last executing test programs: 6.43902129s ago: executing program 2 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 6.4380493s ago: executing program 2 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 6.319663312s ago: executing program 2 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'macvtap0\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) pivot_root(0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5.602059593s ago: executing program 1 (id=2309): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000040)=0x4, 0x4) 5.552458554s ago: executing program 1 (id=2310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 5.458820896s ago: executing program 2 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000082, &(0x7f0000000180)={[{@rodir}, {@shortname_win95}, {@rodir}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8}, {@uni_xlate}, {@rodir}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x358, &(0x7f0000000480)="$eJzs3T9oXHUcAPDv9aW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg0+ubt3/+/sBbxY8fMZwpfv7/d9v+97eeS9hOSXVxuxc+lkXL5162YsLeViYePcRtzORSFORBIdBzHRB4uT8wDAPe52msYfacfdZ3+00o08+wHgv6v9/H/9VD+RP0Lx1fvm0RIAMGczfv//7MTslbm1BQDM0djz/5Gh4ZEf8y/0fiegY3n+DQIA/7jnX3r5mc2tiIvF4lJE9f16qV6Kp/rjm5fjzajEdpyN1TiM6LwodN4WWh+fvrB1/myx5ZdClFoV9VJEtVEvdd4UNpN2fT7WYjUKWX3aq09a9Wvt+mJEHDTa60c1Vy+djJVs/R9XYjvWYzUeGKuPuLB1fr2YHaBU7dY3Ipqx1D2JVv9nYjW+fy2uRCUuRau23//+WrF4Lt0aqq9fy7fnAQAAAAAAAAAAAAAAAAAAAADAPJwp9hR6+9+k1Ub9vYujEwpD++OUOsPZ/kDNzv5Aab67O8/VZHR/oOH9eeqlhTjxr545AAAAAAAAAAAAAAAAAAAA3Dtqe4tRrlS2d2t77+4MBo2BzNvffvH1cnSHFrLSt5J+VWTJoeN0Jw4cOYneEmmvPE2G5mRBEtGdfFC+dr3X8eCcfO8sxspbQX5sKJf1VK5UTj3886eTqv5sBQftTBJjl2U4yGXrDwxV728lliLicFrV9GD9LnNupGk6rXz/k9FMthVD48htzBB8c/ONBx+vnX6infkqW+nRx1ZfuPHx57/tlCvR7FyZSmVxt3aYznDkyEWMDyUD908uu865CXfC5KDZzzR3a3vl5IffX3zow+9GJieT7590MPPO9LW+HM0sdoJcRKF7Ef6u1ZMTbv7JwSt3enfv0T9xpz/bKF/f/+nXWasGvkjYqAMAAAAAAAAAAAAAAAAAAI5F/49+RwbSNG1MrXryubk3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHqP///weC5lhmluBOI8aH8tu7tamLLx/rqQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/2VwAAAP//wGN9HA==") 3.255340339s ago: executing program 1 (id=2335): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") 3.25462665s ago: executing program 0 (id=2338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0) 3.22020833s ago: executing program 3 (id=2340): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 3.165254511s ago: executing program 3 (id=2342): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd600000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x9, 0x5, 0x2, 0x5}, 'syz0\x00', 0x42}) 3.122092922s ago: executing program 3 (id=2343): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000013c0)={'syz1\x00', {0x10, 0x9, 0x40, 0x2e}, 0xb, [0x7, 0x0, 0x2, 0x4, 0x1c, 0x10, 0x0, 0x2, 0x7, 0xd7f, 0x9, 0x8, 0x1ff, 0x3, 0x2, 0x45000000, 0x88, 0x4, 0x8, 0x4, 0x6, 0x101, 0x7, 0x3, 0x2, 0x2, 0x5, 0x0, 0x8, 0x8c6, 0x100, 0x7, 0x200, 0x1, 0x400, 0x300000, 0x8350, 0x1, 0x7, 0x9, 0x6, 0x7, 0x120000, 0x381, 0x4, 0x194, 0x3, 0x2, 0x5, 0x2, 0x6, 0x8, 0x10001, 0x9, 0x3, 0x0, 0x102000, 0x3, 0x3, 0x7, 0x2, 0xfffffff8, 0x2, 0x401], [0xfffffff9, 0x101, 0xdcd9, 0x3, 0x1, 0xb58, 0x81, 0x530a080a, 0x80000000, 0x3, 0x5, 0x0, 0x6, 0x7, 0x5, 0xb, 0x3, 0x8, 0x6, 0x9, 0x98e1, 0x2, 0x8, 0x8001, 0x81, 0x8000, 0xfffffffb, 0xd7, 0x5, 0x3, 0x2, 0x3, 0x6, 0xb159, 0x7, 0x2, 0x9, 0x1ff, 0x40, 0x4, 0x0, 0x9, 0xdb75, 0x2, 0x9, 0x7, 0x10, 0x2, 0x37, 0x6, 0x4c, 0x6, 0x6, 0x7ff, 0x3, 0x10000005, 0xfffffff9, 0x1, 0x400, 0xf8, 0x6, 0x8, 0x0, 0xf], [0x0, 0x1ff, 0x5, 0x1, 0x80, 0x34, 0x1, 0x1, 0x7, 0x1, 0x995, 0x80, 0x33d60974, 0x3, 0x0, 0x3ff, 0x3, 0x5, 0x80, 0x1000, 0x0, 0x43, 0x401, 0xa, 0x1, 0x6e, 0x7, 0x0, 0x8, 0x8, 0x8, 0xc, 0xf, 0x9, 0x4, 0x0, 0x80000001, 0x3, 0x7, 0x200, 0x7ff, 0x100, 0x1, 0xa, 0x0, 0x3, 0x7fff, 0x800, 0x1, 0x7f, 0x2, 0xa, 0x1, 0x0, 0x3, 0x1, 0xff9, 0x9, 0xffff, 0x2, 0x6, 0x8, 0x0, 0x8000], [0x932e, 0x2, 0x1, 0x2, 0x3, 0x2, 0xd, 0x6, 0x3, 0x33c, 0x7, 0xff, 0x7, 0x3ff, 0x3, 0x1, 0xe21, 0x54, 0x4, 0x9, 0x3, 0x6, 0x1, 0x5, 0x8001, 0x7fffffff, 0xe, 0x9, 0x7, 0x2, 0x6, 0x80, 0x3, 0x400, 0xc2c, 0x8, 0x823, 0x1d, 0x5, 0x7, 0x401, 0x5, 0xf9c6, 0x3, 0x101, 0x3073b92f, 0xc8, 0xfffff638, 0x101, 0x2, 0x4, 0x2, 0x47, 0x9, 0x4, 0x9, 0x3, 0x3ff, 0xffffffff, 0xf812, 0x4, 0xffff, 0x8, 0x7]}, 0x45c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x43f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3.120601562s ago: executing program 2 (id=2344): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) 3.062437642s ago: executing program 1 (id=2346): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 2.940350944s ago: executing program 4 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, r1, 0x1, 0x78bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040c85}, 0x4040140) 2.925118524s ago: executing program 4 (id=2350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 2.863979505s ago: executing program 4 (id=2351): newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x2000) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x54, 0x2, {{'ecb(cipher_null)\x00'}, 0x60, "31becd777571eeaf55d96511"}}, @mark={0xc}, @XFRMA_SET_MARK={0x8}]}, 0x158}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x200, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0x2000000, 0x84}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r6, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000054) 2.298464304s ago: executing program 0 (id=2352): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 1.681839464s ago: executing program 0 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000018000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 1.681474214s ago: executing program 0 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1.681245174s ago: executing program 2 (id=2355): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) io_setup(0x541e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x1) io_setup(0xfffffff7, &(0x7f00000012c0)=0x0) io_pgetevents(r2, 0x1, 0x0, &(0x7f0000001280), &(0x7f00000013c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x6, {0x8, 0x1, 0x7, 0x8d, 0xff8, 0xb}}) 1.678059524s ago: executing program 4 (id=2356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.627708645s ago: executing program 0 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240100001800090400000000000000000a000000000000000000000008001e0001000000"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0x2, 0x3, 0x80000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x6, 0x2b8, &(0x7f0000000640)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000002080)=ANY=[@ANYBLOB='iocrarseyrillic\bdiscard,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT=r7], 0x1, 0x1524, &(0x7f0000000780)="$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") r9 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 1.520389586s ago: executing program 3 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) 1.497517876s ago: executing program 4 (id=2359): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000040)=0x4, 0x4) 1.479519237s ago: executing program 3 (id=2360): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 1.198312042s ago: executing program 4 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004404) 536.041741ms ago: executing program 3 (id=2362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0) 297.459725ms ago: executing program 1 (id=2363): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x7}, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x58}}, 0x400c084) 34.03716ms ago: executing program 0 (id=2364): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 0s ago: executing program 1 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): 885022194.981:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3626 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 202.375915][ T28] audit: type=1326 audit(1885022194.981:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3626 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 202.400076][ T28] audit: type=1326 audit(1885022194.981:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3626 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 202.424707][ T28] audit: type=1326 audit(1885022194.981:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3626 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 202.519299][ T3652] syz.1.1157[3652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.519395][ T3652] syz.1.1157[3652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.478251][ T28] audit: type=1326 audit(1885022196.751:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.1163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bee18e929 code=0x0 [ 203.848203][ T3678] loop2: detected capacity change from 0 to 40427 [ 203.873856][ T3678] F2FS-fs (loop2): Image doesn't support compression [ 203.894453][ T3678] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 205.295101][ T3721] syz.2.1181[3721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.295197][ T3721] syz.2.1181[3721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.672598][ T3734] loop1: detected capacity change from 0 to 40427 [ 205.764619][ T3734] F2FS-fs (loop1): Image doesn't support compression [ 205.781632][ T3734] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 206.392630][ T3760] syz.2.1196[3760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.392728][ T3760] syz.2.1196[3760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.579944][ T3770] loop0: detected capacity change from 0 to 512 [ 206.610639][ T3770] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.812605][ T3770] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 206.838849][ T3770] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 207.852004][ T3784] loop1: detected capacity change from 0 to 512 [ 207.930733][ T3784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.950347][ T3784] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.162022][ T3796] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1204'. [ 208.279935][ T3800] syz.3.1210[3800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.280036][ T3800] syz.3.1210[3800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.113144][ T2821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.134205][ T284] EXT4-fs (loop1): unmounting filesystem. [ 209.229721][ T3828] loop2: detected capacity change from 0 to 256 [ 209.290530][ T3832] syz.0.1222[3832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.290626][ T3832] syz.0.1222[3832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.338349][ T2821] usb 5-1: Using ep0 maxpacket: 16 [ 209.365240][ T2821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.384203][ T2821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.399927][ T2821] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 209.419545][ T2821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.433216][ T2821] usb 5-1: config 0 descriptor?? [ 209.846768][ T2821] hid-picolcd 0003:04D8:F002.0009: item fetching failed at offset 10/11 [ 209.859911][ T2821] hid-picolcd 0003:04D8:F002.0009: device report parse failed [ 209.877018][ T2821] hid-picolcd: probe of 0003:04D8:F002.0009 failed with error -22 [ 209.980187][ T3842] loop0: detected capacity change from 0 to 40427 [ 209.996874][ T3842] F2FS-fs (loop0): Image doesn't support compression [ 210.012081][ T3842] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 210.058554][ T39] usb 5-1: USB disconnect, device number 5 [ 211.673184][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.720454][ T3883] loop3: detected capacity change from 0 to 40427 [ 211.743972][ T3883] F2FS-fs (loop3): Image doesn't support compression [ 211.759223][ T3883] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 211.873156][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 211.879637][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.907755][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.918130][ T39] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 211.938737][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.031094][ T39] usb 2-1: config 0 descriptor?? [ 212.213032][ T3916] loop3: detected capacity change from 0 to 8192 [ 212.737247][ T39] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 10/11 [ 212.747866][ T3923] syz.3.1253: attempt to access beyond end of device [ 212.747866][ T3923] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.761705][ T3923] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.774870][ T3923] syz.3.1253: attempt to access beyond end of device [ 212.774870][ T3923] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.788841][ T3923] Buffer I/O error on dev loop3, logical block 57847, async page read [ 212.797443][ T3923] syz.3.1253: attempt to access beyond end of device [ 212.797443][ T3923] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.810970][ T3923] Buffer I/O error on dev loop3, logical block 57847, async page read [ 213.261264][ T39] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 213.269335][ T39] hid-picolcd: probe of 0003:04D8:F002.000A failed with error -22 [ 213.300625][ T3923] syz.3.1253: attempt to access beyond end of device [ 213.300625][ T3923] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 213.314506][ T3923] Buffer I/O error on dev loop3, logical block 57847, async page read [ 213.687780][ T39] usb 2-1: USB disconnect, device number 6 [ 214.000666][ T28] audit: type=1326 audit(1885022207.271:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.026281][ T3935] fuse: Bad value for 'rootmode' [ 214.044349][ T28] audit: type=1326 audit(1885022207.271:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.068422][ T28] audit: type=1326 audit(1885022207.271:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.092291][ T28] audit: type=1326 audit(1885022207.271:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.124517][ T28] audit: type=1326 audit(1885022207.271:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.153148][ T28] audit: type=1326 audit(1885022207.301:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.178438][ T28] audit: type=1326 audit(1885022207.301:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.202272][ T28] audit: type=1326 