last executing test programs: 5.752397456s ago: executing program 0 (id=170): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 5.675934377s ago: executing program 0 (id=175): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x7}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r0, 0x1, 0xc7, &(0x7f0000000080)=""/199) 5.620311088s ago: executing program 4 (id=180): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 5.592200968s ago: executing program 4 (id=181): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000002c0)={0x1, 0x2}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 5.578482648s ago: executing program 4 (id=182): bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x2040400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 5.520345869s ago: executing program 4 (id=183): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffbfffffff, 0x6, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) 5.47573183s ago: executing program 4 (id=184): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x2000c090) r1 = socket(0x22, 0x2, 0x4) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5.368676712s ago: executing program 4 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/254, 0xfe}], 0x1) sendmmsg$inet6(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="93503d", 0x3}, {&(0x7f0000000380)="963498e674a71f0b5417a80babd251cfb8cc075af4d9af171fd09d491a5bb9126061770a36d96060988795e85ce9d33da7334620031e98a4d66ef988d05d919903d003ea7c4218569f6f354bb4a048daf0670dc9a03578c40affb49f5500b26444c2e0edd384e3dd4b5d256271c56aa3f68426bf6078c3ea655c59a2812c74c79d4e73486254eb941f396516795465b24cc55a6e8aec5945063a3e320a5e4edf2c028ed7b14d9e4ce35ed41c31c58aaa5d25d789563da79b8b50ac1cbe", 0xbd}, {&(0x7f0000000880)="4a39bddd166ccfb5b6e72053503eb1f1dfdf167fbd6ac4fa4ef95ef1734cb44cd640af6a29cf3544cf3640d13fa8d56dd265f0ab2b53e76817fbc12f1523e7", 0x3f}], 0x3}}], 0x1, 0x40) 5.345339502s ago: executing program 32 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/254, 0xfe}], 0x1) sendmmsg$inet6(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="93503d", 0x3}, {&(0x7f0000000380)="963498e674a71f0b5417a80babd251cfb8cc075af4d9af171fd09d491a5bb9126061770a36d96060988795e85ce9d33da7334620031e98a4d66ef988d05d919903d003ea7c4218569f6f354bb4a048daf0670dc9a03578c40affb49f5500b26444c2e0edd384e3dd4b5d256271c56aa3f68426bf6078c3ea655c59a2812c74c79d4e73486254eb941f396516795465b24cc55a6e8aec5945063a3e320a5e4edf2c028ed7b14d9e4ce35ed41c31c58aaa5d25d789563da79b8b50ac1cbe", 0xbd}, {&(0x7f0000000880)="4a39bddd166ccfb5b6e72053503eb1f1dfdf167fbd6ac4fa4ef95ef1734cb44cd640af6a29cf3544cf3640d13fa8d56dd265f0ab2b53e76817fbc12f1523e7", 0x3f}], 0x3}}], 0x1, 0x40) 2.635869911s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.539989832s ago: executing program 0 (id=266): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) flistxattr(r0, 0x0, 0x0) 2.504644373s ago: executing program 0 (id=269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x0, 0x3, "679e23066f854e45ff80bf975376eeeb108dbe082f6da44b1701d8ccd5becd4b5404fc27627d9e99d0eda2bdd6a53498f8ac7e39ca3466c6763fa4c43210d08ed7819deaa3fb40dc733a3bc9d4ff43ab24512e098c621aae214cdd033cfa04e29cca3574b5f777a2047691e232fcc442f86a4f691c5bb8f4f912c7b2de67f151ba3410fc845f0233deda21d9ebb2e23bbbc52ca1cf621a3aaee40d971629339fe5d738e5d88648"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 1.860798863s ago: executing program 1 (id=282): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x7ff}}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 1.838972273s ago: executing program 1 (id=283): unshare(0x2040400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.781656014s ago: executing program 1 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000000100c000"]) 1.706067655s ago: executing program 1 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.676714705s ago: executing program 1 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) shutdown(r0, 0x0) 1.597998787s ago: executing program 1 (id=287): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc53f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1005, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.018142665s ago: executing program 5 (id=296): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 945.889976ms ago: executing program 5 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) write$binfmt_script(r1, &(0x7f0000000240), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 945.165316ms ago: executing program 2 (id=307): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 927.669366ms ago: executing program 5 (id=298): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x12, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 756.315599ms ago: executing program 5 (id=299): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000004000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e900b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 699.724019ms ago: executing program 2 (id=300): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 624.885201ms ago: executing program 5 (id=301): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)) 556.765981ms ago: executing program 5 (id=302): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000340)={0x0, 0xe, 0x6, "72615bd7c8ad"}, 0x0, 0x0}) 314.222935ms ago: executing program 2 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 267.303736ms ago: executing program 2 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) 222.997697ms ago: executing program 2 (id=308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r1, 0x8, 0x4000, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 206.861967ms ago: executing program 3 (id=309): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 157.457027ms ago: executing program 3 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) flistxattr(r0, 0x0, 0x0) 144.493887ms ago: executing program 3 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000180000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 77.853619ms ago: executing program 3 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 46.225069ms ago: executing program 3 (id=313): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x7ff}}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 26.786229ms ago: executing program 3 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) shutdown(r0, 0x0) 5.507399ms ago: executing program 2 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xffffffffffffffff, 0x62e98891, 0x2, 0x1, 