last executing test programs: 14.580696844s ago: executing program 2 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000180e8fa8a946712f1741000000000000", @ANYRES32=r0, @ANYRES8], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x903840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) rt_sigpending(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) shutdown(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) 14.512525119s ago: executing program 2 (id=1738): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) open(0x0, 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000800), 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$eJzs3c9rI2UYwPFn0jQ/umyTgygK0ge96GVoq2e1SBeEgkt3I+4Kwux2oiFjUmZCJCK2nryKN/8BwWUPHhY8LKj/QC/e1osXT9vLgqCLiCPzK8l0p0mTZmm6+/3Abt7kfZ/M+04m5XkCeXP4/tefNOueWbc6kivdF0NE5KFIVXKSMKKbgmTYl1cv/HnvxSvXrhdFZHNb9dLG1dfWVXV55adPPy/Hw+4W5aD64eGD9T8Onj14/vC/qx83PG142mp31NIb7d871g3H1p2G1zRVLzu25dnaaHm2G/W3o/66097d7anV2rm4tOvanqdWq6dNu6edtnbcnlofWY2WmqapF5eyphsrjug7r0pTxNRubW9bG1Me8OaUcZi1f3zfH9HtuhvWgohZDt+vw2q3HvvcAADA3Enn//ptkrBXJddPKI24FiiE7XQZEOT/SXtra3Nbg2JhkP/ffumXzoX37izH+f/dQlb+//pvUXwq/w+OPvP8//sj98uzO5HzYm+SwafK/zEfVtLvyPuDij0W5P/Bu6Ff0X/5we3VsEH+DwAAAAAAAAAAAAAAAAAAAADAefDQ9yu+71eS2+Tf4CsE8f2QsT/yi8Y4d3KS/foX4x0F+tcDnkhXrl2XUvjFvfyyiPNVt9atRbdxfzJwVSryb3g9xKINJ6L9BDRQlZ+dvW5tMQ5YCP/fKIiKI7asSUWqqfiwfemdrc01jUTx4fH3ujUjvxTE16URxq9LRZ7Jjl/PjC/IKy8PxZtSkV9vSlsc2Qmv60H8F2uqb7+7dSS+HI7L8ubjfUkAAAAAAJg5U7UUl8/VdP0b1e+mqZrVH9TyMlyfP/r5QL++Xs2sz/OVF/Jnu3YAAAAAAJ4WXuGzpuU4tuv1jm2UZdyY5Pc0Rj9PdiM/yeCgcS9sLI4aszC0wpM+cyH+BY0JJi+TrdRynL+Kknkyky1cU12lU5xVy0nWf4LBpUlfAtfLTb522/VWgvnoVMsZaiQfG0WPLDxy6uTyceE/GEnUZAdNds4dN/i5b777e7p1GfGuvcNdb9wppVZ6TLhx5JH9MRftA98fO5/F7L8WP07zIzMAAAAA5kSS9Je95JG3znZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8hU63E9vJGme9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBe/B8AAP//Tuzx8g==") setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='F', 0x1}], 0x1, 0x8000000, 0x0, 0x0) 7.655619927s ago: executing program 4 (id=1786): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 7.097903403s ago: executing program 1 (id=1789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200394}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 6.852843643s ago: executing program 1 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000004ca80)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x19e, &(0x7f0000000900)="$eJzsmD1PKkEUht/Z5ePem5vcW9NoIglQuOwuaqQw0dpCE79iJ5GVoIsY2ELo/BXW/gJrYkNi7x/QQq1stLOyWDM7AzsgfhRKSDhPcfad2bMzZw7wkiwIghhb7u+eb89TyUsdwF8kEZfzDyzM0ZT81r+XzHV55eLUfLpptZfz/evxx3z/6/tHALSXdHhy7Pu9TyfldR1aV29AQ0bqLTAYUu9Aw6bUDhi2pd5XdJXnG8Ze2XWM3apb5MLkweLB5iHXX9/jCUNRqU9pDeqN5kHBdZ3aD4rP+segYUGpT/28Or0xlf5Z0GBJnVsE1qSeR7zTG9ES5fyJSLi+PuTzj4v41fnujkg9JN4TTP4a5EwUwGgU9lbEB9xKDGP30J/8M4aU4k8RxT+yXuUoW280p8uVQskpOYe2nZszZ0xz1s4GRiTiB/73O/CnP8r60b6cq0lxjbEYjgueV7NE7I5tEQc5boz7n64hPSXGTM6pBP8H/1mwS1qXY4IgCIIgCIIgCIIgCIIgiG9nAix4C9pDPpyCuG+vBtmvAQAA///iz2iO") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x1714, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "43610000181c208220000000b9000201000000000000f001fffffff2ff00", [0x0, 0x10000000]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 6.728027003s ago: executing program 4 (id=1791): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x0, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x80, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bind$xdp(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) 5.979552114s ago: executing program 1 (id=1795): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.900556501s ago: executing program 4 (id=1796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000002180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$eJzs3e9rJGcdAPDvTLLX3F1qtipyFmyLrdwVvd1LY9so0lYQ9U1Bre9jTDYhZJMN2U29hKIp/gGCiAr63jeCf4BQCv4DIhT0vagoIld9qTeyOxNNsrvJkmyy183nA5N5np2Z5/s8Q3Z2fjw8E8CV9UxEvBYRExHxfETMFJ+nxbTQzuzn673/4K2l9pRElr3xjySS4rODstr5yYi4mW8SUxHxja9EfDvpjtvc3VtfrNdr20W+2trYqjZ39+6ubSyu1lZrm3Nzsy/Nvzz/4vy9rJCvuH+2dpYj4pUv/eXHP/jFl1955zPf+ePC3+58t12tL3wsr3dELJ2t5JPlZZc6++JAex9tX0SwEWm3pzQx6loAADCI9jn+hyPik53z/5mY6JzNAQAAAOMke3U6/p1EZAAAAMDYSiNiOpK0UvQFmI40rVTyPrwfjRtpvdFsfXqlsbO53F4WUY5SurJWr90r+gqXo5S087NFH9uD/AvH8nMR8URE/GjmeidfWWrUl0d98wMAAACuiJtPH73+/9dM2kkDAAAAY6bcNwMAAACMC5f8AAAAMP5c/wMAAMBY+9rrr7en7OA93stv7u6sN968u1xrrlc2dpYqS43trcpqo7HaGbNv47Ty6o3G1mdjc+d+tVVrtqrN3b2FjcbOZmth7cgrsAEAAIBL9MTT7/4hiYj9z1/vTFGMAwhwxJ9HXQFgmCZGXQFgZCZHXQFgZEqnruEIAeMuOWV5d+ed/F5h/PZi6gMAAAzf7Y93P/+/Viw7/d4A8EGmrw8AXD2e7sHVVTprD8Bbw64JMCofymeP9Vved/COPs//f34ond9jyLIzVw4AABiK6c6UpJXiPH060rRSiXi881qAUrKyVq/dK64Pfj9Teqydn+1smZzaZxgAAAAAAAAAAAAAAAAAAAAAAAAAyGVZEhkAAAAw1iLSvyad0fwjbs88N3307sCxt3797I2f3F9stbZnI659NX+r17WIaP20+PyFzCsBAAAA4BGQX6cX89lR1wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcfP+g7eWDqbLjPv3L0ZEuVf8yZjqzKeiFBE3/pnE5KHtkoiYGEL8/bcj4lav+Ek8zLKsXNSiV/zrFxy/3Nk1veOnEXFzCPHhKnu3ffx5rdf3L41nOvPe37/JYjqv/se/9H/Hv4k+x5/Hj+X7efK9X1X7xn874snJ3sefg/hJHv9IiHbm2QHb+K1v7u31XHCoyF7xD8eqtja2qs3dvbtrG4urtdXa5tzc7EvzL8+/OH+vurJWrxV/e4b54Sd+/fCk9t/oE798tP1d+/+5gVqfxX/eu//gI3mm1Cv+nWd7//7e6hM/LX77PlWk28tvH6T38/RhT/3yd0+d1P7lPu2fOqX9dwZqf3zu+a9//089l3TtDQDgMjR399YX6/Xa9gmJqQHWueTEq49GNYaYiEejGqNKZN/L/x/PV845N+9KZOfZfDKGUI1rXd/TiThrgUnEfrusAf8hAQCAMfP/k/6TniABAAAAAAAAAAAAAAAAAAAAF2mAwcPe+U10DTk2FREDjz12POb+aJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCi/wYAAP//9G7RaA==") 5.883357582s ago: executing program 4 (id=1797): prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1, 0x0, '/'}}]}, 0xb0) getresuid(&(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.132292084s ago: executing program 4 (id=1799): r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 4.128574155s ago: executing program 1 (id=1800): r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0)) 4.047340421s ago: executing program 3 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b32, 0x0) 4.022099843s ago: executing program 3 (id=1802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = eventfd(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = eventfd(0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r5}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r6, 0x0, 0x2, r3}) 3.236358897s ago: executing program 0 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 3.222191018s ago: executing program 1 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) 3.056106562s ago: executing program 1 (id=1805): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f00000008c0)="6cbac621503265ab2c23", 0xa) 2.978575188s ago: executing program 0 (id=1806): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x4, [@restrict={0x9, 0x0, 0x0, 0xb, 0x1}, @datasec={0x0, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x81, 0x7fff}, {0x3, 0x3, 0x2}, {0x4, 0x100, 0x9}, {0x4, 0x3}, {0x2, 0x7, 0x8}, {0x5, 0x5, 0x8}, {0x2}], "27e73f"}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000100)=""/151, 0x8c, 0x97, 0x1, 0x5b77}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000200)={0x4, 0x0, 0x3, 0x100, 0x2, [0x10, 0x6, 0x42e]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000017a, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC, @ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.974492528s ago: executing program 3 (id=1807): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(r0, &(0x7f0000000200)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 2.884986246s ago: executing program 2 (id=1798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 1.880174367s ago: executing program 0 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000040)={@private1={0xfc, 0x15, '\x00', 0x5}, 0x7e}) getrlimit(0xb, &(0x7f0000000280)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000080)=""/166, 0xa6) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000010000000000000200000018000000f8ffffff00000000090000007824feffffffffff950000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000008520000005000000180000000100000000"], &(0x7f00000008c0)='GPL\x00', 0xffff8001, 0x7a, &(0x7f0000000900)=""/122, 0x100, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xb, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0xa, 0x1, 0x68d}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0x1], 0x0, 0x10, 0xe8e}, 0x90) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000003440)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x13, r5, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000880)={0xfffffffc, 0x0, 0x0, 0xce}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.823553472s ago: executing program 2 (id=1810): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0xa01c2, 0x0) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe80}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0x80, 0x7, 0x80000001, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r3}, 0x8) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000bc0)="148187735e85181ef5b798e0e0df3f67ae40874566271a94a4c5672cb6b12c53f6d38fb1e5b243e0fa875e9e3d66ab33a3f9738fb48c072d1f50e59e4dbc9e920775d2900835f91f3629cd853370b1f5ac1978d3d610b0a8332a25389244c9c5165173bf18e89b7e8be9507774d8824a1a61b29a1b8081c0ea1dd6a0d3d4e8e8a11debfa97f12b69736819fffc7f3b", 0x8f}], 0x4, 0x0, 0xa8, 0x40040}}], 0x1, 0x4000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a00000000000000010100000400000000000020000000003c0a7bc2716a3df3519a290e36f54560d53b449cc5e4ab4abdb9600f2609559fad0e9bd3e1e54f15ef5cdd08856710ae1c6b684657a973e750a1702d10efab7fb20bad002b7458f17b094b3b00f02b35ce53c964fc6edb6e09c179c9e38d4f44e27a76d3b1a998d5970e2a", @ANYRES32=0x0, @ANYBLOB="01000000fcffffff0000000000000000"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e0000000800db00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) sendfile(r3, r4, 0x0, 0x1000000211005) 1.786072015s ago: executing program 3 (id=1811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.500176589s ago: executing program 3 (id=1812): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x240001, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x7ffe, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) dup(r2) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24040405}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv4_getnetconf={0x44, 0x52, 0x730, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x100}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000540)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @loopback}, {0x1, @broadcast}, 0x12, {0x2, 0x4e21, @broadcast}, 'veth0_to_bridge\x00'}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r5, 0x0, r6, &(0x7f0000000140), 0x12, 0x6) r7 = dup2(r0, r0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r3) 1.456963182s ago: executing program 3 (id=1813): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_tid_address(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)="19", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.071875873s ago: executing program 4 (id=1814): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='rootcontext={']) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1270, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12d0) 1.010994788s ago: executing program 0 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 286.166737ms ago: executing program 2 (id=1816): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, "a5bfcb2a66ef507540a0a50200000000000000e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) 263.491149ms ago: executing program 2 (id=1817): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 256.09509ms ago: executing program 0 (id=1818): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 0 (id=1819): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@nouid32}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@prjquota}, {@nodiscard}]}, 0xfa, 0x43a, &(0x7f00000008c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb26fc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getpgrp(0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): XT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 242.417782][ T30] audit: type=1400 audit(2000000314.972:1389): avc: denied { setattr } for pid=4985 comm="syz.4.1339" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.447148][ T4991] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 242.464655][ T4991] JBD2: no valid journal superblock found [ 242.470804][ T4991] EXT4-fs (loop3): error loading journal [ 242.564208][ T4991] netlink: 'syz.3.1340': attribute type 25 has an invalid length. [ 242.616936][ T4991] netlink: 'syz.3.1340': attribute type 7 has an invalid length. [ 242.694374][ T5000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1342'. [ 242.762104][ T30] audit: type=1326 audit(2000000315.312:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15bfb59f9 code=0x7ffc0000 [ 242.841375][ T4998] loop4: detected capacity change from 0 to 40427 [ 242.915440][ T5018] loop3: detected capacity change from 0 to 128 [ 242.924091][ T4998] F2FS-fs (loop4): Unrecognized mount option "alloc_ode=reuse" or missing value [ 243.083278][ T5018] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.117674][ T5018] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 243.938038][ T5034] device syzkaller0 entered promiscuous mode [ 243.973905][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 243.973918][ T30] audit: type=1326 audit(2000000316.522:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.1.1352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa15bfb59f9 code=0x0 [ 244.260350][ T5017] loop2: detected capacity change from 0 to 131072 [ 244.314685][ T5017] F2FS-fs (loop2): Found nat_bits in checkpoint [ 244.381990][ T5017] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 244.427502][ T30] audit: type=1400 audit(2000000316.972:1397): avc: denied { rename } for pid=5016 comm="syz.2.1349" name="file0" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.438533][ T5043] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.453132][ T30] audit: type=1400 audit(2000000316.972:1398): avc: denied { reparent } for pid=5016 comm="syz.2.1349" name="file0" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.480485][ T5043] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.637105][ T294] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 245.057472][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.073612][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.088418][ T294] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.102979][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.115007][ T294] usb 4-1: config 0 descriptor?? [ 245.173677][ T5065] loop2: detected capacity change from 0 to 512 [ 245.194552][ T5065] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 245.219831][ T5065] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.1361: invalid block [ 245.231290][ T5065] EXT4-fs (loop2): Remounting filesystem read-only [ 245.238190][ T5065] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1361: couldn't read orphan inode 11 (err -117) [ 245.250441][ T5065] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 245.808828][ T5049] UDC core: couldn't find an available UDC or it's busy: -16 [ 245.816205][ T5049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 245.887136][ T294] usb 4-1: string descriptor 0 read error: -71 [ 245.907167][ T469] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 245.914670][ T294] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #200: -71 [ 245.923499][ T294] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 245.931784][ T294] uclogic 0003:256C:006D.002A: failed probing pen v2 parameters: -71 [ 245.940073][ T294] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 245.947651][ T294] uclogic: probe of 0003:256C:006D.002A failed with error -71 [ 245.956224][ T294] usb 4-1: USB disconnect, device number 28 [ 246.293690][ T30] audit: type=1400 audit(2000000318.842:1399): avc: denied { getopt } for pid=5081 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.313447][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.334346][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.344294][ T469] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 246.365399][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.399822][ T469] usb 2-1: config 0 descriptor?? [ 246.429886][ T5086] loop4: detected capacity change from 0 to 128 [ 246.443908][ T5086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.454477][ T5086] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 246.643657][ T5075] syz.1.1363[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.643734][ T5075] syz.1.1363[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.439041][ T5094] device syzkaller0 entered promiscuous mode [ 247.517502][ T5103] loop4: detected capacity change from 0 to 128 [ 247.541504][ T5103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.552187][ T5103] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 247.588736][ T5105] loop3: detected capacity change from 0 to 512 [ 247.638010][ T5105] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.654051][ T5105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.662195][ T5105] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3877: comm syz.3.1370: Allocating blocks 41-42 which overlap fs metadata [ 247.700860][ T5105] EXT4-fs (loop3): Remounting filesystem read-only [ 247.719376][ T5105] Quota error (device loop3): write_blk: dquota write failed [ 247.726610][ T5105] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 247.775475][ T5105] EXT4-fs (loop3): 1 truncate cleaned up [ 247.801218][ T5105] EXT4-fs (loop3): pa ffff88812b1cb7e0: logic 1, phys. 41, len 23 [ 247.808981][ T5105] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4889: group 0, free 22, pa_free 23 [ 247.856186][ T5105] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 248.495569][ T5111] loop2: detected capacity change from 0 to 40427 [ 248.581634][ T5111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.604836][ T5111] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 248.611728][ T5111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.677011][ T5111] attempt to access beyond end of device [ 248.677011][ T5111] loop2: rw=2049, want=45104, limit=40427 [ 248.737142][ T469] usbhid 2-1:0.0: can't add hid device: -71 [ 248.743240][ T469] usbhid: probe of 2-1:0.0 failed with error -71 [ 248.754966][ T469] usb 2-1: USB disconnect, device number 26 [ 249.417090][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 249.643430][ T5133] loop1: detected capacity change from 0 to 40427 [ 249.737469][ T5133] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 249.745101][ T5133] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.755675][ T5133] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.782627][ T5133] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 249.794468][ T5133] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.801490][ T5133] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.857204][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.868190][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.897501][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.910917][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.927862][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.947154][ T6] usb 4-1: config 0 descriptor?? [ 250.018379][ T5144] attempt to access beyond end of device [ 250.018379][ T5144] loop1: rw=2049, want=45160, limit=40427 [ 250.230343][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.237543][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.245484][ T5141] device bridge_slave_0 entered promiscuous mode [ 250.255991][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.264374][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.271977][ T5141] device bridge_slave_1 entered promiscuous mode [ 250.378196][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.385069][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.392269][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.399123][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.503437][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.511694][ T6] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 250.521188][ T2222] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.528693][ T6] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 250.529627][ T5154] loop2: detected capacity change from 0 to 128 [ 250.542700][ T2222] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.550809][ T6] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 250.574717][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.583386][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.590276][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.598933][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.607372][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.614342][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.638764][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.646924][ T5154] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.662026][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.670958][ T5154] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 250.724999][ T5141] device veth0_vlan entered promiscuous mode [ 250.735667][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.745038][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.761562][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.782328][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.809936][ T5160] loop1: detected capacity change from 0 to 128 [ 250.824364][ T5141] device veth1_macvtap entered promiscuous mode [ 250.832551][ T2222] usb 4-1: USB disconnect, device number 29 [ 250.861187][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.870569][ T5160] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.881951][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.890645][ T5160] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 250.937317][ T762] device bridge_slave_1 left promiscuous mode [ 250.943399][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.964866][ T762] device bridge_slave_0 left promiscuous mode [ 250.983704][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.205624][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.242740][ T5163] tmpfs: Bad value for 'gid' [ 251.329172][ T5167] input: syz0 as /devices/virtual/input/input21 [ 251.353575][ T5167] input: failed to attach handler leds to device input21, error: -6 [ 252.064453][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.072972][ T30] audit: type=1326 audit(2000000324.622:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.1394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df25fd9f9 code=0x0 [ 252.111370][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.124314][ T5188] device bridge_slave_0 entered promiscuous mode [ 252.134317][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.141916][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.150079][ T5188] device bridge_slave_1 entered promiscuous mode [ 252.330337][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.338307][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 252.347106][ T5198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.531362][ T762] device bridge_slave_1 left promiscuous mode [ 252.548829][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.577510][ T762] device bridge_slave_0 left promiscuous mode [ 252.591437][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.612583][ T762] device veth1_macvtap left promiscuous mode [ 252.627296][ T762] device veth0_vlan left promiscuous mode [ 252.806472][ T5230] loop4: detected capacity change from 0 to 512 [ 253.087688][ T5230] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.106537][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.114887][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.137568][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.145802][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.157550][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.164399][ T2222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.172621][ T5230] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 253.187438][ T5230] EXT4-fs (loop4): 1 truncate cleaned up [ 253.193012][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 253.196157][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.225319][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.233448][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.240308][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.270232][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.287785][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.302545][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.330288][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.354849][ T5188] device veth0_vlan entered promiscuous mode [ 253.381474][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.391592][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.408674][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.432447][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.440687][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.500386][ T5188] device veth1_macvtap entered promiscuous mode [ 253.517915][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.525693][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.551167][ T5241] loop1: detected capacity change from 0 to 256 [ 253.585612][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.612166][ T30] audit: type=1400 audit(2000000326.162:1401): avc: denied { setopt } for pid=5243 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.647405][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.657982][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.769394][ T5241] Disabled LAPIC found during irq injection [ 254.066341][ T5259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.444980][ T30] audit: type=1326 audit(2000000326.992:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc129e519f9 code=0x0 [ 254.770730][ T5287] netlink: 'syz.0.1421': attribute type 11 has an invalid length. [ 254.797312][ T469] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 254.987105][ T2222] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 255.187280][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.199289][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.209185][ T469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.225177][ T469] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 255.234300][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.255200][ T2222] usb 3-1: Using ep0 maxpacket: 8 [ 255.266459][ T469] usb 2-1: config 0 descriptor?? [ 255.377158][ T2222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.467224][ T2222] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.479711][ T2222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.507351][ T2222] usb 3-1: SerialNumber: syz [ 255.588442][ T313] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 255.597720][ T2222] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 255.604719][ T2222] usb 3-1: bad CDC descriptors [ 255.880835][ T469] acrux 0003:1A34:0802.002C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 255.898050][ T469] acrux 0003:1A34:0802.002C: no inputs found [ 255.904146][ T469] acrux 0003:1A34:0802.002C: Failed to enable force feedback support, error: -19 [ 255.947978][ T294] usb 3-1: USB disconnect, device number 34 [ 256.027207][ T313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.042366][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 256.143421][ T313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.193629][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.204380][ T313] usb 4-1: config 0 descriptor?? [ 256.247598][ T2222] usb 2-1: USB disconnect, device number 27 [ 256.258725][ T313] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 256.396146][ T5315] loop4: detected capacity change from 0 to 2048 [ 256.469905][ T5315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.567352][ T5323] loop2: detected capacity change from 0 to 40427 [ 256.637417][ T5323] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 256.645066][ T5323] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 256.654381][ T5323] F2FS-fs (loop2): invalid crc value [ 256.661354][ T5323] F2FS-fs (loop2): Found nat_bits in checkpoint [ 256.684184][ T5323] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 256.691072][ T5323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 256.720856][ T4407] attempt to access beyond end of device [ 256.720856][ T4407] loop2: rw=2049, want=40968, limit=40427 [ 256.811418][ T30] audit: type=1400 audit(2000000329.362:1403): avc: denied { write } for pid=5292 comm="syz.3.1423" name="net" dev="proc" ino=39787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 256.854527][ T5337] loop1: detected capacity change from 0 to 2048 [ 256.858208][ T30] audit: type=1400 audit(2000000329.362:1404): avc: denied { add_name } for pid=5292 comm="syz.3.1423" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 256.925531][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.947202][ T5337] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 256.955331][ T30] audit: type=1400 audit(2000000329.362:1405): avc: denied { create } for pid=5292 comm="syz.3.1423" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 256.985264][ T30] audit: type=1400 audit(2000000329.362:1406): avc: denied { associate } for pid=5292 comm="syz.3.1423" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.043074][ T30] audit: type=1400 audit(2000000329.592:1407): avc: denied { set_context_mgr } for pid=5351 comm="syz.0.