last executing test programs: 4.089409002s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x82}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x2) 4.075235284s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r2}, 0x10) write$cgroup_subtree(r1, 0x0, 0x32600) 4.004270645s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000003c80), 0x1, 0x4e4, &(0x7f0000000b00)="$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") 3.832826121s ago: executing program 4: syz_io_uring_setup(0x231, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r3, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) set_robust_list(0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.616273725s ago: executing program 4: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f00000005c0)="120000001a003517fc85bc00fef6000d0a0d", 0x12) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/59, 0x3b}], 0x7}}], 0x1, 0x0, 0x0) 3.589891479s ago: executing program 4: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f00000003c0)="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", 0x340}) 3.006630668s ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4e4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x434, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0x124, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0xa9, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa327e1541339075fdc86a745c472c9477faee71092d6a0a50cd377c521c047f0c8b2f4314876961ef4214903d7cb9ade598b7023384c5c8f726e342e8454b6a925d"}, {0xc}, {0xc}}}, @m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x5c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x15, 0x6, "41be356e964e7745f9a57571dce1c50c2b"}, {0xc}, {0xc}}}]}]}}]}, 0x4e4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.856876021s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x2e, 0x61]}}, 0x0, 0x4c}, 0x20) 2.837215084s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x40901, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000080)=ANY=[], 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @mcast2}, 0x1c, 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0100001000010000000000000000002001000000000000000000000000000200000000000000000000ffff7f1f000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000002000100000000000000000008001f0000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350000000000"], 0x14c}}, 0x0) 2.807504359s ago: executing program 2: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2080004e, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,errors=continue,dmask=00000000000000000000007,umask=00000000000000000000006,dmask=00000000000000000000302,utf8,allow_utime=00000000000000000000120,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f75746930303030a0ffffffffffffff3030313737372c00401c158afa9aee0579086fbf4f4e30babec44e828750ccebd5e6849023a36884d703d484ecb6a17b94186f318790ad4fb5cf3ff820d56078249fc971bba5fd8d00000000000000007a0cb052fe9812e5873433d3c278f7e4e88de5c0bf459b56b18c29b819653380dd76f4c85a3591d3f2703b694300cdeeecd8cb83c7b5748bf71f29d567ca440339fa"], 0x7f, 0x1503, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@shortname_win95}, {@uni_xlate}, {@fat=@quiet}, {@fat=@check_strict}, {@numtail}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp949'}}]}, 0x1, 0x217, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8b"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 2.549761579s ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000180)={r0, 0x0}, 0x20) 2.536750421s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 2.525718783s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000a40)={[{@nouser_xattr}, {@inline_data}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@whint_mode_fs}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000ac0)=""/234, 0xea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) fallocate(r0, 0x0, 0x0, 0x9000f4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$key(0xf, 0x3, 0x2) 2.490191508s ago: executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.456918283s ago: executing program 2: syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0xfffffffffffffffc, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0xffffffffffffff47) socket(0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@mcast2, @mcast1, @mcast2, 0x1}) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00'}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890b, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback={0xfec0ffff03000000}}) 2.433062816s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x6000400) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000004fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) sendfile(r3, r5, 0x0, 0xe065) 1.351030863s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000003c80), 0x1, 0x4e4, &(0x7f0000000b00)="$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") 1.282736053s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'vcan0\x00', {0x2, 0x0, @loopback}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) gettid() getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x37) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000340)={0x252e4ce1, 0x80000000, 0x0, 0x87, 0x3, [0x7f, 0x9, 0x9f2, 0x515]}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)=0x6, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x2) 1.249902798s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.23683437s ago: executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1.04221917s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.007640646s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)) 978.88922ms ago: executing program 0: syz_io_uring_setup(0x231, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r3, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) set_robust_list(0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 850.18227ms ago: executing program 0: mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) chdir(&(0x7f0000000300)='./bus\x00') r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) syz_read_part_table(0x5c5, &(0x7f0000000b80)="$eJzs2z9I22kYB/An1lBoB5dOndoOHY4uLR2boS1J2tJCSOtSbmihpRQzpVCIXKDQDppBMYM4uohcFv9MxgxOioKziIOH4OByhy6CiznufG+6P3h3elzh84EfD7/f+33fJ8+Q8Q2+aj3xU7fbzURE9+IfJ7p/sbu/lS88vla6X34RkYmBiPh+dbDvl5XMb7vTqTfS+3Z6n5q81Bk+eJRtbT0/vPlqudGT1j+l5/J0u/9MBuRczeRW+j5/qRZHarn3m8X67tDG+rPZ/Xy5/bTRnHuSffgm5VZT7U31Q9RiMAbidVSiEm+jekb9J1o7t4+vFlsL7+4dFTqjS3dSrvQv5zxt/4/Xx1426w9uzV8Zv1tbXCvvXTjJVf7k3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/LTG6l7/OXanGklnu/WazvDm2sP5vdz5fbTxvNuSfZh29SbjXV3lQ/RC0GYyBeRyUy8Taqvzu55x/1n2jt3D6+WmwtvLt3VOiMLt1JudIZzHqa/h+vj71s1h/cmr8yfre2uFbeu3CSq1w8px8AAAAAAAAAAAAAAAAAAAAAEZEvPL5Wul9+EZGJb6M3vvnxu18v7nfTffdMyt1IdTt9n5q81Bk+eJRtbT0/vPlqufFD+v4pPZen2/3/+TD8bT8HAAD//69Xlno=") 823.534564ms ago: executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0], 0x4d, 0x2a0, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') 814.527815ms ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 440.371243ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001419) 415.210137ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() fstat(0xffffffffffffffff, 0x0) brk(0x55555ede6001) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000021f5ff00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigqueueinfo(r0, 0xf, &(0x7f0000000000)={0x3e, 0x6978, 0x9}) r5 = socket$netlink(0x10, 0x3, 0xa) dup(r5) r6 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ftruncate(r6, 0x200004) 35.429255ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='context=s']) 0s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r0}, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) kernel console output (not intermixed with test programs): perblock, ret: 0 [ 73.361999][ T2247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.391331][ T2247] attempt to access beyond end of device [ 73.391331][ T2247] loop2: rw=2049, want=45104, limit=40427 [ 73.408481][ T2247] attempt to access beyond end of device [ 73.408481][ T2247] loop2: rw=2049, want=45104, limit=40427 [ 73.589117][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 73.675202][ T2288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2288 comm=syz-executor.1 [ 73.709446][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.727065][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.750703][ T26] usb 5-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 73.773255][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.795095][ T26] usb 5-1: config 0 descriptor?? [ 73.813866][ T2292] loop2: detected capacity change from 0 to 256 [ 73.866297][ T2292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.298204][ T26] wacom 0003:056A:0090.0009: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.4-1/input0 [ 74.410382][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.491668][ T39] usb 5-1: USB disconnect, device number 12 [ 74.580306][ T2357] device syzkaller0 entered promiscuous mode [ 74.738736][ T2364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.871089][ T2373] loop3: detected capacity change from 0 to 256 [ 74.961362][ T2373] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 75.184834][ T2391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.308518][ T2401] loop4: detected capacity change from 0 to 256 [ 75.371792][ T2401] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 75.697078][ T2398] loop3: detected capacity change from 0 to 40427 [ 75.725004][ T2398] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 75.749114][ T2398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.770084][ T2398] F2FS-fs (loop3): invalid crc value [ 75.797008][ T2398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.869255][ T2398] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.876143][ T2398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.929970][ T2398] attempt to access beyond end of device [ 75.929970][ T2398] loop3: rw=2049, want=45104, limit=40427 [ 75.966377][ T2398] attempt to access beyond end of device [ 75.966377][ T2398] loop3: rw=2049, want=45104, limit=40427 [ 76.109176][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 76.109190][ T30] audit: type=1326 audit(1718605095.474:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.149700][ T2423] loop2: detected capacity change from 0 to 40427 [ 76.179520][ T30] audit: type=1326 audit(1718605095.474:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.231891][ T2423] F2FS-fs (loop2): invalid crc value [ 76.232549][ T30] audit: type=1326 audit(1718605095.504:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.259095][ T1224] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 76.268069][ T30] audit: type=1326 audit(1718605095.504:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.292234][ T30] audit: type=1326 audit(1718605095.504:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.319434][ T30] audit: type=1326 audit(1718605095.504:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.343381][ T30] audit: type=1326 audit(1718605095.504:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.367767][ T30] audit: type=1326 audit(1718605095.504:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.392804][ T30] audit: type=1326 audit(1718605095.504:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.417741][ T30] audit: type=1326 audit(1718605095.504:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 76.417770][ T2423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.531392][ T2423] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 76.538237][ T2423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.834800][ T1224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.879755][ T1224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.890719][ T1224] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.900489][ T1224] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.069175][ T1224] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.133514][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.141437][ T1224] usb 1-1: Product: syz [ 77.145384][ T1224] usb 1-1: Manufacturer: syz [ 77.149983][ T1224] usb 1-1: SerialNumber: syz [ 77.604487][ T2509] loop4: detected capacity change from 0 to 16 [ 77.623167][ T2509] erofs: (device loop4): mounted with root inode @ nid 36. [ 77.965983][ T2541] overlayfs: failed to resolve './file0': -2 [ 77.981694][ T2543] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 78.012027][ T2543] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 78.134275][ T2557] device syzkaller0 entered promiscuous mode [ 78.719195][ T1224] cdc_ncm 1-1:1.0: bind() failure [ 78.724995][ T1224] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 78.732557][ T2575] loop2: detected capacity change from 0 to 16 [ 78.738586][ T1224] cdc_ncm 1-1:1.1: bind() failure [ 78.754232][ T2575] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.809135][ T63] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 78.888330][ T2577] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 78.898217][ T2577] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 78.927661][ T20] usb 1-1: USB disconnect, device number 8 [ 79.069146][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 79.155224][ T2604] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 79.165340][ T2604] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 79.199162][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.212288][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.246541][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 79.256670][ T2610] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.276111][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.297455][ T63] usb 4-1: config 0 descriptor?? [ 79.524580][ T2624] loop2: detected capacity change from 0 to 256 [ 79.581528][ T2624] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 79.793579][ T63] wacom 0003:056A:0090.000A: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 80.741122][ T63] usb 4-1: USB disconnect, device number 10 [ 81.077152][ T2637] device syzkaller0 entered promiscuous mode [ 81.107302][ T2639] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 81.119939][ T2639] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 81.147705][ T2641] loop4: detected capacity change from 0 to 4096 [ 81.256475][ T2641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.318542][ T2656] loop2: detected capacity change from 0 to 16 [ 81.324728][ T2641] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 2160165643 [ 81.352722][ T2641] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 81.401276][ T2656] erofs: (device