last executing test programs: 5.870240847s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000005c0)='jbd2_checkpoint_stats\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='jbd2_checkpoint_stats\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001412) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1004c09, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES64], 0x2, 0x1f3, &(0x7f0000000800)="$eJzsmb+LE0EUx78zu9k7DxFsLGwsPPBEb7O7UbnmwBMsBeFO1DJ463HuJpFkhSRiEbSwsRQUbP0HUliksrCzs9VCBcHClHbCyOxOdie7icYf4ILvA5n9zsybeTsv7HchAUEQ/y0fP3x9/+jCxs5pAAexiiU1/tnIYrgW/+7pnVOPNy8+G759/qp56N4ovx8DIMTi+S0AL7cMRKovxPTqVXXdATMnY1fAcVLpq2CwE/lNiGy1D4brKuaWplsHlAh9+0Yr3L25H/qObFzZeLKp6fll0vGAYRfAsro/ps13ev2gHoZ+Oy8qYpKnMPUjUUFxarpiZqE33uLY1Oonv69rD+8PZF/VBg54WksXHK7SNTBsK72BJdi2nZVEO/9RM9vfWOT8ZRCH10txG39PPPhX2YN+8KQsRUjF3SFmPC0/Fyw/Ih/odOTIePS6uOpTOY78WyI2LgCFqTcrYXjpD3a2lAkE5wHkYzJ/ks59QvMnU/OwatS4Xe30+uv7jfqev+c3Pa92zjnjOGe9amxESYt5mFiO/WlF278yJ9ZiFrr1KGq7XSBqu2nfS1rNcbdftL7Ea3jsfxxrx5M9mHpnpS/KHEx9eHyVas2Ye/MEQRAEQRAEQRAEQRAEQRC/xDEwJP+ECaZ+EJ2FdzmO/h4AAP//k3Js1w==") mount$9p_virtio(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) 5.605183809s ago: executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000e40)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 5.243217435s ago: executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0x17, 0x8c, 0x40, 0xdba, 0x1000, 0xe934, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x59, 0x43, 0xbf}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0xfc, 0x8a}}]}}]}}, 0x0) 4.18337029s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f00000004c0)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@jqfmt_vfsold}, {@noload}, {@data_err_ignore}, {@abort}, {@dioread_nolock}]}, 0x1, 0x444, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6611) 3.79620496s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0xfd, 0x5562, &(0x7f0000005a80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000f80)=[{0x0, 0x3}]}, 0x6a) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.403293411s ago: executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="aa", 0x1}]) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 3.392783612s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000018500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.282215459s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x1c8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'macsec0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'sit0\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.261147793s ago: executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) fcntl$setpipe(r0, 0x407, 0x7000000) 3.15073003s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.523016028s ago: executing program 1: io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wake_unlock', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x25, 0x4000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 2.363502102s ago: executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0x17, 0x8c, 0x40, 0xdba, 0x1000, 0xe934, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x59, 0x43, 0xbf}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0xfc, 0x8a}}]}}]}}, 0x0) 2.342748326s ago: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/stat\x00') fchdir(r0) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 2.239708302s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) unshare(0x22020400) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.209921306s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x409}, 0x14}}, 0x0) 2.090173195s ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000018110000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) truncate(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='ext4_sync_file_enter\x00', r1}, 0x10) r3 = timerfd_create(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000280)={0x3, 0x2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_split\x00', r1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10]) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000340)={{0x5000, 0x1, 0xc, 0x8, 0x1f, 0x7f, 0x2, 0x8, 0x9, 0x80, 0x4, 0x20}, {0x3000, 0xd000, 0xd, 0x3f, 0x1, 0x0, 0xb8, 0x40, 0x7, 0x8, 0x4, 0xdd}, {0x4, 0x1, 0xf, 0x6, 0x8e, 0x1f, 0x8, 0xe4, 0x9, 0x1, 0x7, 0x7}, {0x4, 0x2000, 0xd, 0xf0, 0x1, 0x2, 0x4, 0x40, 0x1, 0x6, 0x80, 0xf}, {0x100000, 0x100000, 0x8, 0x6, 0x4, 0x75, 0x7, 0xb2, 0x4, 0x8, 0x8f, 0xfc}, {0x4, 0x1000, 0xa, 0x0, 0x81, 0x3f, 0x7, 0x8, 0xff, 0x9, 0x5, 0xe9}, {0x3000, 0x19000, 0x10, 0x1, 0x5, 0x20, 0x9, 0x52, 0x2, 0x6, 0x1, 0x9}, {0x2000, 0x6000, 0x3, 0x5, 0x8, 0x3, 0x1, 0x3, 0x5, 0x2, 0x0, 0x5}, {0x5000, 0x76a8}, {0x0, 0xfffe}, 0x10008, 0x0, 0xf000, 0x4000, 0x4, 0x5900, 0x4, [0x5, 0x0, 0x0, 0x3]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390040000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) fdatasync(r10) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 1.936290789s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.660592092s ago: executing program 0: r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08009edf773c8000", 0x8) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000240)={'wg1\x00', {0x2, 0x0, @initdev}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$char_usb(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000001c0), &(0x7f0000000280)=0x10) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80097, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000340)) ptrace(0x10, 0x1) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x5, r6, 0x0, 0x0) 1.424094598s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7090000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000032"], 0x28}}, 0x0) 1.318760365s ago: executing program 3: syz_btf_id_by_name$bpf_lsm(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/190, 0x12}], 0x1) 1.205237072s ago: executing program 3: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) 550.390364ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x1d, 0x0, 0x0, 0x8, &(0x7f0000000480)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000080)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@dioread_lock}, {@grpjquota, 0x2e}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@grpid}], [], 0x2c}, 0x84, 0x487, &(0x7f0000001280)="$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") 511.14687ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 445.438431ms ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 422.159234ms ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = fcntl$dupfd(r1, 0x0, r0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12}, &(0x7f0000000080)) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) 372.542202ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 306.303042ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 181.109971ms ago: executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x551, &(0x7f0000000a40)="$eJzs3U1oHGUYAOB3JtnWttG0oKDSQ1GhQukm6Y9WT+lVLBR6ELzUZbMNIZtsyG5qE3JI70UsKCq91JsePCoePIgXj169KJ4F0aDQ9CCRye6mbX7WNW2ztfM8MDvfz5D3+zLzTnaGGRJAbh3JPtKI5yLifBIxeFdff7Q6jzS3W1leLN9eXiwnsbp64fckkoi4tbxYbm+ftNYHImIpIp6NiO8KEcfSzXHr8wuTpWq1MtuqDzWmZobq8wvHJ6ZK45XxyvTJV187febU6ZETI/c/yT3N1bWfr7937Yc3bl7//IvDS+UPS0mMxkBrk7vn8SA1fyeFGN3QfuphBOuhpNcDYEf6WnleiIhnYjD6WlkPPP5W90asAjmVyH/Iqfb3gOz6t73s5veP3842L0CyuCutpdnT37w3EU+sXZvs/zO558oku948uJsD5bG0dDUihvv7Nx//Sev427nhBzFAHqpvzzZ31Ob9n66ff2KL889A+97pfWqf/1Y2nf/uxO/b5vx3vssYf7/9yyfbxr8a8fyW8ZP1+MkW8dOIeKfL+Dfe+vrMdn2rn0Ycja3jtyWd7w8PXZqoVoabn1vG+Obo4dc7zX//NvFHO8w/a5vpcv5fff/lC0sd4r/8Yuf9v1X8fRHxfpfxD9367M3t+rL4Y9vMv1P8rO1ml/FfGT3yU5ebAgAAAAAAAAAA/0G69ixbkhbXy2laLDbf4X069qfVWr1x7FJtbnqs+czbwSik7SetBpv1JKuPtJ7HbddPbKifjIhDEfFB3761erFcq471evIAAAAAAAAAAAAAAAAAAADwiDiw4f3/v/qa7/8DOeFffkN+yX/Ir3vzP+nZOIDd5+8/5Jf8h/yS/5Bf8h/yS/5Dfsl/yC/5D/kl/wEAAAAAAAAAAAAAAAAAAAAAAAAA4KE4f+5ctqzeXl4sZ/Wxy/Nzk7XLx8cq9cni1Fy5WK7NzhTHa7XxaqVYrk3928+r1mozwzE9d2WoUak3hurzCxenanPTjYsTU6XxysVKYVdmBQAAAAAAAAAAAAAAAAAAAP8vA2tLkhYjIl0rp2mxGPFkRByMQnJpoloZjoinIuLHvsLerD7S60EDAAAAAAAAAAAAAAAAAADAY6Y+vzBZqlYrswqbCxGx9AgMQ0GhJwc/AAAAAAAAAAAAAAAAAACwq+689NvrkQAAAAAAAAAAAAAAAAAAAECepb8mEZEtRwdfGtjYuydZ6VtbR8S7Ny58dKXUaMyOZO1/rLc3Pm61n+jF+IFutfO0nccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHfX5hclStVqZ3XFhKSI6b9PrOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsxD8BAAD//2H82Eo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0xffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005140)={0x2020}, 0x2020) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) sendfile(r0, r2, 0x0, 0xd612) 164.161364ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80}, 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): ="syz-executor.3" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 42.932961][ T852] loop1: detected capacity change from 0 to 40427 [ 42.951728][ T28] audit: type=1400 audit(1718676788.470:276): avc: denied { link } for pid=879 comm="syz-executor.3" name="#3" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 42.971576][ T852] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value [ 42.978986][ T28] audit: type=1400 audit(1718676788.470:277): avc: denied { rename } for pid=879 comm="syz-executor.3" name="#4" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 43.339075][ T28] audit: type=1326 audit(1718676788.920:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111b87cf29 code=0x7ffc0000 [ 43.559510][ T893] loop1: detected capacity change from 0 to 512 [ 43.576273][ T893] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.586669][ T893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.601343][ T893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 43.609766][ T893] System zones: 1-12 [ 43.615809][ T893] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 43.645505][ T893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 43.668288][ T893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 43.683150][ T893] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.716803][ T893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 43.750303][ T893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 43.781393][ T893] EXT4-fs (loop1): 1 orphan inode deleted [ 43.791156][ T893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.828739][ T313] EXT4-fs (loop1): unmounting filesystem. [ 43.862119][ T917] x_tables: duplicate underflow at hook 1 [ 43.896010][ T917] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 43.936229][ T917] loop1: detected capacity change from 0 to 128 [ 43.982556][ T917] syz-executor.1: attempt to access beyond end of device [ 43.982556][ T917] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 44.035729][ T301] tipc: Node number set to 722096659 [ 44.315754][ T889] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.331871][ T924] loop3: detected capacity change from 0 to 40427 [ 44.347168][ T924] F2FS-fs (loop3): Unrecognized mount option "ifline_xattr" or missing value [ 44.613706][ T929] loop4: detected capacity change from 0 to 256 [ 44.622450][ T929] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 44.786331][ T889] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 44.806072][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.043566][ T938] device wireguard0 entered promiscuous mode [ 45.187462][ T889] usb 2-1: config 0 descriptor?? [ 45.262356][ T951] x_tables: duplicate underflow at hook 1 [ 45.276128][ T951] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 45.300221][ T951] loop3: detected capacity change from 0 to 128 [ 45.333352][ T951] syz-executor.3: attempt to access beyond end of device [ 45.333352][ T951] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 45.434056][ T577] usb 2-1: USB disconnect, device number 4 [ 46.400805][ T989] loop4: detected capacity change from 0 to 512 [ 46.407203][ T989] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.413658][ T989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.439222][ T989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 46.468994][ T989] System zones: 1-12 [ 47.321440][ T1001] device wireguard0 entered promiscuous mode [ 47.333510][ T989] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 47.374533][ T989] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 47.390301][ T1012] loop1: detected capacity change from 0 to 1024 [ 47.398205][ T1012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.407495][ T989] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 47.421579][ T989] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 47.435053][ T1012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.456972][ T989] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 47.470097][ T989] EXT4-fs (loop4): 1 orphan inode deleted [ 47.475835][ T989] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.495946][ T313] EXT4-fs (loop1): unmounting filesystem. [ 47.524287][ T311] EXT4-fs (loop4): unmounting filesystem. [ 47.529971][ T1017] loop3: detected capacity change from 0 to 512 [ 47.546576][ T1017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.553021][ T1017] ext4: Unknown parameter 'nouser_xattr' [ 47.583057][ T1006] loop0: detected capacity change from 0 to 40427 [ 47.668534][ T1006] F2FS-fs (loop0): invalid crc value [ 47.682027][ T1006] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.025769][ T1006] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.047671][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 48.047685][ T28] audit: type=1400 audit(1718676793.640:289): avc: denied { write } for pid=1005 comm="syz-executor.0" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.084369][ T1006] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=1 [ 48.095746][ T28] audit: type=1400 audit(1718676793.670:290): avc: denied { ioctl } for pid=1005 comm="syz-executor.0" path="/root/syzkaller-testdir1597128423/syzkaller.jDLUqh/49/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.129872][ T314] syz-executor.0: attempt to access beyond end of device [ 48.129872][ T314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.616030][ T513] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.464042][ T1075] loop1: detected capacity change from 0 to 512 [ 49.470887][ T1075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.477518][ T1075] ext4: Unknown parameter 'nouser_xattr' [ 49.535185][ T889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 49.915838][ T513] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 49.934831][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.947814][ T513] usb 1-1: config 0 descriptor?? [ 49.952989][ T28] audit: type=1400 audit(1718676795.540:291): avc: denied { create } for pid=1089 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.972755][ T28] audit: type=1400 audit(1718676795.540:292): avc: denied { ioctl } for pid=1089 comm="syz-executor.1" path="socket:[16305]" dev="sockfs" ino=16305 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.997538][ T28] audit: type=1400 audit(1718676795.540:293): avc: denied { listen } for pid=1089 