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 257.048888][ T5354] input: syz1 as /devices/virtual/input/input22 [ 257.082045][ T30] audit: type=1400 audit(2000000329.622:1408): avc: denied { map } for pid=5351 comm="syz.0.1443" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.107653][ T30] audit: type=1400 audit(2000000329.622:1409): avc: denied { call } for pid=5351 comm="syz.0.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 257.163124][ T5360] loop2: detected capacity change from 0 to 256 [ 257.182624][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.221792][ T5360] Disabled LAPIC found during irq injection [ 257.295963][ T30] audit: type=1400 audit(2000000329.842:1410): avc: denied { setattr } for pid=5370 comm="syz.1.1449" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.424599][ T5384] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1455'. [ 257.435005][ T5384] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1455'. [ 257.552903][ T5391] tipc: Started in network mode [ 257.559185][ T5391] tipc: Node identity 1, cluster identity 4711 [ 257.565278][ T5391] tipc: Node number set to 1 [ 258.175687][ T2222] usb 4-1: USB disconnect, device number 30 [ 258.202761][ T5406] loop4: detected capacity change from 0 to 256 [ 258.336390][ T5406] Disabled LAPIC found during irq injection [ 258.409601][ T30] audit: type=1400 audit(2000000330.962:1411): avc: denied { listen } for pid=5405 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.632105][ T5427] loop4: detected capacity change from 0 to 512 [ 258.670644][ T5413] loop3: detected capacity change from 0 to 40427 [ 258.701576][ T5413] F2FS-fs (loop3): invalid crc value [ 258.738999][ T5413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.742246][ T5412] loop1: detected capacity change from 0 to 40427 [ 258.756944][ T5412] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 258.765094][ T5427] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1469: casefold flag without casefold feature [ 258.773138][ T5412] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 258.781370][ T5427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.1469: missing EA_INODE flag [ 258.791297][ T5413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 258.797687][ T5427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1469: error while reading EA inode 2 err=-117 [ 259.636510][ T5188] attempt to access beyond end of device [ 259.636510][ T5188] loop3: rw=524288, want=45072, limit=40427 [ 259.667998][ T5427] EXT4-fs (loop4): 1 orphan inode deleted [ 259.674470][ T5412] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.682380][ T5188] attempt to access beyond end of device [ 259.682380][ T5188] loop3: rw=0, want=45072, limit=40427 [ 259.707116][ T5427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.746741][ T5454] syz.2.1477[5454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.746825][ T5454] syz.2.1477[5454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.763599][ T706] attempt to access beyond end of device [ 259.763599][ T706] loop3: rw=2049, want=41072, limit=40427 [ 259.769270][ T5412] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 259.804887][ T5412] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 259.811964][ T5412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.910289][ T30] audit: type=1326 audit(2000000332.462:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 259.938589][ T30] audit: type=1326 audit(2000000332.482:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 259.964414][ T5464] syz.4.1480[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.964522][ T5464] syz.4.1480[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.981493][ T5464] syz.4.1480[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.992490][ T30] audit: type=1326 audit(2000000332.482:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 259.992873][ T5464] syz.4.1480[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.007531][ T30] audit: type=1326 audit(2000000332.482:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 260.064584][ T30] audit: type=1326 audit(2000000332.482:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 260.090216][ T30] audit: type=1326 audit(2000000332.482:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 260.119367][ T5471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1467'. [ 260.129610][ T5471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1467'. [ 260.141836][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 260.172837][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'. [ 260.257783][ T5478] loop4: detected capacity change from 0 to 2048 [ 260.284090][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.295327][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.303284][ T5476] device bridge_slave_0 entered promiscuous mode [ 260.313563][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.320664][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.328454][ T5476] device bridge_slave_1 entered promiscuous mode [ 260.358719][ T5478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.411347][ T5478] tipc: Started in network mode [ 260.416174][ T5478] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711 [ 260.497174][ T6] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 260.578111][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.584968][ T5476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.592147][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.599003][ T5476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.728544][ T706] device bridge_slave_1 left promiscuous mode [ 260.734490][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.747135][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 260.776496][ T706] device bridge_slave_0 left promiscuous mode [ 260.802844][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.821364][ T5494] loop1: detected capacity change from 0 to 4096 [ 260.843255][ T706] device veth1_macvtap left promiscuous mode [ 260.873529][ T706] device veth0_vlan left promiscuous mode [ 260.879330][ T6] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 183, changing to 7 [ 260.898050][ T6] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59294, setting to 1024 [ 260.918409][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.137232][ T6] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 261.173076][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.225691][ T6] usb 3-1: Product: syz [ 261.249295][ T6] usb 3-1: Manufacturer: syz [ 261.266661][ T6] usb 3-1: SerialNumber: syz [ 261.337347][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.357132][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.489859][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.730244][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.731157][ T294] usb 3-1: USB disconnect, device number 35 [ 261.760115][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.770424][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.786279][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.793171][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.814147][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.823091][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.831848][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.838713][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.846270][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.854337][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.867116][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.875476][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.892772][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.901403][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.911678][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.919721][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.928735][ T5476] device veth0_vlan entered promiscuous mode [ 261.942544][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.950240][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.966877][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.975502][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.984706][ T5476] device veth1_macvtap entered promiscuous mode [ 261.997467][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.005416][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.013807][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.022639][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.031814][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.201511][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.209675][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.216909][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x2 [ 262.225281][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.232592][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.239914][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.247183][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.254484][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.261987][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.269298][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.276966][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.289968][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 262.298898][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.306178][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.313639][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.321054][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.328320][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.335570][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.342816][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.350028][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.357218][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.364382][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.371682][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.379752][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.386976][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.394210][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.401466][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.408798][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.416013][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.423288][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.430466][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.438013][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.445153][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.452524][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.459836][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.467113][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.474467][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.481812][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.489196][ T338] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 262.499267][ T338] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 262.524535][ T5532] loop2: detected capacity change from 0 to 512 [ 262.596713][ T5532] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.610982][ T5532] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1513: casefold flag without casefold feature [ 262.623768][ T5532] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1513: missing EA_INODE flag [ 262.635614][ T5532] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1513: error while reading EA inode 12 err=-117 [ 262.671429][ T5532] EXT4-fs (loop2): 1 orphan inode deleted [ 262.682674][ T5532] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 262.756258][ T5537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 262.964811][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 263.074112][ T5550] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1513'. [ 263.327135][ T338] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 263.461631][ T5556] loop2: detected capacity change from 0 to 512 [ 263.474582][ T5556] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 263.490931][ T5556] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1511: iget: bad i_size value: -67835469387268086 [ 263.504081][ T5556] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1511: couldn't read orphan inode 15 (err -117) [ 263.505774][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 263.516487][ T5556] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.535822][ T5556] ext2 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 263.535943][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 263.967206][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.987066][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.007059][ T338] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 264.015918][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.049429][ T338] usb 2-1: config 0 descriptor?? [ 264.157894][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 264.157938][ T30] audit: type=1326 audit(2000000336.712:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 264.196375][ T30] audit: type=1326 audit(2000000336.742:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 264.237550][ T30] audit: type=1326 audit(2000000336.742:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92511ea9f9 code=0x7ffc0000 [ 264.330757][ T5568] loop2: detected capacity change from 0 to 131072 [ 264.363890][ T5568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 264.400663][ T5568] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 264.407678][ T5568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.825496][ T5588] loop4: detected capacity change from 0 to 512 [ 264.877544][ T5588] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.886018][ T30] audit: type=1400 audit(2000000337.432:1431): avc: denied { module_load } for pid=5591 comm="syz.3.1525" path="/11/bus/bus" dev="overlay" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 264.913472][ T5592] Invalid ELF header magic: != ELF [ 264.955274][ T5588] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1522: casefold flag without casefold feature [ 264.982941][ T5599] loop3: detected capacity change from 0 to 256 [ 264.997241][ T5588] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1522: missing EA_INODE flag [ 265.027335][ T5588] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1522: error while reading EA inode 12 err=-117 [ 265.041466][ T5588] EXT4-fs (loop4): 1 orphan inode deleted [ 265.047572][ T5588] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 265.717155][ T338] uclogic 0003:256C:006D.002E: interface is invalid, ignoring [ 265.768299][ T5621] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 