loop2): mounted with root inode @ nid 36. [ 81.686183][ T2677] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 81.861669][ T2676] device syzkaller0 entered promiscuous mode [ 81.875710][ T2677] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 81.979136][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.339158][ T63] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 82.359242][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.369486][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.624939][ T2714] device syzkaller0 entered promiscuous mode [ 82.631663][ T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.652793][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.661069][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 82.675011][ T20] usb 5-1: Product: syz [ 82.682029][ T20] usb 5-1: Manufacturer: syz [ 82.686455][ T20] usb 5-1: SerialNumber: syz [ 82.779400][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.790147][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.799732][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 82.808644][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.817359][ T63] usb 4-1: config 0 descriptor?? [ 82.968525][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 82.968538][ T30] audit: type=1400 audit(1718605102.324:457): avc: denied { bind } for pid=2725 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.997999][ T30] audit: type=1400 audit(1718605102.364:458): avc: denied { listen } for pid=2725 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.018453][ T30] audit: type=1400 audit(1718605102.364:459): avc: denied { write } for pid=2725 comm="syz-executor.2" path="socket:[25835]" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.042488][ T20] usb 5-1: MIDIStreaming interface descriptor not found [ 83.079982][ T20] usb 5-1: USB disconnect, device number 13 [ 83.086737][ T30] audit: type=1400 audit(1718605102.364:460): avc: denied { accept } for pid=2725 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.120215][ T30] audit: type=1400 audit(1718605102.364:461): avc: denied { read } for pid=2725 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.312258][ T63] wacom 0003:056A:0090.000B: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 83.538848][ T63] usb 4-1: USB disconnect, device number 11 [ 83.619097][ T1150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.781832][ T2766] loop4: detected capacity change from 0 to 512 [ 83.812953][ T2766] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.946350][ T2766] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 83.995591][ T2766] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 84.039645][ T2766] EXT4-fs (loop4): Remounting filesystem read-only [ 84.046180][ T2766] EXT4-fs (loop4): 1 truncate cleaned up [ 84.051778][ T2766] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 84.080228][ T2766] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz-executor.4: Invalid block bitmap block 3 in block_group 0 [ 84.094284][ T2766] EXT4-fs (loop4): Remounting filesystem read-only [ 84.372924][ T1150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.383650][ T1150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.393194][ T1150] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.402638][ T1150] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 84.419874][ T30] audit: type=1400 audit(1718605103.784:462): avc: denied { create } for pid=2788 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.444557][ T2789] device wireguard0 entered promiscuous mode [ 84.455519][ T30] audit: type=1400 audit(1718605103.784:463): avc: denied { getopt } for pid=2788 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.492246][ T30] audit: type=1400 audit(1718605103.784:464): avc: denied { create } for pid=2788 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.620070][ T2799] syz-executor.2[2799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.620147][ T2799] syz-executor.2[2799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.629172][ T1150] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.909799][ T1150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.917715][ T1150] usb 2-1: Product: syz [ 84.921666][ T1150] usb 2-1: Manufacturer: syz [ 84.927599][ T1150] usb 2-1: SerialNumber: syz [ 85.030191][ T2813] loop2: detected capacity change from 0 to 512 [ 85.081384][ T2813] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.097373][ T2813] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 85.105990][ T2813] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 85.122060][ T2813] EXT4-fs (loop2): Remounting filesystem read-only [ 85.128949][ T2813] EXT4-fs (loop2): 1 truncate cleaned up [ 85.134755][ T2813] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 85.155479][ T30] audit: type=1400 audit(1718605104.514:465): avc: denied { mount } for pid=2811 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.156311][ T2813] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz-executor.2: Invalid block bitmap block 3 in block_group 0 [ 85.191825][ T2813] EXT4-fs (loop2): Remounting filesystem read-only [ 85.205498][ T30] audit: type=1400 audit(1718605104.564:466): avc: denied { read } for pid=2822 comm="syz-executor.0" dev="nsfs" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.238131][ T2823] device wireguard0 entered promiscuous mode [ 85.247972][ T2787] loop3: detected capacity change from 0 to 131072 [ 85.270115][ T2787] F2FS-fs (loop3): Wrong segment_count / block_count (65567 > 16384) [ 85.287547][ T2787] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.309824][ T2787] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.372266][ T2836] syz-executor.0[2836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.372340][ T2836] syz-executor.0[2836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.377105][ T2787] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.402399][ T2787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.758866][ T2846] loop4: detected capacity change from 0 to 256 [ 85.784663][ T2846] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.081642][ T1854] ------------[ cut here ]------------ [ 86.087007][ T1854] WARNING: CPU: 0 PID: 1854 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0 [ 86.096271][ T1854] Modules linked in: [ 86.100031][ T1854] CPU: 0 PID: 1854 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 86.110372][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.121277][ T1854] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0 [ 86.126799][ T1854] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1 [ 86.158698][ T1854] RSP: 0018:ffffc90000f0fb60 EFLAGS: 00010293 [ 86.165109][ T1854] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88810d8093c0 [ 86.173122][ T1854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.181066][ T1854] RBP: ffffc90000f0fb90 R08: ffffffff8212b6f4 R09: ffffed10239e7ed3 [ 86.188849][ T1854] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812d48a770 [ 86.206687][ T1854] R13: ffff88812d48a7a0 R14: 1ffff11025a914f4 R15: ffff88811cf3f5f0 [ 86.214597][ T1854] FS: 0000555555fcc480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.234809][ T1854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.249402][ T1854] CR2: 00007f2e1af9f038 CR3: 00000001083b2000 CR4: 00000000003506a0 [ 86.267434][ T1854] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.287641][ T1854] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.299094][ T1854] Call Trace: [ 86.302303][ T1854] [ 86.305077][ T1854] ? show_regs+0x58/0x60 [ 86.319824][ T1854] ? __warn+0x160/0x2f0 [ 86.323928][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.330638][ T1854] ? report_bug+0x3d9/0x5b0 [ 86.338236][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.357673][ T1854] ? handle_bug+0x41/0x70 [ 86.364226][ T1854] ? exc_invalid_op+0x1b/0x50 [ 86.373095][ T1854] ? asm_exc_invalid_op+0x1b/0x20 [ 86.379977][ T2872] loop2: detected capacity change from 0 to 1024 [ 86.386171][ T1854] ? ovl_dir_modified+0xa4/0x1e0 [ 86.391696][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.397046][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.402604][ T1854] ovl_do_remove+0x64c/0xa30 [ 86.407132][ T2876] loop3: detected capacity change from 0 to 256 [ 86.407138][ T1854] ? ovl_set_redirect+0x690/0x690 [ 86.418153][ T1854] ? selinux_inode_rmdir+0x22/0x30 [ 86.423138][ T1854] ovl_rmdir+0x1a/0x20 [ 86.427173][ T1854] vfs_rmdir+0x324/0x470 [ 86.431698][ T1854] incfs_kill_sb+0x113/0x230 [ 86.436101][ T2872] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 86.436113][ T1854] deactivate_locked_super+0xad/0x110 [ 86.452232][ T2872] EXT4-fs (loop2): group descriptors corrupted! [ 86.459533][ T1854] deactivate_super+0xbe/0xf0 [ 86.464036][ T1854] cleanup_mnt+0x45c/0x510 [ 86.468288][ T1854] __cleanup_mnt+0x19/0x20 [ 86.475519][ T1854] task_work_run+0x129/0x190 [ 86.480101][ T1854] exit_to_user_mode_loop+0xc4/0xe0 [ 86.485144][ T1854] exit_to_user_mode_prepare+0x5a/0xa0 [ 86.490740][ T1854] syscall_exit_to_user_mode+0x26/0x160 [ 86.496046][ T1854] do_syscall_64+0x49/0xb0 [ 86.500329][ T1854] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.506025][ T1854] RIP: 0033:0x7f910235c1d7 [ 86.510304][ T1854] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 86.529781][ T1854] RSP: 002b:00007ffeb9877cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.538060][ T1854] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f910235c1d7 [ 86.545906][ T1150] cdc_ncm 2-1:1.0: bind() failure [ 86.546183][ T1854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb9877d80 [ 86.552603][ T1150] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 86.564710][ T1854] RBP: 00007ffeb9877d80 R08: 0000000000000000 R09: 0000000000000000 [ 86.573299][ T1854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb9878e30 [ 86.575317][ T2876] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.581469][ T1854] R13: 00007f91023b7636 R14: 000000000001501d R15: 0000000000000006 [ 86.600861][ T1150] cdc_ncm 2-1:1.1: bind() failure [ 86.627504][ T1854] [ 86.630896][ T1854] ---[ end trace ff54c09b77428145 ]--- [ 86.636596][ T1854] ------------[ cut here ]------------ [ 86.642315][ T1854] WARNING: CPU: 0 PID: 1854 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0 [ 86.651939][ T1854] Modules linked in: [ 86.655739][ T1854] CPU: 0 PID: 1854 Comm: syz-executor.4 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 86.667310][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.677253][ T1854] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0 [ 86.682792][ T1854] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1 [ 86.697477][ T2884] syz-executor.3[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.702659][ T2884] syz-executor.3[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.708848][ T1854] RSP: 0018:ffffc90000f0fb60 EFLAGS: 00010293 [ 86.731668][ T1854] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88810d8093c0 [ 86.739551][ T1854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.742073][ T2884] syz-executor.3[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.747448][ T2884] syz-executor.3[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.759254][ T1854] RBP: ffffc90000f0fb90 R08: ffffffff8212b6f4 R09: ffffed10239e7ed3 [ 86.779723][ T1854] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812d48a770 [ 86.779982][ T63] usb 2-1: USB disconnect, device number 5 [ 86.795136][ T1854] R13: ffff88812d48a7a0 R14: 1ffff11025a914f4 R15: ffff88811cf3f5f0 [ 86.804069][ T1854] FS: 0000555555fcc480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 86.814229][ T1854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.820862][ T1854] CR2: 0000001b31632000 CR3: 00000001083b2000 CR4: 00000000003506b0 [ 86.828672][ T1854] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.836762][ T1854] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.844811][ T1854] Call Trace: [ 86.847902][ T1854] [ 86.850870][ T1854] ? show_regs+0x58/0x60 [ 86.854927][ T1854] ? __warn+0x160/0x2f0 [ 86.858920][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.864047][ T1854] ? report_bug+0x3d9/0x5b0 [ 86.868642][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.873978][ T1854] ? handle_bug+0x41/0x70 [ 86.874127][ T1792] ------------[ cut here ]------------ [ 86.878123][ T1854] ? exc_invalid_op+0x1b/0x50 [ 86.878142][ T1854] ? asm_exc_invalid_op+0x1b/0x20 [ 86.883900][ T1792] WARNING: CPU: 1 PID: 1792 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0 [ 86.887933][ T1854] ? ovl_dir_modified+0xa4/0x1e0 [ 86.892987][ T1792] Modules linked in: [ 86.902063][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.911056][ T1792] [ 86.915530][ T1854] ? ovl_dir_modified+0x1a5/0x1e0 [ 86.922507][ T1854] ovl_do_remove+0x64c/0xa30 [ 86.922642][ T1150] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.926904][ T1854] ? ovl_set_redirect+0x690/0x690 [ 86.934711][ T1792] CPU: 1 PID: 1792 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 86.950714][ T1854] ? selinux_inode_rmdir+0x22/0x30 [ 86.950739][ T1854] ovl_rmdir+0x1a/0x20 [ 86.950754][ T1854] vfs_rmdir+0x324/0x470 [ 86.950772][ T1854] incfs_kill_sb+0x1b4/0x230 [ 86.950790][ T1854] deactivate_locked_super+0xad/0x110 [ 86.956159][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.983539][ T1792] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0 [ 86.988986][ T1792] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1 [ 86.989077][ T1854] deactivate_super+0xbe/0xf0 [ 87.008977][ T1792] RSP: 0018:ffffc90000e9fb60 EFLAGS: 00010293 [ 87.016046][ T1854] cleanup_mnt+0x45c/0x510 [ 87.020556][ T1792] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff888115ab3b40 [ 87.030615][ T1854] __cleanup_mnt+0x19/0x20 [ 87.031886][ T1792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.035926][ T1854] task_work_run+0x129/0x190 [ 87.048351][ T1792] RBP: ffffc90000e9fb90 R08: ffffffff8212b6f4 R09: ffffed10239d2819 [ 87.056299][ T1854] exit_to_user_mode_loop+0xc4/0xe0 [ 87.061422][ T1854] exit_to_user_mode_prepare+0x5a/0xa0 [ 87.066674][ T1854] syscall_exit_to_user_mode+0x26/0x160 [ 87.072334][ T1854] do_syscall_64+0x49/0xb0 [ 87.072578][ T1792] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f571550 [ 87.076560][ T1854] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.084757][ T1792] R13: ffff88810f571580 R14: 1ffff11021eae2b0 R15: ffff88811ce94020 [ 87.090464][ T1854] RIP: 0033:0x7f910235c1d7 [ 87.102479][ T1792] FS: 0000555556d45480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 87.104714][ T1854] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.112537][ T1792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.137270][ T1854] RSP: 002b:00007ffeb9877cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.142057][ T1792] CR2: 0000000000000000 CR3: 00000001248f1000 CR4: 00000000003506a0 [ 87.146229][ T1854] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f910235c1d7 [ 87.156140][ T1792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.161806][ T1854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb9877d80 [ 87.169834][ T1792] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.184915][ T1792] Call Trace: [ 87.188135][ T1792] [ 87.188867][ T1854] RBP: 00007ffeb9877d80 R08: 0000000000000000 R09: 0000000000000000 [ 87.193588][ T1792] ? show_regs+0x58/0x60 [ 87.199094][ T1854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb9878e30 [ 87.203540][ T1792] ? __warn+0x160/0x2f0 [ 87.210963][ T1854] R13: 00007f91023b7636 R14: 000000000001501d R15: 0000000000000006 [ 87.214937][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.222612][ T1854] [ 87.227653][ T1150] usb 3-1: Using ep0 maxpacket: 16 [ 87.230239][ T1854] ---[ end trace ff54c09b77428146 ]--- [ 87.235308][ T1792] ? report_bug+0x3d9/0x5b0 [ 87.244800][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.249841][ T1792] ? handle_bug+0x41/0x70 [ 87.253983][ T1792] ? exc_invalid_op+0x1b/0x50 [ 87.258642][ T1792] ? asm_exc_invalid_op+0x1b/0x20 [ 87.263617][ T1792] ? ovl_dir_modified+0xa4/0x1e0 [ 87.268426][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.273795][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.278693][ T1792] ovl_do_remove+0x64c/0xa30 [ 87.283155][ T1792] ? ovl_set_redirect+0x690/0x690 [ 87.287960][ T1792] ? selinux_inode_rmdir+0x22/0x30 [ 87.293178][ T1792] ovl_rmdir+0x1a/0x20 [ 87.297079][ T1792] vfs_rmdir+0x324/0x470 [ 87.301171][ T1792] incfs_kill_sb+0x113/0x230 [ 87.305583][ T1792] deactivate_locked_super+0xad/0x110 [ 87.312101][ T1792] deactivate_super+0xbe/0xf0 [ 87.316618][ T1792] cleanup_mnt+0x45c/0x510 [ 87.320888][ T1792] __cleanup_mnt+0x19/0x20 [ 87.325160][ T1792] task_work_run+0x129/0x190 [ 87.421638][ T1792] exit_to_user_mode_loop+0xc4/0xe0 [ 87.426980][ T1792] exit_to_user_mode_prepare+0x5a/0xa0 [ 87.449214][ T1150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.459141][ T1792] syscall_exit_to_user_mode+0x26/0x160 [ 87.466622][ T1150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.468274][ T1792] do_syscall_64+0x49/0xb0 [ 87.476579][ T1150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.480459][ T1792] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.498858][ T1150] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 87.499062][ T1792] RIP: 0033:0x7f70eb1e41d7 [ 87.511964][ T1150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.512168][ T1792] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.522649][ T1150] usb 3-1: config 0 descriptor?? [ 87.539371][ T1792] RSP: 002b:00007ffe0080ffb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.552275][ T1792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f70eb1e41d7 [ 87.560125][ T1792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe00810070 [ 87.567837][ T1792] RBP: 00007ffe00810070 R08: 0000000000000000 R09: 0000000000000000 [ 87.575717][ T1792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00811120 [ 87.583613][ T1792] R13: 00007f70eb23f636 R14: 0000000000015313 R15: 0000000000000006 [ 87.591481][ T1792] [ 87.592180][ T2897] device wireguard0 entered promiscuous mode [ 87.594309][ T1792] ---[ end trace ff54c09b77428147 ]--- [ 87.605818][ T1792] ------------[ cut here ]------------ [ 87.611170][ T1792] WARNING: CPU: 0 PID: 1792 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0 [ 87.620355][ T1792] Modules linked in: [ 87.624167][ T1792] CPU: 0 PID: 1792 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 87.635653][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.645598][ T1792] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0 [ 87.651105][ T1792] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1 [ 87.670628][ T1792] RSP: 0018:ffffc90000e9fb60 EFLAGS: 00010293 [ 87.676543][ T1792] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff888115ab3b40 [ 87.684371][ T1792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.692182][ T1792] RBP: ffffc90000e9fb90 R08: ffffffff8212b6f4 R09: ffffed10239d2819 [ 87.699990][ T1792] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f571550 [ 87.707830][ T1792] R13: ffff88810f571580 R14: 1ffff11021eae2b0 R15: ffff88811ce94020 [ 87.715616][ T1792] FS: 0000555556d45480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 87.724571][ T1792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.731233][ T1792] CR2: 0000000020404030 CR3: 00000001248f1000 CR4: 00000000003506b0 [ 87.739109][ T1792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.746964][ T1792] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.754844][ T1792] Call Trace: [ 87.757983][ T1792] [ 87.760731][ T1792] ? show_regs+0x58/0x60 [ 87.764775][ T1792] ? __warn+0x160/0x2f0 [ 87.769270][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.774165][ T1792] ? report_bug+0x3d9/0x5b0 [ 87.778480][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.783576][ T1792] ? handle_bug+0x41/0x70 [ 87.787761][ T1792] ? exc_invalid_op+0x1b/0x50 [ 87.792290][ T1792] ? asm_exc_invalid_op+0x1b/0x20 [ 87.797157][ T1792] ? ovl_dir_modified+0xa4/0x1e0 [ 87.801913][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.806750][ T1792] ? ovl_dir_modified+0x1a5/0x1e0 [ 87.811939][ T1792] ovl_do_remove+0x64c/0xa30 [ 87.816313][ T1792] ? ovl_set_redirect+0x690/0x690 [ 87.821189][ T1792] ? selinux_inode_rmdir+0x22/0x30 [ 87.826123][ T1792] ovl_rmdir+0x1a/0x20 [ 87.830030][ T1792] vfs_rmdir+0x324/0x470 [ 87.834104][ T1792] incfs_kill_sb+0x1b4/0x230 [ 87.838595][ T1792] deactivate_locked_super+0xad/0x110 [ 87.843922][ T1792] deactivate_super+0xbe/0xf0 [ 87.848435][ T1792] cleanup_mnt+0x45c/0x510 [ 87.852712][ T1792] __cleanup_mnt+0x19/0x20 [ 87.856921][ T1792] task_work_run+0x129/0x190 [ 87.861370][ T1792] exit_to_user_mode_loop+0xc4/0xe0 [ 87.866380][ T1792] exit_to_user_mode_prepare+0x5a/0xa0 [ 87.871694][ T1792] syscall_exit_to_user_mode+0x26/0x160 [ 87.877056][ T1792] do_syscall_64+0x49/0xb0 [ 87.881425][ T1792] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.887124][ T1792] RIP: 0033:0x7f70eb1e41d7 [ 87.891394][ T1792] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.910867][ T1792] RSP: 002b:00007ffe0080ffb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.919087][ T1792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f70eb1e41d7 [ 87.926884][ T1792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe00810070 [ 87.934706][ T1792] RBP: 00007ffe00810070 R08: 0000000000000000 R09: 0000000000000000 [ 87.942532][ T1792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00811120 [ 87.950320][ T1792] R13: 00007f70eb23f636 R14: 0000000000015313 R15: 0000000000000006 [ 87.958122][ T1792] [ 87.961002][ T1792] ---[ end trace ff54c09b77428148 ]--- [ 88.008594][ T2900] loop3: detected capacity change from 0 to 512 [ 88.019865][ T1150] hkems 0003:2006:0118.000C: unknown main item tag 0x0 [ 88.026590][ T1150] hkems 0003:2006:0118.000C: invalid report_count 1625135132 [ 88.038088][ T1150] hkems 0003:2006:0118.000C: item 0 4 1 9 parsing failed [ 88.045213][ T1150] hkems 0003:2006:0118.000C: parse failed [ 88.049986][ T2900] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.057706][ T1150] hkems: probe of 0003:2006:0118.000C failed with error -22 [ 88.063971][ T2900] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 88.077903][ T2900] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 88.092395][ T2900] EXT4-fs (loop3): Remounting filesystem read-only [ 88.098803][ T2900] EXT4-fs (loop3): 1 truncate cleaned up [ 88.104206][ T2900] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 88.129882][ T2900] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz-executor.3: Invalid block bitmap block 3 in block_group 0 [ 88.143674][ T2900] EXT4-fs (loop3): Remounting filesystem read-only [ 88.222132][ T39] usb 3-1: USB disconnect, device number 10 [ 88.574539][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 88.574553][ T30] audit: type=1400 audit(1718605107.934:474): avc: denied { getopt } for pid=2916 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.706793][ T2911] loop3: detected capacity change from 0 to 40427 [ 89.003584][ T2911] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 89.014228][ T2911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.029135][ T2911] F2FS-fs (loop3): invalid crc value [ 89.043710][ T2911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.049869][ T30] audit: type=1326 audit(1718605108.404:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2928 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f910235aea9 code=0x0 [ 89.102937][ T2911] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 89.110270][ T2911] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.117124][ T2911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 89.132558][ T1792] attempt to access beyond end of device [ 89.132558][ T1792] loop3: rw=2049, want=45104, limit=40427 [ 89.152567][ T30] audit: type=1326 audit(1718605108.514:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1ae97ea9 code=0x0 [ 89.233520][ T30] audit: type=1400 audit(1718605108.594:477): avc: denied { bind } for pid=2943 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.234626][ T2944] tipc: Failed to remove unknown binding: 66,1,1/0:1034631063/1034631065 [ 89.255173][ T30] audit: type=1400 audit(1718605108.594:478): avc: denied { setopt } for pid=2943 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.261263][ T2944] tipc: Failed to remove unknown binding: 66,1,1/0:1034631063/1034631065 [ 89.566333][ T30] audit: type=1400 audit(1718605108.924:479): avc: denied { connect } for pid=2960 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.643871][ T2969] tipc: Failed to remove unknown binding: 66,1,1/0:1691411963/1691411965 [ 89.655978][ T2969] tipc: Failed to remove unknown binding: 66,1,1/0:1691411963/1691411965 [ 89.679774][ T2946] loop3: detected capacity change from 0 to 131072 [ 89.754282][ T2946] F2FS-fs (loop3): Wrong segment_count / block_count (65567 > 16384) [ 89.762816][ T2946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.049651][ T2989] loop2: detected capacity change from 0 to 256 [ 90.057284][ T2946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.067000][ T2990] loop4: detected capacity change from 0 to 512 [ 90.090507][ T2946] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.097385][ T2946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.128594][ T2997] syz-executor.0[2997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.128668][ T2997] syz-executor.0[2997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.187826][ T2990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.210453][ T2990] ext4 filesystem being mounted at /root/syzkaller-testdir385295498/syzkaller.BwBBnq/86/file0 supports timestamps until 2038 (0x7fffffff) [ 90.569019][ T3015] syz-executor.1[3015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.578440][ T3017] tipc: Failed to remove unknown binding: 66,1,1/0:952401420/952401422 [ 90.600406][ T3015] syz-executor.1[3015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.606142][ T3017] tipc: Failed to remove unknown binding: 66,1,1/0:952401420/952401422 [ 90.633549][ T3015] syz-executor.1[3015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.633625][ T3015] syz-executor.1[3015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.721095][ T30] audit: type=1326 audit(1718605110.084:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3022 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x0 [ 91.034035][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.041097][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.048339][ T3026] device bridge_slave_0 entered promiscuous mode [ 91.069137][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.077506][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.092433][ T3026] device bridge_slave_1 entered promiscuous mode [ 91.131799][ T3036] syz-executor.2[3036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.131866][ T3036] syz-executor.2[3036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.241778][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.260844][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.279618][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.288269][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.296646][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.303514][ T2736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.311544][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.321902][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.334258][ T30] audit: type=1400 audit(1718605110.694:481): avc: denied { name_bind } for pid=3043 comm="syz-executor.2" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.356516][ T2736] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.363483][ T2736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.370923][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.383505][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.398462][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.406483][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.414468][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.422863][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.431492][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.439491][ T3050] netem: incorrect ge model size [ 91.444314][ T3050] netem: change failed [ 91.463012][ T3026] device veth0_vlan entered promiscuous mode [ 91.469775][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.477844][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.485834][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.873462][ T3026] device veth1_macvtap entered promiscuous mode [ 91.882822][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.887234][ T30] audit: type=1400 audit(1718605111.244:482): avc: denied { read } for pid=3060 comm="syz-executor.4" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.919383][ T3056] device wireguard0 entered promiscuous mode [ 91.930110][ T3057] loop2: detected capacity change from 0 to 256 [ 91.945068][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.956640][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.965077][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.973510][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.999448][ T3057] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5b196f7a, utbl_chksum : 0xe619d30d) [ 92.046099][ T3079] netem: incorrect ge model size [ 92.053568][ T3079] netem: change failed [ 93.181134][ T10] device bridge_slave_1 left promiscuous mode [ 93.192258][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.232536][ T10] device bridge_slave_0 left promiscuous mode [ 93.251026][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.306642][ T10] device veth1_macvtap left promiscuous mode [ 93.329938][ T10] device veth0_vlan left promiscuous mode [ 93.818095][ T3105] loop2: detected capacity change from 0 to 40427 [ 93.845889][ T3118] netem: incorrect ge model size [ 93.850724][ T3118] netem: change failed [ 93.908148][ T3105] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 93.917236][ T3105] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.926507][ T3105] F2FS-fs (loop2): invalid crc value [ 93.931880][ T3119] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.952596][ T3119] tipc: Enabling of bearer rejected, failed to enable media [ 93.977268][ T3105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.040264][ T3105] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 94.060397][ T3105] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.067416][ T3105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 94.392029][ T1847] attempt to access beyond end of device [ 94.392029][ T1847] loop2: rw=2049, want=45104, limit=40427 [ 94.469576][ T3158] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 94.502314][ T3160] tipc: Failed to remove unknown binding: 66,1,1/0:3615154308/3615154310 [ 94.510966][ T3160] tipc: Failed to remove unknown binding: 66,1,1/0:3615154308/3615154310 [ 94.631427][ T3178] netem: incorrect ge model size [ 94.637746][ T3178] netem: change failed [ 94.783157][ T3184] device veth0_vlan left promiscuous mode [ 94.791483][ T3184] device veth0_vlan entered promiscuous mode [ 94.868483][ T30] audit: type=1400 audit(1718605114.224:483): avc: denied { read } for pid=3164 comm="syz-executor.4" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.895290][ T30] audit: type=1400 audit(1718605114.224:484): avc: denied { open } for pid=3164 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.959859][ T3194] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 94.985087][ T30] audit: type=1400 audit(1718605114.344:485): avc: denied { mounton } for pid=3195 comm="syz-executor.1" path="/proc/3195/task" dev="proc" ino=29081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.022878][ T3198] tipc: Failed to remove unknown binding: 66,1,1/0:3122002861/3122002863 [ 95.039007][ T3198] tipc: Failed to remove unknown binding: 66,1,1/0:3122002861/3122002863 [ 95.042797][ T3205] syz-executor.0[3205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.047336][ T3205] syz-executor.0[3205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.146269][ T3225] overlayfs: failed to resolve './file1': -2 [ 95.178752][ T3230] Illegal XDP return value 470335523, expect packet loss! [ 95.178770][ T3231] tipc: Failed to remove unknown binding: 66,1,1/0:255304641/255304643 [ 95.193894][ T3231] tipc: Failed to remove unknown binding: 66,1,1/0:255304641/255304643 [ 95.229391][ T3237] incfs: Error accessing: ./file0. [ 95.234465][ T3237] incfs: mount failed -20 [ 95.294990][ T3245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.304152][ T3245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.313441][ T3245] bridge0: port 2(bridge_slave_1) entered listening state [ 95.363920][ T30] audit: type=1400 audit(1718605114.724:486): avc: denied { setattr } for pid=3252 comm="syz-executor.1" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 95.416630][ T30] audit: type=1400 audit(1718605114.744:487): avc: denied { read } for pid=3252 comm="syz-executor.1" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 95.440799][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.451451][ T30] audit: type=1400 audit(1718605114.744:488): avc: denied { open } for pid=3252 comm="syz-executor.1" path="/root/syzkaller-testdir3012935123/syzkaller.q5AHRH/92/file0/file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 95.839399][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.850477][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.861668][ T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.871319][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.882243][ T26] usb 1-1: config 0 descriptor?? [ 96.049223][ T332] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 96.400142][ T26] hid (null): bogus close delimiter [ 96.439413][ T332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.450589][ T332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.462028][ T332] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.472763][ T332] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.630223][ T26] usb 1-1: language id specifier not provided by device, defaulting to English [ 96.689256][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.702904][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.719004][ T332] usb 4-1: Product: syz [ 96.723986][ T332] usb 4-1: Manufacturer: syz [ 96.730429][ T332] usb 4-1: SerialNumber: syz [ 96.795657][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.803381][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.811305][ T3307] device bridge_slave_0 entered promiscuous mode [ 96.817592][ T3316] tipc: Failed to remove unknown binding: 66,1,1/0:882639159/882639161 [ 96.818231][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.825965][ T3316] tipc: Failed to remove unknown binding: 66,1,1/0:882639159/882639161 [ 96.833662][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.840829][ T30] audit: type=1400 audit(1718605116.204:489): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.848053][ T3307] device bridge_slave_1 entered promiscuous mode [ 96.890743][ T3318] loop4: detected capacity change from 0 to 512 [ 96.923016][ T3318] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 96.932665][ T3318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.939597][ T3318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set [ 96.939724][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.954288][ T3318] Quota error (device loop4): write_blk: dquota write failed [ 96.960886][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.960979][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.960992][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.968138][ T3318] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 96.993538][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.006650][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.006921][ T3318] EXT4-fs (loop4): 1 truncate cleaned up [ 97.019472][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.028151][ T3318] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,usrquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 97.056971][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.065677][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.072530][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.079878][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.087792][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.094736][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.124538][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.139857][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.147980][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.155975][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.163522][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.170844][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.181986][ T3307] device veth0_vlan entered promiscuous mode [ 97.191834][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.201168][ T3307] device veth1_macvtap entered promiscuous mode [ 97.212966][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.221202][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.359309][ T26] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 97.368270][ T26] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 97.376382][ T26] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 97.594418][ T26] usb 1-1: USB disconnect, device number 9 [ 97.689847][ T45] device bridge_slave_1 left promiscuous mode [ 97.695820][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.703197][ T45] device bridge_slave_0 left promiscuous mode [ 97.709210][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.716809][ T45] device veth1_macvtap left promiscuous mode [ 97.722764][ T45] device veth0_vlan left promiscuous mode [ 98.477410][ T3358] device veth0_vlan left promiscuous mode [ 98.485313][ T3358] device veth0_vlan entered promiscuous mode [ 98.555112][ T332] cdc_ncm 4-1:1.0: bind() failure [ 98.561078][ T332] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 98.567730][ T332] cdc_ncm 4-1:1.1: bind() failure [ 98.578519][ T3363] overlayfs: statfs failed on './file0' [ 98.752561][ T332] usb 4-1: USB disconnect, device number 12 [ 98.884738][ T30] audit: type=1400 audit(1718605118.244:490): avc: denied { create } for pid=3371 comm="syz-executor.0" dev="anon_inodefs" ino=28525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.752108][ T3409] device veth0_vlan left promiscuous mode [ 99.760071][ T3409] device veth0_vlan entered promiscuous mode [ 99.897982][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 99.897996][ T30] audit: type=1400 audit(1718605119.254:492): avc: denied { setopt } for pid=3416 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.924169][ T30] audit: type=1400 audit(1718605119.284:493): avc: denied { connect } for pid=3416 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.944087][ T30] audit: type=1400 audit(1718605119.284:494): avc: denied { write } for pid=3416 comm="syz-executor.0" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.967425][ T30] audit: type=1400 audit(1718605119.284:495): avc: denied { read } for pid=3416 comm="syz-executor.0" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.413448][ T30] audit: type=1400 audit(1718605119.774:496): avc: denied { map } for pid=3436 comm="syz-executor.3" path="socket:[30722]" dev="sockfs" ino=30722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.438547][ T30] audit: type=1400 audit(1718605119.774:497): avc: denied { read } for pid=3436 comm="syz-executor.3" path="socket:[30722]" dev="sockfs" ino=30722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.550229][ T3448] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 100.559399][ T3448] SELinux: security_context_str_to_sid(root) failed for (dev tmpfs, type tmpfs) errno=-22 [ 100.579289][ T3450] loop3: detected capacity change from 0 to 512 [ 100.586354][ T30] audit: type=1326 audit(1718605119.944:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6003fc6ea9 code=0x7fc00000 [ 100.586779][ T3451] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.612754][ T30] audit: type=1326 audit(1718605119.944:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6003fc6ea9 code=0x7fc00000 [ 100.660441][ T3450] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 100.948435][ T3476] incfs: Options parsing error. -22 [ 100.948462][ T3474] loop3: detected capacity change from 0 to 512 [ 100.953606][ T3476] incfs: mount failed -22 [ 101.084718][ T3478] device veth0_vlan left promiscuous mode [ 101.092633][ T3478] device veth0_vlan entered promiscuous mode [ 101.174935][ T3474] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 101.311283][ T30] audit: type=1326 audit(1718605120.674:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6003fc6ea9 code=0x7fc00000 [ 101.335234][ T30] audit: type=1326 audit(1718605120.674:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6003fc6ea9 code=0x7fc00000 [ 101.619165][ T332] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 101.649166][ T63] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.859634][ T3507] incfs: Options parsing error. -22 [ 101.865023][ T3507] incfs: mount failed -22 [ 101.899096][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 101.979319][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.990938][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.001571][ T332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.011519][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.066721][ T332] usb 4-1: config 0 descriptor?? [ 102.373090][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 102.383464][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.451042][ T3524] device veth0_vlan left promiscuous mode [ 102.466677][ T3524] device veth0_vlan entered promiscuous mode [ 102.539704][ T63] usb 2-1: Product: syz [ 102.543727][ T63] usb 2-1: Manufacturer: syz [ 102.548132][ T63] usb 2-1: SerialNumber: syz [ 102.553977][ T63] r8152-cfgselector 2-1: config 0 descriptor?? [ 102.739297][ T332] hid (null): bogus close delimiter [ 102.819204][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 102.848847][ T3529] loop4: detected capacity change from 0 to 512 [ 102.919469][ T3529] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 102.959197][ T332] usb 4-1: language id specifier not provided by device, defaulting to English [ 103.018271][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.029568][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 103.035793][ T63] r8152-cfgselector 2-1: bad CDC descriptors [ 103.059156][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 103.067467][ T63] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 103.126198][ T3539] incfs: Options parsing error. -22 [ 103.133910][ T3539] incfs: mount failed -22 [ 103.151956][ T3543] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 103.161364][ T3543] SELinux: security_context_str_to_sid(root) failed for (dev tmpfs, type tmpfs) errno=-22 [ 103.217788][ T3557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.307386][ T3565] incfs: Options parsing error. -22 [ 103.312456][ T3565] incfs: mount failed -22 [ 103.470904][ T3573] device veth0_vlan left promiscuous mode [ 103.478709][ T3573] device veth0_vlan entered promiscuous mode [ 103.657005][ T3583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.819154][ T332] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 103.827855][ T332] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 103.835493][ T332] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 103.844212][ T332] usb 4-1: USB disconnect, device number 13 [ 103.879107][ T1107] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 104.119610][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 104.139145][ T3006] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.269208][ T1107] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 104.278116][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.286696][ T1107] usb 5-1: config 0 descriptor?? [ 104.373591][ T3608] loop3: detected capacity change from 0 to 40427 [ 104.449150][ T332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.479485][ T3608] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 104.487102][ T3608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.496038][ T3608] F2FS-fs (loop3): invalid crc value [ 104.499196][ T3006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.502274][ T3608] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 104.512208][ T3006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.531891][ T3006] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.537843][ T3608] F2FS-fs (loop3): recover fsync data on readonly fs [ 104.547834][ T3608] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 104.555098][ T3608] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.556432][ T3006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.562616][ T1107] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 104.580508][ T1107] asix: probe of 5-1:0.0 failed with error -61 [ 104.585961][ T3006] usb 2-1: config 0 descriptor?? [ 104.689137][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 104.773090][ T63] usb 5-1: USB disconnect, device number 14 [ 104.933941][ T3623] device veth0_vlan left promiscuous mode [ 104.941689][ T3623] device veth0_vlan entered promiscuous mode [ 105.119197][ T332] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 105.128081][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.135952][ T332] usb 1-1: Product: syz [ 105.139885][ T332] usb 1-1: Manufacturer: syz [ 105.144289][ T332] usb 1-1: SerialNumber: syz [ 105.149383][ T332] r8152-cfgselector 1-1: config 0 descriptor?? [ 105.413333][ T332] r8152-cfgselector 1-1: Unknown version 0x0000 [ 105.448126][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 105.448141][ T30] audit: type=1326 audit(1718605124.804:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.478040][ T30] audit: type=1326 audit(1718605124.804:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.502594][ T30] audit: type=1326 audit(1718605124.814:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.526375][ T30] audit: type=1326 audit(1718605124.834:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.550353][ T30] audit: type=1326 audit(1718605124.844:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.574388][ T30] audit: type=1326 audit(1718605124.864:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.598515][ T30] audit: type=1326 audit(1718605124.864:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.622060][ T30] audit: type=1326 audit(1718605124.864:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.646220][ T30] audit: type=1326 audit(1718605124.864:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.670275][ T30] audit: type=1326 audit(1718605124.864:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910235aea9 code=0x7ffc0000 [ 105.694636][ T332] r8152-cfgselector 1-1: Unknown version 0x0000 [ 105.701135][ T332] r8152-cfgselector 1-1: bad CDC descriptors [ 105.719181][ T332] r8152-cfgselector 1-1: Unknown version 0x0000 [ 105.725776][ T332] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 106.009240][ T3006] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #100: -71 [ 106.020115][ T3640] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.029590][ T3006] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 106.037487][ T3006] uclogic 0003:256C:006D.000F: failed probing pen v1 parameters: -71 [ 106.045768][ T3006] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 106.053402][ T3006] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 106.063972][ T3006] usb 2-1: USB disconnect, device number 7 [ 106.533463][ T3650] syz-executor.1[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.533531][ T3650] syz-executor.1[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.635890][ T3658] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 [ 106.837225][ T3678] syz-executor.1[3678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.837281][ T3678] syz-executor.1[3678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.879189][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 107.059384][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 107.258480][ T3682] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.459524][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.471911][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.482249][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.491316][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.511601][ T26] usb 5-1: config 0 descriptor?? [ 107.705730][ T3699] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 [ 107.893994][ T3711] loop3: detected capacity change from 0 to 512 [ 107.914663][ T3715] syz-executor.1[3715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.914770][ T3715] syz-executor.1[3715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.941097][ T3711] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 107.944589][ T3717] overlayfs: statfs failed on './file0' [ 107.952793][ T3711] ext4 filesystem being mounted at /root/syzkaller-testdir4282100549/syzkaller.XyPKqr/62/file1 supports timestamps until 2038 (0x7fffffff) [ 108.006126][ T3711] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 108.130847][ T3730] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 [ 108.919188][ T26] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 108.927898][ T26] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 108.935808][ T26] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 108.944050][ T26] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 108.951861][ T26] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 108.961174][ T26] usb 5-1: USB disconnect, device number 15 [ 109.112133][ T3764] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 [ 109.134033][ T3766] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 109.529118][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.944049][ T3794] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 [ 109.989169][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 110.308705][ T1107] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.318629][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.378677][ T3815] device veth0_vlan left promiscuous mode [ 110.399708][ T3815] device veth0_vlan entered promiscuous mode [ 110.691407][ T1107] usb 2-1: Product: syz [ 110.695573][ T1107] usb 2-1: Manufacturer: syz [ 110.700059][ T1107] usb 2-1: SerialNumber: syz [ 110.705103][ T1107] r8152-cfgselector 2-1: config 0 descriptor?? [ 110.875189][ T3828] loop4: detected capacity change from 0 to 512 [ 110.911205][ T3828] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 110.929328][ T3828] ext4 filesystem being mounted at /root/syzkaller-testdir385295498/syzkaller.BwBBnq/166/file1 supports timestamps until 2038 (0x7fffffff) [ 110.949231][ T3828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 111.199279][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 111.199296][ T30] audit: type=1326 audit(1718605130.384:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b38f4ea9 code=0x7ffc0000 [ 111.231494][ T30] audit: type=1326 audit(1718605130.384:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b38f4ea9 code=0x7ffc0000 [ 111.289272][ T1107] r8152-cfgselector 2-1: Unknown version 0x0000 [ 111.330073][ T30] audit: type=1400 audit(1718605130.694:712): avc: denied { mounton } for pid=3838 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.376764][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.383755][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.391648][ T3838] device bridge_slave_0 entered promiscuous mode [ 111.401894][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.408790][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.416054][ T3838] device bridge_slave_1 entered promiscuous mode [ 111.467694][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.474772][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.481896][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.488729][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.499207][ T1107] r8152-cfgselector 2-1: Unknown version 0x0000 [ 111.505392][ T1107] r8152-cfgselector 2-1: bad CDC descriptors [ 111.526401][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.533569][ T1107] r8152-cfgselector 2-1: Unknown version 0x0000 [ 111.541269][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.560128][ T1107] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 111.568178][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.599236][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.607510][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.614379][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.622432][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.630462][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.637284][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.647121][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.655163][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.839419][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.847492][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.864602][ T3838] device veth0_vlan entered promiscuous mode [ 111.878393][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.886924][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.895597][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.903811][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.917588][ T3838] device veth1_macvtap entered promiscuous mode [ 111.926768][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.935217][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.943586][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.952169][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.960643][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.978945][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.987103][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.006995][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.017262][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.129134][ T1107] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 112.142163][ T10] device bridge_slave_1 left promiscuous mode [ 112.148595][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.157603][ T10] device bridge_slave_0 left promiscuous mode [ 112.167869][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.175983][ T10] device veth1_macvtap left promiscuous mode [ 112.185569][ T10] device veth0_vlan left promiscuous mode [ 112.334489][ T3887] overlayfs: invalid redirect ((null)) [ 112.499172][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.514295][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.524877][ T1107] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.534193][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.543558][ T1107] usb 4-1: config 0 descriptor?? [ 113.089477][ T1107] hid (null): bogus close delimiter [ 113.299310][ T1107] usb 4-1: language id specifier not provided by device, defaulting to English [ 113.339141][ T2736] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.385054][ T3917] overlayfs: invalid redirect ((null)) [ 113.476508][ T3938] syz-executor.1[3938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.476577][ T3938] syz-executor.1[3938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.849121][ T2736] usb 5-1: Using ep0 maxpacket: 32 [ 113.881297][ T3953] overlayfs: invalid redirect ((null)) [ 113.990514][ T2736] usb 5-1: New USB device found, idVendor=cdc9, idProduct=0b7e, bcdDevice=cb.6e [ 113.999574][ T2736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.008198][ T2736] usb 5-1: config 0 descriptor?? [ 114.208719][ T1107] uclogic 0003:256C:006D.0011: failed retrieving Huion firmware version: -71 [ 114.217899][ T2736] usb-storage 5-1:0.0: USB Mass Storage device detected [ 114.224719][ T1107] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 114.232357][ T1107] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 114.242140][ T1107] usb 4-1: USB disconnect, device number 14 [ 114.254737][ T2736] usb 5-1: USB disconnect, device number 16 [ 114.352152][ T3971] syz-executor.0[3971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.352226][ T3971] syz-executor.0[3971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.389833][ T3973] device pim6reg1 entered promiscuous mode [ 114.590633][ T3981] overlayfs: invalid redirect ((null)) [ 114.748179][ T3996] syz-executor.0[3996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.748226][ T3996] syz-executor.0[3996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.232453][ T30] audit: type=1400 audit(1718605134.594:713): avc: denied { ioctl } for pid=4012 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.539961][ T30] audit: type=1400 audit(1718605134.904:714): avc: denied { audit_write } for pid=4026 comm="syz-executor.0" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.601493][ T30] audit: type=1400 audit(1718605134.934:715): avc: denied { setopt } for pid=4026 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.614618][ T4029] syz-executor.0[4029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.625267][ T4029] syz-executor.0[4029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.640420][ T4031] input: syz0 as /devices/virtual/input/input25 [ 115.678701][ T30] audit: type=1400 audit(1718605135.034:716): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=665 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.719146][ T30] audit: type=1400 audit(1718605135.034:717): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=665 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.757780][ T30] audit: type=1400 audit(1718605135.034:718): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=665 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.997311][ T4060] input: syz0 as /devices/virtual/input/input26 [ 116.048714][ T4062] syz-executor.3[4062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.048787][ T4062] syz-executor.3[4062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.110363][ T4057] loop4: detected capacity change from 0 to 40427 [ 116.260239][ T4057] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.334329][ T4057] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.374523][ T30] audit: type=1400 audit(1718605135.734:719): avc: denied { write } for pid=4056 