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.017752][ T28] audit: type=1400 audit(1718676795.540:294): avc: denied { connect } for pid=1089 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.038007][ T28] audit: type=1400 audit(1718676795.540:295): avc: denied { write } for pid=1089 comm="syz-executor.1" path="socket:[16308]" dev="sockfs" ino=16308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.045754][ T889] usb 4-1: Using ep0 maxpacket: 16 [ 50.064832][ T28] audit: type=1400 audit(1718676795.540:296): avc: denied { accept } for pid=1089 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.086390][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 50.096504][ T28] audit: type=1400 audit(1718676795.540:297): avc: denied { read } for pid=1089 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.144082][ T1101] device vti0 entered promiscuous mode [ 50.202946][ T340] usb 1-1: USB disconnect, device number 5 [ 50.215832][ T889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.226892][ T889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.240300][ T889] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.249329][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.257973][ T889] usb 4-1: config 0 descriptor?? [ 50.273269][ T1108] SELinux: security_context_str_to_sid (¯/) failed with errno=-22 [ 50.302094][ T28] audit: type=1400 audit(1718676795.890:298): avc: denied { getopt } for pid=1107 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.450574][ T1128] loop2: detected capacity change from 0 to 512 [ 50.464604][ T1128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.465778][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.470991][ T1128] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 50.491848][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.494025][ T1128] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 50.515479][ T1128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.517370][ T19] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 50.533503][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.543422][ T19] usb 5-1: config 0 descriptor?? [ 50.556727][ T1128] EXT4-fs (loop2): unmounting filesystem. [ 50.567054][ T1128] 9pnet_fd: Insufficient options for proto=fd [ 50.578296][ T1128] loop2: detected capacity change from 0 to 512 [ 50.584730][ T1128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.593932][ T1128] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode [ 50.744491][ T1048] loop3: detected capacity change from 0 to 256 [ 50.761740][ T1048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 50.790450][ T1048] input: syz0 as /devices/virtual/input/input7 [ 50.853454][ T889] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input8 [ 50.933367][ T1142] loop2: detected capacity change from 0 to 40427 [ 50.947069][ T889] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 50.959475][ T1142] F2FS-fs (loop2): invalid crc value [ 50.970793][ T1142] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.015821][ T1142] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.027207][ T19] hid-rmi 0003:06CB:81A7.0008: item fetching failed at offset 3/5 [ 51.035405][ T19] hid-rmi 0003:06CB:81A7.0008: parse failed [ 51.041574][ T19] hid-rmi: probe of 0003:06CB:81A7.0008 failed with error -22 [ 51.057012][ T1142] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=1 [ 51.071241][ T317] syz-executor.2: attempt to access beyond end of device [ 51.071241][ T317] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.085553][ T1152] loop0: detected capacity change from 0 to 40427 [ 51.115893][ T1152] F2FS-fs (loop0): invalid crc value [ 51.130464][ T1152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.181885][ T1152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 51.210313][ T1170] loop2: detected capacity change from 0 to 256 [ 51.218925][ T1170] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea07c, utbl_chksum : 0x7319d30d) [ 51.236525][ T301] usb 5-1: USB disconnect, device number 9 [ 51.277108][ T19] usb 4-1: USB disconnect, device number 3 [ 52.201622][ T340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 52.525740][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.605772][ T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.616722][ T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.626538][ T340] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 52.635417][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.643623][ T340] usb 4-1: config 0 descriptor?? [ 52.795756][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 52.925769][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.936550][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.949106][ T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.957903][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.966301][ T19] usb 3-1: config 0 descriptor?? [ 53.127503][ T340] hid-rmi 0003:06CB:81A7.0009: item fetching failed at offset 3/5 [ 53.127832][ T301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 53.138878][ T340] hid-rmi 0003:06CB:81A7.0009: parse failed [ 53.148771][ T340] hid-rmi: probe of 0003:06CB:81A7.0009 failed with error -22 [ 53.169627][ T1229] SELinux: security_context_str_to_sid (¯/) failed with errno=-22 [ 53.340574][ T513] usb 4-1: USB disconnect, device number 4 [ 53.435772][ T301] usb 5-1: device descriptor read/64, error -71 [ 53.437727][ T1212] loop2: detected capacity change from 0 to 256 [ 53.451159][ T1212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 53.466527][ T1212] input: syz0 as /devices/virtual/input/input9 [ 53.499361][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input10 [ 53.576951][ T19] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 53.851110][ T1237] loop3: detected capacity change from 0 to 256 [ 53.859760][ T1237] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea07c, utbl_chksum : 0x7319d30d) [ 53.871859][ T301] usb 5-1: device descriptor read/64, error -71 [ 53.917127][ T340] usb 3-1: USB disconnect, device number 4 [ 53.935979][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 53.935994][ T28] audit: type=1326 audit(1718676799.530:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb61387cf29 code=0x0 [ 53.994829][ T314] syz-executor.0: attempt to access beyond end of device [ 53.994829][ T314] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 54.009348][ T314] syz-executor.0: attempt to access beyond end of device [ 54.009348][ T314] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 54.025344][ T314] syz-executor.0: attempt to access beyond end of device [ 54.025344][ T314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.155754][ T301] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 54.219804][ T1240] loop1: detected capacity change from 0 to 40427 [ 54.227560][ T1240] F2FS-fs (loop1): invalid crc value [ 54.233566][ T1240] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.269159][ T1240] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.281821][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.288906][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.295245][ T1240] F2FS-fs (loop1): Unexpected flush for atomic writes: ino=10, npages=1 [ 54.296345][ T1242] device bridge_slave_0 entered promiscuous mode [ 54.310509][ T313] syz-executor.1: attempt to access beyond end of device [ 54.310509][ T313] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.310895][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.335776][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.343375][ T1242] device bridge_slave_1 entered promiscuous mode [ 54.398270][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.405137][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.412237][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.419008][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.445770][ T301] usb 5-1: device descriptor read/64, error -71 [ 54.457178][ T1253] IPv6: addrconf: prefix option has invalid lifetime [ 54.480119][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.489877][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.500086][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.533184][ T1242] device veth0_vlan entered promiscuous mode [ 54.546296][ T1242] device veth1_macvtap entered promiscuous mode [ 54.563787][ T28] audit: type=1400 audit(1718676800.150:318): avc: denied { mounton } for pid=1242 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.587509][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.598862][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.613535][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.621911][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.631052][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.638494][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.646422][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.707836][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.716128][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.722965][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.730236][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.738508][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.745375][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.757206][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.765036][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.037065][ T8] device bridge_slave_1 left promiscuous mode [ 55.043022][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.059876][ T1277] loop0: detected capacity change from 0 to 256 [ 55.066055][ T8] device bridge_slave_0 left promiscuous mode [ 55.066138][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.081585][ T8] device veth1_macvtap left promiscuous mode [ 55.087695][ T8] device veth0_vlan left promiscuous mode [ 55.094073][ T1277] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 55.106087][ T301] usb 5-1: device descriptor read/64, error -71 [ 55.225818][ T301] usb usb5-port1: attempt power cycle [ 55.332043][ T28] audit: type=1400 audit(1718676800.900:319): avc: denied { mounton } for pid=1276 comm="syz-executor.0" path="/root/syzkaller-testdir3045472267/syzkaller.LTAIdY/1/file2/file0" dev="loop0" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.406713][ T1279] device pim6reg1 entered promiscuous mode [ 55.817289][ T1294] device wireguard0 entered promiscuous mode [ 55.865824][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.945751][ T301] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 55.959026][ T28] audit: type=1400 audit(1718676801.550:320): avc: denied { connect } for pid=1298 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.979456][ T28] audit: type=1400 audit(1718676801.560:321): avc: denied { write } for pid=1298 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.013365][ T1301] SELinux: security_context_str_to_sid (¯/) failed with errno=-22 [ 56.075407][ T28] audit: type=1400 audit(1718676801.660:322): avc: denied { read } for pid=1304 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.081346][ T1307] loop0: detected capacity change from 0 to 512 [ 56.109619][ T1307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.118508][ T1307] ext4 filesystem being mounted at /root/syzkaller-testdir3045472267/syzkaller.LTAIdY/2/file0 supports timestamps until 2038 (0x7fffffff) [ 56.135970][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 56.155838][ T301] usb 5-1: device descriptor read/8, error -71 [ 56.269323][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.415717][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.567997][ T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.577933][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.584350][ T1315] IPv6: sit1: Disabled Multicast RS [ 56.591388][ T19] usb 3-1: config 0 descriptor?? [ 56.617133][ T301] usb 5-1: device descriptor read/8, error -71 [ 56.623180][ T28] audit: type=1400 audit(1718676802.210:323): avc: denied { read } for pid=1314 comm="syz-executor.1" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.652821][ T28] audit: type=1400 audit(1718676802.210:324): avc: denied { open } for pid=1314 comm="syz-executor.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.885765][ T301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 56.950842][ T1242] EXT4-fs (loop0): unmounting filesystem. [ 57.065830][ T301] usb 5-1: device descriptor read/8, error -71 [ 57.086261][ T1282] loop2: detected capacity change from 0 to 256 [ 57.164125][ T1282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 57.176621][ T28] audit: type=1326 audit(1718676802.770:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1331 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111b87cf29 code=0x7ffc0000 [ 57.228635][ T28] audit: type=1326 audit(1718676802.770:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1331 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111b87cf29 code=0x7ffc0000 [ 57.256511][ T1282] input: syz0 as /devices/virtual/input/input11 [ 57.302473][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input12 [ 57.397467][ T1340] loop1: detected capacity change from 0 to 256 [ 57.404538][ T1340] exfat: Deprecated parameter 'utf8' [ 57.409852][ T1340] exfat: Deprecated parameter 'namecase' [ 57.415697][ T1340] exfat: Deprecated parameter 'namecase' [ 57.421209][ T1340] exfat: Deprecated parameter 'utf8' [ 57.426314][ T1340] exfat: Deprecated parameter 'utf8' [ 57.445395][ T1340] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 57.499010][ T301] usb 5-1: device descriptor read/8, error -71 [ 57.505759][ T19] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 57.615816][ T301] usb usb5-port1: unable to enumerate USB device [ 57.727472][ T301] usb 3-1: USB disconnect, device number 5 [ 58.213405][ T1352] loop1: detected capacity change from 0 to 40427 [ 58.223847][ T1352] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value [ 58.802388][ T1374] loop3: detected capacity change from 0 to 40427 [ 58.809856][ T1374] F2FS-fs (loop3): invalid crc value [ 58.816517][ T1374] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.840015][ T1374] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 59.283524][ T1386] loop1: detected capacity change from 0 to 256 [ 59.289712][ T1386] exfat: Deprecated parameter 'utf8' [ 59.294721][ T1386] exfat: Deprecated parameter 'namecase' [ 59.300500][ T1386] exfat: Deprecated parameter 'namecase' [ 59.305966][ T1386] exfat: Deprecated parameter 'utf8' [ 59.311064][ T1386] exfat: Deprecated parameter 'utf8' [ 59.318496][ T1386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 59.379771][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 59.379785][ T28] audit: type=1400 audit(1718676804.970:337): avc: denied { wake_alarm } for pid=1394 comm="syz-executor.0" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.516382][ T1402] input: syz0 as /devices/virtual/input/input13 [ 59.616920][ T1407] incfs_lookup_dentry err:-14 [ 59.621452][ T1407] incfs: Can't find or create .index dir in ./file0 [ 59.627980][ T1407] incfs: mount failed -14 [ 