0x5}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x311) signalfd4(r0, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 25.492484][ T30] audit: type=1400 audit(1753769032.347:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.493900][ T273] cgroup: Unknown subsys name 'net' [ 25.515407][ T30] audit: type=1400 audit(1753769032.347:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.542829][ T30] audit: type=1400 audit(1753769032.377:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.543116][ T273] cgroup: Unknown subsys name 'devices' [ 25.741842][ T273] cgroup: Unknown subsys name 'hugetlb' [ 25.747474][ T273] cgroup: Unknown subsys name 'rlimit' [ 25.917165][ T30] audit: type=1400 audit(1753769032.767:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.940405][ T30] audit: type=1400 audit(1753769032.767:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.965439][ T30] audit: type=1400 audit(1753769032.767:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.971326][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.997601][ T30] audit: type=1400 audit(1753769032.847:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.023156][ T30] audit: type=1400 audit(1753769032.847:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.049728][ T30] audit: type=1400 audit(1753769032.907:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.075449][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.075841][ T30] audit: type=1400 audit(1753769032.907:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.574426][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.581662][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.589089][ T281] device bridge_slave_0 entered promiscuous mode [ 26.597310][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604443][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.611992][ T281] device bridge_slave_1 entered promiscuous mode [ 26.686735][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.693908][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.701364][ T283] device bridge_slave_0 entered promiscuous mode [ 26.723661][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.730751][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.738086][ T283] device bridge_slave_1 entered promiscuous mode [ 26.747995][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.755075][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.762543][ T282] device bridge_slave_0 entered promiscuous mode [ 26.775465][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.782617][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.790152][ T284] device bridge_slave_0 entered promiscuous mode [ 26.800581][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.807624][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.815070][ T282] device bridge_slave_1 entered promiscuous mode [ 26.828124][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.835354][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.842847][ T284] device bridge_slave_1 entered promiscuous mode [ 26.940317][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.947384][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.954971][ T285] device bridge_slave_0 entered promiscuous mode [ 26.961921][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.968961][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.976428][ T285] device bridge_slave_1 entered promiscuous mode [ 27.033958][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.041063][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.124953][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.132041][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.139440][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.146512][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.155367][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.162449][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.169731][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.176884][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.193070][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.200370][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.207735][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.215095][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.222461][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.231570][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.239004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.259625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.267985][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.276249][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.283309][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.313526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.321760][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.328783][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.341138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.361959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.369473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.377214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.385388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.393770][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.400854][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.423609][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.432457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.440984][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.448015][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.455520][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.463979][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.471035][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.478395][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.486576][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.493621][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.500969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.509098][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.516128][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.523490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.550262][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.558106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.566423][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.573468][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.580947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.588873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.597366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.605422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.613416][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.628346][ T281] device veth0_vlan entered promiscuous mode [ 27.640190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.648581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.657399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.666519][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.674648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.683054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.705614][ T284] device veth0_vlan entered promiscuous mode [ 27.712298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.719986][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.727395][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.735996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.744569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.753075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.761530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.769336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.777549][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.785110][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.792655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.800665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.808660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.817453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.825753][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.832811][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.840243][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.847713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.855348][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.862876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.870361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.878444][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.886492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.896307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.904065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.917291][ T281] device veth1_macvtap entered promiscuous mode [ 27.926976][ T283] device veth0_vlan entered promiscuous mode [ 27.933675][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.941876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.950466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.958002][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.966413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.974766][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.981819][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.990556][ T284] device veth1_macvtap entered promiscuous mode [ 28.004853][ T285] device veth0_vlan entered promiscuous mode [ 28.014602][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.022890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.031051][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.038582][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.047030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.055580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.063904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.074783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.083198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.095054][ T285] device veth1_macvtap entered promiscuous mode [ 28.106117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.115060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.123677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.123931][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 28.133881][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.147484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.155800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.164257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.172086][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.180283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.190907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.199112][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.219647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.228214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.236578][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.245494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.256261][ T283] device veth1_macvtap entered promiscuous mode [ 28.267272][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.275436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.284025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.299034][ T282] device veth0_vlan entered promiscuous mode [ 28.315848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.324151][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.333526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.342707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.351366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.360224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.378799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.392323][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.416104][ T282] device veth1_macvtap entered promiscuous mode [ 28.434142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.452851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.461441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.478187][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.496569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.505988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.510046][ T349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.515661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.734198][ T361] process 'syz.3.9' launched './file1' with NULL argv: empty string added [ 29.104225][ T414] loop1: detected capacity change from 0 to 2048 [ 29.126764][ T416] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 29.178829][ T424] syz.2.39 (424) used greatest stack depth: 21536 bytes left [ 29.186412][ T332] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.196578][ T414] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.207418][ T414] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 29.229648][ T414] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 29.246667][ T414] EXT4-fs (loop1): group descriptors corrupted! [ 