comm="syz-executor.4" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.411703][ T30] audit: type=1400 audit(1718605135.734:720): avc: denied { add_name } for pid=4056 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.439759][ T1854] attempt to access beyond end of device [ 116.439759][ T1854] loop4: rw=524288, want=45072, limit=40427 [ 116.455244][ T1854] attempt to access beyond end of device [ 116.455244][ T1854] loop4: rw=0, want=45072, limit=40427 [ 116.466266][ T30] audit: type=1400 audit(1718605135.734:721): avc: denied { create } for pid=4056 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.493706][ T30] audit: type=1400 audit(1718605135.764:722): avc: denied { mounton } for pid=4056 comm="syz-executor.4" path="/root/syzkaller-testdir385295498/syzkaller.BwBBnq/181/file0/bus" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.521009][ T45] attempt to access beyond end of device [ 116.521009][ T45] loop4: rw=2049, want=45120, limit=40427 [ 116.523273][ T30] audit: type=1400 audit(1718605135.764:723): avc: denied { setattr } for pid=4056 comm="syz-executor.4" name="work" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.561388][ T30] audit: type=1400 audit(1718605135.764:724): avc: denied { remove_name } for pid=4056 comm="syz-executor.4" name="#39" dev="loop4" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.584983][ T30] audit: type=1400 audit(1718605135.764:725): avc: denied { rename } for pid=4056 comm="syz-executor.4" name="#39" dev="loop4" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.608041][ T30] audit: type=1400 audit(1718605135.764:726): avc: denied { unlink } for pid=4056 comm="syz-executor.4" name="#39" dev="loop4" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.630619][ T30] audit: type=1400 audit(1718605135.764:727): avc: denied { unlink } for pid=4056 comm="syz-executor.4" name="#3a" dev="loop4" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.669144][ T30] audit: type=1400 audit(1718605135.804:728): avc: denied { rename } for pid=4056 comm="syz-executor.4" name="file1" dev="overlay" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.820135][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.022336][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.030857][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.038132][ T4114] device bridge_slave_0 entered promiscuous mode [ 117.075357][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.173088][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.215408][ T4114] device bridge_slave_1 entered promiscuous mode [ 117.326689][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.333551][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.340660][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.347424][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.373630][ T4133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.383901][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.392135][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.402562][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.420191][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.428744][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.435615][ T2736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.443457][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.453691][ T2736] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.460558][ T2736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.478996][ T4142] IPv6: addrconf: prefix option has invalid lifetime [ 117.487833][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.496213][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.505638][ T45] device bridge_slave_1 left promiscuous mode [ 117.513353][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.523706][ T45] device bridge_slave_0 left promiscuous mode [ 117.529898][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.546950][ T45] device veth1_macvtap left promiscuous mode [ 117.554226][ T45] device veth0_vlan left promiscuous mode [ 117.695690][ T4168] IPv6: addrconf: prefix option has invalid lifetime [ 117.769903][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.791164][ T4114] device veth0_vlan entered promiscuous mode [ 117.808297][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.820420][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.844266][ T4114] device veth1_macvtap entered promiscuous mode [ 117.855060][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.866393][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.878773][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.890290][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.898493][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.918310][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.951153][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.967738][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.985985][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.291883][ T4203] IPv6: addrconf: prefix option has invalid lifetime [ 118.349109][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.688493][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 118.974375][ T4257] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.009246][ T20] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.028417][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.036667][ T20] usb 1-1: Product: syz [ 119.044008][ T20] usb 1-1: Manufacturer: syz [ 119.049973][ T20] usb 1-1: SerialNumber: syz [ 119.065789][ T20] r8152-cfgselector 1-1: config 0 descriptor?? [ 119.351830][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 119.385677][ T4267] overlayfs: statfs failed on './file0' [ 119.485549][ T4288] syz-executor.1[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.485654][ T4288] syz-executor.1[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.584503][ T4302] overlayfs: statfs failed on './file0' [ 119.601411][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 119.607457][ T20] r8152-cfgselector 1-1: bad CDC descriptors [ 119.649178][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 119.659578][ T20] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 119.890890][ T4321] syz-executor.3[4321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.890989][ T4321] syz-executor.3[4321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.967717][ T4327] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.999160][ T4327] FAT-fs (loop7): unable to read boot sector [ 120.036367][ T4329] syz-executor.3[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.036538][ T4329] syz-executor.3[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.179096][ T332] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.318985][ T4337] loop3: detected capacity change from 0 to 40427 [ 120.549184][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 120.604716][ T4337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.639800][ T4337] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 120.646596][ T4337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.662310][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.669310][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.676607][ T4351] device bridge_slave_0 entered promiscuous mode [ 120.684001][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.691052][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.698368][ T4351] device bridge_slave_1 entered promiscuous mode [ 120.719594][ T332] usb 2-1: New USB device found, idVendor=cdc9, idProduct=0b7e, bcdDevice=cb.6e [ 120.728477][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.739621][ T332] usb 2-1: config 0 descriptor?? [ 120.772503][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.779356][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.786432][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.793408][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.807504][ T332] usb-storage 2-1:0.0: USB Mass Storage device detected [ 121.032223][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.041272][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.046243][ T332] usb 2-1: USB disconnect, device number 9 [ 121.092229][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.099359][ T3026] attempt to access beyond end of device [ 121.099359][ T3026] loop3: rw=2049, want=45104, limit=40427 [ 121.147388][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.160332][ T4365] syz-executor.4[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.160408][ T4365] syz-executor.4[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.172783][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.191213][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.205971][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.215142][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.221996][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.229278][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.250654][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.258802][ T4369] Unsupported ieee802154 address type: 0 [ 121.271691][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.292107][ T4351] device veth0_vlan entered promiscuous mode [ 121.312273][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.329614][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.341606][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.367089][ T4351] device veth1_macvtap entered promiscuous mode [ 121.380316][ T45] device bridge_slave_1 left promiscuous mode [ 121.389132][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.420816][ T45] device bridge_slave_0 left promiscuous mode [ 121.428070][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.437382][ T45] device veth1_macvtap left promiscuous mode [ 121.443371][ T45] device veth0_vlan left promiscuous mode [ 121.516508][ T4382] syz-executor.3[4382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.516612][ T4382] syz-executor.3[4382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.529249][ T63] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 121.940376][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.948423][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.956554][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.996663][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.005936][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 122.032658][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.054849][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.092496][ T4405] Unsupported ieee802154 address type: 0 [ 122.099534][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.209220][ T4413] loop3: detected capacity change from 0 to 512 [ 122.229160][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.297698][ T4413] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.306083][ T4413] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.312794][ T4413] __quota_error: 53 callbacks suppressed [ 122.312810][ T4413] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 122.328863][ T4413] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 122.329204][ T63] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.349706][ T4413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 122.365197][ T4413] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6153: Corrupt filesystem [ 122.375282][ T4413] EXT4-fs (loop3): 1 truncate cleaned up [ 122.450280][ T4413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.543856][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.551714][ T63] usb 5-1: Product: syz [ 122.555842][ T63] usb 5-1: Manufacturer: syz [ 122.560305][ T63] usb 5-1: SerialNumber: syz [ 122.581530][ T63] r8152-cfgselector 5-1: config 0 descriptor?? [ 122.599461][ T4413] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz-executor.3: corrupted xattr block 31 [ 122.628576][ T4413] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 122.640686][ T4413] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz-executor.3: corrupted xattr block 31 [ 122.668576][ T4413] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 122.679467][ T30] audit: type=1400 audit(1718605142.044:782): avc: denied { read } for pid=4412 comm="syz-executor.3" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.709171][ T2736] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.039383][ T63] r8152-cfgselector 5-1: Unknown version 0x0000 [ 123.079461][ T2736] usb 1-1: Using ep0 maxpacket: 32 [ 123.199229][ T2736] usb 1-1: New USB device found, idVendor=cdc9, idProduct=0b7e, bcdDevice=cb.6e [ 123.208407][ T2736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.217115][ T2736] usb 1-1: config 0 descriptor?? [ 123.269462][ T63] r8152-cfgselector 5-1: Unknown version 0x0000 [ 123.275598][ T63] r8152-cfgselector 5-1: bad CDC descriptors [ 123.281860][ T2736] usb-storage 1-1:0.0: USB Mass Storage device detected [ 123.309200][ T63] r8152-cfgselector 5-1: Unknown version 0x0000 [ 123.316179][ T63] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 123.329167][ T3006] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 123.419140][ T332] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 123.471799][ T20] usb 1-1: USB disconnect, device number 12 [ 123.570418][ T3006] usb 4-1: Using ep0 maxpacket: 16 [ 123.709210][ T3006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.720086][ T3006] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.733061][ T3006] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.742032][ T3006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.754075][ T3006] usb 4-1: config 0 descriptor?? [ 123.779206][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.791268][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.799992][ T332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.810750][ T332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.820297][ T332] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.829163][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.879601][ T332] hub 3-1:1.0: bad descriptor, ignoring hub [ 123.885659][ T332] hub: probe of 3-1:1.0 failed with error -5 [ 123.891981][ T332] cdc_wdm 3-1:1.0: skipping garbage [ 123.897028][ T332] cdc_wdm 3-1:1.0: skipping garbage [ 123.903385][ T332] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 123.959502][ T30] audit: type=1400 audit(1718605143.324:783): avc: denied { mounton } for pid=4484 comm="syz-executor.4" path="/root/syzkaller-testdir1252362759/syzkaller.Ufoi12/25/file0/bus" dev="ramfs" ino=34286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 123.967227][ T4485] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.993538][ T4485] overlayfs: failed to set xattr on upper [ 123.999435][ T4485] overlayfs: failed to resolve './file0': -2 [ 124.336332][ T3006] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0012/input/input27 [ 124.420541][ T3006] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 124.449485][ T4503] kvm: apic: phys broadcast and lowest prio [ 124.455469][ T30] audit: type=1326 audit(1718605143.814:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.479505][ T332] usb 3-1: USB disconnect, device number 11 [ 124.481884][ T30] audit: type=1326 audit(1718605143.814:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.509311][ T30] audit: type=1326 audit(1718605143.814:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.535417][ T30] audit: type=1326 audit(1718605143.814:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.561798][ T30] audit: type=1326 audit(1718605143.814:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.595542][ T30] audit: type=1326 audit(1718605143.814:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd362bb6ea9 code=0x7ffc0000 [ 124.682195][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.689202][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.696522][ T4513] device bridge_slave_0 entered promiscuous mode [ 124.715014][ T63] usb 4-1: USB disconnect, device number 15 [ 124.724508][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.731588][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.740268][ T4513] device bridge_slave_1 entered promiscuous mode [ 124.853194][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.859967][ T4524] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.860529][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.874404][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.881267][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.890732][ T4524] overlayfs: failed to set xattr on upper [ 124.896336][ T4524] overlayfs: failed to resolve './file0': -2 [ 124.940215][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.949957][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.971104][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.005558][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.018316][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.025212][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.041556][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.050980][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.057915][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.066731][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.074606][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.110021][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.123216][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.148001][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.158040][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.178975][ T4548] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.185826][ T4513] device veth0_vlan entered promiscuous mode [ 125.185861][ T4548] overlayfs: failed to set xattr on upper [ 125.197237][ T4548] overlayfs: failed to resolve './file0': -2 [ 125.204546][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.235183][ T4513] device veth1_macvtap entered promiscuous mode [ 125.255850][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.299804][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.380652][ T1713] device bridge_slave_1 left promiscuous mode [ 125.389405][ T1713] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.399160][ T63] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.413169][ T1713] device bridge_slave_0 left promiscuous mode [ 125.430514][ T1713] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.449680][ T1713] device veth1_macvtap left promiscuous mode [ 125.455770][ T1713] device veth0_vlan left promiscuous mode [ 125.476211][ T4567] loop3: detected capacity change from 0 to 8192 [ 125.495867][ T4567] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.508213][ T4567] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.517252][ T4567] FAT-fs (loop3): Filesystem has been set read-only [ 125.529184][ T2736] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 125.543456][ T4574] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.550477][ T4574] overlayfs: failed to set xattr on upper [ 125.556076][ T4574] overlayfs: failed to resolve './file0': -2 [ 125.723895][ T4591] loop4: detected capacity change from 0 to 512 [ 125.741014][ T4591] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.752585][ T4591] ext4 filesystem being mounted at /root/syzkaller-testdir1252362759/syzkaller.Ufoi12/48/bus supports timestamps until 2038 (0x7fffffff) [ 125.789749][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.824650][ T63] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 126.089847][ T330] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 126.097321][ T2736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.107204][ T2736] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.115870][ T2736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.126660][ T2736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.136320][ T2736] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 126.145274][ T2736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.199631][ T2736] hub 3-1:1.0: bad descriptor, ignoring hub [ 126.205377][ T2736] hub: probe of 3-1:1.0 failed with error -5 [ 126.211754][ T2736] cdc_wdm 3-1:1.0: skipping garbage [ 126.216769][ T2736] cdc_wdm 3-1:1.0: skipping garbage [ 126.222423][ T2736] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 126.239262][ T63] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 126.248128][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.255970][ T63] usb 2-1: Product: syz [ 126.260098][ T63] usb 2-1: Manufacturer: syz [ 126.264493][ T63] usb 2-1: SerialNumber: syz [ 126.269716][ T63] usb 2-1: config 0 descriptor?? [ 126.339111][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 126.489212][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.500106][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.512920][ T330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.521870][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.530441][ T330] usb 4-1: config 0 descriptor?? [ 126.537843][ T20] usb 3-1: USB disconnect, device number 12 [ 126.569783][ T63] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 126.582553][ T63] usb 2-1: USB disconnect, device number 10 [ 126.983864][ T4632] loop4: detected capacity change from 0 to 512 [ 127.022015][ T4637] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 127.077811][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.087518][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.093314][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input28 [ 127.105061][ T4632] ext4 filesystem being mounted at /root/syzkaller-testdir1252362759/syzkaller.Ufoi12/57/bus supports timestamps until 2038 (0x7fffffff) [ 127.260598][ T330] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 127.524438][ T63] usb 4-1: USB disconnect, device number 16 [ 127.530797][ T4664] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 127.649090][ T330] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 128.237252][ T4701] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.365831][ T4714] loop4: detected capacity change from 0 to 512 [ 128.379154][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.392842][ T330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.401613][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.413304][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.423366][ T330] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.432955][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.433858][ T4714] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 26 (err -116) [ 128.455920][ T4714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.467344][ T4714] ext4 filesystem being mounted at /root/syzkaller-testdir1252362759/syzkaller.Ufoi12/62/file1 supports timestamps until 2038 (0x7fffffff) [ 128.483271][ T330] hub 3-1:1.0: bad descriptor, ignoring hub [ 128.489183][ T330] hub: probe of 3-1:1.0 failed with error -5 [ 128.495139][ T330] cdc_wdm 3-1:1.0: skipping garbage [ 128.500515][ T330] cdc_wdm 3-1:1.0: skipping garbage [ 128.506175][ T330] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 128.559008][ T4722] loop3: detected capacity change from 0 to 8192 [ 128.610478][ T4722] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.631074][ T4722] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 128.639866][ T4722] FAT-fs (loop3): Filesystem has been set read-only [ 128.698477][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 128.698492][ T30] audit: type=1400 audit(1718605148.054:799): avc: denied { read } for pid=4725 comm="syz-executor.4" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.748471][ T4746] device vlan2 entered promiscuous mode [ 128.755034][ T30] audit: type=1400 audit(1718605148.054:800): avc: denied { open } for pid=4725 comm="syz-executor.4" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.809272][ T330] usb 3-1: USB disconnect, device number 13 [ 129.219858][ T4785] loop2: detected capacity change from 0 to 512 [ 129.445318][ T4785] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 26 (err -116) [ 129.460277][ T4785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.471395][ T4785] ext4 filesystem being mounted at /root/syzkaller-testdir2748505813/syzkaller.TyMwPW/23/file1 supports timestamps until 2038 (0x7fffffff) [ 129.548481][ T4803] loop2: detected capacity change from 0 to 256 [ 129.567528][ T4803] exfat: Deprecated parameter 'utf8' [ 129.574095][ T4803] exfat: Deprecated parameter 'utf8' [ 129.582587][ T4803] exfat: Unknown parameter 'allow_uti0000 ÿÿÿÿÿÿÿ001777' [ 129.633729][ T4803] loop2: detected capacity change from 0 to 256 [ 130.994630][ T26] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 131.379177][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.389313][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.397924][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.399147][ T20] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.409075][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.425778][ T26] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.434656][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.480144][ T26] hub 4-1:1.0: bad descriptor, ignoring hub [ 131.485885][ T26] hub: probe of 4-1:1.0 failed with error -5 [ 131.492205][ T26] cdc_wdm 4-1:1.0: skipping garbage [ 131.497229][ T26] cdc_wdm 4-1:1.0: skipping garbage [ 131.505114][ T26] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 131.809206][ T1224] usb 4-1: USB disconnect, device number 17 [ 131.839439][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.849313][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 132.009193][ T20] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 132.018189][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.026241][ T20] usb 3-1: Product: syz [ 132.030476][ T20] usb 3-1: Manufacturer: syz [ 132.034877][ T20] usb 3-1: SerialNumber: syz [ 132.040710][ T20] usb 3-1: config 0 descriptor?? [ 132.189271][ T30] audit: type=1400 audit(1718605151.494:801): avc: denied { create } for pid=4869 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 132.322739][ T4875] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 132.332448][ T4875] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 232.379064][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 232.385857][ C1] (detected by 1, t=10002 jiffies, g=22053, q=526) [ 232.392260][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294960455-4294950453), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 232.405451][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g22053 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 232.416471][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 232.426282][ C1] rcu: RCU grace-period kthread stack dump: [ 232.432009][ C1] task:rcu_preempt state:R running task stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 232.442610][ C1] Call Trace: [ 232.445722][ C1] [ 232.448503][ C1] __schedule+0xccc/0x1590 [ 232.452758][ C1] ? __sched_text_start+0x8/0x8 [ 232.457444][ C1] ? __kasan_check_write+0x14/0x20 [ 232.462395][ C1] schedule+0x11f/0x1e0 [ 232.466380][ C1] schedule_timeout+0x18c/0x370 [ 232.471068][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 232.476101][ C1] ? console_conditional_schedule+0x30/0x30 [ 232.481832][ C1] ? update_process_times+0x200/0x200 [ 232.487036][ C1] ? prepare_to_swait_event+0x308/0x320 [ 232.492421][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 232.497022][ C1] ? debug_smp_processor_id+0x17/0x20 [ 232.502227][ C1] ? __note_gp_changes+0x4ab/0x920 [ 232.507267][ C1] ? rcu_gp_init+0xc30/0xc30 [ 232.511695][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 232.516727][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 232.521157][ C1] rcu_gp_kthread+0xa4/0x350 [ 232.525583][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 232.530272][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 232.534785][ C1] ? __kasan_check_read+0x11/0x20 [ 232.539641][ C1] ? __kthread_parkme+0xb2/0x200 [ 232.544418][ C1] kthread+0x421/0x510 [ 232.548322][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 232.552836][ C1] ? kthread_blkcg+0xd0/0xd0 [ 232.557262][ C1] ret_from_fork+0x1f/0x30 [ 232.561517][ C1] [ 232.564378][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 232.570640][ C1] Sending NMI from CPU 1 to CPUs 0: [ 232.575679][ C0] NMI backtrace for cpu 0 [ 232.575688][ C0] CPU: 0 PID: 4873 Comm: syz-executor.1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 232.575706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 232.575719][ C0] RIP: 0010:update_stack_state+0xf5/0x460 [ 232.575741][ C0] Code: b6 04 30 84 c0 0f 85 6f 03 00 00 c6 03 01 b9 a8 00 00 00 48 8b 45 88 eb 05 b9 10 00 00 00 4d 8d 67 08 49 8d 57 10 48 89 45 a8 <48> 01 c1 48 89 4d 80 49 8d 47 18 48 89 85 60 ff ff ff 49 8d 5f 28 [ 232.575754][ C0] RSP: 0018:ffffc900000076b0 EFLAGS: 00000046 [ 232.575768][ C0] RAX: ffffc90000007970 RBX: ffffc90000007838 RCX: 0000000000000010 [ 232.575779][ C0] RDX: ffffc90000007810 RSI: ffffc90000007970 RDI: ffffc90000007858 [ 232.575791][ C0] RBP: ffffc90000007768 R08: ffffc900000078e8 R09: 0000000000000000 [ 232.575801][ C0] R10: ffffc900000078f0 R11: dffffc0000000001 R12: ffffc90000007808 [ 232.575813][ C0] R13: ffffc90000007850 R14: dffffc0000000000 R15: ffffc90000007800 [ 232.575824][ C0] FS: 00007f60032ff6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 232.575838][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.575848][ C0] CR2: 00007f60032fed80 CR3: 0000000111d1e000 CR4: 00000000003526b0 [ 232.575862][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.575871][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.575880][ C0] Call Trace: [ 232.575884][ C0] [ 232.575889][ C0] ? show_regs+0x58/0x60 [ 232.575904][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 232.575922][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 232.575941][ C0] ? update_stack_state+0xf5/0x460 [ 232.575956][ C0] ? update_stack_state+0xf5/0x460 [ 232.575971][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 232.575988][ C0] ? nmi_handle+0xa8/0x280 [ 232.576002][ C0] ? update_stack_state+0xf5/0x460 [ 232.576018][ C0] ? default_do_nmi+0x69/0x160 [ 232.576035][ C0] ? exc_nmi+0xaf/0x120 [ 232.576049][ C0] ? end_repeat_nmi+0x16/0x31 [ 232.576066][ C0] ? update_stack_state+0xf5/0x460 [ 232.576081][ C0] ? update_stack_state+0xf5/0x460 [ 232.576097][ C0] ? update_stack_state+0xf5/0x460 [ 232.576112][ C0] [ 232.576117][ C0] [ 232.576124][ C0] unwind_next_frame+0x3cb/0x700 [ 232.576141][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 232.576157][ C0] arch_stack_walk+0x10d/0x140 [ 232.576174][ C0] ? stack_trace_save+0x113/0x1c0 [ 232.576190][ C0] stack_trace_save+0x113/0x1c0 [ 232.576205][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 232.576222][ C0] __kasan_slab_alloc+0xb1/0xe0 [ 232.576246][ C0] slab_post_alloc_hook+0x53/0x2c0 [ 232.576263][ C0] ? __sigqueue_alloc+0x130/0x200 [ 232.576279][ C0] ? __sigqueue_alloc+0x130/0x200 [ 232.576294][ C0] kmem_cache_alloc+0xf5/0x200 [ 232.576310][ C0] __sigqueue_alloc+0x130/0x200 [ 232.576326][ C0] __send_signal+0x1fd/0xcb0 [ 232.576341][ C0] send_signal+0x43a/0x590 [ 232.576357][ C0] do_send_sig_info+0xde/0x230 [ 232.576377][ C0] group_send_sig_info+0x113/0x460 [ 232.576392][ C0] ? __lock_task_sighand+0x100/0x100 [ 232.576407][ C0] ? clockevents_program_event+0x22f/0x300 [ 232.576425][ C0] do_bpf_send_signal+0x8c/0x150 [ 232.576442][ C0] irq_work_run_list+0x1c2/0x290 [ 232.576459][ C0] ? irq_work_run+0xf0/0xf0 [ 232.576476][ C0] irq_work_run+0x69/0xf0 [ 232.576491][ C0] __sysvec_irq_work+0x63/0x1b0 [ 232.576506][ C0] sysvec_irq_work+0x92/0xb0 [ 232.576520][ C0] [ 232.576525][ C0] [ 232.576529][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 232.576543][ C0] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 232.576561][ C0] Code: 74 08 4c 89 ff e8 91 66 65 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 29 20 7c 03 fb 49 8d 9d 38 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 232.576573][ C0] RSP: 0018:ffffc90000f57420 EFLAGS: 00000282 [ 232.576585][ C0] RAX: 0000000080000001 RBX: ffff888115f7edf8 RCX: 0000000000000002 [ 232.576595][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 [ 232.576603][ C0] RBP: ffffc90000f57470 R08: dffffc0000000000 R09: ffffed102004d9e6 [ 232.576615][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f70378c0 [ 232.576625][ C0] R13: ffff888115f7e2c0 R14: 0000000000000000 R15: 1ffff1103ee04e64 [ 232.576638][ C0] ? requeue_task_rt+0x410/0x410 [ 232.576653][ C0] __schedule+0xcd4/0x1590 [ 232.576668][ C0] ? __sched_text_start+0x8/0x8 [ 232.576683][ C0] ? plist_add+0x3e0/0x460 [ 232.576699][ C0] schedule+0x11f/0x1e0 [ 232.576713][ C0] futex_wait_queue_me+0x306/0x760 [ 232.576731][ C0] ? futex_wait_setup+0x520/0x520 [ 232.576748][ C0] futex_wait+0x2e6/0x9a0 [ 232.576766][ C0] ? do_futex+0x37f0/0x37f0 [ 232.576780][ C0] ? kasan_set_free_info+0x23/0x40 [ 232.576796][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 232.576812][ C0] ? do_syscall_64+0x49/0xb0 [ 232.576825][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 232.576844][ C0] do_futex+0x1367/0x37f0 [ 232.576860][ C0] ? __restore_fpregs_from_fpstate+0xba/0x170 [ 232.576876][ C0] ? debug_smp_processor_id+0x17/0x20 [ 232.576892][ C0] ? save_fpregs_to_fpstate+0x1a0/0x1a0 [ 232.576907][ C0] ? kmem_cache_free+0x116/0x2e0 [ 232.576923][ C0] ? __kasan_check_write+0x14/0x20 [ 232.576938][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 232.576955][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 232.576971][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 232.576988][ C0] ? __kasan_check_write+0x14/0x20 [ 232.577004][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 232.577019][ C0] ? local_bh_enable+0x1f/0x30 [ 232.577034][ C0] ? fpu__restore_sig+0x75f/0xf40 [ 232.577051][ C0] ? copy_fpstate_to_sigframe+0x9a0/0x9a0 [ 232.577069][ C0] ? memcpy+0x56/0x70 [ 232.577084][ C0] ? __kasan_check_write+0x14/0x20 [ 232.577099][ C0] ? _copy_from_user+0x96/0xd0 [ 232.577112][ C0] ? restore_sigcontext+0x638/0x710 [ 232.577126][ C0] ? fpu__clear_user_states+0x187/0x210 [ 232.577142][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 232.577158][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 232.577174][ C0] ? __kasan_check_write+0x14/0x20 [ 232.577189][ C0] ? _copy_from_user+0x96/0xd0 [ 232.577203][ C0] ? restore_altstack+0x274/0x400 [ 232.577220][ C0] __se_sys_futex+0x37b/0x3e0 [ 232.577237][ C0] ? __x64_sys_futex+0x100/0x100 [ 232.577253][ C0] ? debug_smp_processor_id+0x17/0x20 [ 232.577269][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 232.577285][ C0] __x64_sys_futex+0xe5/0x100 [ 232.577302][ C0] do_syscall_64+0x3d/0xb0 [ 232.577315][ C0] ? sysvec_irq_work+0x52/0xb0 [ 232.577330][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 232.577344][ C0] RIP: 0033:0x7f6003fc6ea9 [ 232.577356][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 232.577368][ C0] RSP: 002b:00007f60032ff178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.577389][ C0] RAX: ffffffffffffffda RBX: 00007f60040fe128 RCX: 00007f6003fc6ea9 [ 232.577400][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f60040fe128 [ 232.577410][ C0] RBP: 00007f60040fe120 R08: 00007f60032ff6c0 R09: 00007f60032ff6c0 [ 232.577420][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60040fe12c [ 232.577430][ C0] R13: 000000000000006e R14: 00007ffee957e1a0 R15: 00007ffee957e288 [ 232.577443][ C0] [ 428.799170][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 296s! [ 428.807932][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 296s! [ 428.816863][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 296s! [ 428.825622][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 293s! [ 428.834481][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 296s! [ 428.842711][ C0] Showing busy workqueues and worker pools: [ 428.848409][ C0] workqueue events: flags=0x0 [ 428.852958][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.853008][ C0] pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 428.853084][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.853120][ C0] pending: key_garbage_collector, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.853216][ C0] workqueue events_long: flags=0x0 [ 428.896785][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 428.896828][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 428.896936][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 428.896970][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 428.897052][ C0] workqueue events_unbound: flags=0x2 [ 428.942831][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 428.942877][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 428.960001][ C0] workqueue events_power_efficient: flags=0x80 [ 428.965948][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.965994][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, check_lifetime [ 428.966064][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 428.966101][ C0] pending: neigh_periodic_work, gc_worker [ 428.995736][ C0] workqueue rcu_gp: flags=0x8 [ 429.000186][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.000230][ C0] pending: srcu_invoke_callbacks [ 429.000275][ C0] workqueue mm_percpu_wq: flags=0x8 [ 429.017890][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.017938][ C0] pending: vmstat_update [ 429.017986][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.018022][ C0] pending: vmstat_update [ 429.018057][ C0] workqueue writeback: flags=0x4a [ 429.046784][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 429.046825][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 429.046905][ C0] workqueue kblockd: flags=0x18 [ 429.065554][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 429.065596][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 429.080016][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 429.080064][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 429.080114][ C0] workqueue usb_hub_wq: flags=0x4 [ 429.099405][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.099449][ C0] in-flight: 20:hub_event hub_event [ 429.099514][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.117543][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.117588][ C0] pending: work_fn [ 429.117711][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.134550][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 429.134593][ C0] pending: addrconf_verify_work [ 429.147082][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.151955][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.151994][ C0] pending: wg_packet_handshake_send_worker [ 429.152036][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.170100][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.170140][ C0] pending: wg_packet_encrypt_worker [ 429.182969][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.183009][ C0] pending: wg_packet_encrypt_worker [ 429.183050][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.200777][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.200819][ C0] pending: wg_packet_handshake_send_worker [ 429.200860][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.218999][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.219046][ C0] pending: wg_packet_encrypt_worker [ 429.231878][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.231925][ C0] pending: wg_packet_encrypt_worker [ 429.244812][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.249655][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.249696][ C0] pending: wg_packet_handshake_send_worker [ 429.249733][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.267789][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.267832][ C0] pending: wg_packet_encrypt_worker [ 429.267872][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.267913][ C0] pending: wg_packet_encrypt_worker [ 429.293756][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.298560][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.298598][ C0] pending: wg_packet_handshake_send_worker [ 429.298638][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.316702][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.316743][ C0] pending: wg_packet_encrypt_worker [ 429.329587][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.329629][ C0] pending: wg_packet_encrypt_worker [ 429.329669][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.347254][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.347293][ C0] pending: wg_packet_handshake_send_worker [ 429.347332][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.365402][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.365445][ C0] pending: wg_packet_encrypt_worker [ 429.378284][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.378328][ C0] pending: wg_packet_encrypt_worker [ 429.378371][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.396062][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.396105][ C0] pending: wg_packet_handshake_send_worker [ 429.396145][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.414209][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.414252][ C0] pending: wg_packet_encrypt_worker [ 429.427082][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.427124][ C0] pending: wg_packet_encrypt_worker [ 429.427176][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.444879][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.444916][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.444975][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.465791][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.465830][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.465891][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.486533][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.486570][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.486630][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.507288][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.507328][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.507396][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.528282][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.528320][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.528379][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.549137][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.549177][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.549237][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.569991][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.570031][ C0] pending: wg_packet_handshake_send_worker [ 429.570070][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.588111][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.588153][ C0] pending: wg_packet_encrypt_worker [ 429.600983][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.601023][ C0] pending: wg_packet_encrypt_worker [ 429.613835][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.618649][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.618689][ C0] pending: wg_packet_handshake_send_worker [ 429.618725][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.636791][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.636834][ C0] pending: wg_packet_encrypt_worker [ 429.636877][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.636912][ C0] pending: wg_packet_encrypt_worker [ 429.662656][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.667468][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.667506][ C0] pending: wg_packet_handshake_send_worker [ 429.667544][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.685608][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.685651][ C0] pending: wg_packet_encrypt_worker [ 429.685689][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.685723][ C0] pending: wg_packet_encrypt_worker [ 429.685760][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=297s workers=4 idle: 330 63 2736