265.818310][ T5627] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.050555][ T294] usb 2-1: USB disconnect, device number 28 [ 266.201034][ T30] audit: type=1400 audit(2000000338.752:1432): avc: denied { getattr } for pid=5648 comm="syz.3.1542" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.201165][ T5649] overlayfs: statfs failed on './file0' [ 266.309621][ T5656] loop3: detected capacity change from 0 to 8192 [ 266.448310][ T5658] loop3: detected capacity change from 0 to 256 [ 267.187924][ T30] audit: type=1404 audit(2000000339.742:1433): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 267.203654][ T30] audit: type=1404 audit(2000000339.752:1434): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 267.223192][ T30] audit: type=1400 audit(2000000339.772:1435): avc: denied { read write } for pid=4368 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.247247][ T30] audit: type=1400 audit(2000000339.772:1436): avc: denied { open } for pid=4368 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.271475][ T30] audit: type=1400 audit(2000000339.772:1437): avc: denied { ioctl } for pid=4368 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.349862][ T5685] loop4: detected capacity change from 0 to 512 [ 267.407133][ T2222] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 267.418373][ T5685] EXT4-fs (loop4): 1 orphan inode deleted [ 267.423924][ T5685] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,dioread_lock,delalloc,usrquota,. Quota mode: writeback. [ 267.446206][ T5685] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 267.467139][ T338] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 267.538040][ T5692] loop4: detected capacity change from 0 to 512 [ 267.639117][ T5692] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 267.655027][ T5692] ext4 filesystem being mounted at /82/bus supports timestamps until 2038 (0x7fffffff) [ 267.667087][ T2222] usb 3-1: Using ep0 maxpacket: 16 [ 267.948209][ T2222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 267.958902][ T2222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 267.968495][ T2222] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 267.977393][ T2222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.986917][ T2222] usb 3-1: config 0 descriptor?? [ 268.027211][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.038629][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.048254][ T338] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 268.057068][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.065415][ T338] usb 2-1: config 0 descriptor?? [ 268.229711][ T5667] loop2: detected capacity change from 0 to 128 [ 268.257324][ T5701] loop3: detected capacity change from 0 to 512 [ 268.288857][ T5701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.300358][ T5667] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 268.305698][ T5701] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 268.314467][ T5667] FAT-fs (loop2): bogus number of directory entries (203) [ 268.328013][ T5667] FAT-fs (loop2): Can't find a valid FAT filesystem [ 268.661849][ T5667] UDC core: couldn't find an available UDC or it's busy: -16 [ 268.669151][ T5667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.688519][ T338] itetech 0003:258A:6A88.002F: unknown main item tag 0x0 [ 268.696150][ T2222] hid (null): invalid report_size 24421 [ 268.702479][ T2222] hid (null): global environment stack underflow [ 268.708948][ T338] itetech 0003:258A:6A88.002F: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 268.720031][ T2222] hid (null): unknown global tag 0xe4 [ 268.725183][ T2222] hid (null): unknown global tag 0xc [ 268.731475][ T2222] hid (null): unknown global tag 0xd [ 268.737617][ T2222] hid-generic 0003:0158:0100.0030: unknown main item tag 0x0 [ 268.744843][ T2222] hid-generic 0003:0158:0100.0030: unknown main item tag 0x0 [ 268.752106][ T2222] hid-generic 0003:0158:0100.0030: invalid report_size 24421 [ 268.759259][ T2222] hid-generic 0003:0158:0100.0030: item 0 2 1 7 parsing failed [ 268.766713][ T2222] hid-generic: probe of 0003:0158:0100.0030 failed with error -22 [ 268.901747][ T2222] usb 2-1: USB disconnect, device number 29 [ 268.922363][ T338] usb 3-1: USB disconnect, device number 36 [ 269.121011][ T5717] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 269.204791][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 269.204811][ T30] audit: type=1400 audit(2000000341.642:1471): avc: denied { write } for pid=5714 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.230968][ T30] audit: type=1400 audit(2000000341.652:1472): avc: denied { read } for pid=5714 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.583074][ T412] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 269.718718][ T5728] loop1: detected capacity change from 0 to 256 [ 269.825743][ T30] audit: type=1400 audit(2000000342.342:1473): avc: denied { mount } for pid=5723 comm="syz.1.1569" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 269.886536][ T30] audit: type=1400 audit(2000000342.412:1474): avc: denied { mounton } for pid=5723 comm="syz.1.1569" path="/57/file0/file0" dev="loop1" ino=1048744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 269.911072][ T30] audit: type=1400 audit(2000000342.462:1475): avc: denied { read write } for pid=5723 comm="syz.1.1569" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.934623][ T30] audit: type=1400 audit(2000000342.462:1476): avc: denied { open } for pid=5723 comm="syz.1.1569" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.957711][ T30] audit: type=1400 audit(2000000342.462:1477): avc: denied { create } for pid=5729 comm="syz.0.1571" dev="anon_inodefs" ino=41832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.979483][ T30] audit: type=1400 audit(2000000342.462:1478): avc: denied { ioctl } for pid=5729 comm="syz.0.1571" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41832 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.014463][ T30] audit: type=1400 audit(2000000342.562:1479): avc: denied { read } for pid=5729 comm="syz.0.1571" dev="nsfs" ino=4026532528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 270.035577][ T30] audit: type=1400 audit(2000000342.562:1480): avc: denied { open } for pid=5729 comm="syz.0.1571" path="net:[4026532528]" dev="nsfs" ino=4026532528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 270.067214][ T412] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.077082][ T338] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 270.078036][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.096065][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.105525][ T412] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.197136][ T412] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 270.206042][ T412] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 270.214374][ T412] usb 4-1: Manufacturer: syz [ 270.224377][ T412] usb 4-1: config 0 descriptor?? [ 270.477230][ T338] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 270.489464][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.500892][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.511764][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 270.524796][ T338] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 270.533853][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.545598][ T338] usb 3-1: config 0 descriptor?? [ 270.668476][ T5749] usb usb1: usbfs: process 5749 (syz.1.1576) did not claim interface 0 before use [ 270.689805][ T5720] syz.3.1567 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 270.708088][ T412] appleir 0003:05AC:8243.0031: item fetching failed at offset 0/1 [ 270.716110][ T412] appleir 0003:05AC:8243.0031: parse failed [ 270.721980][ T412] appleir: probe of 0003:05AC:8243.0031 failed with error -22 [ 270.919113][ T6] usb 4-1: USB disconnect, device number 31 [ 271.028037][ T338] thrustmaster 0003:044F:B653.0032: unbalanced delimiter at end of report description [ 271.037678][ T338] thrustmaster 0003:044F:B653.0032: parse failed [ 271.043820][ T338] thrustmaster: probe of 0003:044F:B653.0032 failed with error -22 [ 271.228739][ T338] usb 3-1: USB disconnect, device number 37 [ 271.350232][ T5758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5758 comm=syz.1.1579 [ 271.557688][ T5764] loop1: detected capacity change from 0 to 40427 [ 271.634421][ T5768] overlayfs: failed to resolve './file0': -2 [ 271.767479][ T5764] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 271.791627][ T5764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.805296][ T5764] F2FS-fs (loop1): invalid crc value [ 271.812172][ T5764] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 271.850371][ T5764] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.857744][ T5764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.510845][ T5796] loop3: detected capacity change from 0 to 1024 [ 272.541068][ T5796] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.559617][ T5796] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 272.569524][ T5796] EXT4-fs (loop3): invalid journal inode [ 272.575081][ T5796] EXT4-fs (loop3): can't get journal size [ 272.636578][ T5792] loop2: detected capacity change from 0 to 40427 [ 272.645213][ T5796] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 272.917842][ T5792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 272.954707][ T5792] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 272.961639][ T5792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 273.046742][ T5813] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 37: comm syz.3.1592: path /32/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 273.095814][ T4407] attempt to access beyond end of device [ 273.095814][ T4407] loop2: rw=2049, want=45104, limit=40427 [ 273.144196][ T5813] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1592: path /32/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 273.199816][ T5819] syz.0.1598[5819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.199895][ T5819] syz.0.1598[5819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.227671][ T5819] netem: incorrect ge model size [ 273.256491][ T5819] netem: change failed [ 273.463072][ T5830] loop1: detected capacity change from 0 to 2048 [ 273.578668][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.589857][ T5830] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 273.684392][ T5844] loop1: detected capacity change from 0 to 512 [ 273.697931][ T5846] loop3: detected capacity change from 0 to 1024 [ 273.719084][ T5805] loop4: detected capacity change from 0 to 131072 [ 273.726130][ T5844] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.734758][ T5846] EXT4-fs (loop3): barriers disabled [ 273.740626][ T5846] JBD2: no valid journal superblock found [ 273.746247][ T5846] EXT4-fs (loop3): error loading journal [ 273.753902][ T5844] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 273.768513][ T5844] EXT4-fs (loop1): 1 truncate cleaned up [ 273.774040][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.797737][ T5805] F2FS-fs (loop4): Test dummy encryption mode enabled [ 273.805661][ T5805] F2FS-fs (loop4): invalid crc value [ 273.812803][ T5805] F2FS-fs (loop4): Found nat_bits in checkpoint [ 273.848507][ T5805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 273.849123][ T4718] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 273.961967][ T4718] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 274.222212][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 274.222228][ T30] audit: type=1400 audit(2000000346.772:1532): avc: denied { ioctl } for pid=5804 comm="syz.4.1593" path="/85/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.385263][ T30] audit: type=1400 audit(2000000346.932:1533): avc: denied { mounton } for pid=5869 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 274.428338][ T30] audit: type=1400 audit(2000000346.962:1534): avc: denied { mounton } for pid=5869 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 274.477494][ T30] audit: type=1400 audit(2000000347.032:1535): avc: denied { wake_alarm } for pid=5867 comm="syz.0.1617" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.767092][ T30] audit: type=1400 audit(2000000347.032:1536): avc: denied { write } for pid=5867 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.849628][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.856486][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.877547][ T5869] device bridge_slave_0 entered promiscuous mode [ 274.884544][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.891464][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.898746][ T5869] device bridge_slave_1 entered promiscuous mode [ 274.947324][ T30] audit: type=1400 audit(2000000347.502:1537): avc: denied { name_bind } for pid=5883 comm="syz.4.1615" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 275.005851][ T30] audit: type=1400 audit(2000000347.552:1538): avc: denied { set_context_mgr } for pid=5887 comm="syz.4.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 275.028508][ T30] audit: type=1400 audit(2000000347.552:1539): avc: denied { create } for pid=5889 comm="syz.0.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 275.048104][ T30] audit: type=1400 audit(2000000347.582:1540): avc: denied { getopt } for pid=5889 comm="syz.0.