29.341672][ T449] loop4: detected capacity change from 0 to 128 [ 29.378524][ T453] 9pnet: p9_errstr2errno: server reported unknown error  [ 29.448814][ T45] attempt to access beyond end of device [ 29.448814][ T45] loop4: rw=1, want=1041, limit=128 [ 29.559692][ T332] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 29.576244][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.589089][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 29.614654][ T332] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 29.624158][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.636794][ T332] usb 4-1: config 0 descriptor?? [ 29.652097][ T477] loop0: detected capacity change from 0 to 512 [ 29.696920][ T487] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=487 comm=syz.1.63 [ 29.730152][ T477] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 29.748482][ T477] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.874783][ T509] overlayfs: failed to set xattr on upper [ 29.906849][ T515] syz.4.75[515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.906939][ T515] syz.4.75[515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.962122][ T523] syz.1.79[523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.981904][ T523] syz.1.79[523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.121134][ T332] holtek_kbd 0003:04D9:A055.0001: unbalanced delimiter at end of report description [ 30.200071][ T332] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22 [ 30.260348][ T525] loop0: detected capacity change from 0 to 40427 [ 30.270688][ T548] kvm [547]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0 [ 30.294196][ T525] F2FS-fs (loop0): invalid crc value [ 30.302310][ T554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 30.319272][ T525] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.338034][ T332] usb 4-1: USB disconnect, device number 2 [ 30.381478][ T525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.470189][ T283] attempt to access beyond end of device [ 30.470189][ T283] loop0: rw=2049, want=45104, limit=40427 [ 30.923950][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 30.923964][ T30] audit: type=1400 audit(1753769037.777:205): avc: denied { ioctl } for pid=598 comm="syz.3.110" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.960581][ T599] binder: 598:599 ioctl c0306201 200000000040 returned -14 [ 30.970516][ T30] audit: type=1400 audit(1753769037.777:206): avc: denied { set_context_mgr } for pid=598 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.068875][ T30] audit: type=1400 audit(1753769037.917:207): avc: denied { name_bind } for pid=612 comm="syz.3.118" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 31.126717][ T30] audit: type=1400 audit(1753769037.977:208): avc: denied { read } for pid=619 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.178443][ T627] netlink: 'syz.1.121': attribute type 13 has an invalid length. [ 31.199029][ T627] netlink: 'syz.1.121': attribute type 17 has an invalid length. [ 31.208415][ T30] audit: type=1326 audit(1753769038.057:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.247227][ T30] audit: type=1326 audit(1753769038.057:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.284543][ T30] audit: type=1326 audit(1753769038.087:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.307990][ T30] audit: type=1326 audit(1753769038.127:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.331487][ T30] audit: type=1326 audit(1753769038.127:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.355078][ T30] audit: type=1326 audit(1753769038.127:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37c5c4b9a9 code=0x7ffc0000 [ 31.403103][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.411439][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.420456][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.428663][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.437724][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.446154][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.454593][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.486089][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.509937][ T638] loop3: detected capacity change from 0 to 512 [ 31.562912][ T638] ======================================================= [ 31.562912][ T638] WARNING: The mand mount option has been deprecated and [ 31.562912][ T638] and is ignored by this kernel. Remove the mand [ 31.562912][ T638] option from the mount to silence this warning. [ 31.562912][ T638] ======================================================= [ 31.655906][ T638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 31.669154][ T659] loop1: detected capacity change from 0 to 1024 [ 31.676971][ T667] loop2: detected capacity change from 0 to 1024 [ 31.685248][ T638] System zones: 0-2, 18-18, 34-34 [ 31.707263][ T638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.129: bg 0: block 248: padding at end of block bitmap is not set [ 31.727312][ T638] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.129: Failed to acquire dquot type 1 [ 31.739735][ T638] EXT4-fs (loop3): 1 truncate cleaned up [ 31.745410][ T638] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.759741][ T667] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.789625][ T667] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 31.811601][ T638] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.830267][ T667] JBD2: no valid journal superblock found [ 31.836276][ T667] EXT4-fs (loop2): error loading journal [ 31.854885][ T659] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 2: comm syz.1.138: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.878887][ T659] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.138: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.912112][ T659] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.138: Failed to acquire dquot type 0 [ 31.924287][ T659] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 31.936457][ T638] syz.3.129 (638) used greatest stack depth: 21344 bytes left [ 31.950708][ T659] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #11: comm syz.1.138: mark_inode_dirty error [ 31.966991][ T659] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 31.977593][ T659] EXT4-fs (loop1): 1 orphan inode deleted [ 31.981123][ T689] loop2: detected capacity change from 0 to 128 [ 31.983541][ T659] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,noblock_validity,init_itable,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 