.383138][ C0] [ 331.383150][ C0] __local_bh_enable_ip+0x53/0x80 [ 331.383161][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 331.383172][ C0] tipc_sk_rcv+0x489/0x1e30 [ 331.383183][ C0] ? __stack_depot_save+0x468/0x4d0 [ 331.383195][ C0] ? kasan_set_track+0x5d/0x70 [ 331.383206][ C0] ? kasan_set_track+0x4b/0x70 [ 331.383218][ C0] ? kasan_set_free_info+0x23/0x40 [ 331.383230][ C0] ? __kasan_slab_free+0x11/0x20 [ 331.383242][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 331.383254][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 331.383264][ C0] ? kfree_skbmem+0x104/0x170 [ 331.383276][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 331.383287][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 331.383299][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 331.383311][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 331.383323][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 331.383335][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 331.383345][ C0] ? __fput+0x309/0x760 [ 331.383355][ C0] ? ____fput+0x15/0x20 [ 331.383367][ C0] ? __skb_queue_purge+0x180/0x180 [ 331.383379][ C0] ? bpf_get_current_uid_gid+0xa7/0xf0 [ 331.383391][ C0] ? bpf_trace_run2+0xf4/0x280 [ 331.383401][ C0] tipc_node_xmit+0x34b/0xe30 [ 331.383412][ C0] ? kfree_skbmem+0x104/0x170 [ 331.383425][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 331.383437][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 331.383448][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 331.383459][ C0] ? kfree_skbmem+0x104/0x170 [ 331.383470][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 331.383481][ C0] ? __skb_queue_purge+0x180/0x180 [ 331.383493][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 331.383504][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 331.383517][ C0] ? __skb_queue_purge+0x180/0x180 [ 331.383527][ C0] tipc_node_xmit+0x34b/0xe30 [ 331.383539][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 331.383551][ C0] ? __kernel_text_address+0x9b/0x110 [ 331.383564][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 331.383576][ C0] ? __kasan_check_write+0x14/0x20 [ 331.383597][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 331.383609][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 331.383620][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 331.383631][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 331.383643][ C0] ? __kasan_check_write+0x14/0x20 [ 331.383654][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 331.383666][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 331.383676][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 331.383688][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 331.383700][ C0] ? __skb_queue_purge+0x180/0x180 [ 331.383712][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 331.383723][ C0] tipc_node_xmit+0x34b/0xe30 [ 331.383735][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 331.383747][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 331.383758][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 331.383768][ C0] ? __kasan_check_write+0x14/0x20 [ 331.383777][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 331.383786][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 331.383794][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 331.383802][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 331.383810][ C0] __release_sock+0x148/0x410 [ 331.383818][ C0] release_sock+0x65/0x1b0 [ 331.383825][ C0] tipc_release+0xb6b/0x1440 [ 331.383833][ C0] sock_close+0xdf/0x270 [ 331.383841][ C0] ? sock_mmap+0xa0/0xa0 [ 331.383849][ C0] __fput+0x309/0x760 [ 331.383856][ C0] ____fput+0x15/0x20 [ 331.383864][ C0] task_work_run+0x129/0x190 [ 331.383872][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 331.383882][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 331.383889][ C0] do_syscall_64+0x40/0x70 [ 331.383899][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.383907][ C0] RIP: 0033:0x7f0755852f19 [ 331.383934][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.383944][ C0] RSP: 002b:00007f07544d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.383965][ C0] RAX: 00000000000203a0 RBX: 00007f07559e2f60 RCX: 00007f0755852f19 [ 331.383977][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 331.383990][ C0] RBP: 00007f07558c1e68 R08: 0000000000000000 R09: 0000000000000000 [ 331.384002][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.384014][ C0] R13: 000000000000000b R14: 00007f07559e2f60 R15: 00007ffe98fabf68