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 275.070652][ T30] audit: type=1400 audit(2000000347.582:1541): avc: denied { sys_module } for pid=5889 comm="syz.0.1624" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 275.073144][ T5855] loop3: detected capacity change from 0 to 131072 [ 275.109481][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.116954][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.126326][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.135141][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.145596][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.152471][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.159730][ T5855] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 275.169463][ T5855] F2FS-fs (loop3): invalid crc value [ 275.177876][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.185404][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.185470][ T5855] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 275.195041][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.212190][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.219051][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.247363][ T378] device bridge_slave_1 left promiscuous mode [ 275.253521][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.268400][ T378] device bridge_slave_0 left promiscuous mode [ 275.274509][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.283330][ T378] device veth1_macvtap left promiscuous mode [ 275.289546][ T378] device veth0_vlan left promiscuous mode [ 275.325291][ T5855] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 275.659236][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.677266][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.685167][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.693312][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.709416][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.720955][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.729512][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.737892][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.746777][ T5869] device veth0_vlan entered promiscuous mode [ 275.754315][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.761670][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.775242][ T5869] device veth1_macvtap entered promiscuous mode [ 275.783364][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.797313][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.805443][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.814552][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.823226][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.338884][ T5903] loop3: detected capacity change from 0 to 131072 [ 276.436224][ T5924] loop2: detected capacity change from 0 to 40427 [ 276.443405][ T5903] F2FS-fs (loop3): Test dummy encryption mode enabled [ 276.451403][ T5903] F2FS-fs (loop3): invalid crc value [ 276.460063][ T5903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.473105][ T5924] F2FS-fs (loop2): invalid crc value [ 276.481251][ T5924] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.498265][ T5903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 276.520895][ T5924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 277.574749][ T4407] attempt to access beyond end of device [ 277.574749][ T4407] loop2: rw=524288, want=45072, limit=40427 [ 277.595204][ T4407] attempt to access beyond end of device [ 277.595204][ T4407] loop2: rw=0, want=45072, limit=40427 [ 277.713389][ T372] attempt to access beyond end of device [ 277.713389][ T372] loop2: rw=2049, want=41072, limit=40427 [ 277.729839][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1637'. [ 277.752463][ T372] tipc: Left network mode [ 278.391532][ T5961] loop3: detected capacity change from 0 to 256 [ 278.404401][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.411317][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.418706][ T5957] device bridge_slave_0 entered promiscuous mode [ 278.425735][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.433221][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.440892][ T5957] device bridge_slave_1 entered promiscuous mode [ 278.444326][ T5961] FAT-fs (loop3): Directory bread(block 64) failed [ 278.453454][ T5961] FAT-fs (loop3): Directory bread(block 65) failed [ 278.459814][ T5961] FAT-fs (loop3): Directory bread(block 66) failed [ 278.466092][ T5961] FAT-fs (loop3): Directory bread(block 67) failed [ 278.472499][ T5961] FAT-fs (loop3): Directory bread(block 68) failed [ 278.478923][ T5961] FAT-fs (loop3): Directory bread(block 69) failed [ 278.485269][ T5961] FAT-fs (loop3): Directory bread(block 70) failed [ 278.491721][ T5961] FAT-fs (loop3): Directory bread(block 71) failed [ 278.498150][ T5961] FAT-fs (loop3): Directory bread(block 72) failed [ 278.504417][ T5961] FAT-fs (loop3): Directory bread(block 73) failed [ 278.613402][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.620297][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.627430][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.634274][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.881730][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.890190][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.897719][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.925488][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.935438][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.953969][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.960873][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.977167][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.985895][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.994115][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.000989][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.008331][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.016304][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.034443][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.047444][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.069013][ T372] device vlan2 left promiscuous mode [ 279.074564][ T372] bridge0: port 3(vlan2) entered disabled state [ 279.087532][ T372] device bridge_slave_1 left promiscuous mode [ 279.098651][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.113283][ T372] device bridge_slave_0 left promiscuous mode [ 279.120564][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.132833][ T5972] loop1: detected capacity change from 0 to 40427 [ 279.144774][ T372] device veth1_macvtap left promiscuous mode [ 279.150844][ T372] device veth0_vlan left promiscuous mode [ 279.156452][ T5972] F2FS-fs (loop1): invalid crc value [ 279.177270][ T5972] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.207995][ T5972] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 279.346919][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 279.346934][ T30] audit: type=1326 audit(2000000351.892:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.356473][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.378459][ T30] audit: type=1326 audit(2000000351.912:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.385647][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.407532][ T30] audit: type=1326 audit(2000000351.932:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.420878][ T5957] device veth0_vlan entered promiscuous mode [ 279.438884][ T30] audit: type=1326 audit(2000000351.932:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.529460][ T30] audit: type=1326 audit(2000000351.932:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.554490][ T30] audit: type=1326 audit(2000000351.962:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.579710][ T30] audit: type=1326 audit(2000000351.962:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.620800][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.628689][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.630507][ T30] audit: type=1326 audit(2000000351.962:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.640175][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.668105][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.669426][ T30] audit: type=1326 audit(2000000352.132:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.698851][ T30] audit: type=1326 audit(2000000352.132:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x7ffc0000 [ 279.704322][ T5957] device veth1_macvtap entered promiscuous mode [ 279.730676][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.738867][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.746799][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.759676][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.786379][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.786531][ T5869] attempt to access beyond end of device [ 279.786531][ T5869] loop1: rw=524288, want=45072, limit=40427 [ 279.810597][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.819255][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.827509][ T5869] attempt to access beyond end of device [ 279.827509][ T5869] loop1: rw=0, want=45072, limit=40427 [ 279.882292][ T762] attempt to access beyond end of device [ 279.882292][ T762] loop1: rw=2049, want=41072, limit=40427 [ 279.985549][ T5993] loop3: detected capacity change from 0 to 40427 [ 280.007380][ T5993] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 280.018913][ T6001] device syzkaller0 entered promiscuous mode [ 280.025351][ T5993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.039948][ T5993] F2FS-fs (loop3): invalid crc value [ 280.057871][ T5993] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.095050][ T5993] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.107282][ T5993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.195620][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.202552][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.210031][ T6007] device bridge_slave_0 entered promiscuous mode [ 280.218495][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.225318][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.232609][ T6007] device bridge_slave_1 entered promiscuous mode [ 280.517256][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.524136][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.531404][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.538245][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.559851][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.567793][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.574978][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.585359][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.593485][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.600339][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.609119][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.617566][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.624405][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.648164][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.657117][ T2222] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 280.664769][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.672614][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.680421][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.687830][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.695751][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.705534][ T6007] device veth0_vlan entered promiscuous mode [ 280.719918][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.729783][ T6007] device veth1_macvtap entered promiscuous mode [ 280.742958][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.751360][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.237358][ T294] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 281.267602][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.350641][ T6032] overlayfs: failed to resolve './file0': -2 [ 281.504039][ T294] usb 2-1: Using ep0 maxpacket: 16 [ 281.618007][ T372] device bridge_slave_1 left promiscuous mode [ 281.624059][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.631401][ T294] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 281.637140][ T2222] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 281.639380][ T294] usb 2-1: config 0 has no interface number 0 [ 281.648289][ T2222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.654469][ T294] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.662064][ T372] device bridge_slave_0 left promiscuous mode [ 281.671620][ T294] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 281.683013][ T2222] usb 4-1: Product: syz [ 281.687750][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.690789][ T2222] usb 4-1: Manufacturer: syz [ 281.702031][ T2222] usb 4-1: SerialNumber: syz [ 281.706547][ T372] device veth1_macvtap left promiscuous mode [ 281.710804][ T2222] usb 4-1: config 0 descriptor?? [ 281.712554][ T372] device veth0_vlan left promiscuous mode [ 281.757642][ T2222] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 281.766627][ T2222] usb 4-1: No valid video chain found. [ 281.867172][ T294] usb 2-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00 [ 281.876084][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.884108][ T294] usb 2-1: Product: syz [ 281.888127][ T294] usb 2-1: Manufacturer: syz [ 281.892519][ T294] usb 2-1: SerialNumber: syz [ 281.898448][ T294] usb 2-1: config 0 descriptor?? [ 281.982598][ T5993] overlayfs: invalid redirect ((null)) [ 281.988754][ T5993] overlayfs: invalid redirect ((null)) [ 281.994476][ T313] usb 4-1: USB disconnect, device number 32 [ 282.139511][ T6018] loop1: detected capacity change from 0 to 128 [ 282.186134][ T6018] UDC core: couldn't find an available UDC or it's busy: -16 [ 282.193489][ T6018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.228584][ T6043] loop2: detected capacity change from 0 to 128 [ 282.280467][ T6043] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 282.299150][ T372] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 282.505449][ T2222] usb 2-1: USB disconnect, device number 30 [ 282.518025][ T372] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 282.527183][ T372] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 282.607121][ T294] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 282.977274][ T294] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 283.085207][ T6057] loop3: detected capacity change from 0 to 128 [ 283.109820][ T6057] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 283.118933][ T6057] FAT-fs (loop3): FAT read failed (blocknr 255) [ 283.169882][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.176794][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.184466][ T6062] device bridge_slave_0 entered promiscuous mode [ 283.191691][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.197215][ T294] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 283.198766][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.207805][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.214985][ T6062] device bridge_slave_1 entered promiscuous mode [ 283.222351][ T294] usb 3-1: Product: syz [ 283.232362][ T294] usb 3-1: Manufacturer: syz [ 283.236859][ T294] usb 3-1: SerialNumber: syz [ 283.246115][ T294] usb 3-1: config 0 descriptor?? [ 283.277201][ T6046] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 283.300910][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.307945][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.315114][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.322078][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.350303][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.359063][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.366574][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.389064][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.397370][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.404211][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.411792][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.420035][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.426868][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.434528][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.442462][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.473002][ T6062] device veth0_vlan entered promiscuous mode [ 283.479828][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.488916][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.496657][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.504267][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.523429][ T6062] device veth1_macvtap entered promiscuous mode [ 283.530761][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.547951][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.556713][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.611692][ T294] usb 3-1: USB disconnect, device number 38 [ 283.641918][ T695] udevd[695]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.807755][ T8] device bridge_slave_1 left promiscuous mode [ 283.813795][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.821584][ T8] device bridge_slave_0 left promiscuous mode [ 283.827669][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.835311][ T8] device veth1_macvtap left promiscuous mode [ 283.841260][ T8] device veth0_vlan left promiscuous mode [ 283.857144][ T2222] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 284.097099][ T2222] usb 2-1: Using ep0 maxpacket: 32 [ 284.217488][ T2222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.246965][ T2222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.257014][ T2222] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.270348][ T2222] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 284.281293][ T2222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.327653][ T2222] usb 2-1: config 0 descriptor?? [ 284.346187][ T6082] loop2: detected capacity change from 0 to 512 [ 284.377923][ T6082] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.399317][ T6082] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.414440][ T6082] EXT4-fs (loop2): 1 truncate cleaned up [ 284.421747][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.519285][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 284.519350][ T30] audit: type=1400 audit(2000000357.062:1606): avc: denied { bind } for pid=6074 comm="syz.3.