31.996871][ T337] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.037943][ T337] EXT4-fs error (device loop1): ext4_release_dquot:6234: comm kworker/u4:3: Failed to release dquot type 0 [ 32.068344][ T687] tipc: Started in network mode [ 32.073526][ T687] tipc: Node identity ac14140f, cluster identity 4711 [ 32.082997][ T659] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 16: comm syz.1.138: lblock 0 mapped to illegal pblock 16 (length 1) [ 32.099804][ T687] tipc: New replicast peer: 255.255.255.83 [ 32.105784][ T687] tipc: Enabled bearer , priority 10 [ 32.113459][ T281] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 32.137015][ T281] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 32.160868][ T281] EXT4-fs error (device loop1): ext4_quota_off:6504: inode #3: comm syz-executor: mark_inode_dirty error [ 32.352749][ T726] loop4: detected capacity change from 0 to 128 [ 32.435333][ T728] syz.1.166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.460339][ T730] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 32.460825][ T732] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=732 comm=syz.1.169 [ 32.483381][ T732] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=732 comm=syz.1.169 [ 32.516277][ T736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 32.519600][ T339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.579615][ T417] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.732066][ T762] loop4: detected capacity change from 0 to 512 [ 32.761717][ T762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.772817][ T762] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.789421][ T762] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #18: comm syz.4.183: corrupted xattr block 20 [ 32.806661][ T285] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 32.818267][ T285] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 32.829851][ T417] usb 4-1: Using ep0 maxpacket: 32 [ 32.859708][ T336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.889615][ T339] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 32.897861][ T339] usb 3-1: config 0 has no interface number 0 [ 32.904233][ T339] usb 3-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 32.913353][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.922317][ T339] usb 3-1: config 0 descriptor?? [ 32.969634][ T417] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.978055][ T417] usb 4-1: config 0 has no interface number 0 [ 32.984359][ T417] usb 4-1: config 0 interface 184 has no altsetting 0 [ 33.014129][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.021407][ T766] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.028798][ T766] device bridge_slave_0 entered promiscuous mode [ 33.035906][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.042952][ T766] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.050386][ T766] device bridge_slave_1 entered promiscuous mode [ 33.098237][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.099589][ T295] tipc: Node number set to 2886997007 [ 33.105501][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.105607][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.125140][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.145194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.153088][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.160836][ T417] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.170363][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.170403][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.185601][ T417] usb 4-1: Product: syz [ 33.189811][ T417] usb 4-1: Manufacturer: syz [ 33.194866][ T417] usb 4-1: SerialNumber: syz [ 33.200339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.200665][ T417] usb 4-1: config 0 descriptor?? [ 33.213659][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.220744][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.228210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.236577][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.243669][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.253982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.260137][ T417] smsc75xx v1.0.0 [ 33.265885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.278939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.289612][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.293087][ T766] device veth0_vlan entered promiscuous mode [ 33.303969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.312138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.320442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.332625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.341895][ T766] device veth1_macvtap entered promiscuous mode [ 33.352256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.362653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.369623][ T336] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 33.378931][ T336] usb 1-1: config 6 has no interface number 0 [ 33.385303][ T336] usb 1-1: config 6 interface 200 has no altsetting 0 [ 33.549767][ T336] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 33.559100][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.568628][ T336] usb 1-1: Product: syz [ 33.573202][ T336] usb 1-1: Manufacturer: syz [ 33.582726][ T336] usb 1-1: SerialNumber: syz [ 33.741861][ T809] loop1: detected capacity change from 0 to 8192 [ 33.790727][ T809] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.009625][ T339] asix 3-1:0.102 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.020031][ T339] asix: probe of 3-1:0.102 failed with error -71 [ 34.027300][ T339] usb 3-1: USB disconnect, device number 2 [ 34.099074][ T836] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 34.278549][ T847] SELinux: unknown common [ 34.283336][ T847] SELinux: failed to load policy [ 34.456906][ T866] syz.1.227[866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.456966][ T866] syz.1.227[866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.549600][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 34.572509][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.599857][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.611174][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.621169][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.631662][ T417] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.641312][ T417] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 