59.922421][ T1425] loop1: detected capacity change from 0 to 128 [ 59.929293][ T1425] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 59.944832][ T1425] syz-executor.1: attempt to access beyond end of device [ 59.944832][ T1425] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 59.958557][ T1425] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 59.967410][ T1425] syz-executor.1: attempt to access beyond end of device [ 59.967410][ T1425] loop1: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 59.984541][ T10] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.011976][ T28] audit: type=1400 audit(1718676805.600:338): avc: denied { set_context_mgr } for pid=1428 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 60.028216][ T1429] binder: BINDER_SET_CONTEXT_MGR already set [ 60.032435][ T28] audit: type=1400 audit(1718676805.620:339): avc: denied { write } for pid=1428 comm="syz-executor.1" name="tcp" dev="proc" ino=4026532525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.037864][ T1429] binder: 1428:1429 ioctl 4018620d 200001c0 returned -16 [ 60.061453][ T28] audit: type=1400 audit(1718676805.620:340): avc: denied { map } for pid=1428 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.375987][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 60.530673][ T1434] incfs_lookup_dentry err:-14 [ 60.535163][ T1434] incfs: Can't find or create .index dir in ./file0 [ 60.541939][ T1434] incfs: mount failed -14 [ 60.625797][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 60.897559][ T1441] loop0: detected capacity change from 0 to 256 [ 60.903695][ T1441] exfat: Deprecated parameter 'utf8' [ 60.908861][ T1441] exfat: Deprecated parameter 'namecase' [ 60.914240][ T1441] exfat: Deprecated parameter 'namecase' [ 60.919843][ T1441] exfat: Deprecated parameter 'utf8' [ 60.924931][ T1441] exfat: Deprecated parameter 'utf8' [ 60.932537][ T1441] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 60.965747][ T19] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 60.976589][ T19] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 60.985401][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.255812][ T19] usb 2-1: string descriptor 0 read error: -71 [ 61.261913][ T19] hub 2-1:32.0: USB hub found [ 61.325808][ T19] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 61.385933][ T19] usb 2-1: USB disconnect, device number 5 [ 61.747873][ T28] audit: type=1400 audit(1718676807.340:341): avc: denied { sqpoll } for pid=1450 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.747897][ T1451] cgroup: fork rejected by pids controller in /syz1 [ 61.849581][ T312] syz-executor.3: attempt to access beyond end of device [ 61.849581][ T312] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 61.864005][ T312] syz-executor.3: attempt to access beyond end of device [ 61.864005][ T312] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 61.886917][ T312] syz-executor.3: attempt to access beyond end of device [ 61.886917][ T312] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.944582][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.951660][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.959402][ T1456] device bridge_slave_0 entered promiscuous mode [ 61.966371][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.973465][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.981061][ T1456] device bridge_slave_1 entered promiscuous mode [ 62.051215][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.058090][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.065187][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.072003][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.099530][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.108665][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.116204][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.126938][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.134931][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.141794][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.149026][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.157165][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.163985][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.192912][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.207975][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.216357][ T28] audit: type=1400 audit(1718676807.810:342): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.239194][ T28] audit: type=1400 audit(1718676807.810:343): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.262347][ T28] audit: type=1400 audit(1718676807.810:344): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.290859][ T1456] device veth0_vlan entered promiscuous mode [ 62.299105][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.307493][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.315174][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.322452][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.336953][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.343800][ T1464] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.351490][ T1464] device bridge_slave_0 entered promiscuous mode [ 62.360067][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.366928][ T1464] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.374035][ T1464] device bridge_slave_1 entered promiscuous mode [ 62.403048][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.415169][ T1456] device veth1_macvtap entered promiscuous mode [ 62.437904][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.451642][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.483767][ T1469] loop1: detected capacity change from 0 to 128 [ 62.491096][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.496729][ T1469] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 62.517221][ T1469] syz-executor.1: attempt to access beyond end of device [ 62.517221][ T1469] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 62.530888][ T1469] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 62.539267][ T1469] syz-executor.1: attempt to access beyond end of device [ 62.539267][ T1469] loop1: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 62.539794][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.561381][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.568367][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.575788][ T969] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 62.576539][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.592879][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.599766][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.610858][ T1473] tipc: Failed to remove unknown binding: 66,1,1/0:2758761790/2758761792 [ 62.619494][ T43] device bridge_slave_1 left promiscuous mode [ 62.619575][ T1473] tipc: Failed to remove unknown binding: 66,1,1/0:2758761790/2758761792 [ 62.625515][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.641844][ T43] device bridge_slave_0 left promiscuous mode [ 62.648736][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.657489][ T43] device veth1_macvtap left promiscuous mode [ 62.663329][ T43] device veth0_vlan left promiscuous mode [ 62.767125][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.896087][ T1478] loop1: detected capacity change from 0 to 256 [ 62.902974][ T1478] exfat: Deprecated parameter 'utf8' [ 62.908252][ T1478] exfat: Deprecated parameter 'namecase' [ 62.914088][ T1478] exfat: Deprecated parameter 'namecase' [ 62.919746][ T1478] exfat: Deprecated parameter 'utf8' [ 62.924875][ T1478] exfat: Deprecated parameter 'utf8' [ 62.957501][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.965814][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.975653][ T1478] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 62.982296][ T1464] device veth0_vlan entered promiscuous mode [ 62.994954][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.003380][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.011289][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.018579][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.032455][ T1464] device veth1_macvtap entered promiscuous mode [ 63.041240][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.049282][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.057298][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.068223][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.076838][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.087258][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.310496][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.341089][ T1488] incfs_lookup_dentry err:-14 [ 63.345627][ T1488] incfs: Can't find or create .index dir in ./file0 [ 63.352365][ T1488] incfs: mount failed -14 [ 63.366573][ T1490] loop3: detected capacity change from 0 to 128 [ 63.373104][ T1490] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4554: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 63.386445][ T1490] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 63.397252][ T43] tipc: Disabling bearer [ 63.402490][ T43] tipc: Left network mode [ 63.445853][ T1492] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 63.455314][ T28] audit: type=1400 audit(1718676809.040:345): avc: denied { relabelto } for pid=1491 comm="syz-executor.3" name="bus" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 63.484615][ T28] audit: type=1400 audit(1718676809.070:346): avc: denied { unlink } for pid=1464 comm="syz-executor.3" name="bus" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 63.805892][ T340] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 63.892125][ T1510] cgroup: fork rejected by pids controller in /syz0 [ 64.026306][ T43] device bridge_slave_1 left promiscuous mode [ 64.032410][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.040140][ T43] device bridge_slave_0 left promiscuous mode [ 64.046464][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.054432][ T43] device veth1_macvtap left promiscuous mode [ 64.060691][ T43] device veth0_vlan left promiscuous mode [ 64.138898][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.146281][ T1515] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.153465][ T1515] device bridge_slave_0 entered promiscuous mode [ 64.160578][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.165796][ T340] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.167835][ T1515] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.178234][ T340] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 64.185959][ T1515] device bridge_slave_1 entered promiscuous mode [ 64.194767][ T340] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 64.209778][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.249531][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.256391][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.263443][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.270278][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.289076][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.296598][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.303638][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.324685][ T1515] device veth0_vlan entered promiscuous mode [ 64.332397][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.340631][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.348516][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.355640][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.363158][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.371092][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.377937][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.385559][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.393564][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.400395][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.407590][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.415291][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.428671][ T1515] device veth1_macvtap entered promiscuous mode [ 64.438593][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.452092][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.460566][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.479510][ T28] audit: type=1400 audit(1718676810.070:347): avc: denied { write } for pid=1519 comm="syz-executor.0" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.506821][ T1520] loop0: detected capacity change from 0 to 16 [ 64.514015][ T1520] erofs: (device loop0): mounted with root inode @ nid 36. [ 64.523103][ T28] audit: type=1400 audit(1718676810.110:348): avc: denied { mounton } for pid=1519 comm="syz-executor.0" path="/root/syzkaller-testdir2692283694/syzkaller.9q0neX/0/file2/file0" dev="loop0" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.551091][ T28] audit: type=1400 audit(1718676810.110:349): avc: denied { mount } for pid=1519 comm="syz-executor.0" name="/" dev="configfs" ino=11706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.582939][ T1515] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 64.591207][ T28] audit: type=1400 audit(1718676810.170:350): avc: denied { unmount } for pid=1515 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.593355][ T1515] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 64.795209][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.802572][ T1538] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.809801][ T1538] device bridge_slave_0 entered promiscuous mode [ 64.816618][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.823516][ T1538] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.830872][ T1538] device bridge_slave_1 entered promiscuous mode [ 64.873836][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.880901][ T1538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.888008][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.894763][ T1538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.915777][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.923265][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.930479][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.956761][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.965229][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.971988][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.981029][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.989069][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.996019][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.003361][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.012122][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.032774][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.042185][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.052791][ T1538] device veth0_vlan entered promiscuous mode [ 65.062238][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.070012][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.081590][ T1538] device veth1_macvtap entered promiscuous mode [ 