audit(1885022207.301:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.226441][ T28] audit: type=1326 audit(1885022207.301:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.262369][ T28] audit: type=1326 audit(1885022207.301:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 214.770474][ T3944] loop4: detected capacity change from 0 to 40427 [ 214.778518][ T3944] F2FS-fs (loop4): Image doesn't support compression [ 214.785350][ T3944] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 215.506019][ T3960] loop2: detected capacity change from 0 to 8192 [ 215.666867][ T3984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.002903][ T3994] syz.2.1267: attempt to access beyond end of device [ 216.002903][ T3994] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 216.016618][ T3994] Buffer I/O error on dev loop2, logical block 57847, async page read [ 216.028048][ T3994] syz.2.1267: attempt to access beyond end of device [ 216.028048][ T3994] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 216.041943][ T3994] Buffer I/O error on dev loop2, logical block 57847, async page read [ 216.050712][ T3994] syz.2.1267: attempt to access beyond end of device [ 216.050712][ T3994] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 216.064567][ T3994] Buffer I/O error on dev loop2, logical block 57847, async page read [ 216.081016][ T3994] syz.2.1267: attempt to access beyond end of device [ 216.081016][ T3994] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 216.094622][ T3994] Buffer I/O error on dev loop2, logical block 57847, async page read [ 217.200210][ T4020] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.375868][ T4030] loop0: detected capacity change from 0 to 256 [ 217.439817][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.790120][ T4043] loop1: detected capacity change from 0 to 8192 [ 218.686814][ T4051] loop3: detected capacity change from 0 to 512 [ 218.694375][ T4051] EXT4-fs: Ignoring removed i_version option [ 219.668519][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 219.826983][ T4050] loop2: detected capacity change from 0 to 40427 [ 219.842056][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.888528][ T4050] F2FS-fs (loop2): quotafile must be on filesystem root [ 219.921531][ T4054] syz.1.1300: attempt to access beyond end of device [ 219.921531][ T4054] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 219.935304][ T4054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 219.947716][ T4054] syz.1.1300: attempt to access beyond end of device [ 219.947716][ T4054] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 219.961477][ T4054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 219.970259][ T4054] syz.1.1300: attempt to access beyond end of device [ 219.970259][ T4054] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 219.984292][ T4054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 220.349062][ T4054] syz.1.1300: attempt to access beyond end of device [ 220.349062][ T4054] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 220.362895][ T4054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 220.629188][ T4051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.717922][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 220.717951][ T28] audit: type=1326 audit(1885022213.981:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.795648][ T28] audit: type=1326 audit(1885022213.981:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.819911][ T28] audit: type=1326 audit(1885022213.981:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.844713][ T28] audit: type=1326 audit(1885022213.991:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.869242][ T28] audit: type=1326 audit(1885022213.991:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.893717][ T28] audit: type=1326 audit(1885022213.991:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.918582][ T286] EXT4-fs (loop3): unmounting filesystem. [ 220.922492][ T28] audit: type=1326 audit(1885022213.991:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 220.992970][ T28] audit: type=1326 audit(1885022213.991:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 221.444997][ T4074] loop2: detected capacity change from 0 to 1024 [ 221.460099][ T4074] EXT4-fs: Ignoring removed i_version option [ 221.470237][ T4074] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.480808][ T4074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.113686][ T4084] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1309'. [ 222.165966][ T283] EXT4-fs (loop2): unmounting filesystem. [ 222.366153][ T4097] loop0: detected capacity change from 0 to 8192 [ 222.747860][ T4105] syz.0.1314: attempt to access beyond end of device [ 222.747860][ T4105] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 222.761711][ T4105] Buffer I/O error on dev loop0, logical block 57847, async page read [ 222.778297][ T4105] syz.0.1314: attempt to access beyond end of device [ 222.778297][ T4105] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 222.792189][ T4105] Buffer I/O error on dev loop0, logical block 57847, async page read [ 222.800793][ T4105] syz.0.1314: attempt to access beyond end of device [ 222.800793][ T4105] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 222.814529][ T4105] Buffer I/O error on dev loop0, logical block 57847, async page read [ 222.856669][ T4105] syz.0.1314: attempt to access beyond end of device [ 222.856669][ T4105] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 222.870588][ T4105] Buffer I/O error on dev loop0, logical block 57847, async page read [ 223.974483][ T4119] loop0: detected capacity change from 0 to 1024 [ 223.983882][ T4122] loop1: detected capacity change from 0 to 512 [ 224.016963][ T4119] EXT4-fs: Ignoring removed i_version option [ 224.032266][ T4122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.041427][ T4122] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.052537][ T4119] EXT4-fs (loop0): Test dummy encryption mode enabled [ 224.074898][ T4119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.479264][ T4131] can0: slcan on ptm0. [ 224.513224][ T28] audit: type=1400 audit(1885022217.771:529): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 224.545831][ T28] audit: type=1400 audit(1885022217.811:530): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.604058][ T4130] can0 (unregistered): slcan off ptm0. [ 224.619668][ T4134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1323'. [ 224.827391][ T282] EXT4-fs (loop0): unmounting filesystem. [ 225.700117][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 225.893104][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 225.899426][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.933180][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.960461][ T39] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 225.969914][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.970657][ T284] EXT4-fs (loop1): unmounting filesystem. [ 225.979009][ T39] usb 4-1: config 0 descriptor?? [ 226.208644][ T4198] loop0: detected capacity change from 0 to 1024 [ 226.227203][ T4198] EXT4-fs: Ignoring removed i_version option [ 226.234229][ T4198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 226.244393][ T4198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.400962][ T39] hid-picolcd 0003:04D8:F002.000B: item fetching failed at offset 10/11 [ 226.412669][ T39] hid-picolcd 0003:04D8:F002.000B: device report parse failed [ 226.920232][ T39] hid-picolcd: probe of 0003:04D8:F002.000B failed with error -22 [ 226.945188][ T39] usb 4-1: USB disconnect, device number 7 [ 227.068356][ T282] EXT4-fs (loop0): unmounting filesystem. [ 227.237686][ T4208] loop1: detected capacity change from 0 to 40427 [ 227.245240][ T4208] F2FS-fs (loop1): Image doesn't support compression [ 227.252645][ T4208] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 227.877717][ T4225] loop3: detected capacity change from 0 to 512 [ 227.922149][ T4225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.950017][ T4225] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.013150][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.564598][ T4238] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1349'. [ 228.655730][ T4246] loop1: detected capacity change from 0 to 1024 [ 228.671819][ T4246] EXT4-fs: Ignoring removed i_version option [ 228.683628][ T4246] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.704916][ T4246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.432751][ T286] EXT4-fs (loop3): unmounting filesystem. [ 229.493187][ T2821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.568039][ T284] EXT4-fs (loop1): unmounting filesystem. [ 229.953129][ T2821] usb 1-1: Using ep0 maxpacket: 16 [ 229.959536][ T2821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.981006][ T2821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.000195][ T2821] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 230.016251][ T2821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.025661][ T2821] usb 1-1: config 0 descriptor?? [ 230.097187][ T4273] loop1: detected capacity change from 0 to 40427 [ 230.105086][ T4273] F2FS-fs (loop1): Image doesn't support compression [ 230.112194][ T4273] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 230.183304][ T4279] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1367'. [ 230.233718][ T310] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.741621][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 230.749501][ T2821] usbhid 1-1:0.0: can't add hid device: -71 [ 230.757661][ T2821] usbhid: probe of 1-1:0.0 failed with error -71 [ 230.774935][ T2821] usb 1-1: USB disconnect, device number 4 [ 231.042406][ T4300] loop3: detected capacity change from 0 to 1024 [ 231.048129][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 231.048154][ T28] audit: type=1326 audit(1885022224.321:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.4.1376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bee18e929 code=0x0 [ 231.073994][ T4300] EXT4-fs: Ignoring removed i_version option [ 231.096840][ T4300] EXT4-fs (loop3): Test dummy encryption mode enabled [ 231.109833][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.608006][ T4315] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1379'. [ 232.091908][ T286] EXT4-fs (loop3): unmounting filesystem. [ 232.708116][ T4347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1391'. [ 232.983156][ T674] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.061748][ T4355] loop0: detected capacity change from 0 to 1024 [ 233.069106][ T4355] EXT4-fs: Ignoring removed i_version option [ 233.076137][ T4355] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.098330][ T4355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.181882][ T28] audit: type=1326 audit(1885022226.451:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.1.1394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7e578e929 code=0x0 [ 233.223180][ T674] usb 4-1: Using ep0 maxpacket: 16 [ 233.229714][ T674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.241374][ T674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.251268][ T674] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 233.260770][ T674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.275877][ T674] usb 4-1: config 0 descriptor?? [ 233.702058][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 233.710060][ T674] usbhid 4-1:0.0: can't add hid device: -71 [ 233.717040][ T674] usbhid: probe of 4-1:0.0 failed with error -71 [ 233.756411][ T674] usb 4-1: USB disconnect, device number 8 [ 234.061916][ T282] EXT4-fs (loop0): unmounting filesystem. [ 234.673303][ T4384] syz.2.1401 (4384) used greatest stack depth: 20080 bytes left [ 234.774885][ T1005] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.101525][ T28] audit: type=1326 audit(1885022228.371:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7e578e929 code=0x0 [ 235.355965][ T4409] loop0: detected capacity change from 0 to 1024 [ 235.359778][ T4409] EXT4-fs: Ignoring removed i_version option [ 235.369610][ T4409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 235.376053][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 236.705500][ T282] EXT4-fs (loop0): unmounting filesystem. [ 236.843283][ T456] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.843323][ T1050] Bluetooth: hci0: command 0x1003 tx timeout [ 236.923234][ T674] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.113140][ T674] usb 4-1: Using ep0 maxpacket: 16 [ 237.125182][ T674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.143960][ T674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.160936][ T674] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 237.170554][ T674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.185396][ T674] usb 4-1: config 0 descriptor?? [ 237.654184][ T674] usbhid 4-1:0.0: can't add hid device: -71 [ 237.654264][ T674] usbhid: probe of 4-1:0.0 failed with error -71 [ 237.655442][ T674] usb 4-1: USB disconnect, device number 9 [ 237.870138][ T28] audit: type=1326 audit(1885022231.141:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.0.1428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eef58e929 code=0x0 [ 238.044691][ T4463] loop2: detected capacity change from 0 to 1024 [ 238.053945][ T4463] EXT4-fs: Ignoring removed i_version option [ 238.056084][ T4463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 238.074289][ T4463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.190339][ T1005] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.161040][ T283] EXT4-fs (loop2): unmounting filesystem. [ 239.811084][ T4501] loop4: detected capacity change from 0 to 8192 [ 240.929644][ T456] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.944105][ T4507] syz.4.1441: attempt to access beyond end of device [ 240.944105][ T4507] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 240.944182][ T4507] Buffer I/O error on dev loop4, logical block 57847, async page read [ 240.946180][ T4507] syz.4.1441: attempt to access beyond end of device [ 240.946180][ T4507] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 240.946238][ T4507] Buffer I/O error on dev loop4, logical block 57847, async page read [ 240.946298][ T4507] syz.4.1441: attempt to access