34.649409][ T417] usb 4-1: USB disconnect, device number 3 [ 34.733122][ T885] loop2: detected capacity change from 0 to 1024 [ 34.771318][ T885] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.789678][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.791345][ T885] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 34.835041][ T885] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 35.004977][ T906] loop2: detected capacity change from 0 to 512 [ 35.029570][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 35.042374][ T906] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 35.066181][ T906] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 35.085905][ T906] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.147996][ T916] loop3: detected capacity change from 0 to 128 [ 35.154707][ T20] usb 2-1: config 0 has no interfaces? [ 35.168424][ T920] loop5: detected capacity change from 0 to 128 [ 35.178109][ T10] device bridge_slave_1 left promiscuous mode [ 35.184613][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.192545][ T10] device bridge_slave_0 left promiscuous mode [ 35.198799][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.224769][ T916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.244201][ T10] device veth1_macvtap left promiscuous mode [ 35.250975][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.263539][ T916] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.267517][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.282120][ T10] device veth0_vlan left promiscuous mode [ 35.288450][ T20] usb 2-1: SerialNumber: syz [ 35.333470][ T925] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 35.355175][ T20] usb 2-1: config 0 descriptor?? [ 35.369796][ T925] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 35.525487][ T944] 9pnet: p9_errstr2errno: server reported unknown error 0000000000,group_id=00000000000000000000, [ 35.619934][ T39] usb 2-1: USB disconnect, device number 2 [ 35.628998][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 35.642960][ T332] usb 1-1: USB disconnect, device number 2 [ 35.659084][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.671449][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 35.682310][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.692025][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.701049][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.709425][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.734771][ T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.899251][ T977] loop2: detected capacity change from 0 to 512 [ 35.940996][ T977] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.958154][ T977] EXT4-fs (loop2): invalid journal inode [ 35.970389][ T977] EXT4-fs (loop2): can't get journal size [ 35.997877][ T977] EXT4-fs (loop2): 1 truncate cleaned up [ 36.003786][ T977] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 36.036672][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 36.036688][ T30] audit: type=1400 audit(1753769042.887:396): avc: denied { read append } for pid=976 comm="syz.2.274" path="/44/file0/freezer.state" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.068618][ T30] audit: type=1400 audit(1753769042.897:397): avc: denied { map } for pid=976 comm="syz.2.274" path="/44/file0/freezer.state" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.092080][ T30] audit: type=1400 audit(1753769042.897:398): avc: denied { execute } for pid=976 comm="syz.2.274" path="/44/file0/freezer.state" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.133540][ T30] audit: type=1400 audit(1753769042.897:399): avc: denied { getopt } for pid=976 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.149546][ T332] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.198538][ T30] audit: type=1326 audit(1753769043.047:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.244486][ T30] audit: type=1326 audit(1753769043.077:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.274684][ T30] audit: type=1326 audit(1753769043.077:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.298206][ T30] audit: type=1326 audit(1753769043.077:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.322003][ T30] audit: type=1326 audit(1753769043.077:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.350828][ T30] audit: type=1326 audit(1753769043.087:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40e4bc9a9 code=0x7ffc0000 [ 36.519845][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.535302][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.545670][ T332] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.556267][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.566845][ T332] usb 1-1: config 0 descriptor?? [ 36.959564][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.209633][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 37.215755][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.233719][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.247191][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.258677][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.266579][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.269681][ T332] usb 1-1: string descriptor 0 read error: -22 [ 37.274199][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.287906][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.295844][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.304170][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.318893][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.328440][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.336138][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.346176][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.358668][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.366295][ T1037] loop2: detected capacity change from 0 to 1024 [ 37.366546][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 37.382037][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.389440][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.397367][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.405696][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.413714][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.420295][ T1039] loop5: detected capacity change from 0 to 8192 [ 37.421381][ T20] usb 2-1: config 0 descriptor?? [ 37.432587][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.440021][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.447420][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.454969][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.461480][ T1037] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.462425][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.474795][ T1039] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.481437][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.498280][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.505784][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.513706][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.521193][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.528616][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.536051][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.543539][ T332] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 37.549887][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.553664][ T1037] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.307: bit already cleared for inode 15 [ 37.561644][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.577241][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.584703][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.592305][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.599979][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.607409][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.614885][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.622357][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.630061][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.637487][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.645159][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.652798][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.660447][ T336] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 37.668485][ T336] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.683549][ T1045] loop5: detected capacity change from 0 to 4096 [ 37.702535][ T1045] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 37.752080][ T1051] loop2: detected capacity change from 0 to 1024 [ 37.770493][ T756] usb 1-1: USB disconnect, device number 3 [ 37.800212][ T1051] EXT4-fs (loop2): Ignoring removed orlov option [ 37.813819][ T1051] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 37.969597][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 37.975700][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 37.985154][ T20] usb 2-1: USB disconnect, device number 3 [ 38.009571][ T949] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.070884][ T1065] loop2: detected capacity change from 0 to 1024 [ 38.108259][ T1065] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.146203][ T1065] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 38.192829][ T1065] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.308: Allocating blocks 497-513 which overlap fs metadata [ 38.207468][ T1065] EXT4-fs (loop2): pa ffff8881115b57e0: logic 128, phys. 385, len 8 [ 38.215541][ T1065] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 38.278617][ T928] ================================================================== [ 38.286719][ T928] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 38.294118][ T928] Read of size 4 at addr ffff8881275b120c by task kworker/u4:5/928 [ 38.302027][ T928] [ 38.303793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.304383][ T928] CPU: 0 PID: 928 Comm: kworker/u4:5 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 38.321016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.322127][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.340072][ T928] Workqueue: writeback wb_workfn (flush-7:2) [ 38.346106][ T928] Call Trace: [ 38.349395][ T928] [ 38.352338][ T928] __dump_stack+0x21/0x30 [ 38.356689][ T928] dump_stack_lvl+0xee/0x150 [ 38.361299][ T928] ? show_regs_print_info+0x20/0x20 [ 38.366514][ T928] ? load_image+0x3a0/0x3a0 [ 38.371045][ T928] print_address_description+0x7f/0x2c0 [ 38.372638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.376610][ T928] ? ext4_find_extent+0xbeb/0xe20 [ 38.389425][ T928] kasan_report+0xf1/0x140 [ 38.391922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.393861][ T928] ? __read_extent_tree_block+0x1e8/0x790 [ 38.402792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.407485][ T928] ? ext4_find_extent+0xbeb/0xe20 [ 38.407511][ T928] __asan_report_load4_noabort+0x14/0x20 [ 38.425946][ T928] ext4_find_extent+0xbeb/0xe20 [ 38.430820][ T928] ext4_ext_map_blocks+0x1de/0x6280 [ 38.436044][ T928] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 38.441877][ T928] ? __stack_depot_save+0x442/0x480 [ 38.447099][ T928] ? __kasan_slab_alloc+0xcf/0xf0 [ 38.452151][ T928] ? __kasan_slab_alloc+0xbd/0xf0 [ 38.457180][ T928] ? slab_post_alloc_hook+0x4f/0x2b0 [ 38.462462][ T928] ? kmem_cache_alloc+0xf7/0x260 [ 38.467396][ T928] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 38.472761][ T928] ? ext4_writepages+0xec8/0x2f90 [ 38.477782][ T928] ? do_writepages+0x48a/0x6c0 [ 38.482543][ T928] ? wb_workfn+0x38f/0xe20 [ 38.486958][ T928] ? process_one_work+0x6be/0xba0 [ 38.491980][ T928] ? worker_thread+0xa59/0x1200 [ 38.496828][ T928] ? ext4_ext_release+0x10/0x10 [ 38.501695][ T928] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 38.507156][ T928] ext4_map_blocks+0x97b/0x1b20 [ 38.512006][ T928] ? slab_post_alloc_hook+0x6d/0x2b0 [ 38.517292][ T928] ? should_failslab+0x9/0x20 [ 38.521968][ T928] ? ext4_issue_zeroout+0x250/0x250 [ 38.527167][ T928] ? ext4_inode_journal_mode+0x19a/0x480 [ 38.532814][ T928] ext4_writepages+0x11e7/0x2f90 [ 38.537773][ T928] ? ext4_readpage+0x220/0x220 [ 38.542568][ T928] ? enqueue_task_fair+0xaa7/0x2120 [ 38.547774][ T928] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 38.553423][ T928] ? ext4_readpage+0x220/0x220 [ 38.558196][ T928] do_writepages+0x48a/0x6c0 [ 38.562792][ T928] ? update_load_avg+0x410/0x1110 [ 38.567849][ T928] ? update_curr+0x2f3/0x5b0 [ 38.572441][ T928] ? __writepage+0x130/0x130 [ 38.577029][ T928] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 38.582662][ T928] ? __kasan_check_write+0x14/0x20 [ 38.587773][ T928] ? _raw_spin_lock+0x8e/0xe0 [ 38.592470][ T928] __writeback_single_inode+0xd5/0x9c0 [ 38.597930][ T928] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 38.603907][ T928] writeback_sb_inodes+0x9c0/0x1590 [ 38.609107][ T928] ? update_load_avg+0x410/0x1110 [ 38.614139][ T928] ? queue_io+0x4c0/0x4c0 [ 38.618477][ T928] ? __kasan_check_read+0x11/0x20 [ 38.623501][ T928] ? queue_io+0x382/0x4c0 [ 38.627833][ T928] wb_writeback+0x3f1/0x980 [ 38.632334][ T928] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 38.638319][ T928] ? set_worker_desc+0x155/0x1c0 [ 38.643261][ T928] ? __kasan_check_write+0x14/0x20 [ 38.648375][ T928] wb_workfn+0x38f/0xe20 [ 38.652630][ T928] ? inode_wait_for_writeback+0x200/0x200 [ 38.658349][ T928] ? compat_start_thread+0x20/0x20 [ 38.663464][ T928] ? _raw_spin_unlock+0x4d/0x70 [ 38.668314][ T928] ? finish_task_switch+0x16b/0x780 [ 38.673507][ T928] ? __switch_to_asm+0x3a/0x60 [ 38.678272][ T928] ? __schedule+0xb76/0x14c0 [ 38.682869][ T928] process_one_work+0x6be/0xba0 [ 38.687728][ T928] worker_thread+0xa59/0x1200 [ 38.692404][ T928] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 38.697864][ T928] kthread+0x411/0x500 [ 38.701929][ T928] ? worker_clr_flags+0x190/0x190 [ 38.706950][ T928] ? kthread_blkcg+0xd0/0xd0 [ 38.711541][ T928] ret_from_fork+0x1f/0x30 [ 38.715953][ T928] [ 38.718963][ T928] [ 38.721281][ T928] The buggy address belongs to the page: [ 38.726904][ T928] page:ffffea00049d6c40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1275b1 [ 38.737142][ T928] flags: 0x4000000000000000(zone=1) [ 38.742354][ T928] raw: 4000000000000000 0000000000000000 ffffffff049d0301 0000000000000000 [ 38.750936][ T928] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 38.759512][ T928] page dumped because: kasan: bad access detected [ 38.765920][ T928] page_owner tracks the page as freed [ 38.771275][ T928] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 33418201177, free_ts 38292902655 [ 38.791769][ T928] post_alloc_hook+0x192/0x1b0 [ 38.796527][ T928] prep_new_page+0x1c/0x110 [ 38.801021][ T928] get_page_from_freelist+0x2cc5/0x2d50 [ 38.806560][ T928] __alloc_pages+0x18f/0x440 [ 38.811144][ T928] new_slab+0xa1/0x4d0 [ 38.815210][ T928] ___slab_alloc+0x381/0x810 [ 38.819794][ T928] __slab_alloc+0x49/0x90 [ 38.824120][ T928] kmem_cache_alloc+0x138/0x260 [ 38.828969][ T928] getname_flags+0xb9/0x500 [ 38.833567][ T928] getname+0x19/0x20 [ 38.837467][ T928] do_sys_openat2+0xd9/0x7b0 [ 38.842075][ T928] __x64_sys_openat+0x136/0x160 [ 38.846941][ T928] x64_sys_call+0x219/0x9a0 [ 38.851469][ T928] do_syscall_64+0x4c/0xa0 [ 38.855891][ T928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.861923][ T928] page last free stack trace: [ 38.866597][ T928] free_unref_page_prepare+0x542/0x550 [ 38.872062][ T928] free_unref_page+0xa2/0x550 [ 38.876738][ T928] __free_pages+0x6c/0x100 [ 38.881156][ T928] __free_slab+0xe8/0x1e0 [ 38.885487][ T928] __unfreeze_partials+0x160/0x190 [ 38.890593][ T928] put_cpu_partial+0xc6/0x120 [ 38.895267][ T928] __slab_free+0x1d4/0x290 [ 38.899684][ T928] ___cache_free+0x104/0x120 [ 38.904269][ T928] qlink_free+0x4d/0x90 [ 38.908419][ T928] qlist_free_all+0x5f/0xb0 [ 38.912919][ T928] kasan_quarantine_reduce+0x14a/0x170 [ 38.918381][ T928] __kasan_slab_alloc+0x2f/0xf0 [ 38.926177][ T928] slab_post_alloc_hook+0x4f/0x2b0 [ 38.931289][ T928] __kmalloc_track_caller+0x11f/0x2c0 [ 38.936674][ T928] kvasprintf+0xd4/0x180 [ 38.940921][ T928] kvasprintf_const+0xf2/0x240 [ 38.945706][ T928] [ 38.948048][ T928] Memory state around the buggy address: [ 38.953671][ T928] ffff8881275b1100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.961725][ T928] ffff8881275b1180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.969779][ T928] >ffff8881275b1200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.977828][ T928] ^ [ 38.982148][ T928] ffff8881275b1280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.990206][ T928] ffff8881275b1300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.998294][ T928] ================================================================== [ 39.006340][ T928] Disabling lock debugging due to kernel taint [ 39.051288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.068816][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.076803][ T928] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 5488968173697: comm kworker/u4:5: lblock 0 mapped to illegal pblock 5488968173697 (length 1) [ 39.077089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.096091][ T928] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 39.113678][ T928] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.113678][ T928] [ 39.269674][ T949] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 39.278728][ T949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.290384][ T949] usb 6-1: config 0 descriptor?? [ 39.309600][ T949] usb 6-1: can't set config #0, error -71 [ 39.320900][ T949] usb 6-1: USB disconnect, device number 2 [ 40.201351][ T45] device bridge_slave_1 left promiscuous mode [ 40.207495][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.215077][ T45] device bridge_slave_0 left promiscuous mode [ 40.221300][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.229166][ T45] device veth1_macvtap left promiscuous mode [ 40.235208][ T45] device veth0_vlan left promiscuous mode [ 40.923106][ T45] tipc: Disabling bearer [ 40.928247][ T45] tipc: Left network mode [ 42.120886][ T45] device bridge_slave_1 left promiscuous mode [ 42.127026][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.134602][ T45] device bridge_slave_0 left promiscuous mode [ 42.140801][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.148720][ T45] device bridge_slave_1 left promiscuous mode [ 42.154908][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.162414][ T45] device bridge_slave_0 left promiscuous mode [ 42.168525][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.176468][ T45] device bridge_slave_1 left promiscuous mode [ 42.182643][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.190168][ T45] device bridge_slave_0 left promiscuous mode [ 42.196267][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.204299][ T45] device bridge_slave_1 left promiscuous mode [ 42.210451][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.217866][ T45] device bridge_slave_0 left promiscuous mode [ 42.224088][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.232737][ T45] device veth1_macvtap left promiscuous mode [ 42.238731][ T45] device veth0_vlan left promiscuous mode [ 42.244763][ T45] device veth1_macvtap left promiscuous mode [ 42.250809][ T45] device veth0_vlan left promiscuous mode [ 42.256670][ T45] device veth1_macvtap left promiscuous mode [ 42.262726][ T45] device veth0_vlan left promiscuous mode [ 42.268560][ T45] device veth1_macvtap left promiscuous mode [ 42.274749][ T45] device veth0_vlan left promiscuous mode