65.088384][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.095886][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.103264][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.111631][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.119664][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.135016][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.144570][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.145819][ T340] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 65.153559][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.159946][ T340] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 65.168077][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.191044][ T340] input: failed to attach handler kbd to device input14, error: -5 [ 65.298656][ T43] device bridge_slave_1 left promiscuous mode [ 65.304787][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.372714][ T43] device bridge_slave_0 left promiscuous mode [ 65.379174][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.392673][ T43] device veth1_macvtap left promiscuous mode [ 65.398834][ T43] device veth0_vlan left promiscuous mode [ 65.669702][ T301] usb 4-1: USB disconnect, device number 5 [ 65.686608][ T28] audit: type=1400 audit(1718676811.280:351): avc: denied { ioctl } for pid=1572 comm="syz-executor.3" path="socket:[20243]" dev="sockfs" ino=20243 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.724053][ T1577] syz-executor.3[1577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.724098][ T1577] syz-executor.3[1577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.795742][ T577] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 66.045787][ T577] usb 2-1: Using ep0 maxpacket: 8 [ 66.165796][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.176631][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.178612][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.186639][ T577] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 66.204369][ T577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.206202][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.212953][ T577] usb 2-1: config 0 descriptor?? [ 66.275761][ T301] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 66.396336][ T43] device bridge_slave_1 left promiscuous mode [ 66.402312][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.409593][ T43] device bridge_slave_0 left promiscuous mode [ 66.415497][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.423164][ T43] device veth1_macvtap left promiscuous mode [ 66.429040][ T43] device veth0_vlan left promiscuous mode [ 66.515802][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 66.564870][ T1601] loop0: detected capacity change from 0 to 256 [ 66.573690][ T1601] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 66.635816][ T301] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.810020][ T1603] device pim6reg1 entered promiscuous mode [ 66.881643][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.889973][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.995797][ T301] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.40 [ 67.004681][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.012691][ T301] usb 4-1: Product: syz [ 67.016834][ T301] usb 4-1: Manufacturer: syz [ 67.021237][ T301] usb 4-1: SerialNumber: syz [ 67.076175][ T301] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 67.279863][ T301] usb 4-1: USB disconnect, device number 6 [ 67.594889][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.601825][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.608989][ T1614] device bridge_slave_0 entered promiscuous mode [ 67.615625][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.623073][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.630248][ T1614] device bridge_slave_1 entered promiscuous mode [ 67.669374][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.676231][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.683288][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.690132][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.709911][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.717547][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.724518][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.736390][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.744511][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.751441][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.758618][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.766782][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.773607][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.787947][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.795625][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.814090][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.824141][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.832951][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.840319][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.849996][ T1614] device veth0_vlan entered promiscuous mode [ 67.861946][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.871333][ T1614] device veth1_macvtap entered promiscuous mode [ 67.883346][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.883374][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.915870][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.017681][ T1641] loop0: detected capacity change from 0 to 256 [ 68.027708][ T1641] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 68.076418][ T43] device bridge_slave_1 left promiscuous mode [ 68.082375][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.090212][ T43] device bridge_slave_0 left promiscuous mode [ 68.096332][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.103914][ T43] device veth1_macvtap left promiscuous mode [ 68.109931][ T43] device veth0_vlan left promiscuous mode [ 68.349256][ T1647] device pim6reg1 entered promiscuous mode [ 68.595739][ T577] usbhid 2-1:0.0: can't add hid device: -71 [ 68.601520][ T577] usbhid: probe of 2-1:0.0 failed with error -71 [ 68.608798][ T577] usb 2-1: USB disconnect, device number 6 [ 68.610303][ T1659] syz-executor.1 (pid 1659) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 68.645809][ T301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 68.656399][ T1665] netem: change failed [ 68.895825][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 69.025952][ T301] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 69.094549][ T577] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 69.100889][ T1677] request_module fs-adfs succeeded, but still no fs? [ 69.235812][ T301] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.40 [ 69.244694][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.252530][ T301] usb 4-1: Product: syz [ 69.256513][ T301] usb 4-1: Manufacturer: syz [ 69.260897][ T301] usb 4-1: SerialNumber: syz [ 69.306085][ T301] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 69.405746][ T577] usb 2-1: Using ep0 maxpacket: 32 [ 69.508947][ T301] usb 4-1: USB disconnect, device number 7 [ 69.535771][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.546515][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.556037][ T577] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.564850][ T577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.573170][ T577] usb 2-1: config 0 descriptor?? [ 69.616123][ T577] hub 2-1:0.0: USB hub found [ 69.793845][ T28] audit: type=1400 audit(1718676815.380:352): avc: denied { read } for pid=1678 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.825775][ T577] hub 2-1:0.0: 1 port detected [ 70.245065][ T340] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.515796][ T577] hub 2-1:0.0: activate --> -90 [ 70.520542][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 70.725799][ T577] usb 2-1-port1: config error [ 70.876470][ T340] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 70.885359][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.893326][ T340] usb 1-1: Product: syz [ 70.897287][ T340] usb 1-1: Manufacturer: syz [ 70.901703][ T340] usb 1-1: SerialNumber: syz [ 70.906787][ T340] usb 1-1: config 0 descriptor?? [ 70.926213][ T513] usb 2-1: USB disconnect, device number 7 [ 70.979073][ T340] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 71.180043][ T340] usb 1-1: USB disconnect, device number 6 [ 71.540092][ T1702] loop1: detected capacity change from 0 to 128 [ 71.556462][ T28] audit: type=1400 audit(1718676817.150:353): avc: denied { bind } for pid=1703 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.605252][ T28] audit: type=1400 audit(1718676817.190:354): avc: denied { read } for pid=1705 comm="syz-executor.1" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.628601][ T28] audit: type=1400 audit(1718676817.190:355): avc: denied { open } for pid=1705 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.652403][ T28] audit: type=1400 audit(1718676817.200:356): avc: denied { ioctl } for pid=1705 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=172 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.682769][ T1708] KVM: debugfs: duplicate directory 1708-5 [ 71.704148][ T1712] loop0: detected capacity change from 0 to 2048 [ 71.727393][ T1712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.738436][ T28] audit: type=1400 audit(1718676817.330:357): avc: denied { read write } for pid=1711 comm="syz-executor.0" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.761456][ T28] audit: type=1400 audit(1718676817.330:358): avc: denied { open } for pid=1711 comm="syz-executor.0" path="/root/syzkaller-testdir3517161475/syzkaller.DzlF6m/10/file0/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.790359][ T1614] EXT4-fs (loop0): unmounting filesystem. [ 71.828356][ T1723] loop0: detected capacity change from 0 to 256 [ 71.841120][ T28] audit: type=1400 audit(1718676817.430:359): avc: denied { remove_name } for pid=1721 comm="syz-executor.0" name="file0" dev="loop0" ino=1048662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.870704][ T28] audit: type=1400 audit(1718676817.430:360): avc: denied { rename } for pid=1721 comm="syz-executor.0" name="file0" dev="loop0" ino=1048662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.894033][ T28] audit: type=1400 audit(1718676817.430:361): avc: denied { reparent } for pid=1721 comm="syz-executor.0" name="file0" dev="loop0" ino=1048662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.964386][ T1735] loop1: detected capacity change from 0 to 128 [ 71.989755][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.996823][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.022610][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.029531][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.036644][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.043373][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.050670][ T1737] device bridge0 entered promiscuous mode [ 72.334319][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.341205][ T1745] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.348441][ T1745] device bridge_slave_0 entered promiscuous mode [ 72.355038][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.361959][ T1745] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.369084][ T1745] device bridge_slave_1 entered promiscuous mode [ 72.408561][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.415410][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.422526][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.429402][ T1745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.449705][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.457131][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.464244][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.466551][ T513] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 72.487044][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.494930][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.501717][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.508881][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.517192][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.524010][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.531293][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.539035][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.552144][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.562617][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.570670][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.578090][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.586316][ T1745] device veth0_vlan entered promiscuous mode [ 72.596182][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.606837][ T1745] device veth1_macvtap entered promiscuous mode [ 72.616288][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.624431][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.676253][ T43] device bridge_slave_1 left promiscuous mode [ 72.682214][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.689832][ T43] device bridge_slave_0 left promiscuous mode [ 72.695909][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.703890][ T43] device veth1_macvtap left promiscuous mode [ 72.710026][ T43] device veth0_vlan left promiscuous mode [ 72.732988][ T1757] loop0: detected capacity change from 0 to 256 [ 72.845840][ T513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.856770][ T513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.866572][ T513] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.876165][ T513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.884543][ T513] usb 2-1: config 0 descriptor?? [ 73.022065][ T1765] loop3: detected capacity change from 0 to 512 [ 73.035972][ T1765] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.053566][ T1765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.064740][ T1765] EXT4-fs (loop3): 1 truncate cleaned up [ 73.070322][ T1765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.087128][ T1464] EXT4-fs (loop3): unmounting filesystem. [ 73.116976][ T1767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.123866][ T1767] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.131330][ T1767] device bridge_slave_0 entered promiscuous mode [ 73.150161][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.157086][ T1767] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.164134][ T1767] device bridge_slave_1 entered promiscuous mode [ 73.210822][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.217681][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.224734][ T1767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.231573][ T1767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.251344][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.265741][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.272941][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.298479][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.306471][ T577] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.313304][ T577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.320533][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.329193][ T577] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.336052][ T577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.343401][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.351836][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.370675][ T1767] device veth0_vlan entered promiscuous mode [ 73.377115][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.385358][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.393558][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.400826][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.411210][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.420167][ T1767] device veth1_macvtap entered promiscuous mode [ 73.430526][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.440118][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.825787][ T333] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.833527][ T43] device bridge_slave_1 left promiscuous mode [ 73.839515][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.846776][ T43] device bridge_slave_0 left promiscuous mode [ 73.852729][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.860332][ T43] device veth1_macvtap left promiscuous mode [ 73.866228][ T43] device veth0_vlan left promiscuous mode [ 73.998673][ T1744] loop1: detected capacity change from 0 to 128 [ 74.006299][ T1744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.014725][ T1744] ext4 filesystem being mounted at /root/syzkaller-testdir4191585490/syzkaller.6xJLGD/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 74.065718][ T333] usb 1-1: Using ep0 maxpacket: 16 [ 74.185752][ T333] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.196527][ T333] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.206020][ T333] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.215539][ T333] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.225356][ T333] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 74.234865][ T333] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 74.275872][ T513] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 74.284617][ T513] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 74.292541][ T513] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 74.300474][ T513] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 74.307736][ T513] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 74.315822][ T333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.334506][ T513] usb 2-1: USB disconnect, device number 8 [ 74.340190][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.349287][ T333] usb 1-1: SerialNumber: syz [ 74.378287][ T1797] loop3: detected capacity change from 0 to 256 [ 74.386011][ T333] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 74.393646][ T333] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 74.401441][ T1797] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 74.634097][ T1799] device pim6reg1 entered promiscuous mode [ 74.685033][ T24] usb 1-1: USB disconnect, device number 7 [ 74.913302][ T1456] EXT4-fs (loop1): unmounting filesystem. [ 75.655729][ T333] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 75.833690][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 75.833706][ T28] audit: type=1400 audit(1718676821.420:370): avc: denied { write } for pid=1819 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.233202][ T333] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 76.242907][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.251681][ T333] usb 4-1: config 0 descriptor?? [ 76.260532][ T1830] device pim6reg1 entered promiscuous mode [ 76.296917][ T333] ums-karma 4-1:0.0: USB Mass Storage device detected [ 76.363730][ T1836] syz-executor.0[1836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.363776][ T1836] syz-executor.0[1836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.376943][ T1836] syz-executor.0[1836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.388540][ T1836] syz-executor.0[1836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.422070][ T1840] loop0: detected capacity change from 0 to 256 [ 76.442405][ T1840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 76.457467][ T28] audit: type=1400 audit(1718676822.050:371): avc: denied { setattr } for pid=1839 comm="syz-executor.0" name="file0" dev="loop0" ino=1048689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.487130][ T1842] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.500237][ T340] usb 4-1: USB disconnect, device number 8 [ 77.020265][ T1866] loop1: detected capacity change from 0 to 256 [ 77.028088][ T1866] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 77.049391][ T1870] syz-executor.1[1870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.049453][ T1870] syz-executor.1[1870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.116048][ T1875] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.166299][ T1879] loop1: detected capacity change from 0 to 128 [ 77.285746][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.745835][ T28] audit: type=1400 audit(1718676823.280:372): avc: denied { append } for pid=1897 comm="syz-executor.1" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.752251][ T340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 78.022896][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.030440][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.037975][ T1903] device bridge_slave_0 entered promiscuous mode [ 78.047253][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.054170][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.062431][ T1903] device bridge_slave_1 entered promiscuous mode [ 78.365856][ T24] usb 4-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 78.377584][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 199: 83, using maximum allowed: 30 [ 78.383492][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.388465][ T24] usb 4-1: config 0 interface 0 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 78.395112][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.408176][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.415155][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.428506][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.437640][ T1911] loop1: detected capacity change from 0 to 128 [ 78.448078][ T1911] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.456106][ T1911] FAT-fs (loop1): Filesystem has been set read-only [ 78.461546][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.462574][ T1911] syz-executor.1: attempt to access beyond end of device [ 78.462574][ T1911] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.483060][ T577] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.491117][ T577] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.506444][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.514621][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.521385][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.528698][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.536825][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.543641][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.550855][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.558892][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.573131][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.587721][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.596117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.603311][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.612144][ T1903] device veth0_vlan entered promiscuous mode [ 78.615853][ T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 78.627441][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.635272][ T24] usb 4-1: Product: syz [ 78.639506][ T24] usb 4-1: Manufacturer: syz [ 78.643936][ T24] usb 4-1: SerialNumber: syz [ 78.655948][ T1903] device veth1_macvtap entered promiscuous mode [ 78.663041][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.670039][ T24] usb 4-1: config 0 descriptor?? [ 78.678974][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.687647][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.715814][ T340] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 78.724961][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.738348][ T1918] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 78.741703][ T340] usb 1-1: config 0 descriptor?? [ 78.765047][ T1920] syz-executor.1[1920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.765094][ T1920] syz-executor.1[1920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.765749][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.794975][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.816172][ T340] ums-karma 1-1:0.0: USB Mass Storage device detected [ 78.916426][ T969] device bridge_slave_1 left promiscuous mode [ 78.924907][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.932628][ T969] device bridge_slave_0 left promiscuous mode [ 78.938829][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.946347][ T24] usb 4-1: selecting invalid altsetting 0 [ 78.953478][ T24] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 78.954093][ T969] device veth1_macvtap left promiscuous mode [ 78.965405][ T24] usb 4-1: USB disconnect, device number 9 [ 78.966200][ T969] device veth0_vlan left promiscuous mode [ 79.034712][ T340] usb 1-1: USB disconnect, device number 8 [ 79.474273][ T28] audit: type=1400 audit(1718676825.060:373): avc: denied { sys_module } for pid=1943 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.619412][ T28] audit: type=1326 audit(1718676825.210:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3bca7cf29 code=0x0 [ 79.822322][ T1950] Invalid ELF section header overflow [ 79.827622][ T28] audit: type=1400 audit(1718676825.410:375): avc: denied { module_load } for pid=1947 comm="syz-executor.0" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 79.914309][ T1956] loop4: detected capacity change from 0 to 1024 [ 79.936128][ T1956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.980630][ T1962] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 79.988682][ T1956] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz-executor.4: Invalid inode bitmap blk 18435710331736723584 in block_group 0 [ 80.016896][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.023903][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.066793][ T1903] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir1039712959/syzkaller.KDw3Oy/8/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.091623][ T1903] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor.4: Invalid inode table block 7485954548343485821 in block_group 0 [ 80.106200][ T1903] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 80.115593][ T1903] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 80.130547][ T969] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm kworker/u4:6: Invalid inode table block 7485954548343485821 in block_group 0 [ 80.145994][ T1903] EXT4-fs (loop4): unmounting filesystem. [ 80.326764][ T1969] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.333622][ T1969] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.341339][ T1969] device bridge_slave_0 entered promiscuous mode [ 80.349244][ T1969] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.356124][ T1969] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.363285][ T1969] device bridge_slave_1 entered promiscuous mode [ 80.407860][ T1969] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.414712][ T1969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.421816][ T1969] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.428605][ T1969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.450663][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.463393][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.471378][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.484687][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.492902][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.499764][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.507323][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.515364][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.522223][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.535175][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.548867][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.554811][ T1976] loop0: detected capacity change from 0 to 256 [ 80.556589][ T28] audit: type=1400 audit(1718676826.140:376): avc: denied { view } for pid=1975 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.600764][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.612833][ T1969] device veth0_vlan entered promiscuous mode [ 80.621673][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.629724][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.637477][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.648274][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.659657][ T1969] device veth1_macvtap entered promiscuous mode [ 80.670936][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.686099][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.716327][ T1979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 80.786874][ T43] device bridge_slave_1 left promiscuous mode [ 80.792828][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.800184][ T43] device bridge_slave_0 left promiscuous mode [ 80.806628][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.833066][ T1985] overlayfs: statfs failed on './file0' [ 80.887064][ T1988] loop1: detected capacity change from 0 to 512 [ 80.944560][ T1988] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 81.057692][ T1988] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 8 (level 2) [ 81.104286][ T1988] EXT4-fs (loop1): Remounting filesystem read-only [ 81.112250][ T1988] EXT4-fs (loop1): 1 truncate cleaned up [ 81.189154][ T1988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.344257][ T1456] EXT4-fs (loop1): unmounting filesystem. [ 81.626136][ T28] audit: type=1400 audit(1718676827.220:377): avc: denied { mount } for pid=2007 comm="syz-executor.1" name="/" dev="ramfs" ino=23687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.655647][ T2008] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.663162][ T28] audit: type=1400 audit(1718676827.240:378): avc: denied { mounton } for pid=2007 comm="syz-executor.1" path="/root/syzkaller-testdir4191585490/syzkaller.6xJLGD/84/file0/bus" dev="ramfs" ino=23037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 81.663709][ T1986] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.664745][ T2010] Illegal XDP return value 4294967274 on prog (id 461) dev N/A, expect packet loss! [ 81.707044][ T2008] overlayfs: failed to set xattr on upper [ 81.712873][ T1986] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.720325][ T1986] device bridge_slave_0 entered promiscuous mode [ 81.726526][ T28] audit: type=1400 audit(1718676827.310:379): avc: denied { unmount } for pid=1456 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.748849][ T1986] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.755714][ T1986] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.762991][ T1986] device bridge_slave_1 entered promiscuous mode [ 81.796305][ T2019] loop4: detected capacity change from 0 to 1024 [ 81.808661][ T2019] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 81.827517][ T2019] EXT4-fs (loop4): barriers disabled [ 81.835793][ T2019] JBD2: no valid journal superblock found [ 81.841374][ T2019] EXT4-fs (loop4): error loading journal [ 81.870864][ T1986] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.877742][ T1986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.884813][ T1986] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.891627][ T1986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.916479][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.924137][ T577] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.936067][ T2019] loop4: detected capacity change from 0 to 512 [ 81.941120][ T2021] loop1: detected capacity change from 0 to 40427 [ 81.943097][ T2019] EXT4-fs (sda1): re-mounted. Quota mode: writeback. [ 81.949690][ T2021] F2FS-fs (loop1): invalid crc value [ 81.960170][ T577] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.961466][ T2021] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.992863][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.002212][ T577] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.003741][ T2021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 82.009083][ T577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.023834][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.032365][ T577] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.039207][ T577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.046384][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.063979][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.084927][ T1986] device veth0_vlan entered promiscuous mode [ 82.091828][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.100570][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.108573][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.115940][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.129959][ T1986] device veth1_macvtap entered promiscuous mode [ 82.136644][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.147647][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.159829][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.170231][ T1456] syz-executor.1: attempt to access beyond end of device [ 82.170231][ T1456] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.418199][ T28] audit: type=1326 audit(1718676828.010:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff850a7cf29 code=0x0 [ 82.606230][ T43] device bridge_slave_1 left promiscuous mode [ 82.612235][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.620638][ T43] device bridge_slave_0 left promiscuous mode [ 82.620813][ T2048] Invalid ELF section header overflow [ 82.627150][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.639921][ T43] device veth1_macvtap left promiscuous mode [ 82.645806][ T43] device veth0_vlan left promiscuous mode [ 82.702202][ T2051] loop1: detected capacity change from 0 to 1024 [ 82.727026][ T2051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.770459][ T2051] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz-executor.1: Invalid inode bitmap blk 18435710331736723584 in block_group 0 [ 82.812147][ T1456] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor.1: path /root/syzkaller-testdir4191585490/syzkaller.6xJLGD/90/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 82.836875][ T1456] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor.1: Invalid inode table block 7485954548343485821 in block_group 0 [ 82.851766][ T1456] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 82.861878][ T1456] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 82.875030][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:0: Invalid inode table block 7485954548343485821 in block_group 0 [ 82.889793][ T1456] EXT4-fs (loop1): unmounting filesystem. [ 83.151565][ T2069] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.158601][ T2069] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.166240][ T2069] device bridge_slave_0 entered promiscuous mode [ 83.174619][ T2069] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.181865][ T502] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.185809][ T2069] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.196598][ T2069] device bridge_slave_1 entered promiscuous mode [ 83.266639][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.273829][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.286119][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.294235][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.302527][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.309381][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.316803][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.324913][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.333195][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.340043][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.347843][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.364585][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.372511][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.380407][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.398154][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.406281][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.414054][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.421384][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.428865][ T2069] device veth0_vlan entered promiscuous mode [ 83.443566][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.452225][ T2069] device veth1_macvtap entered promiscuous mode [ 83.461156][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.469397][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.482943][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.491135][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.555836][ T502] usb 1-1: config 0 has an invalid interface number: 169 but max is 1 [ 83.564406][ T43] device bridge_slave_1 left promiscuous mode [ 83.570357][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.577622][ T502] usb 1-1: config 0 has no interface number 1 [ 83.584479][ T43] device bridge_slave_0 left promiscuous mode [ 83.591097][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.599512][ T43] device veth1_macvtap left promiscuous mode [ 83.605431][ T43] device veth0_vlan left promiscuous mode [ 83.735768][ T502] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 83.746421][ T502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.764053][ T502] usb 1-1: Product: syz [ 83.788441][ T502] usb 1-1: Manufacturer: syz [ 83.801297][ T502] usb 1-1: SerialNumber: syz [ 83.816269][ T502] usb 1-1: config 0 descriptor?? [ 84.151528][ T340] usb 1-1: USB disconnect, device number 9 [ 84.265001][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.271921][ T2101] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.279497][ T2101] device bridge_slave_0 entered promiscuous mode [ 84.286296][ T2101] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.293149][ T2101] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.301968][ T2101] device bridge_slave_1 entered promiscuous mode [ 84.371094][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.379051][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.389125][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.397379][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.405624][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.412487][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.421874][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.431838][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.440530][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.448515][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455344][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.472622][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.480357][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.492132][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.503225][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.511038][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.519265][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.528993][ T2101] device veth0_vlan entered promiscuous mode [ 84.540592][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.577172][ T2101] device veth1_macvtap entered promiscuous mode [ 84.594961][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.606817][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.726853][ T2120] loop4: detected capacity change from 0 to 128 [ 84.733338][ T2120] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.746095][ T2120] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.777064][ T43] device bridge_slave_1 left promiscuous mode [ 84.783032][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.790631][ T43] device bridge_slave_0 left promiscuous mode [ 84.796710][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.804489][ T43] device veth1_macvtap left promiscuous mode [ 84.810568][ T43] device veth0_vlan left promiscuous mode [ 84.912549][ T2127] device pim6reg1 entered promiscuous mode [ 85.107641][ T2135] loop0: detected capacity change from 0 to 40427 [ 85.121026][ T2135] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.128833][ T2135] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.146047][ T2135] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.165753][ T340] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 85.174952][ T2135] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.182041][ T2135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.260618][ T2151] syz-executor.4[2151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.260692][ T2151] syz-executor.4[2151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.430807][ T2156] xt_CT: No such helper "netbios-ns" [ 85.595766][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.607919][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.617659][ T340] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.630368][ T340] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 85.639341][ T340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.647582][ T340] usb 2-1: config 0 descriptor?? [ 85.715744][ T502] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.825246][ T2164] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.075792][ T502] usb 3-1: config 0 has an invalid interface number: 169 but max is 1 [ 86.083929][ T502] usb 3-1: config 0 has no interface number 1 [ 86.126289][ T340] acrux 0003:1A34:0802.000D: unknown main item tag 0x0 [ 86.133435][ T340] acrux 0003:1A34:0802.000D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 86.144376][ T340] acrux 0003:1A34:0802.000D: no inputs found [ 86.150104][ T340] acrux 0003:1A34:0802.000D: Failed to enable force feedback support, error: -19 [ 86.172359][ T28] audit: type=1326 audit(1718676831.709:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.196404][ T28] audit: type=1326 audit(1718676831.709:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.222334][ T28] audit: type=1326 audit(1718676831.739:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.247197][ T28] audit: type=1326 audit(1718676831.739:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.255772][ T502] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 86.271236][ T28] audit: type=1326 audit(1718676831.739:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.279755][ T502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.304054][ T28] audit: type=1326 audit(1718676831.739:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2176 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5643a7cf29 code=0x7ffc0000 [ 86.311434][ T502] usb 3-1: Product: syz [ 86.338808][ T340] usb 2-1: USB disconnect, device number 9 [ 86.339545][ T502] usb 3-1: Manufacturer: syz [ 86.349074][ T502] usb 3-1: SerialNumber: syz [ 86.354483][ T502] usb 3-1: config 0 descriptor?? [ 86.508953][ T2185] loop0: detected capacity change from 0 to 512 [ 86.528631][ T2185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.545571][ T2185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.577172][ T2185] EXT4-fs (loop0): 1 orphan inode deleted [ 86.582730][ T2185] EXT4-fs (loop0): 1 truncate cleaned up [ 86.595713][ T2185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.605209][ T502] usb 3-1: USB disconnect, device number 6 [ 86.613882][ T2185] EXT4-fs error (device loop0): ext4_lookup:1855: inode #15: comm syz-executor.0: iget: bad extra_isize 46 (inode size 256) [ 86.643302][ T2184] loop4: detected capacity change from 0 to 40427 [ 86.651440][ T2185] EXT4-fs (loop0): Remounting filesystem read-only [ 86.665130][ T2184] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.673466][ T2184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.685927][ T1986] EXT4-fs (loop0): unmounting filesystem. [ 86.706895][ T2184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.744165][ T2184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.751464][ T2184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.882934][ T2197] loop3: detected capacity change from 0 to 1024 [ 86.897470][ T2197] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 86.908202][ T2197] EXT4-fs (loop3): barriers disabled [ 86.913581][ T2197] JBD2: no valid journal superblock found [ 86.919202][ T2197] EXT4-fs (loop3): error loading journal [ 86.974131][ T2197] loop3: detected capacity change from 0 to 512 [ 86.981014][ T2197] EXT4-fs (sda1): re-mounted. Quota mode: writeback. [ 88.874024][ T2233] loop2: detected capacity change from 0 to 40427 [ 89.028224][ T2233] F2FS-fs (loop2): invalid crc value [ 89.034681][ T2233] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.057590][ T2233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 89.192580][ T2101] syz-executor.2: attempt to access beyond end of device [ 89.192580][ T2101] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.450239][ T2251] device ip6_vti0 entered promiscuous mode [ 89.456148][ T2251] device vlan2 entered promiscuous mode [ 89.462089][ T2251] device ip6_vti0 left promiscuous mode [ 89.660634][ T2256] loop3: detected capacity change from 0 to 40427 [ 89.679898][ T2256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.687502][ T2256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.698546][ T2256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.724409][ T2256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.731344][ T2256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.299882][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 