beyond end of device [ 240.946298][ T4507] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 240.946337][ T4507] Buffer I/O error on dev loop4, logical block 57847, async page read [ 240.948686][ T4507] syz.4.1441: attempt to access beyond end of device [ 240.948686][ T4507] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 240.948753][ T4507] Buffer I/O error on dev loop4, logical block 57847, async page read [ 241.075631][ T305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 241.833483][ T4519] loop3: detected capacity change from 0 to 512 [ 241.840362][ T4519] EXT4-fs: Ignoring removed i_version option [ 241.873280][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 241.966210][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.058068][ T4519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.102320][ T4519] fuse: Bad value for 'group_id' [ 242.111765][ T28] audit: type=1326 audit(1885022235.371:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 242.353136][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.424469][ T28] audit: type=1326 audit(1885022235.371:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 242.449884][ T305] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 242.481611][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.502975][ T4530] loop4: detected capacity change from 0 to 1024 [ 242.515340][ T4530] EXT4-fs: Ignoring removed i_version option [ 242.543271][ T305] usb 1-1: config 0 descriptor?? [ 242.627059][ T4530] EXT4-fs (loop4): Test dummy encryption mode enabled [ 242.637580][ T28] audit: type=1326 audit(1885022235.371:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 242.671007][ T4530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.959859][ T28] audit: type=1326 audit(1885022235.371:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 242.991925][ T286] EXT4-fs (loop3): unmounting filesystem. [ 242.995508][ T28] audit: type=1326 audit(1885022235.371:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 243.021730][ T28] audit: type=1326 audit(1885022235.371:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 243.045706][ T28] audit: type=1326 audit(1885022235.391:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 243.071089][ T28] audit: type=1326 audit(1885022235.391:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 243.096150][ T28] audit: type=1326 audit(1885022235.751:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.2.1447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47af8e929 code=0x0 [ 243.472939][ T305] usbhid 1-1:0.0: can't add hid device: -71 [ 243.485909][ T305] usbhid: probe of 1-1:0.0 failed with error -71 [ 243.514992][ T305] usb 1-1: USB disconnect, device number 5 [ 243.539500][ T285] EXT4-fs (loop4): unmounting filesystem. [ 243.564414][ T4550] fuse: Unknown parameter 'user_i00000000000000000000' [ 243.572540][ T28] audit: type=1326 audit(1885022236.831:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 243.598691][ T28] audit: type=1326 audit(1885022236.831:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 243.622755][ T28] audit: type=1326 audit(1885022236.831:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 243.646919][ T28] audit: type=1326 audit(1885022236.831:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 244.758402][ T4578] loop2: detected capacity change from 0 to 512 [ 244.775313][ T4578] EXT4-fs: Ignoring removed i_version option [ 245.791854][ T4578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.840437][ T4578] fuse: Bad value for 'group_id' [ 246.135482][ T4586] loop3: detected capacity change from 0 to 1024 [ 246.188110][ T4586] EXT4-fs: Ignoring removed i_version option [ 246.225229][ T4586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.270382][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.415546][ T283] EXT4-fs (loop2): unmounting filesystem. [ 246.844118][ T286] EXT4-fs (loop3): unmounting filesystem. [ 247.020021][ T4615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1476'. [ 247.779735][ T4629] loop0: detected capacity change from 0 to 512 [ 247.786697][ T4629] EXT4-fs: Ignoring removed i_version option [ 247.826861][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 247.900844][ T4629] fuse: Bad value for 'group_id' [ 248.150300][ T4625] loop3: detected capacity change from 0 to 1024 [ 248.218184][ T4625] EXT4-fs: Ignoring removed i_version option [ 248.249658][ T4625] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.265210][ T4625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.591454][ T282] EXT4-fs (loop0): unmounting filesystem. [ 248.921098][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 248.921117][ T28] audit: type=1326 audit(1885022242.191:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.2.1486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47af8e929 code=0x0 [ 248.999035][ T4654] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1489'. [ 249.051602][ T286] EXT4-fs (loop3): unmounting filesystem. [ 249.950227][ T4664] loop3: detected capacity change from 0 to 8192 [ 250.500568][ T4676] loop0: detected capacity change from 0 to 512 [ 250.507550][ T4676] EXT4-fs: Ignoring removed i_version option [ 252.131492][ T4678] syz.3.1493: attempt to access beyond end of device [ 252.131492][ T4678] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 252.145404][ T4678] Buffer I/O error on dev loop3, logical block 57847, async page read [ 252.160307][ T4678] syz.3.1493: attempt to access beyond end of device [ 252.160307][ T4678] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 252.174208][ T4678] Buffer I/O error on dev loop3, logical block 57847, async page read [ 252.182824][ T4678] syz.3.1493: attempt to access beyond end of device [ 252.182824][ T4678] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 252.196543][ T4678] Buffer I/O error on dev loop3, logical block 57847, async page read [ 252.217155][ T4678] syz.3.1493: attempt to access beyond end of device [ 252.217155][ T4678] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 252.230829][ T4678] Buffer I/O error on dev loop3, logical block 57847, async page read [ 252.375888][ T4676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.425520][ T28] audit: type=1326 audit(1885022245.691:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.730194][ T28] audit: type=1326 audit(1885022245.691:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.814003][ T28] audit: type=1326 audit(1885022245.691:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.888512][ T28] audit: type=1326 audit(1885022245.691:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.919524][ T28] audit: type=1326 audit(1885022245.691:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.943290][ T28] audit: type=1326 audit(1885022245.691:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 252.974128][ T282] EXT4-fs (loop0): unmounting filesystem. [ 253.033255][ T28] audit: type=1326 audit(1885022245.691:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 253.065388][ T28] audit: type=1326 audit(1885022245.691:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 253.103881][ T4693] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1502'. [ 253.136664][ T4696] loop2: detected capacity change from 0 to 1024 [ 253.157278][ T4696] EXT4-fs: Ignoring removed i_version option [ 253.173993][ T4696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 253.230625][ T4696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.254873][ T2372] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.048242][ T283] EXT4-fs (loop2): unmounting filesystem. [ 254.367542][ T4714] loop3: detected capacity change from 0 to 40427 [ 254.379664][ T4714] F2FS-fs (loop3): quotafile must be on filesystem root [ 255.293126][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 255.299453][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.456410][ T4742] loop2: detected capacity change from 0 to 1024 [ 255.483792][ T4742] EXT4-fs: Ignoring removed i_version option [ 255.513878][ T4742] EXT4-fs (loop2): Test dummy encryption mode enabled [ 255.525248][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.297751][ T283] EXT4-fs (loop2): unmounting filesystem. [ 256.437844][ T4775] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1527'. [ 256.452613][ T4055] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.735779][ T4791] loop3: detected capacity change from 0 to 1024 [ 256.774009][ T4791] EXT4-fs: Ignoring removed i_version option [ 256.787852][ T4791] EXT4-fs (loop3): Test dummy encryption mode enabled [ 256.811490][ T4791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.590428][ T286] EXT4-fs (loop3): unmounting filesystem. [ 258.045265][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 258.233108][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 258.239878][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.252601][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.264054][ T6] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 258.274758][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.284969][ T6] usb 1-1: config 0 descriptor?? [ 258.493260][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 258.499465][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.705674][ T4830] loop2: detected capacity change from 0 to 1024 [ 258.741952][ T4830] EXT4-fs: Ignoring removed i_version option [ 258.782652][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 258.789071][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 258.796953][ T4830] EXT4-fs (loop2): Test dummy encryption mode enabled [ 258.922171][ T4838] loop3: detected capacity change from 0 to 512 [ 258.932208][ T4838] EXT4-fs: Ignoring removed i_version option [ 259.105573][ T4838] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.175165][ T28] audit: type=1326 audit(1885022252.431:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 259.326421][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.435354][ T28] audit: type=1326 audit(1885022252.431:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 259.837506][ T286] EXT4-fs (loop3): unmounting filesystem. [ 259.922854][ T28] audit: type=1326 audit(1885022252.441:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.013605][ T6] usb 1-1: USB disconnect, device number 6 [ 260.021359][ T28] audit: type=1326 audit(1885022252.441:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.045852][ T28] audit: type=1326 audit(1885022252.441:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.113398][ T28] audit: type=1326 audit(1885022252.441:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.146517][ T283] EXT4-fs (loop2): unmounting filesystem. [ 260.255095][ T28] audit: type=1326 audit(1885022252.441:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.280305][ T28] audit: type=1326 audit(1885022252.441:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ff8e929 code=0x7ffc0000 [ 260.387473][ T2372] Bluetooth: hci0: Frame reassembly failed (-84) [ 261.547974][ T4876] loop3: detected capacity change from 0 to 40427 [ 261.563901][ T4876] F2FS-fs (loop3): Image doesn't support compression [ 261.570908][ T4876] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 262.432333][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.438791][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 263.170681][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.490542][ T4928] loop2: detected capacity change from 0 to 40427 [ 263.523172][ T4928] F2FS-fs (loop2): Image doesn't support compression [ 263.542447][ T4928] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 264.618246][ T28] audit: type=1326 audit(1885022257.891:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.4.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bee18e929 code=0x0 [ 265.213202][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 265.219650][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.395973][ T4988] loop2: detected capacity change from 0 to 8192 [ 265.722690][ T4997] syz.2.1604: attempt to access beyond end of device [ 265.722690][ T4997] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 265.736393][ T4997] Buffer I/O error on dev loop2, logical block 57847, async page read [ 265.747607][ T4997] syz.2.1604: attempt to access beyond end of device [ 265.747607][ T4997] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 265.761374][ T4997] Buffer I/O error on dev loop2, logical block 57847, async page read [ 265.770006][ T4997] syz.2.1604: attempt to access beyond end of device [ 265.770006][ T4997] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 265.783608][ T4997] Buffer I/O error on dev loop2, logical block 57847, async page read [ 265.796530][ T4997] syz.2.1604: attempt to access beyond end of device [ 265.796530][ T4997] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 265.810313][ T4997] Buffer I/O error on dev loop2, logical block 57847, async page read [ 266.970506][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.606626][ T5028] loop3: detected capacity change from 0 to 256 [ 268.973094][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 268.979284][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.946249][ T5106] loop4: detected capacity change from 0 to 256 [ 270.363200][ T674] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 270.563114][ T674] usb 5-1: Using ep0 maxpacket: 16 [ 270.569901][ T674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.582002][ T674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.584430][ T28] audit: type=1326 audit(1885022263.861:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.3.1655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6ff8e929 code=0x0 [ 270.593159][ T674] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 270.624396][ T674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.634045][ T674] usb 5-1: config 0 descriptor?? [ 271.045453][ T674] usbhid 5-1:0.0: can't add hid device: -71 [ 271.045526][ T674] usbhid: probe of 5-1:0.0 failed with error -71 [ 271.048178][ T674] usb 5-1: USB disconnect, device number 6 [ 272.051302][ T5154] loop4: detected capacity change from 0 to 40427 [ 272.063248][ T5154] F2FS-fs (loop4): quotafile must be on filesystem root [ 272.436483][ T28] audit: type=1326 