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.627807][ T30] audit: type=1400 audit(2000000357.062:1607): avc: denied { listen } for pid=6074 comm="syz.3.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.683039][ T5957] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 284.702531][ T5957] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 284.828139][ T2222] ntrig 0003:1B96:000A.0033: unknown main item tag 0x0 [ 284.836781][ T2222] ntrig 0003:1B96:000A.0033: unknown main item tag 0x0 [ 284.843793][ T2222] ntrig 0003:1B96:000A.0033: unknown main item tag 0x0 [ 284.852731][ T2222] ntrig 0003:1B96:000A.0033: unknown main item tag 0x0 [ 284.860876][ T2222] ntrig 0003:1B96:000A.0033: unknown main item tag 0x0 [ 284.868782][ T2222] ntrig 0003:1B96:000A.0033: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 284.892873][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.899781][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.906894][ T6090] device bridge_slave_0 entered promiscuous mode [ 284.915582][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.922488][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.929738][ T6090] device bridge_slave_1 entered promiscuous mode [ 284.974532][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.981409][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.988515][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.995257][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.016823][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.024648][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.032553][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.039534][ T2222] ntrig 0003:1B96:000A.0033: Firmware version: 0.0.0.0.0 (0000 0000) [ 285.053082][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.061246][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.068104][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.078525][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.086567][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.093411][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.114131][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.122549][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.150167][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.158690][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.172859][ T30] audit: type=1400 audit(2000000357.722:1608): avc: denied { create } for pid=6095 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.192341][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.201376][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.214873][ T6090] device veth0_vlan entered promiscuous mode [ 285.221243][ T30] audit: type=1400 audit(2000000357.722:1609): avc: denied { write } for pid=6095 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.246230][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.253963][ T338] usb 2-1: USB disconnect, device number 31 [ 285.255050][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.274997][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.282379][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.295272][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.303394][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.312244][ T762] device bridge_slave_1 left promiscuous mode [ 285.318707][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.325995][ T762] device bridge_slave_0 left promiscuous mode [ 285.332235][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.340138][ T762] device veth1_macvtap left promiscuous mode [ 285.345970][ T762] device veth0_vlan left promiscuous mode [ 285.421238][ T6090] device veth1_macvtap entered promiscuous mode [ 285.437337][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.444854][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.453257][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.466944][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.475585][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.487720][ T6100] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 285.497348][ T6100] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 285.523884][ T30] audit: type=1400 audit(2000000358.072:1610): avc: denied { create } for pid=6103 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.539675][ T6106] loop3: detected capacity change from 0 to 256 [ 285.543830][ T30] audit: type=1400 audit(2000000358.072:1611): avc: denied { connect } for pid=6103 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.578067][ T6106] exfat: Deprecated parameter 'namecase' [ 285.610638][ T6106] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 285.629036][ T30] audit: type=1400 audit(2000000358.182:1612): avc: denied { remove_name } for pid=6105 comm="syz.3.1689" name="file1" dev="loop3" ino=1048762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.652488][ T30] audit: type=1400 audit(2000000358.182:1613): avc: denied { unlink } for pid=6105 comm="syz.3.1689" name="file1" dev="loop3" ino=1048762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 285.678184][ T30] audit: type=1400 audit(2000000358.182:1614): avc: denied { add_name } for pid=6105 comm="syz.3.1689" name="blkio.bfq.io_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.715274][ T30] audit: type=1400 audit(2000000358.182:1615): avc: denied { associate } for pid=6105 comm="syz.3.1689" name="blkio.bfq.io_wait_time" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 285.893357][ T6118] overlayfs: failed to resolve './file0': -2 [ 286.137736][ T294] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 286.169534][ T6113] loop2: detected capacity change from 0 to 40427 [ 286.192351][ T6111] loop3: detected capacity change from 0 to 40427 [ 286.212386][ T6111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.220621][ T6113] F2FS-fs (loop2): invalid crc value [ 286.226811][ T6113] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 286.247511][ T6113] F2FS-fs (loop2): Found nat_bits in checkpoint [ 286.257410][ T6111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 286.330331][ T6113] F2FS-fs (loop2): recover fsync data on readonly fs [ 286.338622][ T6113] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 286.345020][ T6113] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 286.356428][ T6113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 286.387166][ T294] usb 2-1: Using ep0 maxpacket: 32 [ 286.705701][ T6140] netlink: 'syz.4.1701': attribute type 13 has an invalid length. [ 286.720106][ T5476] attempt to access beyond end of device [ 286.720106][ T5476] loop3: rw=2049, want=45120, limit=40427 [ 286.766247][ T6146] loop4: detected capacity change from 0 to 512 [ 286.837824][ T6146] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 286.837824][ T6146] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 286.837824][ T6146] [ 286.860392][ T6146] EXT4-fs (loop4): 1 orphan inode deleted [ 286.866150][ T6146] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 286.890542][ T6146] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff) [ 286.956538][ T294] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 286.967299][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.975276][ T294] usb 2-1: Product: syz [ 286.982034][ T294] usb 2-1: Manufacturer: syz [ 286.986569][ T294] usb 2-1: SerialNumber: syz [ 287.108187][ T294] usb 2-1: config 0 descriptor?? [ 287.957270][ T469] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 288.037364][ T294] (unnamed net_device) (uninitialized): Assigned a random MAC address: a2:66:ff:ef:0d:ef [ 288.079877][ T294] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 288.099148][ T294] usb 2-1: USB disconnect, device number 32 [ 288.126121][ T6173] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 288.145883][ T6173] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 288.397493][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.484644][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.608275][ T469] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 288.631427][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.640883][ T469] usb 3-1: config 0 descriptor?? [ 290.767140][ T6227] loop4: detected capacity change from 0 to 128 [ 290.805134][ T6236] loop1: detected capacity change from 0 to 128 [ 290.817142][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 290.817156][ T30] audit: type=1400 audit(2000000363.362:1653): avc: denied { mounton } for pid=6214 comm="syz.4.1720" path="/syzcgroup/unified/file0" dev="cgroup2" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 290.933180][ T469] usbhid 3-1:0.0: can't add hid device: -71 [ 291.119423][ T469] usbhid: probe of 3-1:0.0 failed with error -71 [ 291.133881][ T469] usb 3-1: USB disconnect, device number 39 [ 291.182946][ T30] audit: type=1400 audit(2000000363.732:1654): avc: denied { read } for pid=6255 comm="syz.4.1731" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 291.271538][ T6243] loop2: detected capacity change from 0 to 40427 [ 291.314730][ T6243] F2FS-fs (loop2): invalid crc value [ 291.324630][ T6243] F2FS-fs (loop2): Found nat_bits in checkpoint [ 291.525049][ T6243] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 291.730323][ T6268] input: syz0 as /devices/virtual/input/input24 [ 291.746884][ T30] audit: type=1400 audit(2000000364.272:1655): avc: denied { write } for pid=6242 comm="syz.2.1727" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 291.778534][ T30] audit: type=1400 audit(2000000364.312:1656): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=1325 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.819660][ T30] audit: type=1400 audit(2000000364.312:1657): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1325 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.844124][ T30] audit: type=1400 audit(2000000364.312:1658): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1325 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.916017][ T6090] attempt to access beyond end of device [ 291.916017][ T6090] loop2: rw=2049, want=45104, limit=40427 [ 291.997110][ T338] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 292.077092][ T30] audit: type=1400 audit(2000000364.622:1659): avc: denied { connect } for pid=6270 comm="syz.2.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.105305][ T6277] loop1: detected capacity change from 0 to 1024 [ 292.125060][ T6276] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 292.134786][ T6276] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 292.170642][ T6279] loop2: detected capacity change from 0 to 2048 [ 292.178563][ T6277] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 292.190636][ T6277] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 292.219540][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'. [ 292.267702][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 292.396739][ T6279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.407291][ T338] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 292.427142][ T338] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.444829][ T30] audit: type=1400 audit(2000000364.992:1660): avc: denied { mounton } for pid=6278 comm="syz.2.1738" path="/9/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.504480][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.530500][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.545889][ T30] audit: type=1400 audit(2000000364.992:1661): avc: denied { map } for pid=6278 comm="syz.2.1738" path="/9/file0/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.570577][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.607245][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.622423][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.737497][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.846629][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.862784][ T30] audit: type=1400 audit(2000000365.422:1662): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.867227][ T338] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.894005][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.902410][ T338] usb 4-1: Product: syz [ 292.906428][ T338] usb 4-1: Manufacturer: syz [ 292.910838][ T338] usb 4-1: SerialNumber: syz [ 292.917624][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.932902][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 292.977208][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 293.074718][ T6303] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.151434][ T6310] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 293.161314][ T6310] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 293.192062][ T6314] loop1: detected capacity change from 0 to 256 [ 293.303541][ T6314] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 293.487189][ T338] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 293.495467][ T338] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 293.504160][ T338] usb 4-1: USB disconnect, device number 33 [ 293.514822][ T6316] exFAT-fs (loop1): hint_cluster is invalid (17) [ 293.740363][ T6320] loop3: detected capacity change from 0 to 512 [ 293.789236][ T6320] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.1753: corrupted inode contents [ 293.801349][ T6320] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #3: comm syz.3.1753: mark_inode_dirty error [ 293.813635][ T6320] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.1753: corrupted inode contents [ 293.825857][ T6320] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1753: mark_inode_dirty error [ 293.838512][ T6320] EXT4-fs (loop3): 1 orphan inode deleted [ 293.844103][ T6320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.855014][ T6320] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 293.938495][ T6331] xt_bpf: check failed: parse error [ 294.083666][ T6340] loop3: detected capacity change from 0 to 512 [ 294.169954][ T6340] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1762: inline data xattr refers to an external xattr inode [ 294.184978][ T6340] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1762: couldn't read orphan inode 12 (err -117) [ 294.197253][ T6340] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.759352][ T6351] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 294.789749][ T6351] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 295.280194][ T6364] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1767'. [ 295.504676][ T6366] loop1: detected capacity change from 0 to 512 [ 295.638232][ T6366] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.1768: invalid block [ 295.649200][ T6366] EXT4-fs (loop1): Remounting filesystem read-only [ 295.655640][ T6366] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1768: couldn't read orphan inode 11 (err -117) [ 295.667761][ T6366] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,quota,errors=remount-ro,acl,. Quota mode: writeback. [ 295.733543][ T6366] syz.1.1768 uses obsolete (PF_INET,SOCK_PACKET) [ 295.762576][ T6379] netlink: 'syz.0.1769': attribute type 27 has an invalid length. [ 295.812187][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.121532][ T6391] loop3: detected capacity change from 0 to 512 [ 296.174637][ T6391] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1785: attempt to clear invalid blocks 1 len 1 [ 296.200638][ T6391] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1785: bg 0: block 343: padding at end of block bitmap is not set [ 296.393426][ T6391] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 296.448542][ T6391] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1785: invalid indirect mapped block 1819239214 (level 0) [ 296.477970][ T6391] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1785: invalid indirect mapped block 1819239214 (level 1) [ 296.527574][ T6391] EXT4-fs (loop3): 1 truncate cleaned up [ 296.537112][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.681769][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 297.692074][ T6289] EXT4-fs warning: 221 callbacks suppressed [ 297.692088][ T6289] EXT4-fs warning (device loop2): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 297.698192][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 297.723770][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.054212][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 298.054227][ T30] audit: type=1400 audit(2000000370.602:1679): avc: denied { read } for pid=6412 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.087228][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.200985][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.617709][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.639041][ T30] audit: type=1326 audit(2000000371.152:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.3.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfa4a079f9 code=0x0 [ 298.663759][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.717200][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.732381][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.787635][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 298.828040][ T6427] loop1: detected capacity change from 0 to 512 [ 298.834762][ T30] audit: type=1400 audit(2000000371.372:1681): avc: denied { getopt } for pid=6423 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.054746][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.066309][ T6427] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 299.568420][ T30] audit: type=1400 audit(2000000372.122:1682): avc: denied { rmdir } for pid=6062 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.591942][ T30] audit: type=1400 audit(2000000372.142:1683): avc: denied { unlink } for pid=6062 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 299.615037][ T30] audit: type=1400 audit(2000000372.142:1684): avc: denied { unlink } for pid=6062 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 299.707246][ T294] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 299.928394][ T6453] loop1: detected capacity change from 0 to 16 [ 299.987846][ T6453] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 300.151110][ T30] audit: type=1400 audit(2000000372.692:1685): avc: denied { bind } for pid=6451 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.247696][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.403494][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.413776][ T294] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 300.423002][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.451753][ T294] usb 4-1: config 0 descriptor?? [ 300.957143][ T60] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 301.217175][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 301.337210][ T60] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 301.497234][ T60] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 301.506108][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.513949][ T60] usb 2-1: Product: syz [ 301.517924][ T60] usb 2-1: Manufacturer: syz [ 301.522326][ T60] usb 2-1: SerialNumber: syz [ 301.527441][ T60] usb 2-1: config 0 descriptor?? [ 301.567752][ T60] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 301.575338][ T60] usb 2-1: Detected FT232RL [ 301.777254][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 301.858152][ T294] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0034/input/input25 [ 301.872171][ T294] uclogic 0003:256C:006D.0034: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 302.037173][ T60] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 302.044216][ T60] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 302.053256][ T60] usb 2-1: USB disconnect, device number 33 [ 302.061089][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 302.070470][ T60] ftdi_sio 2-1:0.0: device disconnected [ 302.105100][ T458] usb 4-1: USB disconnect, device number 34 [ 302.723562][ T30] audit: type=1400 audit(2000000375.272:1686): avc: denied { getopt } for pid=6476 comm="syz.1.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.994443][ T6279] EXT4-fs warning: 233 callbacks suppressed [ 302.994490][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.116343][ T30] audit: type=1400 audit(2000000375.392:1687): avc: denied { create } for pid=6474 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.136990][ T30] audit: type=1400 audit(2000000375.412:1688): avc: denied { write } for pid=6474 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.138142][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.157306][ T30] audit: type=1400 audit(2000000375.422:1689): avc: denied { nlmsg_read } for pid=6474 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.202664][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.209622][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.216981][ T6478] device bridge_slave_0 entered promiscuous mode [ 303.217156][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.224344][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.245361][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.250312][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.253034][ T6478] device bridge_slave_1 entered promiscuous mode [ 303.297187][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.322568][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.331848][ T6482] loop3: detected capacity change from 0 to 40427 [ 303.360535][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.367412][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.374532][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.381332][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.446393][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.461480][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.469326][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.486218][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.493606][ T6482] F2FS-fs (loop3): invalid crc value [ 303.503344][ T6482] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.510713][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.517981][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.527514][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.540339][ T6279] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1869049708 [ 303.569533][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.578283][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.585144][ T2222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.596817][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.606291][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.613182][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.620747][ T6482] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.628694][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.647705][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.656020][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.668825][ T6478] device veth0_vlan entered promiscuous mode [ 303.678477][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.690441][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.697972][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.713673][ T6478] device veth1_macvtap entered promiscuous mode [ 303.722414][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.737257][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.745838][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.816275][ T30] audit: type=1400 audit(2000000377.362:1690): avc: denied { mounton } for pid=6512 comm="syz.3.1807" path="/74/file0" dev="incremental-fs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.857155][ T60] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 304.931466][ T30] audit: type=1400 audit(2000000377.392:1691): avc: denied { read } for pid=6512 comm="syz.3.1807" name="file0" dev="incremental-fs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.955849][ T30] audit: type=1400 audit(2000000377.462:1692): avc: denied { ioctl } for pid=6510 comm="syz.0.1809" path="socket:[47119]" dev="sockfs" ino=47119 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.147155][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 305.380518][ T30] audit: type=1400 audit(2000000377.842:1693): avc: denied { ioctl } for pid=6514 comm="syz.2.1810" path="socket:[45856]" dev="sockfs" ino=45856 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 305.467120][ T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.477149][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.488313][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.498171][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 305.511044][ T60] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 305.517604][ T6525] loop3: detected capacity change from 0 to 40427 [ 305.520170][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.535265][ T60] usb 2-1: config 0 descriptor?? [ 305.536671][ T6525] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 305.547694][ T6525] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 305.559574][ T6525] F2FS-fs (loop3): invalid crc value [ 305.568119][ T6525] F2FS-fs (loop3): Found nat_bits in checkpoint [ 305.607356][ T6525] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 305.614504][ T6525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 306.369423][ T6534] SELinux: security_context_str_to_sid({) failed for (dev ?, type ?) errno=-22 [ 306.379475][ T6534] SELinux: security_context_str_to_sid({) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 306.678313][ T60] hid-generic 0003:1B96:9F0A.0035: unknown main item tag 0x0 [ 306.691038][ T60] hid-generic 0003:1B96:9F0A.0035: unknown main item tag 0x0 [ 406.707042][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 406.713858][ C0] (detected by 0, t=10002 jiffies, g=41205, q=476) [ 406.720219][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294977889-4294967887), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 406.733425][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g41205 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 406.744436][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.754597][ C0] rcu: RCU grace-period kthread stack dump: [ 406.760325][ C0] task:rcu_preempt state:R running task stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 406.771005][ C0] Call Trace: [ 406.774116][ C0] [ 406.776908][ C0] __schedule+0xccc/0x1590 [ 406.781161][ C0] ? __sched_text_start+0x8/0x8 [ 406.785961][ C0] ? __kasan_check_write+0x14/0x20 [ 406.790895][ C0] schedule+0x11f/0x1e0 [ 406.794974][ C0] schedule_timeout+0x18c/0x370 [ 406.799664][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 406.804695][ C0] ? console_conditional_schedule+0x30/0x30 [ 406.810420][ C0] ? update_process_times+0x200/0x200 [ 406.815628][ C0] ? prepare_to_swait_event+0x308/0x320 [ 406.821017][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 406.825612][ C0] ? debug_smp_processor_id+0x17/0x20 [ 406.830817][ C0] ? __note_gp_changes+0x4ab/0x920 [ 406.835765][ C0] ? rcu_gp_init+0xc30/0xc30 [ 406.840190][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 406.845221][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 406.850096][ C0] rcu_gp_kthread+0xa4/0x350 [ 406.854518][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 406.859210][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 406.863711][ C0] ? __kasan_check_read+0x11/0x20 [ 406.868571][ C0] ? __kthread_parkme+0xb2/0x200 [ 406.873415][ C0] kthread+0x421/0x510 [ 406.877251][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 406.881848][ C0] ? kthread_blkcg+0xd0/0xd0 [ 406.886277][ C0] ret_from_fork+0x1f/0x30 [ 406.890533][ C0] [ 406.893393][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 406.899568][ C0] Sending NMI from CPU 0 to CPUs 1: [ 406.904650][ C1] NMI backtrace for cpu 1 [ 406.904664][ C1] CPU: 1 PID: 294 Comm: kworker/1:2 Tainted: G W 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 406.904685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 406.904700][ C1] Workqueue: events bpf_prog_free_deferred [ 406.904729][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 406.904751][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 5a 02 13 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 406.904767][ C1] RSP: 0000:ffffc900001d08c0 EFLAGS: 00000046 [ 406.904782][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a11c RCX: 00000000874fe200 [ 406.904795][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffffff874fe280 [ 406.904808][ C1] RBP: ffffc900001d0970 R08: dffffc0000000000 R09: 0000000000000000 [ 406.904822][ C1] R10: fffffbfff0e9fc50 R11: dffffc0000000001 R12: dffffc0000000000 [ 406.904836][ C1] R13: ffffffff874fe280 R14: 0000000000000003 R15: 1ffff9200003a120 [ 406.904849][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 406.904865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.904878][ C1] CR2: 0000001b2d41aff8 CR3: 000000012447e000 CR4: 00000000003506a0 [ 406.904893][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.904904][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.904916][ C1] Call Trace: [ 406.904923][ C1] [ 406.904931][ C1] ? show_regs+0x58/0x60 [ 406.904967][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 406.905012][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 406.905060][ C1] ? kvm_wait+0x117/0x180 [ 406.905093][ C1] ? kvm_wait+0x117/0x180 [ 406.905141][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 406.905161][ C1] ? nmi_handle+0xa8/0x280 [ 406.905180][ C1] ? kvm_wait+0x117/0x180 [ 406.905197][ C1] ? default_do_nmi+0x69/0x160 [ 406.905214][ C1] ? exc_nmi+0xaf/0x120 [ 406.905229][ C1] ? end_repeat_nmi+0x16/0x31 [ 406.905250][ C1] ? kvm_wait+0x117/0x180 [ 406.905266][ C1] ? kvm_wait+0x117/0x180 [ 406.905284][ C1] ? kvm_wait+0x117/0x180 [ 406.905300][ C1] [ 406.905305][ C1] [ 406.905311][ C1] ? kfree+0xc8/0x220 [ 406.905331][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 406.905350][ C1] ? pv_hash+0x86/0x150 [ 406.905370][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 406.905390][ C1] ? free_percpu+0xd12/0x1090 [ 406.905409][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 406.905432][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 406.905454][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 406.905473][ C1] ? debug_smp_processor_id+0x17/0x20 [ 406.905492][ C1] ? kfree+0xc8/0x220 [ 406.905511][ C1] free_percpu+0x9e/0x1090 [ 406.905526][ C1] ? __kasan_slab_free+0x11/0x20 [ 406.905545][ C1] ? __alloc_reserved_percpu+0x30/0x30 [ 406.905561][ C1] ? kfree+0xc8/0x220 [ 406.905581][ C1] in6_dev_finish_destroy_rcu+0x84/0xa0 [ 406.905602][ C1] ? in6_dev_finish_destroy+0x1b0/0x1b0 [ 406.905620][ C1] rcu_do_batch+0x57a/0xc10 [ 406.905644][ C1] ? local_bh_enable+0x20/0x20 [ 406.905668][ C1] rcu_core+0x517/0x1020 [ 406.905691][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 406.905710][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 406.905730][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 406.905750][ C1] rcu_core_si+0x9/0x10 [ 406.905767][ C1] __do_softirq+0x26d/0x5bf [ 406.905786][ C1] do_softirq+0xf6/0x150 [ 406.905806][ C1] [ 406.905811][ C1] [ 406.905817][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 406.905836][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 406.905860][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 406.905882][ C1] ? bpf_prog_free_deferred+0x61e/0x730 [ 406.905907][ C1] __local_bh_enable_ip+0x75/0x80 [ 406.905932][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 406.905956][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 406.905983][ C1] bpf_prog_299154e501028bf8+0x40/0x90 [ 406.906004][ C1] bpf_trace_run3+0x11e/0x250 [ 406.906024][ C1] ? pcpu_block_update+0x5e6/0x940 [ 406.906045][ C1] ? bpf_trace_run2+0x210/0x210 [ 406.906068][ C1] ? pcpu_free_area+0x8a3/0xa60 [ 406.906086][ C1] __bpf_trace_percpu_free_percpu+0x2b/0x40 [ 406.906109][ C1] free_percpu+0xd12/0x1090 [ 406.906131][ C1] ? __alloc_reserved_percpu+0x30/0x30 [ 406.906147][ C1] ? bpf_jit_free+0x194/0x240 [ 406.906166][ C1] ? kfree+0xc8/0x220 [ 406.906187][ C1] bpf_jit_free+0x1bb/0x240 [ 406.906207][ C1] bpf_prog_free_deferred+0x61e/0x730 [ 406.906229][ C1] process_one_work+0x6bb/0xc10 [ 406.906249][ C1] worker_thread+0xad5/0x12a0 [ 406.906266][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 406.906290][ C1] kthread+0x421/0x510 [ 406.906307][ C1] ? worker_clr_flags+0x180/0x180 [ 406.906323][ C1] ? kthread_blkcg+0xd0/0xd0 [ 406.906342][ C1] ret_from_fork+0x1f/0x30 [ 406.906363][ C1] [ 551.047075][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.2.1817:6539] [ 551.055131][ C0] Modules linked in: [ 551.058867][ C0] CPU: 0 PID: 6539 Comm: syz.2.1817 Tainted: G W 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 551.069976][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 551.079873][ C0] RIP: 0010:smp_call_function_many_cond+0x84c/0x9b0 [ 551.086295][ C0] Code: 01 31 ff e8 76 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 b1 a4 0a 00 eb 38 f3 90 42 0f b6 04 3b 84 c0 75 11 <41> f7 45 00 01 00 00 00 74 1e e8 95 a4 0a 00 eb e4 44 89 e9 80 e1 [ 551.106363][ C0] RSP: 0018:ffffc90000e07860 EFLAGS: 00000246 [ 551.112262][ C0] RAX: 0000000000000000 RBX: 1ffff1103ee2784d RCX: ffff888111573b40 [ 551.120074][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 551.127889][ C0] RBP: ffffc90000e07978 R08: ffffffff81659daa R09: ffffed103ee071d3 [ 551.135697][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 551.143512][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 551.151319][ C0] FS: 0000555555732500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 551.160085][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.166518][ C0] CR2: 0000001b30917ff8 CR3: 000000012447e000 CR4: 00000000003506b0 [ 551.174322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.182130][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.190093][ C0] Call Trace: [ 551.193215][ C0] [ 551.195910][ C0] ? show_regs+0x58/0x60 [ 551.199986][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 551.204930][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 551.210050][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 551.215261][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 551.220204][ C0] ? clockevents_program_event+0x22f/0x300 [ 551.225848][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 551.231747][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 551.236700][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 551.242599][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 551.248242][ C0] [ 551.251018][ C0] [ 551.253794][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 551.259784][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 551.265600][ C0] ? smp_call_function_many_cond+0x84c/0x9b0 [ 551.271417][ C0] ? text_poke_sync+0x30/0x30 [ 551.275925][ C0] ? smp_call_function_many+0x40/0x40 [ 551.281134][ C0] ? text_poke_loc_init+0x2c5/0x540 [ 551.286168][ C0] ? text_poke_sync+0x30/0x30 [ 551.290683][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 551.295630][ C0] ? free_percpu+0x975/0x1090 [ 551.300141][ C0] text_poke_bp_batch+0x1c4/0x5d0 [ 551.305001][ C0] ? text_poke_loc_init+0x540/0x540 [ 551.310037][ C0] ? mutex_lock+0xb6/0x1e0 [ 551.314287][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 551.319409][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 551.325842][ C0] ? text_poke_queue+0xe4/0x1a0 [ 551.330531][ C0] text_poke_finish+0x1a/0x30 [ 551.335034][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 551.340850][ C0] __jump_label_update+0x36a/0x380 [ 551.345798][ C0] jump_label_update+0x3af/0x450 [ 551.350571][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 551.356307][ C0] static_key_disable+0x1a/0x30 [ 551.360998][ C0] tracepoint_probe_unregister+0x60a/0x900 [ 551.366633][ C0] ? __bpf_trace_percpu_alloc_percpu+0x60/0x60 [ 551.372614][ C0] bpf_probe_unregister+0x61/0x70 [ 551.377523][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 551.382595][ C0] bpf_link_free+0x129/0x3f0 [ 551.387021][ C0] ? bpf_link_put_deferred+0x20/0x20 [ 551.392153][ C0] ? __kasan_check_write+0x14/0x20 [ 551.397087][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 551.401691][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 551.406896][ C0] bpf_link_release+0x170/0x180 [ 551.411589][ C0] ? bpf_prog_get_stats+0x2f0/0x2f0 [ 551.416619][ C0] __fput+0x3fe/0x910 [ 551.420646][ C0] ____fput+0x15/0x20 [ 551.424443][ C0] task_work_run+0x129/0x190 [ 551.428871][ C0] exit_to_user_mode_loop+0xc4/0xe0 [ 551.433907][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 551.439197][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 551.444577][ C0] do_syscall_64+0x49/0xb0 [ 551.448830][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.454559][ C0] RIP: 0033:0x7f9511c149f9 [ 551.458816][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.478251][ C0] RSP: 002b:00007ffdb169e468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 551.486497][ C0] RAX: 0000000000000000 RBX: 00007f9511da4a80 RCX: 00007f9511c149f9 [ 551.494307][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 551.502123][ C0] RBP: 00007f9511da4a80 R08: 0000000000000006 R09: 00007ffdb169e74f [ 551.509932][ C0] R10: 00000000005f7be8 R11: 0000000000000246 R12: 000000000004b016 [ 551.517743][ C0] R13: 00007ffdb169e560 R14: 00007ffdb169e580 R15: ffffffffffffffff [ 551.525648][ C0] [ 551.528514][ C0] Sending NMI from CPU 0 to CPUs 1: [ 551.533595][ C1] NMI backtrace for cpu 1 [ 551.533607][ C1] CPU: 1 PID: 294 Comm: kworker/1:2 Tainted: G W 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 551.533628][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 551.533641][ C1] Workqueue: events bpf_prog_free_deferred [ 551.533668][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 551.533690][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 5a 02 13 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 551.533706][ C1] RSP: 0000:ffffc900001d08c0 EFLAGS: 00000046 [ 551.533720][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a11c RCX: 00000000874fe200 [ 551.533734][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffffff874fe280 [ 551.533748][ C1] RBP: ffffc900001d0970 R08: dffffc0000000000 R09: 0000000000000000 [ 551.533761][ C1] R10: fffffbfff0e9fc50 R11: dffffc0000000001 R12: dffffc0000000000 [ 551.533775][ C1] R13: ffffffff874fe280 R14: 0000000000000003 R15: 1ffff9200003a120 [ 551.533788][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 551.533819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.533833][ C1] CR2: 0000001b2d41aff8 CR3: 000000012447e000 CR4: 00000000003506a0 [ 551.533849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.533860][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.533872][ C1] Call Trace: [ 551.533879][ C1] [ 551.533887][ C1] ? show_regs+0x58/0x60 [ 551.533906][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 551.533945][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 551.533968][ C1] ? kvm_wait+0x117/0x180 [ 551.533984][ C1] ? kvm_wait+0x117/0x180 [ 551.534001][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 551.534021][ C1] ? nmi_handle+0xa8/0x280 [ 551.534040][ C1] ? kvm_wait+0x117/0x180 [ 551.534055][ C1] ? kvm_wait+0x117/0x180 [ 551.534072][ C1] ? default_do_nmi+0x69/0x160 [ 551.534090][ C1] ? exc_nmi+0xaf/0x120 [ 551.534105][ C1] ? end_repeat_nmi+0x16/0x31 [ 551.534124][ C1] ? kvm_wait+0x117/0x180 [ 551.534141][ C1] ? kvm_wait+0x117/0x180 [ 551.534158][ C1] ? kvm_wait+0x117/0x180 [ 551.534174][ C1] [ 551.534180][ C1] [ 551.534185][ C1] ? kfree+0xc8/0x220 [ 551.534205][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 551.534223][ C1] ? pv_hash+0x86/0x150 [ 551.534243][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 551.534264][ C1] ? free_percpu+0xd12/0x1090 [ 551.534282][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 551.534306][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 551.534327][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 551.534346][ C1] ? debug_smp_processor_id+0x17/0x20 [ 551.534364][ C1] ? kfree+0xc8/0x220 [ 551.534383][ C1] free_percpu+0x9e/0x1090 [ 551.534398][ C1] ? __kasan_slab_free+0x11/0x20 [ 551.534417][ C1] ? __alloc_reserved_percpu+0x30/0x30 [ 551.534433][ C1] ? kfree+0xc8/0x220 [ 551.534453][ C1] in6_dev_finish_destroy_rcu+0x84/0xa0 [ 551.534473][ C1] ? in6_dev_finish_destroy+0x1b0/0x1b0 [ 551.534491][ C1] rcu_do_batch+0x57a/0xc10 [ 551.534515][ C1] ? local_bh_enable+0x20/0x20 [ 551.534539][ C1] rcu_core+0x517/0x1020 [ 551.534561][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 551.534580][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 551.534601][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 551.534620][ C1] rcu_core_si+0x9/0x10 [ 551.534638][ C1] __do_softirq+0x26d/0x5bf [ 551.534657][ C1] do_softirq+0xf6/0x150 [ 551.534677][ C1] [ 551.534682][ C1] [ 551.534688][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 551.534707][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 551.534727][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 551.534746][ C1] ? bpf_prog_free_deferred+0x61e/0x730 [ 551.534768][ C1] __local_bh_enable_ip+0x75/0x80 [ 551.534787][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 551.534810][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 551.534833][ C1] bpf_prog_299154e501028bf8+0x40/0x90 [ 551.534848][ C1] bpf_trace_run3+0x11e/0x250 [ 551.534867][ C1] ? pcpu_block_update+0x5e6/0x940 [ 551.534885][ C1] ? bpf_trace_run2+0x210/0x210 [ 551.534905][ C1] ? pcpu_free_area+0x8a3/0xa60 [ 551.534923][ C1] __bpf_trace_percpu_free_percpu+0x2b/0x40 [ 551.534945][ C1] free_percpu+0xd12/0x1090 [ 551.534963][ C1] ? __alloc_reserved_percpu+0x30/0x30 [ 551.534979][ C1] ? bpf_jit_free+0x194/0x240 [ 551.534998][ C1] ? kfree+0xc8/0x220 [ 551.535018][ C1] bpf_jit_free+0x1bb/0x240 [ 551.535038][ C1] bpf_prog_free_deferred+0x61e/0x730 [ 551.535060][ C1] process_one_work+0x6bb/0xc10 [ 551.535080][ C1] worker_thread+0xad5/0x12a0 [ 551.535097][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 551.535121][ C1] kthread+0x421/0x510 [ 551.535139][ C1] ? worker_clr_flags+0x180/0x180 [ 551.535155][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.535174][ C1] ret_from_fork+0x1f/0x30 [ 551.535196][ C1]