90.299896][ T28] audit: type=1400 audit(1718676835.839:399): avc: denied { create } for pid=2282 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 90.326656][ T28] audit: type=1400 audit(1718676835.839:400): avc: denied { write } for pid=2282 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 90.347481][ T28] audit: type=1400 audit(1718676835.839:401): avc: denied { setopt } for pid=2282 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.208146][ T28] audit: type=1400 audit(1718676836.749:402): avc: denied { create } for pid=2307 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.281281][ T2314] virtio-fs: tag <(null)> not found [ 91.533349][ T2322] loop4: detected capacity change from 0 to 16 [ 91.556670][ T2322] erofs: (device loop4): mounted with root inode @ nid 36. [ 91.564903][ T2322] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 91.575974][ T2322] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 91.836009][ T28] audit: type=1400 audit(1718676837.379:403): avc: denied { read write } for pid=2325 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.863206][ T28] audit: type=1400 audit(1718676837.379:404): avc: denied { open } for pid=2325 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.997967][ T28] audit: type=1400 audit(1718676837.539:405): avc: denied { mounton } for pid=2332 comm="syz-executor.3" path="/root/syzkaller-testdir3906121014/syzkaller.xoTsZA/80/file0" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 92.385732][ T340] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.663103][ T28] audit: type=1326 audit(1718676838.199:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d5c7cf29 code=0x7ffc0000 [ 92.687360][ T28] audit: type=1326 audit(1718676838.199:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d5c7cf29 code=0x7ffc0000 [ 92.711648][ T28] audit: type=1326 audit(1718676838.229:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02d5c7cf29 code=0x7ffc0000 [ 92.775876][ T340] usb 5-1: config 0 has an invalid interface number: 169 but max is 1 [ 92.783911][ T340] usb 5-1: config 0 has no interface number 1 [ 92.832398][ T2357] serio: Serial port pts0 [ 92.985822][ T340] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 92.994691][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.002651][ T340] usb 5-1: Product: syz [ 93.006892][ T340] usb 5-1: Manufacturer: syz [ 93.011366][ T340] usb 5-1: SerialNumber: syz [ 93.016365][ T340] usb 5-1: config 0 descriptor?? [ 93.277021][ T6] usb 5-1: USB disconnect, device number 14 [ 93.315516][ T2376] loop2: detected capacity change from 0 to 512 [ 93.337311][ T2376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.349451][ T2376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.361119][ T2376] EXT4-fs (loop2): 1 orphan inode deleted [ 93.366685][ T2376] EXT4-fs (loop2): 1 truncate cleaned up [ 93.372160][ T2376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.383144][ T2376] EXT4-fs error (device loop2): ext4_lookup:1855: inode #15: comm syz-executor.2: iget: bad extra_isize 46 (inode size 256) [ 93.396287][ T2376] EXT4-fs (loop2): Remounting filesystem read-only [ 93.416943][ T2101] EXT4-fs (loop2): unmounting filesystem. [ 93.496818][ T2384] loop0: detected capacity change from 0 to 256 [ 93.514932][ T2384] exFAT-fs (loop0): failed to read sector(0x800000078) [ 93.521654][ T2384] exFAT-fs (loop0): failed to load upcase table [ 93.527717][ T2384] exFAT-fs (loop0): failed to recognize exfat type [ 93.670689][ T2386] loop2: detected capacity change from 0 to 40427 [ 93.684920][ T2386] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.692547][ T2386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.704637][ T2386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.737916][ T2386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.744990][ T2386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.095907][ T2407] loop3: detected capacity change from 0 to 16 [ 94.103025][ T2409] syz-executor.2[2409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.103073][ T2409] syz-executor.2[2409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.185127][ T2407] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.204638][ T2407] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 94.214055][ T2407] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 94.296246][ T2413] xt_CT: No such helper "netbios-ns" [ 94.685773][ T889] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 94.925753][ T889] usb 5-1: Using ep0 maxpacket: 32 [ 95.045861][ T889] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.057050][ T889] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.066982][ T889] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.076372][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.126129][ T889] hub 5-1:4.0: USB hub found [ 95.255723][ T340] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.305747][ T28] kauditd_printk_skb: 5233 callbacks suppressed [ 95.305764][ T28] audit: type=1326 audit(1718676840.839:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa857240379 code=0x7ffc0000 [ 95.336416][ T889] hub 5-1:4.0: 2 ports detected [ 95.336796][ T28] audit: type=1326 audit(1718676840.849:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85727a6a7 code=0x7ffc0000 [ 95.364829][ T28] audit: type=1326 audit(1718676840.849:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa857240379 code=0x7ffc0000 [ 95.388696][ T577] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.389693][ T28] audit: type=1326 audit(1718676840.849:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85727a6a7 code=0x7ffc0000 [ 95.419804][ T28] audit: type=1326 audit(1718676840.849:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa857240379 code=0x7ffc0000 [ 95.443802][ T28] audit: type=1326 audit(1718676840.849:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85727a6a7 code=0x7ffc0000 [ 95.467616][ T28] audit: type=1326 audit(1718676840.849:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa857240379 code=0x7ffc0000 [ 95.491292][ T28] audit: type=1326 audit(1718676840.849:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85727a6a7 code=0x7ffc0000 [ 95.514921][ T28] audit: type=1326 audit(1718676840.849:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa857240379 code=0x7ffc0000 [ 95.542541][ T28] audit: type=1326 audit(1718676840.849:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85727a6a7 code=0x7ffc0000 [ 95.695773][ T340] usb 2-1: config 0 has an invalid interface number: 169 but max is 1 [ 95.703806][ T340] usb 2-1: config 0 has no interface number 1 [ 95.805780][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.816691][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.826293][ T577] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 95.835117][ T577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.843507][ T577] usb 3-1: config 0 descriptor?? [ 95.871321][ T2449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.905798][ T340] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 95.914772][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.922655][ T340] usb 2-1: Product: syz [ 95.926596][ T340] usb 2-1: Manufacturer: syz [ 95.931021][ T340] usb 2-1: SerialNumber: syz [ 95.936067][ T340] usb 2-1: config 0 descriptor?? [ 96.179263][ T502] usb 2-1: USB disconnect, device number 10 [ 96.306899][ T577] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 96.505735][ T889] hub 5-1:4.0: activate --> -90 [ 96.525741][ T577] isku 0003:1E7D:319C.000E: couldn't init struct isku_device [ 96.532978][ T577] isku 0003:1E7D:319C.000E: couldn't install keyboard [ 96.539888][ T577] isku: probe of 0003:1E7D:319C.000E failed with error -32 [ 96.709379][ T2455] loop3: detected capacity change from 0 to 512 [ 96.722567][ T2455] EXT4-fs: journaled quota format not specified [ 96.868115][ T2461] serio: Serial port pts0 [ 96.936235][ T577] usb 5-1: USB disconnect, device number 15 [ 96.945782][ T889] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 96.952473][ T889] usb 5-1-port1: attempt power cycle [ 96.958978][ T2466] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program [ 97.016784][ T1995] usb 3-1: USB disconnect, device number 7 [ 97.106784][ T2472] loop2: detected capacity change from 0 to 1024 [ 97.136842][ T2472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.145408][ T2472] ext4 filesystem being mounted at /root/syzkaller-testdir3194805206/syzkaller.KW2p39/21/file1 supports timestamps until 2038 (0x7fffffff) [ 97.226271][ T2101] EXT4-fs (loop2): unmounting filesystem. [ 197.425627][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 197.432416][ C0] rcu: 1-...!: (0 ticks this GP) idle=ef4c/1/0x4000000000000000 softirq=10249/10249 fqs=0 [ 197.442211][ C0] (detected by 0, t=10002 jiffies, g=12121, q=237 ncpus=2) [ 197.449342][ C0] Sending NMI from CPU 0 to CPUs 1: [ 197.454439][ C1] NMI backtrace for cpu 1 [ 197.454453][ C1] CPU: 1 PID: 2478 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00016-gbda57805ab9f #0 [ 197.454470][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 197.454488][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 197.454531][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 0a 13 31 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 197.454544][ C1] RSP: 0018:ffffc9000600f4e0 EFLAGS: 00000046 [ 197.454558][ C1] RAX: 0000000000000003 RBX: 1ffff92000c01ea0 RCX: ffffffff8500688c [ 197.454569][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881316db960 [ 197.454580][ C1] RBP: ffffc9000600f590 R08: dffffc0000000000 R09: ffffed10262db72d [ 197.454592][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 197.454603][ C1] R13: ffff8881316db960 R14: 0000000000000003 R15: 1ffff92000c01ea4 [ 197.454614][ C1] FS: 00007f02d694c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 197.454628][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.454639][ C1] CR2: 0000000020010000 CR3: 000000012ba05000 CR4: 00000000003506a0 [ 197.454653][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.454662][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.454672][ C1] Call Trace: [ 197.454678][ C1] [ 197.454685][ C1] ? show_regs+0x58/0x60 [ 197.454719][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 197.454762][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 197.454810][ C1] ? kvm_wait+0x117/0x180 [ 197.454840][ C1] ? kvm_wait+0x117/0x180 [ 197.454870][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 197.454909][ C1] ? nmi_handle+0xa7/0x280 [ 197.454945][ C1] ? kvm_wait+0x117/0x180 [ 197.454975][ C1] ? default_do_nmi+0x69/0x160 [ 197.455014][ C1] ? exc_nmi+0xaf/0x120 [ 197.455050][ C1] ? end_repeat_nmi+0x16/0x31 [ 197.455089][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 197.455142][ C1] ? kvm_wait+0x117/0x180 [ 197.455155][ C1] ? kvm_wait+0x117/0x180 [ 197.455169][ C1] ? kvm_wait+0x117/0x180 [ 197.455182][ C1] [ 197.455186][ C1] [ 197.455191][ C1] ? stack_depot_save+0x13/0x20 [ 197.455209][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 197.455224][ C1] ? pv_hash+0x86/0x150 [ 197.455243][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 197.455268][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 197.455291][ C1] ? __kasan_check_write+0x14/0x20 [ 197.455306][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 197.455327][ C1] ? prep_new_page+0x34/0x110 [ 197.455342][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 197.455362][ C1] ? get_page_from_freelist+0x27ea/0x2870 [ 197.455377][ C1] ? __kasan_check_write+0x14/0x20 [ 197.455394][ C1] trie_delete_elem+0x94/0x760 [ 197.455422][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 197.455441][ C1] bpf_trace_run4+0x18d/0x2f0 [ 197.455456][ C1] ? bpf_trace_run3+0x2e0/0x2e0 [ 197.455470][ C1] ? __alloc_pages+0x780/0x780 [ 197.455486][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 197.455505][ C1] __alloc_pages+0x727/0x780 [ 197.455521][ C1] ? prep_new_page+0x110/0x110 [ 197.455537][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 197.455556][ C1] ? __sched_text_start+0x8/0x8 [ 197.455572][ C1] __kmalloc_large_node+0x9e/0x1b0 [ 197.455590][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 197.455612][ C1] __kmalloc_node+0xe5/0x1e0 [ 197.455628][ C1] ? bpf_map_kmalloc_node+0xd0/0x2c0 [ 197.455646][ C1] bpf_map_kmalloc_node+0xd0/0x2c0 [ 197.455665][ C1] trie_update_elem+0x1e6/0xc00 [ 197.455687][ C1] ? migrate_disable+0xd9/0x190 [ 197.455706][ C1] bpf_map_update_value+0x23a/0x410 [ 197.455726][ C1] map_update_elem+0x500/0x680 [ 197.455747][ C1] __sys_bpf+0x460/0x7f0 [ 197.455765][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 197.455784][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 197.455808][ C1] ? __kasan_check_write+0x14/0x20 [ 197.455821][ C1] ? fpregs_restore_userregs+0x130/0x290 [ 197.455839][ C1] __x64_sys_bpf+0x7c/0x90 [ 197.455858][ C1] do_syscall_64+0x3d/0xb0 [ 197.455873][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 197.455888][ C1] RIP: 0033:0x7f02d5c7cf29 [ 197.455900][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 197.455912][ C1] RSP: 002b:00007f02d694c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.455927][ C1] RAX: ffffffffffffffda RBX: 00007f02d5db3f80 RCX: 00007f02d5c7cf29 [ 197.455939][ C1] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 197.455948][ C1] RBP: 00007f02d5cec074 R08: 0000000000000000 R09: 0000000000000000 [ 197.455957][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.455967][ C1] R13: 000000000000000b R14: 00007f02d5db3f80 R15: 00007ffdebf47c58 [ 197.455981][ C1] [ 197.456375][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g12121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 197.941525][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=4581 [ 197.949160][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g12121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 197.960358][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 197.970163][ C0] rcu: RCU grace-period kthread stack dump: [ 197.975901][ C0] task:rcu_preempt state:I stack:27720 pid:14 ppid:2 flags:0x00004000 [ 197.984920][ C0] Call Trace: [ 197.988044][ C0] [ 197.990826][ C0] __schedule+0xca7/0x1550 [ 197.995073][ C0] ? requeue_task_rt+0x410/0x410 [ 197.999848][ C0] ? __sched_text_start+0x8/0x8 [ 198.004535][ C0] ? __kasan_check_write+0x14/0x20 [ 198.009481][ C0] schedule+0xc3/0x180 [ 198.013388][ C0] schedule_timeout+0x18c/0x380 [ 198.018073][ C0] ? __kasan_check_read+0x11/0x20 [ 198.022933][ C0] ? preempt_schedule_common+0xbe/0xf0 [ 198.028228][ C0] ? console_conditional_schedule+0x10/0x10 [ 198.033964][ C0] ? preempt_schedule+0xd9/0xe0 [ 198.038644][ C0] ? update_process_times+0x1b0/0x1b0 [ 198.043850][ C0] ? prepare_to_swait_event+0x308/0x320 [ 198.049234][ C0] rcu_gp_fqs_loop+0x2ed/0x1060 [ 198.053919][ C0] ? _raw_spin_unlock_irq+0x60/0x70 [ 198.058953][ C0] ? rcu_gp_init+0xc7f/0xf80 [ 198.063379][ C0] ? rcu_gp_init+0xf80/0xf80 [ 198.067805][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 198.073447][ C0] ? finish_swait+0x17d/0x1b0 [ 198.077964][ C0] rcu_gp_kthread+0xa3/0x390 [ 198.082388][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 198.087853][ C0] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 198.092889][ C0] ? __kasan_check_read+0x11/0x20 [ 198.097748][ C0] ? __kthread_parkme+0x12d/0x180 [ 198.102609][ C0] kthread+0x26d/0x300 [ 198.106515][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 198.111983][ C0] ? kthread_blkcg+0xd0/0xd0 [ 198.116409][ C0] ret_from_fork+0x1f/0x30 [ 198.120664][ C0] [ 198.123533][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 198.129690][ C0] Sending NMI from CPU 0 to CPUs 1: [ 198.134771][ C1] NMI backtrace for cpu 1 [ 198.134780][ C1] CPU: 1 PID: 2478 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00016-gbda57805ab9f #0 [ 198.134796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 198.134805][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 198.134823][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 0a 13 31 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 198.134836][ C1] RSP: 0018:ffffc9000600f4e0 EFLAGS: 00000046 [ 198.134850][ C1] RAX: 0000000000000003 RBX: 1ffff92000c01ea0 RCX: ffffffff8500688c [ 198.134861][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881316db960 [ 198.134872][ C1] RBP: ffffc9000600f590 R08: dffffc0000000000 R09: ffffed10262db72d [ 198.134884][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 198.134895][ C1] R13: ffff8881316db960 R14: 0000000000000003 R15: 1ffff92000c01ea4 [ 198.134905][ C1] FS: 00007f02d694c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 198.134919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.134930][ C1] CR2: 0000000020010000 CR3: 000000012ba05000 CR4: 00000000003506a0 [ 198.134945][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.134954][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.134964][ C1] Call Trace: [ 198.134969][ C1] [ 198.134974][ C1] ? show_regs+0x58/0x60 [ 198.134989][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 198.135009][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 198.135030][ C1] ? kvm_wait+0x117/0x180 [ 198.135043][ C1] ? kvm_wait+0x117/0x180 [ 198.135056][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 198.135074][ C1] ? nmi_handle+0xa7/0x280 [ 198.135089][ C1] ? kvm_wait+0x117/0x180 [ 198.135101][ C1] ? kvm_wait+0x117/0x180 [ 198.135114][ C1] ? default_do_nmi+0x69/0x160 [ 198.135132][ C1] ? exc_nmi+0xaf/0x120 [ 198.135147][ C1] ? end_repeat_nmi+0x16/0x31 [ 198.135164][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 198.135187][ C1] ? kvm_wait+0x117/0x180 [ 198.135201][ C1] ? kvm_wait+0x117/0x180 [ 198.135214][ C1] ? kvm_wait+0x117/0x180 [ 198.135227][ C1] [ 198.135232][ C1] [ 198.135236][ C1] ? stack_depot_save+0x13/0x20 [ 198.135254][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 198.135269][ C1] ? pv_hash+0x86/0x150 [ 198.135287][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 198.135311][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 198.135335][ C1] ? __kasan_check_write+0x14/0x20 [ 198.135350][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 198.135370][ C1] ? prep_new_page+0x34/0x110 [ 198.135384][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 198.135403][ C1] ? get_page_from_freelist+0x27ea/0x2870 [ 198.135418][ C1] ? __kasan_check_write+0x14/0x20 [ 198.135435][ C1] trie_delete_elem+0x94/0x760 [ 198.135468][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 198.135484][ C1] bpf_trace_run4+0x18d/0x2f0 [ 198.135498][ C1] ? bpf_trace_run3+0x2e0/0x2e0 [ 198.135513][ C1] ? __alloc_pages+0x780/0x780 [ 198.135529][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 198.135548][ C1] __alloc_pages+0x727/0x780 [ 198.135565][ C1] ? prep_new_page+0x110/0x110 [ 198.135580][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 198.135599][ C1] ? __sched_text_start+0x8/0x8 [ 198.135615][ C1] __kmalloc_large_node+0x9e/0x1b0 [ 198.135634][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 198.135655][ C1] __kmalloc_node+0xe5/0x1e0 [ 198.135672][ C1] ? bpf_map_kmalloc_node+0xd0/0x2c0 [ 198.135690][ C1] bpf_map_kmalloc_node+0xd0/0x2c0 [ 198.135707][ C1] trie_update_elem+0x1e6/0xc00 [ 198.135731][ C1] ? migrate_disable+0xd9/0x190 [ 198.135749][ C1] bpf_map_update_value+0x23a/0x410 [ 198.135768][ C1] map_update_elem+0x500/0x680 [ 198.135789][ C1] __sys_bpf+0x460/0x7f0 [ 198.135807][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 198.135826][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 198.135850][ C1] ? __kasan_check_write+0x14/0x20 [ 198.135863][ C1] ? fpregs_restore_userregs+0x130/0x290 [ 198.135882][ C1] __x64_sys_bpf+0x7c/0x90 [ 198.135900][ C1] do_syscall_64+0x3d/0xb0 [ 198.135915][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 198.135929][ C1] RIP: 0033:0x7f02d5c7cf29 [ 198.135941][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 198.135952][ C1] RSP: 002b:00007f02d694c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.135967][ C1] RAX: ffffffffffffffda RBX: 00007f02d5db3f80 RCX: 00007f02d5c7cf29 [ 198.135978][ C1] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 198.135988][ C1] RBP: 00007f02d5cec074 R08: 0000000000000000 R09: 0000000000000000 [ 198.135997][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.136006][ C1] R13: 000000000000000b R14: 00007f02d5db3f80 R15: 00007ffdebf47c58 [ 198.136020][ C1] [ 331.047581][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [syz-executor.2:2477] [ 331.055994][ C0] Modules linked in: [ 331.059735][ C0] CPU: 0 PID: 2477 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00016-gbda57805ab9f #0 [ 331.069623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 331.079520][ C0] RIP: 0010:smp_call_function_many_cond+0x851/0x930 [ 331.085937][ C0] Code: 3e 44 89 fe 83 e6 01 31 ff e8 4b 9f 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 86 9b 09 00 e9 2f ff ff ff f3 90 <42> 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff [ 331.105896][ C0] RSP: 0018:ffffc90006daf7a0 EFLAGS: 00000293 [ 331.111800][ C0] RAX: ffffffff816bd89c RBX: 1ffff1103ee27705 RCX: ffff88810eae6540 [ 331.119612][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.127423][ C0] RBP: ffffc90006daf8b8 R08: ffffffff816bd865 R09: ffffed103ee0707b [ 331.135233][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 331.143044][ C0] R13: 0000000800000000 R14: ffff8881f713b828 R15: dffffc0000000000 [ 331.150857][ C0] FS: 0000555556cc7480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 331.159620][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.166047][ C0] CR2: 0000001b2ef32000 CR3: 000000012ba05000 CR4: 00000000003506b0 [ 331.173858][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.181777][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.189587][ C0] Call Trace: [ 331.192714][ C0] [ 331.195414][ C0] ? show_regs+0x58/0x60 [ 331.199483][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 331.204516][ C0] ? proc_watchdog_cpumask+0xf0/0xf0 [ 331.209638][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 331.214846][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 331.219790][ C0] ? clockevents_program_event+0x22f/0x300 [ 331.225434][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 331.231335][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 331.236286][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 331.242184][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 331.247825][ C0] [ 331.250603][ C0] [ 331.253380][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.259369][ C0] ? smp_call_function_many_cond+0x835/0x930 [ 331.265184][ C0] ? smp_call_function_many_cond+0x86c/0x930 [ 331.270998][ C0] ? smp_call_function_many_cond+0x851/0x930 [ 331.276816][ C0] ? text_poke_sync+0x30/0x30 [ 331.281328][ C0] ? smp_call_function_many+0x40/0x40 [ 331.286536][ C0] ? text_poke_sync+0x30/0x30 [ 331.291135][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 331.296082][ C0] ? __alloc_pages+0x402/0x780 [ 331.300683][ C0] text_poke_bp_batch+0x1e9/0x730 [ 331.305544][ C0] ? text_poke_loc_init+0x680/0x680 [ 331.310576][ C0] ? __kasan_check_write+0x14/0x20 [ 331.315523][ C0] ? mutex_lock+0xb1/0x1e0 [ 331.319776][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 331.324897][ C0] ? bit_wait_io_timeout+0x120/0x120 [ 331.330018][ C0] ? text_poke_queue+0xe4/0x1a0 [ 331.334704][ C0] text_poke_finish+0x1a/0x30 [ 331.339218][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 331.345037][ C0] __jump_label_update+0x36a/0x380 [ 331.349981][ C0] jump_label_update+0x3af/0x450 [ 331.354756][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 331.360482][ C0] static_key_disable+0x1a/0x30 [ 331.365172][ C0] tracepoint_probe_unregister+0x60a/0x900 [ 331.370810][ C0] ? __bpf_trace_mm_page_free_batched+0x60/0x60 [ 331.376886][ C0] bpf_probe_unregister+0x61/0x70 [ 331.381748][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 331.386870][ C0] bpf_link_free+0x129/0x3f0 [ 331.391296][ C0] ? bpf_link_put_deferred+0x20/0x20 [ 331.396414][ C0] ? task_work_add+0x291/0x3a0 [ 331.401015][ C0] ? bpf_prog_get_stats+0x290/0x290 [ 331.406050][ C0] bpf_link_release+0x170/0x180 [ 331.410736][ C0] ? bpf_prog_get_stats+0x290/0x290 [ 331.415774][ C0] __fput+0x3ab/0x870 [ 331.419596][ C0] ____fput+0x15/0x20 [ 331.423409][ C0] task_work_run+0x24d/0x2e0 [ 331.427839][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 331.432695][ C0] ? close_fd+0x2f0/0x2f0 [ 331.436864][ C0] exit_to_user_mode_loop+0x94/0xa0 [ 331.441895][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 331.447189][ C0] syscall_exit_to_user_mode+0x26/0x140 [ 331.452570][ C0] do_syscall_64+0x49/0xb0 [ 331.456823][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 331.462551][ C0] RIP: 0033:0x7f02d5c7cf29 [ 331.466809][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 331.486246][ C0] RSP: 002b:00007ffdebf47d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.494497][ C0] RAX: 0000000000000000 RBX: 00007f02d5db5980 RCX: 00007f02d5c7cf29 [ 331.502302][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.510120][ C0] RBP: 00007f02d5db5980 R08: 000000008191b717 R09: 0000000c00000000 [ 331.517928][ C0] R10: 0000001b2f520000 R11: 0000000000000246 R12: 0000000000017f25 [ 331.525737][ C0] R13: 00007f02d5db405c R14: 0000000000000032 R15: 00007f02d5db5980 [ 331.533723][ C0] [ 331.536587][ C0] Sending NMI from CPU 0 to CPUs 1: [ 331.541674][ C1] NMI backtrace for cpu 1 [ 331.541694][ C1] CPU: 1 PID: 2478 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00016-gbda57805ab9f #0 [ 331.541711][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 331.541720][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 331.541740][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 0a 13 31 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 331.541753][ C1] RSP: 0018:ffffc9000600f4e0 EFLAGS: 00000046 [ 331.541767][ C1] RAX: 0000000000000003 RBX: 1ffff92000c01ea0 RCX: ffffffff8500688c [ 331.541778][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881316db960 [ 331.541788][ C1] RBP: ffffc9000600f590 R08: dffffc0000000000 R09: ffffed10262db72d [ 331.541800][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 331.541811][ C1] R13: ffff8881316db960 R14: 0000000000000003 R15: 1ffff92000c01ea4 [ 331.541822][ C1] FS: 00007f02d694c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 331.541836][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.541847][ C1] CR2: 0000000020010000 CR3: 000000012ba05000 CR4: 00000000003506a0 [ 331.541861][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.541870][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.541880][ C1] Call Trace: [ 331.541885][ C1] [ 331.541891][ C1] ? show_regs+0x58/0x60 [ 331.541924][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 331.541967][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 331.542014][ C1] ? kvm_wait+0x117/0x180 [ 331.542028][ C1] ? kvm_wait+0x117/0x180 [ 331.542041][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 331.542058][ C1] ? nmi_handle+0xa7/0x280 [ 331.542073][ C1] ? kvm_wait+0x117/0x180 [ 331.542086][ C1] ? kvm_wait+0x117/0x180 [ 331.542099][ C1] ? default_do_nmi+0x69/0x160 [ 331.542116][ C1] ? exc_nmi+0xaf/0x120 [ 331.542132][ C1] ? end_repeat_nmi+0x16/0x31 [ 331.542149][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 331.542172][ C1] ? kvm_wait+0x117/0x180 [ 331.542185][ C1] ? kvm_wait+0x117/0x180 [ 331.542199][ C1] ? kvm_wait+0x117/0x180 [ 331.542211][ C1] [ 331.542216][ C1] [ 331.542220][ C1] ? stack_depot_save+0x13/0x20 [ 331.542238][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 331.542253][ C1] ? pv_hash+0x86/0x150 [ 331.542293][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 331.542317][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 331.542341][ C1] ? __kasan_check_write+0x14/0x20 [ 331.542356][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 331.542376][ C1] ? prep_new_page+0x34/0x110 [ 331.542391][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 331.542410][ C1] ? get_page_from_freelist+0x27ea/0x2870 [ 331.542425][ C1] ? __kasan_check_write+0x14/0x20 [ 331.542441][ C1] trie_delete_elem+0x94/0x760 [ 331.542465][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 331.542480][ C1] bpf_trace_run4+0x18d/0x2f0 [ 331.542495][ C1] ? bpf_trace_run3+0x2e0/0x2e0 [ 331.542509][ C1] ? __alloc_pages+0x780/0x780 [ 331.542525][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 331.542544][ C1] __alloc_pages+0x727/0x780 [ 331.542560][ C1] ? prep_new_page+0x110/0x110 [ 331.542576][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 331.542594][ C1] ? __sched_text_start+0x8/0x8 [ 331.542611][ C1] __kmalloc_large_node+0x9e/0x1b0 [ 331.542629][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 331.542651][ C1] __kmalloc_node+0xe5/0x1e0 [ 331.542667][ C1] ? bpf_map_kmalloc_node+0xd0/0x2c0 [ 331.542686][ C1] bpf_map_kmalloc_node+0xd0/0x2c0 [ 331.542704][ C1] trie_update_elem+0x1e6/0xc00 [ 331.542727][ C1] ? migrate_disable+0xd9/0x190 [ 331.542746][ C1] bpf_map_update_value+0x23a/0x410 [ 331.542766][ C1] map_update_elem+0x500/0x680 [ 331.542787][ C1] __sys_bpf+0x460/0x7f0 [ 331.542805][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 331.542824][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 331.542848][ C1] ? __kasan_check_write+0x14/0x20 [ 331.542871][ C1] ? fpregs_restore_userregs+0x130/0x290 [ 331.542890][ C1] __x64_sys_bpf+0x7c/0x90 [ 331.542908][ C1] do_syscall_64+0x3d/0xb0 [ 331.542923][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 331.542937][ C1] RIP: 0033:0x7f02d5c7cf29 [ 331.542948][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 331.542961][ C1] RSP: 002b:00007f02d694c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.542976][ C1] RAX: ffffffffffffffda RBX: 00007f02d5db3f80 RCX: 00007f02d5c7cf29 [ 331.542987][ C1] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 331.542997][ C1] RBP: 00007f02d5cec074 R08: 0000000000000000 R09: 0000000000000000 [ 331.543006][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.543015][ C1] R13: 000000000000000b R14: 00007f02d5db3f80 R15: 00007ffdebf47c58 [ 331.543030][ C1]