audit(1885022265.711:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.3.1675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6ff8e929 code=0x0 [ 272.953132][ T672] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 273.143272][ T672] usb 5-1: Using ep0 maxpacket: 16 [ 273.144615][ T672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.144653][ T672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.144687][ T672] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 273.144715][ T672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.145578][ T672] usb 5-1: config 0 descriptor?? [ 273.555126][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.555161][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.555185][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.555210][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.555234][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.555254][ T672] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 273.629330][ T672] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 273.629362][ T672] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 273.760570][ T672] usb 5-1: USB disconnect, device number 7 [ 274.141899][ T5204] loop2: detected capacity change from 0 to 40427 [ 274.154740][ T5204] F2FS-fs (loop2): quotafile must be on filesystem root [ 274.870565][ T28] audit: type=1326 audit(1885022268.141:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5217 comm="syz.2.1691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47af8e929 code=0x0 [ 275.082127][ T5225] loop1: detected capacity change from 0 to 40427 [ 275.091754][ T5225] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 275.098738][ T5225] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 275.108434][ T5225] F2FS-fs (loop1): invalid crc value [ 275.163863][ T5233] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1697'. [ 275.173994][ T5225] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 275.304985][ T5225] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 275.312489][ T5225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 276.872416][ T5251] loop4: detected capacity change from 0 to 40427 [ 276.883503][ T5251] F2FS-fs (loop4): quotafile must be on filesystem root [ 276.891238][ T284] syz-executor: attempt to access beyond end of device [ 276.891238][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.355574][ T5261] loop3: detected capacity change from 0 to 40427 [ 277.371564][ T5261] F2FS-fs (loop3): Image doesn't support compression [ 277.392325][ T5261] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 277.570261][ T28] audit: type=1326 audit(1885022270.841:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.0.1713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eef58e929 code=0x0 [ 277.974506][ T5286] loop2: detected capacity change from 0 to 256 [ 278.939412][ T5296] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1720'. [ 279.002786][ T5294] loop2: detected capacity change from 0 to 40427 [ 279.011299][ T5294] F2FS-fs (loop2): quotafile must be on filesystem root [ 279.197736][ T28] audit: type=1400 audit(1885022272.471:610): avc: denied { write } for pid=5309 comm="syz.1.1724" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.240747][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 279.291526][ T5315] process 'syz.1.1724' launched './file0' with NULL argv: empty string added [ 279.323646][ T28] audit: type=1400 audit(1885022272.601:611): avc: denied { execute } for pid=5309 comm="syz.1.1724" name="file0" dev="tmpfs" ino=1985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 280.148981][ T28] audit: type=1326 audit(1885022273.421:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.176221][ T28] audit: type=1326 audit(1885022273.451:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.213840][ T28] audit: type=1326 audit(1885022273.481:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.263355][ T28] audit: type=1326 audit(1885022273.481:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.393726][ T28] audit: type=1326 audit(1885022273.481:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.442814][ T28] audit: type=1326 audit(1885022273.481:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.537456][ T5353] loop1: detected capacity change from 0 to 256 [ 280.570365][ T28] audit: type=1326 audit(1885022273.481:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 280.790215][ T5365] loop1: detected capacity change from 0 to 256 [ 280.844391][ T358] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.854376][ T5365] xt_hashlimit: max too large, truncated to 1048576 [ 280.867168][ T5365] loop1: detected capacity change from 0 to 512 [ 280.867244][ T358] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.905602][ T5365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.914990][ T5365] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.523663][ T284] EXT4-fs (loop1): unmounting filesystem. [ 282.199530][ T5392] loop3: detected capacity change from 0 to 256 [ 282.940979][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 282.941000][ T28] audit: type=1400 audit(1885022276.211:626): avc: denied { bind } for pid=5413 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.393236][ T28] audit: type=1400 audit(1885022276.621:627): avc: denied { listen } for pid=5413 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.397330][ T5415] loop0: detected capacity change from 0 to 40427 [ 283.423972][ T28] audit: type=1400 audit(1885022276.621:628): avc: denied { accept } for pid=5413 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.443594][ T5415] F2FS-fs (loop0): quotafile must be on filesystem root [ 283.487933][ T5424] loop4: detected capacity change from 0 to 256 [ 283.587337][ T5429] xt_hashlimit: max too large, truncated to 1048576 [ 283.996384][ T28] audit: type=1400 audit(1885022277.271:629): avc: denied { read write } for pid=5433 comm="syz.0.1771" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 284.038139][ T28] audit: type=1400 audit(1885022277.271:630): avc: denied { open } for pid=5433 comm="syz.0.1771" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 284.166852][ T28] audit: type=1400 audit(1885022277.271:631): avc: denied { ioctl } for pid=5433 comm="syz.0.1771" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 284.604109][ T5456] loop3: detected capacity change from 0 to 256 [ 284.782215][ T5468] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1785'. [ 285.153186][ T28] audit: type=1326 audit(1885022278.421:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bee18e929 code=0x7ffc0000 [ 285.185926][ T5470] loop2: detected capacity change from 0 to 40427 [ 285.193863][ T5470] F2FS-fs (loop2): quotafile must be on filesystem root [ 285.209351][ T5472] loop4: detected capacity change from 0 to 512 [ 285.211286][ T28] audit: type=1326 audit(1885022278.421:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bee18e929 code=0x7ffc0000 [ 285.259094][ T5472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0002] [ 285.273144][ T308] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.313370][ T5472] System zones: 1-12 [ 285.325699][ T28] audit: type=1326 audit(1885022278.421:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bee18e929 code=0x7ffc0000 [ 285.363740][ T5472] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1786: inode #1: comm syz.4.1786: iget: illegal inode # [ 285.383775][ T5472] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1786: error while reading EA inode 1 err=-117 [ 285.405481][ T5472] EXT4-fs (loop4): 1 orphan inode deleted [ 285.408825][ T28] audit: type=1326 audit(1885022278.421:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bee18e929 code=0x7ffc0000 [ 285.411380][ T5472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.509502][ T285] EXT4-fs (loop4): unmounting filesystem. [ 285.676026][ T5482] loop4: detected capacity change from 0 to 8192 [ 286.255578][ T5490] syz.4.1789: attempt to access beyond end of device [ 286.255578][ T5490] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 286.269356][ T5490] Buffer I/O error on dev loop4, logical block 57847, async page read [ 286.279111][ T5490] syz.4.1789: attempt to access beyond end of device [ 286.279111][ T5490] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 286.292720][ T5490] Buffer I/O error on dev loop4, logical block 57847, async page read [ 286.301241][ T5490] syz.4.1789: attempt to access beyond end of device [ 286.301241][ T5490] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 286.314843][ T5490] Buffer I/O error on dev loop4, logical block 57847, async page read [ 286.327678][ T5490] syz.4.1789: attempt to access beyond end of device [ 286.327678][ T5490] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 286.341676][ T5490] Buffer I/O error on dev loop4, logical block 57847, async page read [ 287.564773][ T5497] loop2: detected capacity change from 0 to 256 [ 287.749128][ T5506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1797'. [ 288.234710][ T5511] loop3: detected capacity change from 0 to 40427 [ 288.273843][ T5511] F2FS-fs (loop3): quotafile must be on filesystem root [ 288.762215][ T5524] syz.4.1799[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.762402][ T5524] syz.4.1799[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.776586][ T5524] loop4: detected capacity change from 0 to 256 [ 288.840618][ T5524] FAT-fs (loop4): Directory bread(block 64) failed [ 288.847516][ T5524] FAT-fs (loop4): Directory bread(block 65) failed [ 288.854389][ T5524] FAT-fs (loop4): Directory bread(block 66) failed [ 288.861107][ T5524] FAT-fs (loop4): Directory bread(block 67) failed [ 288.868105][ T5524] FAT-fs (loop4): Directory bread(block 68) failed [ 288.874801][ T5524] FAT-fs (loop4): Directory bread(block 69) failed [ 288.881771][ T5524] FAT-fs (loop4): Directory bread(block 70) failed [ 288.888510][ T5524] FAT-fs (loop4): Directory bread(block 71) failed [ 288.895500][ T5524] FAT-fs (loop4): Directory bread(block 72) failed [ 288.902247][ T5524] FAT-fs (loop4): Directory bread(block 73) failed [ 289.782101][ T5549] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1813'. [ 289.950703][ T5556] loop1: detected capacity change from 0 to 1024 [ 290.330843][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 290.360859][ T5556] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.1816: Allocating blocks 385-513 which overlap fs metadata [ 290.399432][ T5557] loop0: detected capacity change from 0 to 40427 [ 290.417329][ T5557] F2FS-fs (loop0): quotafile must be on filesystem root [ 290.491968][ T5564] device veth0 entered promiscuous mode [ 290.534170][ T5555] EXT4-fs (loop1): pa ffff88810c865540: logic 16, phys. 129, len 24 [ 290.542498][ T5555] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 291.220051][ T284] EXT4-fs (loop1): unmounting filesystem. [ 291.376782][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 291.376802][ T28] audit: type=1400 audit(1885022284.651:657): avc: denied { accept } for pid=5563 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.443881][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 291.631905][ T28] audit: type=1400 audit(1885022284.901:658): avc: denied { ioctl } for pid=5581 comm="syz.0.1826" path="socket:[32750]" dev="sockfs" ino=32750 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.661873][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 291.839548][ T28] audit: type=1400 audit(1885022285.111:659): avc: denied { setopt } for pid=5581 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.674718][ T5617] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1837'. [ 294.886848][ T5651] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1851'. [ 296.994905][ T5683] loop4: detected capacity change from 0 to 8192 [ 296.996043][ T5690] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1865'. [ 297.637713][ T5701] syz.4.1862: attempt to access beyond end of device [ 297.637713][ T5701] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 297.651584][ T5701] Buffer I/O error on dev loop4, logical block 57847, async page read [ 297.662925][ T5701] syz.4.1862: attempt to access beyond end of device [ 297.662925][ T5701] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 297.677415][ T5701] Buffer I/O error on dev loop4, logical block 57847, async page read [ 297.686567][ T5701] syz.4.1862: attempt to access beyond end of device [ 297.686567][ T5701] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 297.700602][ T5701] Buffer I/O error on dev loop4, logical block 57847, async page read [ 298.680599][ T5701] syz.4.1862: attempt to access beyond end of device [ 298.680599][ T5701] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 298.694365][ T5701] Buffer I/O error on dev loop4, logical block 57847, async page read [ 298.875533][ T5705] loop0: detected capacity change from 0 to 1024 [ 298.984153][ T5705] EXT4-fs: Ignoring removed nobh option [ 299.014114][ T5705] EXT4-fs: Ignoring removed bh option [ 299.052974][ T5705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.255221][ T282] EXT4-fs (loop0): unmounting filesystem. [ 301.379907][ T5749] loop1: detected capacity change from 0 to 1024 [ 301.381195][ T5741] loop2: detected capacity change from 0 to 8192 [ 301.439923][ T5749] EXT4-fs: Ignoring removed nobh option [ 301.459561][ T5749] EXT4-fs: Ignoring removed bh option [ 301.673148][ T5754] syz.2.1882: attempt to access beyond end of device [ 301.673148][ T5754] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 301.687226][ T5754] Buffer I/O error on dev loop2, logical block 57847, async page read [ 301.696776][ T5754] syz.2.1882: attempt to access beyond end of device [ 301.696776][ T5754] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 301.710703][ T5754] Buffer I/O error on dev loop2, logical block 57847, async page read [ 301.719571][ T5754] syz.2.1882: attempt to access beyond end of device [ 301.719571][ T5754] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 301.733417][ T5754] Buffer I/O error on dev loop2, logical block 57847, async page read [ 301.746452][ T5754] syz.2.1882: attempt to access beyond end of device [ 301.746452][ T5754] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 301.760114][ T5754] Buffer I/O error on dev loop2, logical block 57847, async page read [ 301.786881][ T5749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.292055][ T28] audit: type=1400 audit(1885022295.561:660): avc: denied { mounton } for pid=5748 comm="syz.1.1885" path="/399/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 302.411231][ T5760] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 302.689911][ T284] EXT4-fs (loop1): unmounting filesystem. [ 302.747752][ T28] audit: type=1400 audit(1885022295.921:661): avc: denied { map } for pid=5748 comm="syz.1.1885" path="/399/file1/bus" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.775497][ T28] audit: type=1400 audit(1885022295.961:662): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 302.795746][ T28] audit: type=1400 audit(1885022295.961:663): avc: denied { unlink } for pid=284 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 302.818033][ T28] audit: type=1326 audit(1885022296.061:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.1889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6ff8e929 code=0x0 [ 302.955540][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 304.891647][ T5801] loop2: detected capacity change from 0 to 128 [ 304.898806][ T5797] loop4: detected capacity change from 0 to 8192 [ 306.787287][ T5816] syz.4.1900: attempt to access beyond end of device [ 306.787287][ T5816] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 306.801004][ T5816] Buffer I/O error on dev loop4, logical block 57847, async page read [ 307.201117][ T28] audit: type=1400 audit(1885022300.471:665): avc: denied { read } for pid=5800 comm="syz.2.1902" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 307.224981][ T28] audit: type=1400 audit(1885022300.501:666): avc: denied { open } for pid=5800 comm="syz.2.1902" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 307.248924][ T28] audit: type=1326 audit(1885022300.501:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.272646][ T28] audit: type=1326 audit(1885022300.501:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.297122][ T5808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1902'. [ 307.423506][ T28] audit: type=1326 audit(1885022300.501:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.487028][ T28] audit: type=1326 audit(1885022300.501:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.519963][ T28] audit: type=1326 audit(1885022300.501:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.548391][ T28] audit: type=1326 audit(1885022300.611:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.573469][ T28] audit: type=1326 audit(1885022300.611:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.598979][ T28] audit: type=1326 audit(1885022300.611:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.624924][ T28] audit: type=1326 audit(1885022300.611:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.650325][ T28] audit: type=1326 audit(1885022300.621:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e578d290 code=0x7ffc0000 [ 307.687980][ T28] audit: type=1326 audit(1885022300.631:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff7e5790157 code=0x7ffc0000 [ 307.726903][ T28] audit: type=1326 audit(1885022300.631:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 307.805163][ T5828] loop3: detected capacity change from 0 to 40427 [ 307.819320][ T5828] F2FS-fs (loop3): Image doesn't support compression [ 307.827613][ T5828] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 308.117211][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'. [ 308.305955][ T5852] loop1: detected capacity change from 0 to 8192 [ 309.476259][ T5858] syz.1.1920: attempt to access beyond end of device [ 309.476259][ T5858] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 309.489940][ T5858] Buffer I/O error on dev loop1, logical block 57847, async page read [ 309.501162][ T5858] syz.1.1920: attempt to access beyond end of device [ 309.501162][ T5858] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 309.514818][ T5858] Buffer I/O error on dev loop1, logical block 57847, async page read [ 309.523519][ T5858] syz.1.1920: attempt to access beyond end of device [ 309.523519][ T5858] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 309.537216][ T5858] Buffer I/O error on dev loop1, logical block 57847, async page read [ 309.551912][ T5858] syz.1.1920: attempt to access beyond end of device [ 309.551912][ T5858] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 309.565578][ T5858] Buffer I/O error on dev loop1, logical block 57847, async page read [ 310.623135][ T836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.833278][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 310.846733][ T836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 310.860809][ T836] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.876346][ T836] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 310.890336][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.897485][ T836] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 310.906937][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.916098][ T836] usb 5-1: config 0 descriptor?? [ 311.196458][ T5906] loop2: detected capacity change from 0 to 256 [ 311.287815][ T5914] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1945'. [ 311.301336][ T5908] loop0: detected capacity change from 0 to 8192 [ 311.430478][ T836] zeroplus 0003:0C12:0030.000D: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 311.521210][ T836] zeroplus 0003:0C12:0030.000D: no inputs found [ 311.578171][ T5925] syz.0.1942: attempt to access beyond end of device [ 311.578171][ T5925] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 311.591806][ T5925] Buffer I/O error on dev loop0, logical block 57847, async page read [ 311.602552][ T5925] syz.0.1942: attempt to access beyond end of device [ 311.602552][ T5925] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 311.616506][ T5925] Buffer I/O error on dev loop0, logical block 57847, async page read [ 311.625142][ T5925] syz.0.1942: attempt to access beyond end of device [ 311.625142][ T5925] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 311.638738][ T5925] Buffer I/O error on dev loop0, logical block 57847, async page read [ 311.651773][ T5925] syz.0.1942: attempt to access beyond end of device [ 311.651773][ T5925] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 311.665715][ T5925] Buffer I/O error on dev loop0, logical block 57847, async page read [ 312.664071][ T836] usb 5-1: USB disconnect, device number 8 [ 312.742224][ T5930] loop2: detected capacity change from 0 to 8192 [ 312.756692][ T5928] fido_id[5928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 312.841244][ T5937] loop0: detected capacity change from 0 to 256 [ 313.159328][ T5952] syz.2.1950: attempt to access beyond end of device [ 313.159328][ T5952] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.202798][ T5952] Buffer I/O error on dev loop2, logical block 57847, async page read [ 313.246653][ T5952] syz.2.1950: attempt to access beyond end of device [ 313.246653][ T5952] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.317542][ T5952] Buffer I/O error on dev loop2, logical block 57847, async page read [ 313.327040][ T5958] loop4: detected capacity change from 0 to 1024 [ 313.351633][ T5958] EXT4-fs: Ignoring removed nobh option [ 313.362755][ T5952] syz.2.1950: attempt to access beyond end of device [ 313.362755][ T5952] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.362945][ T5958] EXT4-fs: Ignoring removed bh option [ 313.394675][ T5952] Buffer I/O error on dev loop2, logical block 57847, async page read [ 313.420948][ T5952] syz.2.1950: attempt to access beyond end of device [ 313.420948][ T5952] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.449027][ T5958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 313.458611][ T5952] Buffer I/O error on dev loop2, logical block 57847, async page read [ 313.507736][ T285] EXT4-fs (loop4): unmounting filesystem. [ 313.675020][ T5963] loop4: detected capacity change from 0 to 8192 [ 314.020209][ T5969] syz.4.1962: attempt to access beyond end of device [ 314.020209][ T5969] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 314.033987][ T5969] Buffer I/O error on dev loop4, logical block 57847, async page read [ 314.044948][ T5969] syz.4.1962: attempt to access beyond end of device [ 314.044948][ T5969] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 314.058897][ T5969] Buffer I/O error on dev loop4, logical block 57847, async page read [ 314.069180][ T5969] syz.4.1962: attempt to access beyond end of device [ 314.069180][ T5969] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 314.082803][ T5969] Buffer I/O error on dev loop4, logical block 57847, async page read [ 314.103110][ T5969] syz.4.1962: attempt to access beyond end of device [ 314.103110][ T5969] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 314.116802][ T5969] Buffer I/O error on dev loop4, logical block 57847, async page read [ 314.171331][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 314.171366][ T28] audit: type=1326 audit(1885022307.441:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.1.1963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7e578e929 code=0x0 [ 316.828535][ T6022] loop1: detected capacity change from 0 to 256 [ 316.983802][ T6008] loop4: detected capacity change from 0 to 40427 [ 316.998722][ T6008] F2FS-fs (loop4): Image doesn't support compression [ 317.015727][ T6008] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 318.208083][ T28] audit: type=1326 audit(1885022311.481:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 318.239895][ T6041] syz.0.1990 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 318.293283][ T28] audit: type=1326 audit(1885022311.511:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 318.348248][ T28] audit: type=1326 audit(1885022311.511:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 318.392496][ T28] audit: type=1326 audit(1885022311.551:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 318.673602][ T6055] loop2: detected capacity change from 0 to 512 [ 318.681145][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 318.817684][ T6055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 318.870586][ T6055] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.997179][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.997242][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 319.379247][ T6067] 9pnet_fd: Insufficient options for proto=fd [ 320.355948][ T3373] Bluetooth: hci0: Frame reassembly failed (-84) [ 320.476155][ T283] EXT4-fs (loop2): unmounting filesystem. [ 320.574124][ T6099] syz.3.2008[6099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.574235][ T6099] syz.3.2008[6099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.589965][ T6099] loop3: detected capacity change from 0 to 256 [ 320.623760][ T6099] FAT-fs (loop3): Directory bread(block 64) failed [ 320.630609][ T6099] FAT-fs (loop3): Directory bread(block 65) failed [ 320.637780][ T6099] FAT-fs (loop3): Directory bread(block 66) failed [ 321.543257][ T6099] FAT-fs (loop3): Directory bread(block 67) failed [ 321.549992][ T6099] FAT-fs (loop3): Directory bread(block 68) failed [ 321.556603][ T6099] FAT-fs (loop3): Directory bread(block 69) failed [ 321.563276][ T6099] FAT-fs (loop3): Directory bread(block 70) failed [ 321.569950][ T6099] FAT-fs (loop3): Directory bread(block 71) failed [ 321.576573][ T6099] FAT-fs (loop3): Directory bread(block 72) failed [ 321.583401][ T6099] FAT-fs (loop3): Directory bread(block 73) failed [ 322.108263][ T28] audit: type=1326 audit(1885022315.381:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 322.336852][ T28] audit: type=1326 audit(1885022315.411:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e5790847 code=0x7ffc0000 [ 322.361344][ T28] audit: type=1326 audit(1885022315.421:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff7e57907bc code=0x7ffc0000 [ 322.386043][ T28] audit: type=1326 audit(1885022315.431:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7e57906f4 code=0x7ffc0000 [ 322.410046][ T28] audit: type=1326 audit(1885022315.431:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7e57906f4 code=0x7ffc0000 [ 322.434909][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 322.441168][ T6059] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 322.463108][ T28] audit: type=1326 audit(1885022315.431:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7e578d58a code=0x7ffc0000 [ 322.487412][ T28] audit: type=1326 audit(1885022315.441:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 322.538645][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 323.946709][ T6162] incfs: Options parsing error. -22 [ 323.966595][ T6162] incfs: mount failed -22 [ 324.035622][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 324.616842][ T28] audit: type=1400 audit(1885022317.891:698): avc: denied { create } for pid=6182 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 325.477875][ T6201] loop0: detected capacity change from 0 to 256 [ 325.581486][ T6209] loop1: detected capacity change from 0 to 8192 [ 326.065269][ T6228] syz.1.2043: attempt to access beyond end of device [ 326.065269][ T6228] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 326.109479][ T6228] Buffer I/O error on dev loop1, logical block 57847, async page read [ 326.144987][ T6228] syz.1.2043: attempt to access beyond end of device [ 326.144987][ T6228] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 326.179061][ T6228] Buffer I/O error on dev loop1, logical block 57847, async page read [ 326.208292][ T6228] syz.1.2043: attempt to access beyond end of device [ 326.208292][ T6228] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 326.229164][ T6228] Buffer I/O error on dev loop1, logical block 57847, async page read [ 326.282353][ T6228] syz.1.2043: attempt to access beyond end of device [ 326.282353][ T6228] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 326.329500][ T6228] Buffer I/O error on dev loop1, logical block 57847, async page read [ 326.394779][ T6240] loop0: detected capacity change from 0 to 128 [ 326.790847][ T6278] loop2: detected capacity change from 0 to 128 [ 326.940137][ T6278] device syzkaller0 entered promiscuous mode [ 326.972858][ T6278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2074'. [ 327.743626][ T28] audit: type=1326 audit(1885022321.021:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.772478][ T6321] loop3: detected capacity change from 0 to 128 [ 327.782193][ T28] audit: type=1326 audit(1885022321.051:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.807979][ T28] audit: type=1326 audit(1885022321.051:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.847892][ T28] audit: type=1326 audit(1885022321.051:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.872707][ T28] audit: type=1326 audit(1885022321.051:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.896796][ T28] audit: type=1326 audit(1885022321.081:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.925171][ T28] audit: type=1326 audit(1885022321.081:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.960399][ T28] audit: type=1326 audit(1885022321.081:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.984568][ T28] audit: type=1326 audit(1885022321.081:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 327.988595][ T6321] device syzkaller0 entered promiscuous mode [ 328.010184][ T28] audit: type=1326 audit(1885022321.081:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47af8e929 code=0x7ffc0000 [ 328.044281][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 328.136181][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2093'. [ 328.174006][ T6335] loop0: detected capacity change from 0 to 256 [ 328.966589][ T6351] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2106'. [ 329.585259][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.813069][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 329.819917][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 329.841109][ T24] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.862030][ T24] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 329.973648][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.079868][ T24] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 330.142217][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.196564][ T24] usb 1-1: config 0 descriptor?? [ 330.222420][ T6379] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2118'. [ 330.503149][ T674] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 330.611826][ T24] zeroplus 0003:0C12:0030.000E: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.0-1/input0 [ 330.624310][ T24] zeroplus 0003:0C12:0030.000E: no inputs found [ 330.704936][ T674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.734633][ T674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.750105][ T674] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 330.766232][ T674] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 330.776845][ T674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.809069][ T674] usb 5-1: config 0 descriptor?? [ 330.815540][ T323] usb 1-1: USB disconnect, device number 7 [ 331.223965][ T674] wacom 0003:056A:0003.000F: unknown main item tag 0x6 [ 331.232234][ T674] wacom 0003:056A:0003.000F: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 331.244764][ T674] wacom 0003:056A:0003.000F: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 331.374408][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.387429][ T674] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.000F/input/input44 [ 333.003237][ T6407] loop1: detected capacity change from 0 to 1024 [ 333.004843][ T6408] loop3: detected capacity change from 0 to 256 [ 333.010473][ T6407] EXT4-fs: Ignoring removed nobh option [ 333.022178][ T6407] EXT4-fs: Ignoring removed bh option [ 333.093737][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 333.103658][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.114830][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.125301][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 333.134624][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.144374][ T24] usb 3-1: config 0 descriptor?? [ 333.153691][ T284] EXT4-fs (loop1): unmounting filesystem. [ 333.301994][ T6420] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2129'. [ 333.502424][ T288] usb 5-1: USB disconnect, device number 9 [ 333.803220][ T24] cp2112 0003:10C4:EA90.0010: item fetching failed at offset 5/7 [ 333.815526][ T24] cp2112 0003:10C4:EA90.0010: parse failed [ 333.822292][ T24] cp2112: probe of 0003:10C4:EA90.0010 failed with error -22 [ 334.005864][ T24] usb 3-1: USB disconnect, device number 6 [ 334.855764][ T6432] loop3: detected capacity change from 0 to 512 [ 335.063957][ T6432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.073249][ T6432] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.084552][ T6432] EXT4-fs (loop3): unmounting filesystem. [ 335.174194][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 335.174212][ T28] audit: type=1400 audit(1885022328.451:720): avc: denied { block_suspend } for pid=6429 comm="syz.3.2134" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.308443][ T6444] loop1: detected capacity change from 0 to 256 [ 335.354507][ T6444] FAT-fs (loop1): Unrecognized mount option "uni_xla˙˙˙" or missing value [ 335.471867][ T6450] loop4: detected capacity change from 0 to 1024 [ 335.478446][ T6448] loop2: detected capacity change from 0 to 8192 [ 335.506465][ T6450] EXT4-fs: Ignoring removed nobh option [ 335.523883][ T6450] EXT4-fs: Ignoring removed bh option [ 335.570061][ T6450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.617091][ T285] EXT4-fs (loop4): unmounting filesystem. [ 335.675733][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 335.693615][ T6464] loop3: detected capacity change from 0 to 1024 [ 335.728062][ T6464] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 335.747404][ T6464] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2145: couldn't read orphan inode 11 (err -117) [ 335.760412][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.772551][ T28] audit: type=1400 audit(1885022329.051:721): avc: denied { name_bind } for pid=6453 comm="syz.0.2141" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 336.115282][ T6469] syz.2.2139: attempt to access beyond end of device [ 336.115282][ T6469] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 336.154733][ T6469] Buffer I/O error on dev loop2, logical block 57847, async page read [ 336.177164][ T6469] syz.2.2139: attempt to access beyond end of device [ 336.177164][ T6469] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 336.211541][ T6469] Buffer I/O error on dev loop2, logical block 57847, async page read [ 336.243131][ T6469] syz.2.2139: attempt to access beyond end of device [ 336.243131][ T6469] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 336.268682][ T6469] Buffer I/O error on dev loop2, logical block 57847, async page read [ 336.322825][ T6469] syz.2.2139: attempt to access beyond end of device [ 336.322825][ T6469] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 336.360497][ T6469] Buffer I/O error on dev loop2, logical block 57847, async page read [ 336.527551][ T6479] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2151'. [ 336.538710][ T28] audit: type=1326 audit(1885022329.811:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.608227][ T28] audit: type=1326 audit(1885022329.841:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.647867][ T286] EXT4-fs (loop3): unmounting filesystem. [ 336.649581][ T6487] loop4: detected capacity change from 0 to 1024 [ 336.654808][ T28] audit: type=1326 audit(1885022329.841:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.671373][ T6487] EXT4-fs: Ignoring removed nobh option [ 336.690778][ T28] audit: type=1326 audit(1885022329.841:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.726750][ T6487] EXT4-fs: Ignoring removed bh option [ 336.730598][ T28] audit: type=1326 audit(1885022329.841:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.765198][ T28] audit: type=1326 audit(1885022329.841:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.783653][ T6485] overlayfs: failed to resolve './file1': -2 [ 336.821876][ T28] audit: type=1326 audit(1885022329.841:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58e929 code=0x7ffc0000 [ 336.847358][ T28] audit: type=1400 audit(1885022330.041:729): avc: denied { mount } for pid=6484 comm="syz.0.2153" name="/" dev="ramfs" ino=35688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 336.874472][ T6487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 336.994181][ T285] EXT4-fs (loop4): unmounting filesystem. [ 337.034198][ T6504] xt_hashlimit: size too large, truncated to 1048576 [ 337.127749][ T6506] capability: warning: `syz.3.2162' uses 32-bit capabilities (legacy support in use) [ 337.145972][ T6506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2162'. [ 337.303189][ T6059] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.303227][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 337.871653][ T6529] loop2: detected capacity change from 0 to 1024 [ 337.946405][ T6529] EXT4-fs: Ignoring removed nobh option [ 337.958214][ T6529] EXT4-fs: Ignoring removed bh option [ 338.122361][ T6551] loop4: detected capacity change from 0 to 8192 [ 338.156262][ T6529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 338.188533][ T283] EXT4-fs (loop2): unmounting filesystem. [ 338.728651][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 338.788887][ T6575] syz.4.2180: attempt to access beyond end of device [ 338.788887][ T6575] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 338.807193][ T6575] Buffer I/O error on dev loop4, logical block 57847, async page read [ 338.820109][ T6575] syz.4.2180: attempt to access beyond end of device [ 338.820109][ T6575] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 339.126609][ T6575] Buffer I/O error on dev loop4, logical block 57847, async page read [ 340.232902][ T6575] syz.4.2180: attempt to access beyond end of device [ 340.232902][ T6575] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 340.444712][ T6586] loop2: detected capacity change from 0 to 1024 [ 340.452364][ T6575] Buffer I/O error on dev loop4, logical block 57847, async page read [ 340.469300][ T6586] EXT4-fs: Ignoring removed nobh option [ 340.481429][ T6586] EXT4-fs: Ignoring removed bh option [ 340.492407][ T6575] syz.4.2180: attempt to access beyond end of device [ 340.492407][ T6575] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 340.517894][ T6586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 340.545635][ T6575] Buffer I/O error on dev loop4, logical block 57847, async page read [ 340.597139][ T283] EXT4-fs (loop2): unmounting filesystem. [ 341.783354][ T6642] loop1: detected capacity change from 0 to 1024 [ 341.884044][ T6642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 341.930401][ T6650] loop2: detected capacity change from 0 to 8192 [ 343.531270][ T284] EXT4-fs (loop1): unmounting filesystem. [ 343.710754][ T6697] syz.2.2219: attempt to access beyond end of device [ 343.710754][ T6697] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 343.724851][ T6697] Buffer I/O error on dev loop2, logical block 57847, async page read [ 343.733501][ T6697] syz.2.2219: attempt to access beyond end of device [ 343.733501][ T6697] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 343.753168][ T836] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 343.776293][ T6694] netlink: 'syz.0.2232': attribute type 4 has an invalid length. [ 343.837872][ T6697] Buffer I/O error on dev loop2, logical block 57847, async page read [ 343.933250][ T836] usb 4-1: Using ep0 maxpacket: 16 [ 343.941271][ T836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.078728][ T6697] syz.2.2219: attempt to access beyond end of device [ 344.078728][ T6697] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 344.092446][ T836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.102379][ T6697] Buffer I/O error on dev loop2, logical block 57847, async page read [ 344.113110][ T836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.126359][ T836] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.135813][ T836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.136071][ T6697] syz.2.2219: attempt to access beyond end of device [ 344.136071][ T6697] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 344.148783][ T836] usb 4-1: config 0 descriptor?? [ 344.182099][ T6697] Buffer I/O error on dev loop2, logical block 57847, async page read [ 344.239278][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 344.239296][ T28] audit: type=1326 audit(1885022337.511:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.2241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bee18e929 code=0x0 [ 344.577436][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 344.587933][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.605328][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.621996][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.638745][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.654896][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.669891][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.685327][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.701783][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.716988][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.733099][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.808122][ T836] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 344.818388][ T836] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 344.826731][ T836] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 344.838246][ T836] microsoft 0003:045E:07DA.0011: no inputs found [ 344.845686][ T836] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 344.866703][ T836] usb 4-1: USB disconnect, device number 10 [ 345.841898][ T6737] fido_id[6737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 345.959588][ T6745] netlink: 'syz.1.2253': attribute type 4 has an invalid length. [ 346.394738][ T28] audit: type=1400 audit(1885022339.671:764): avc: denied { relabelfrom } for pid=6755 comm="syz.0.2259" name="" dev="pipefs" ino=36620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 346.805189][ T28] audit: type=1326 audit(1885022340.081:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.3.2262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6ff8e929 code=0x0 [ 346.966597][ T6777] loop0: detected capacity change from 0 to 8192 [ 347.934881][ T28] audit: type=1400 audit(1885022341.211:766): avc: denied { bind } for pid=6782 comm="syz.3.2270" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.999419][ T28] audit: type=1400 audit(1885022341.241:767): avc: denied { node_bind } for pid=6782 comm="syz.3.2270" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 348.102873][ T6790] loop3: detected capacity change from 0 to 512 [ 348.125190][ T6790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.137785][ T6790] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2273: bad orphan inode 11 [ 348.148830][ T6790] ext4_test_bit(bit=10, block=4) = 1 [ 348.154590][ T6790] is_bad_inode(inode)=0 [ 348.158970][ T6790] NEXT_ORPHAN(inode)=2080374784 [ 348.164719][ T6790] max_ino=32 [ 348.175677][ T6790] i_nlink=0 [ 348.182301][ T6790] EXT4-fs (loop3): 1 truncate cleaned up [ 348.195097][ T6790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 348.248035][ T6794] syz.0.2268: attempt to access beyond end of device [ 348.248035][ T6794] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 348.264553][ T286] EXT4-fs (loop3): unmounting filesystem. [ 348.342237][ T6794] Buffer I/O error on dev loop0, logical block 57847, async page read [ 348.381967][ T6794] syz.0.2268: attempt to access beyond end of device [ 348.381967][ T6794] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 348.414020][ T6804] loop2: detected capacity change from 0 to 1024 [ 348.427116][ T6804] EXT4-fs: Ignoring removed nobh option [ 348.440683][ T6804] EXT4-fs: Ignoring removed bh option [ 348.454286][ T6794] Buffer I/O error on dev loop0, logical block 57847, async page read [ 348.466602][ T6794] syz.0.2268: attempt to access beyond end of device [ 348.466602][ T6794] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 348.481113][ T6794] Buffer I/O error on dev loop0, logical block 57847, async page read [ 348.512172][ T6804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 348.566127][ T283] EXT4-fs (loop2): unmounting filesystem. [ 348.685053][ T28] audit: type=1326 audit(1885022341.961:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.2.2281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47af8e929 code=0x0 [ 348.938712][ T28] audit: type=1400 audit(1885022342.211:769): avc: denied { watch } for pid=6823 comm="syz.4.2285" path="/400/control" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.095355][ T6838] loop4: detected capacity change from 0 to 1024 [ 349.110623][ T6838] EXT4-fs: Ignoring removed nobh option [ 349.117975][ T6838] EXT4-fs: Ignoring removed bh option [ 349.134967][ T6838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.303289][ T28] audit: type=1400 audit(1885022342.501:770): avc: denied { execute_no_trans } for pid=6830 comm="syz.1.2288" path="/497/file0" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 349.507514][ T285] EXT4-fs (loop4): unmounting filesystem. [ 349.519909][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6845 comm=syz.3.2293 [ 349.801769][ T28] audit: type=1326 audit(1885022343.071:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.2304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eef58e929 code=0x0 [ 349.915092][ T28] audit: type=1326 audit(1885022343.191:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.004980][ T6876] netlink: 'syz.2.2305': attribute type 4 has an invalid length. [ 350.224868][ T28] audit: type=1326 audit(1885022343.191:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.317171][ T28] audit: type=1326 audit(1885022343.191:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.364687][ T28] audit: type=1326 audit(1885022343.191:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.392376][ T28] audit: type=1326 audit(1885022343.191:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.416406][ T28] audit: type=1326 audit(1885022343.191:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.440317][ T28] audit: type=1326 audit(1885022343.251:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.467214][ T28] audit: type=1326 audit(1885022343.331:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e578e929 code=0x7ffc0000 [ 350.584045][ T3373] Bluetooth: hci0: Frame reassembly failed (-84) [ 350.947378][ T6920] syz.2.2316[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.947519][ T6920] syz.2.2316[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.993523][ T6920] loop2: detected capacity change from 0 to 256 [ 351.044052][ T6920] FAT-fs (loop2): Directory bread(block 64) failed [ 351.064073][ T6920] FAT-fs (loop2): Directory bread(block 65) failed [ 351.084094][ T6920] FAT-fs (loop2): Directory bread(block 66) failed [ 351.090931][ T6920] FAT-fs (loop2): Directory bread(block 67) failed [ 351.097817][ T6920] FAT-fs (loop2): Directory bread(block 68) failed [ 351.106378][ T6920] FAT-fs (loop2): Directory bread(block 69) failed [ 351.113226][ T6920] FAT-fs (loop2): Directory bread(block 70) failed [ 351.120048][ T6920] FAT-fs (loop2): Directory bread(block 71) failed [ 351.129054][ T6920] FAT-fs (loop2): Directory bread(block 72) failed [ 351.135875][ T6920] FAT-fs (loop2): Directory bread(block 73) failed [ 352.653126][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 352.659230][ T6059] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 352.725532][ T6944] loop1: detected capacity change from 0 to 512 [ 352.784361][ T6944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.896080][ T6954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6954 comm=syz.3.2340 [ 352.928219][ T6944] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2335: bad orphan inode 11 [ 352.953311][ T6944] ext4_test_bit(bit=10, block=4) = 1 [ 352.958674][ T6944] is_bad_inode(inode)=0 [ 352.980996][ T6944] NEXT_ORPHAN(inode)=2080374784 [ 352.993153][ T6944] max_ino=32 [ 353.000668][ T6944] i_nlink=0 [ 353.006504][ T6944] EXT4-fs (loop1): 1 truncate cleaned up [ 353.012353][ T6944] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.049136][ T284] EXT4-fs (loop1): unmounting filesystem. [ 353.097730][ T1005] Bluetooth: hci0: Frame reassembly failed (-84) [ 353.288721][ T6963] loop3: detected capacity change from 0 to 40427 [ 353.296630][ T6963] F2FS-fs (loop3): Image doesn't support compression [ 353.303676][ T6963] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 354.438654][ T6990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6990 comm=syz.0.2354 [ 354.703087][ T7006] syz.0.2357[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.703557][ T7006] syz.0.2357[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.739907][ T7006] loop0: detected capacity change from 0 to 256 [ 355.015826][ T7006] device batadv_slave_0 entered promiscuous mode [ 355.133108][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 355.139491][ T6059] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 456.152958][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 456.160190][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P358/1:b..l P6993/1:b..l [ 456.169381][ C0] (detected by 0, t=10003 jiffies, g=36325, q=89 ncpus=2) [ 456.176714][ C0] task:syz.2.2355 state:R running task stack:26272 pid:6993 ppid:283 flags:0x00004002 [ 456.187641][ C0] Call Trace: [ 456.190951][ C0] [ 456.193904][ C0] __schedule+0xb87/0x14e0 [ 456.198525][ C0] ? release_firmware_map_entry+0x194/0x194 [ 456.204459][ C0] preempt_schedule_irq+0x9b/0x110 [ 456.209594][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 456.215371][ C0] ? __stack_depot_save+0x36/0x480 [ 456.220628][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 456.226564][ C0] irqentry_exit+0x37/0x40 [ 456.231028][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 456.236724][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 456.242843][ C0] RIP: 0010:unwind_next_frame+0x31e/0x700 [ 456.249478][ C0] Code: 10 00 74 08 48 89 df e8 00 50 7f 00 48 c7 03 00 00 00 00 b0 01 e9 a2 02 00 00 4c 8d 6b 50 4d 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 12 4c 89 ef e8 e8 4e 7f 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 456.269396][ C0] RSP: 0018:ffffc90001066c88 EFLAGS: 00000246 [ 456.275510][ C0] RAX: ffffc90001067f30 RBX: ffffc90001066d08 RCX: 0000000001066d00 [ 456.283515][ C0] RDX: dffffc0000000000 RSI: ffffffff81c27592 RDI: ffffc90001067f48 [ 456.291792][ C0] RBP: ffffc90001066cf8 R08: ffffc90001066dd0 R09: ffffc90001066dc8 [ 456.300023][ C0] R10: 000000000000000b R11: 1ffff9200020cda1 R12: 0000000000000000 [ 456.308309][ C0] R13: ffffc90001066d58 R14: 1ffff9200020cdab R15: ffffc90001067838 [ 456.316514][ C0] ? dput+0x42/0x80 [ 456.320367][ C0] ? unwind_next_frame+0x3d5/0x700 [ 456.325512][ C0] ? __kernel_text_address+0xd/0x30 [ 456.330757][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 456.337172][ C0] arch_stack_walk+0x124/0x150 [ 456.342036][ C0] ? dput+0x42/0x80 [ 456.345936][ C0] stack_trace_save+0x98/0xe0 [ 456.350848][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 456.356269][ C0] ? __stack_depot_save+0x36/0x480 [ 456.361551][ C0] ? memset+0x35/0x40 [ 456.365742][ C0] save_stack+0xf3/0x1e0 [ 456.370065][ C0] ? __reset_page_owner+0x190/0x190 [ 456.375299][ C0] ? free_unref_page_prepare+0x742/0x750 [ 456.381003][ C0] ? free_unref_page_list+0xba/0x7c0 [ 456.386325][ C0] ? release_pages+0xad1/0xb20 [ 456.391152][ C0] ? __pagevec_release+0x71/0xe0 [ 456.396126][ C0] ? shmem_undo_range+0x51a/0x1470 [ 456.401266][ C0] ? shmem_evict_inode+0x242/0xa10 [ 456.406405][ C0] ? evict+0x493/0x890 [ 456.410503][ C0] ? iput+0x620/0x670 [ 456.414615][ C0] ? dentry_unlink_inode+0x33d/0x3f0 [ 456.420040][ C0] ? __dentry_kill+0x460/0x670 [ 456.424855][ C0] ? dentry_kill+0xc0/0x2a0 [ 456.429508][ C0] ? dput+0x42/0x80 [ 456.433396][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 456.439144][ C0] __reset_page_owner+0x54/0x190 [ 456.444266][ C0] free_unref_page_prepare+0x742/0x750 [ 456.449786][ C0] ? uncharge_folio+0x4c3/0x6d0 [ 456.454863][ C0] ? lru_gen_del_folio+0x1cf/0x360 [ 456.460133][ C0] free_unref_page_list+0xba/0x7c0 [ 456.465480][ C0] release_pages+0xad1/0xb20 [ 456.470117][ C0] ? find_lock_entries+0x435/0x4b0 [ 456.475264][ C0] ? __cfi_release_pages+0x10/0x10 [ 456.480409][ C0] ? filemap_remove_folio+0x356/0x450 [ 456.485932][ C0] ? __cfi_filemap_remove_folio+0x10/0x10 [ 456.491698][ C0] __pagevec_release+0x71/0xe0 [ 456.496528][ C0] shmem_undo_range+0x51a/0x1470 [ 456.501599][ C0] ? __kernel_text_address+0xd/0x30 [ 456.506833][ C0] ? shmem_truncate_range+0xc0/0xc0 [ 456.512222][ C0] shmem_evict_inode+0x242/0xa10 [ 456.517307][ C0] ? inode_wait_for_writeback+0x1b0/0x200 [ 456.523081][ C0] ? __cfi_shmem_evict_inode+0x10/0x10 [ 456.528613][ C0] ? __cfi_wake_bit_function+0x10/0x10 [ 456.534137][ C0] ? __cfi_shmem_evict_inode+0x10/0x10 [ 456.539729][ C0] evict+0x493/0x890 [ 456.543727][ C0] ? proc_nr_inodes+0x2f0/0x2f0 [ 456.548633][ C0] ? kasan_set_track+0x4b/0x70 [ 456.553641][ C0] ? kasan_save_free_info+0x31/0x50 [ 456.558879][ C0] ? ____kasan_slab_free+0x132/0x180 [ 456.564189][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 456.569857][ C0] ? kmem_cache_free+0x12d/0x300 [ 456.574846][ C0] ? exit_fs+0x123/0x150 [ 456.579136][ C0] ? do_exit+0x9ee/0x2650 [ 456.583512][ C0] ? __kasan_check_write+0x14/0x20 [ 456.588997][ C0] iput+0x620/0x670 [ 456.593054][ C0] dentry_unlink_inode+0x33d/0x3f0 [ 456.598342][ C0] __dentry_kill+0x460/0x670 [ 456.603133][ C0] dentry_kill+0xc0/0x2a0 [ 456.607527][ C0] dput+0x42/0x80 [ 456.611567][ C0] __fput+0x5be/0x8f0 [ 456.616099][ C0] ____fput+0x15/0x20 [ 456.620140][ C0] task_work_run+0x1db/0x240 [ 456.624974][ C0] ? __cfi_task_work_run+0x10/0x10 [ 456.630334][ C0] ? disassociate_ctty+0x1f2/0x8b0 [ 456.635495][ C0] ? __kasan_check_write+0x14/0x20 [ 456.640736][ C0] do_exit+0xa1d/0x2650 [ 456.644929][ C0] ? __cfi_do_exit+0x10/0x10 [ 456.649562][ C0] ? ____fput+0x15/0x20 [ 456.653754][ C0] ? __kasan_check_write+0x14/0x20 [ 456.659011][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 456.664092][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 456.669674][ C0] do_group_exit+0x210/0x2d0 [ 456.674305][ C0] ? __kasan_check_write+0x14/0x20 [ 456.679450][ C0] get_signal+0x13b5/0x1520 [ 456.684182][ C0] ? fput+0x15b/0x1a0 [ 456.688382][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 456.694160][ C0] ? __sys_recvmmsg+0x280/0x280 [ 456.699080][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 456.705278][ C0] ? __x64_sys_recvmmsg+0x18d/0x240 [ 456.710525][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 456.716131][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 456.721463][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 456.727034][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 456.732547][ C0] do_syscall_64+0x58/0xa0 [ 456.737003][ C0] ? clear_bhb_loop+0x30/0x80 [ 456.742037][ C0] ? clear_bhb_loop+0x30/0x80 [ 456.746751][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.752753][ C0] RIP: 0033:0x7fe47af8e929 [ 456.757202][ C0] RSP: 002b:00007fe47bebe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 456.765637][ C0] RAX: 0000000000010106 RBX: 00007fe47b1b6080 RCX: 00007fe47af8e929 [ 456.773634][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 456.781831][ C0] RBP: 00007fe47b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 456.789834][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 456.797829][ C0] R13: 0000000000000001 R14: 00007fe47b1b6080 R15: 00007fff55e86338 [ 456.805913][ C0] [ 456.809035][ C0] task:udevd state:R running task stack:22784 pid:358 ppid:102 flags:0x00004000 [ 456.819842][ C0] Call Trace: [ 456.823136][ C0] [ 456.826133][ C0] __schedule+0xb87/0x14e0 [ 456.830672][ C0] ? __kasan_check_write+0x14/0x20 [ 456.835819][ C0] ? release_firmware_map_entry+0x194/0x194 [ 456.841833][ C0] ? _raw_read_unlock_irqrestore+0x34/0x50 [ 456.847676][ C0] ? ep_poll_callback+0x856/0x990 [ 456.852724][ C0] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 456.858479][ C0] ? preempt_schedule+0xa7/0xb0 [ 456.863356][ C0] preempt_schedule_common+0x9b/0xf0 [ 456.868656][ C0] preempt_schedule+0xa7/0xb0 [ 456.873350][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 456.878742][ C0] ? __kasan_check_write+0x14/0x20 [ 456.883884][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 456.889376][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 456.895300][ C0] preempt_schedule_thunk+0x16/0x18 [ 456.900616][ C0] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 456.906286][ C0] __wake_up_sync_key+0x166/0x280 [ 456.911499][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 456.917099][ C0] ? __kasan_check_write+0x14/0x20 [ 456.922332][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 456.927829][ C0] sock_def_readable+0x11e/0x300 [ 456.932889][ C0] ? __kasan_check_write+0x14/0x20 [ 456.938038][ C0] ? __cfi_sock_def_readable+0x10/0x10 [ 456.943703][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 456.949628][ C0] ? skb_queue_tail+0xcb/0xf0 [ 456.954540][ C0] unix_dgram_sendmsg+0x109a/0x16d0 [ 456.959778][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 456.965546][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 456.971137][ C0] sock_write_iter+0x2ca/0x3b0 [ 456.975942][ C0] ? __cfi_sock_write_iter+0x10/0x10 [ 456.981255][ C0] ? fsnotify_perm+0x67/0x5b0 [ 456.985956][ C0] ? security_file_permission+0x8a/0xb0 [ 456.991533][ C0] vfs_write+0x5db/0xca0 [ 456.995829][ C0] ? __cfi_vfs_write+0x10/0x10 [ 457.000627][ C0] ? __kasan_check_read+0x11/0x20 [ 457.005684][ C0] ? __kasan_check_read+0x11/0x20 [ 457.010742][ C0] ? __fdget_pos+0x1f2/0x380 [ 457.015363][ C0] ksys_write+0x140/0x240 [ 457.019827][ C0] ? __cfi_ksys_write+0x10/0x10 [ 457.024716][ C0] ? debug_smp_processor_id+0x17/0x20 [ 457.030287][ C0] __x64_sys_write+0x7b/0x90 [ 457.034907][ C0] x64_sys_call+0x27b/0x9a0 [ 457.039435][ C0] do_syscall_64+0x4c/0xa0 [ 457.043875][ C0] ? clear_bhb_loop+0x30/0x80 [ 457.048680][ C0] ? clear_bhb_loop+0x30/0x80 [ 457.053406][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.059348][ C0] RIP: 0033:0x7fb4690a7407 [ 457.063786][ C0] RSP: 002b:00007ffc3c5df330 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 457.072218][ C0] RAX: ffffffffffffffda RBX: 00007fb469779880 RCX: 00007fb4690a7407 [ 457.080219][ C0] RDX: 0000000000000000 RSI: 00007ffc3c5df3d7 RDI: 000000000000000a [ 457.088228][ C0] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 457.096249][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fb4697796e8 [ 457.104271][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000055b3f28a96d0 [ 457.112278][ C0] [ 457.115322][ C0] rcu: rcu_preempt kthread starved for 10098 jiffies! g36325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 457.126532][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 457.136610][ C0] rcu: RCU grace-period kthread stack dump: [ 457.142528][ C0] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 457.153373][ C0] Call Trace: [ 457.156820][ C0] [ 457.159856][ C0] __schedule+0xb87/0x14e0 [ 457.164328][ C0] ? release_firmware_map_entry+0x194/0x194 [ 457.170257][ C0] ? __mod_timer+0x7ae/0xb30 [ 457.175255][ C0] schedule+0xbd/0x170 [ 457.179390][ C0] schedule_timeout+0x12c/0x2e0 [ 457.184406][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 457.189822][ C0] ? __cfi_process_timeout+0x10/0x10 [ 457.195251][ C0] ? prepare_to_swait_event+0x308/0x320 [ 457.200963][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 457.205986][ C0] ? rcu_gp_init+0xf10/0xf10 [ 457.210719][ C0] rcu_gp_kthread+0x95/0x370 [ 457.215368][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 457.220633][ C0] ? set_cpus_allowed_ptr+0x82/0xc0 [ 457.226051][ C0] ? __kasan_check_read+0x11/0x20 [ 457.231219][ C0] ? __kthread_parkme+0x142/0x180 [ 457.236288][ C0] kthread+0x281/0x320 [ 457.240421][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 457.245660][ C0] ? __cfi_kthread+0x10/0x10 [ 457.250275][ C0] ret_from_fork+0x1f/0x30 [ 457.254907][ C0] [ 457.258031][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 457.264384][ C0] CPU: 0 PID: 7011 Comm: syz.4.2361 Not tainted 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 457.274216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.284622][ C0] RIP: 0010:handle_softirqs+0x144/0x600 [ 457.290335][ C0] Code: 85 e8 10 ee a6 03 65 66 89 1d 18 d0 c0 7e 48 c7 c7 20 02 49 85 e8 fc ed a6 03 65 44 89 25 dc cd bf 7e fb 49 c7 c5 c0 a0 e0 86 <44> 89 65 ac b8 ff ff ff ff 0f bc 45 ac 89 c3 ff c3 0f 84 a2 02 00 [ 457.310673][ C0] RSP: 0018:ffffc90000007f30 EFLAGS: 00000286 [ 457.316878][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: fbb692982ab35e00 [ 457.325018][ C0] RDX: 1ffffffff0f2c800 RSI: ffffffff85490220 RDI: ffffffff85a9fea0 [ 457.333010][ C0] RBP: ffffc90000007fc0 R08: ffffffff87964008 R09: ffffffff87964018 [ 457.341012][ C0] R10: ffffffff87964003 R11: 1ffffffff0f2c800 R12: 0000000000000000 [ 457.349009][ C0] R13: ffffffff86e0a0c0 R14: 0000000000000008 R15: ffff888120cf5100 [ 457.357119][ C0] FS: 00007f2beef9a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 457.366247][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.373034][ C0] CR2: 00007fef89617ed4 CR3: 0000000117a15000 CR4: 00000000003506b0 [ 457.381221][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.389227][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.397415][ C0] Call Trace: [ 457.400722][ C0] [ 457.403583][ C0] ? irqtime_account_irq+0xc4/0x240 [ 457.408958][ C0] __irq_exit_rcu+0x52/0xf0 [ 457.413495][ C0] irq_exit_rcu+0x9/0x10 [ 457.417760][ C0] sysvec_irq_work+0xa6/0xc0 [ 457.422494][ C0] [ 457.425436][ C0] [ 457.428383][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 457.433491][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 457.439509][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ba b8 56 01 5d c3 0f 1f 84 00 00 00 00 [ 457.459774][ C0] RSP: 0018:ffffc9000114fc20 EFLAGS: 00000246 [ 457.465885][ C0] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 457.473877][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 457.481961][ C0] RBP: ffffc9000114fc20 R08: dffffc0000000000 R09: fffff52000229f81 [ 457.489980][ C0] R10: 0000000000000000 R11: ffffffff81341a40 R12: 0000000000000000 [ 457.498195][ C0] R13: dffffc0000000001 R14: ffffffff8648ab50 R15: dffffc0000000000 [ 457.506572][ C0] ? __cfi_native_apic_msr_write+0x10/0x10 [ 457.512600][ C0] x2apic_send_IPI_self+0x6f/0x80 [ 457.517655][ C0] arch_irq_work_raise+0x98/0xf0 [ 457.522635][ C0] __irq_work_queue_local+0x115/0x190 [ 457.528047][ C0] irq_work_queue+0x9e/0x150 [ 457.532778][ C0] bpf_send_signal_common+0x2b2/0x420 [ 457.538267][ C0] ? __set_printk_clr_event+0x80/0x80 [ 457.543899][ C0] bpf_send_signal+0x19/0x20 [ 457.548544][ C0] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 457.554040][ C0] bpf_trace_run2+0xff/0x250 [ 457.558749][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 457.564063][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 457.569214][ C0] trace_sys_enter+0x3d/0x50 [ 457.573878][ C0] syscall_trace_enter+0xf3/0x150 [ 457.579048][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 457.584897][ C0] do_syscall_64+0x24/0xa0 [ 457.589777][ C0] ? clear_bhb_loop+0x30/0x80 [ 457.594583][ C0] ? clear_bhb_loop+0x30/0x80 [ 457.599491][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.605564][ C0] RIP: 0033:0x7f2bee12ab19 [ 457.610116][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 457.629841][ C0] RSP: 002b:00007f2beef99b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 457.638495][ C0] RAX: ffffffffffffffda RBX: 00007f2bee3b6088 RCX: 00007f2bee12ab19 [ 457.646503][ C0] RDX: 00007f2beef99b40 RSI: 00007f2beef99c70 RDI: 0000000000000011 [ 457.654587][ C0] RBP: 00007f2bee3b6080 R08: 0000000000000000 R09: 0000000000000000 [ 457.662752][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2bee3b608c [ 457.670973][ C0] R13: 0000000000000000 R14: 00007ffdeb2c8cd0 R15: 00007ffdeb2c8db8 [ 457.679074][ C0] [ 572.653206][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 216s! [ 572.662561][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 213s! [ 572.671670][ C0] Showing busy workqueues and worker pools: [ 572.677692][ C0] workqueue events: flags=0x0 [ 572.682399][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.682449][ C0] pending: update_stats_workfn, psi_avgs_work, kfree_rcu_monitor, key_garbage_collector [ 572.682553][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.682595][ C0] pending: binder_deferred_func, vmstat_shepherd, kfree_rcu_monitor, xfrm_state_gc_task, rht_deferred_worker, rht_deferred_worker [ 572.682706][ C0] workqueue events_long: flags=0x0 [ 572.727676][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 572.727731][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 572.727806][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 572.727847][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 572.727975][ C0] workqueue events_unbound: flags=0x2 [ 572.771032][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 572.771084][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 572.771171][ C0] workqueue events_power_efficient: flags=0x80 [ 572.795006][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.795060][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, gc_worker, reg_check_chans_work, check_lifetime [ 572.795195][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 572.795237][ C0] pending: neigh_managed_work, neigh_periodic_work [ 572.795289][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.836263][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.836317][ C0] pending: vmstat_update [ 572.836356][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.836398][ C0] pending: vmstat_update [ 572.836435][ C0] workqueue writeback: flags=0x4a [ 572.866449][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 572.866504][ C0] pending: wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn [ 572.866592][ C0] workqueue kblockd: flags=0x18 [ 572.887879][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 572.887931][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 572.887990][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 572.888030][ C0] pending: blk_mq_timeout_work [ 572.888069][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.923147][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.923210][ C0] pending: work_fn [ 572.923254][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.940717][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 572.940774][ C0] pending: addrconf_verify_work [ 572.940815][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 572.940896][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 572.940940][ C0] pending: addrconf_verify_work [ 572.940973][ C0] inactive: addrconf_verify_work [ 572.941016][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.986555][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.986618][ C0] pending: wg_packet_encrypt_worker [ 572.986656][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.986699][ C0] pending: wg_packet_encrypt_worker [ 572.986728][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 573.018562][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.018622][ C0] pending: wg_packet_encrypt_worker [ 573.018657][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.018719][ C0] pending: wg_packet_encrypt_worker [ 573.018747][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 573.050648][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.050708][ C0] pending: wg_packet_encrypt_worker [ 573.050742][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.050786][ C0] pending: wg_packet_encrypt_worker [ 573.050812][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 573.082589][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.082648][ C0] pending: wg_packet_encrypt_worker [ 573.082684][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.082728][ C0] pending: wg_packet_encrypt_worker [ 573.082757][ C0] workqueue wg-kex-wg1: flags=0x6 [ 573.115673][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 573.115729][ C0] pending: wg_packet_handshake_send_worker [ 573.115778][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 573.134818][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.134880][ C0] pending: wg_packet_encrypt_worker [ 573.134916][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.134961][ C0] pending: wg_packet_encrypt_worker [ 573.134991][ C0] workqueue wg-kex-wg2: flags=0x6 [ 573.166904][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 573.166962][ C0] pending: wg_packet_handshake_send_worker [ 573.167010][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 573.185710][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.185765][ C0] pending: wg_packet_encrypt_worker [ 573.185797][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.185841][ C0] pending: wg_packet_encrypt_worker [ 573.185871][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 573.218218][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.218277][ C0] pending: wg_packet_encrypt_worker [ 573.218314][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.218357][ C0] pending: wg_packet_encrypt_worker [ 573.218387][ C0] workqueue wg-kex-wg1: flags=0x6 [ 573.250235][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 573.250296][ C0] pending: wg_packet_handshake_send_worker [ 573.250343][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 573.269371][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.269447][ C0] pending: wg_packet_encrypt_worker [ 573.269483][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.269529][ C0] pending: wg_packet_encrypt_worker [ 573.269556][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 573.301539][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.301599][ C0] pending: wg_packet_encrypt_worker [ 573.301635][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.301680][ C0] pending: wg_packet_encrypt_worker [ 573.301707][ C0] workqueue wg-kex-wg0: flags=0x6 [ 573.333530][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.333583][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.333661][ C0] workqueue wg-kex-wg1: flags=0x6 [ 573.354953][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.354999][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.355074][ C0] workqueue wg-kex-wg2: flags=0x6 [ 573.376668][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.376714][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.376790][ C0] workqueue wg-kex-wg0: flags=0x6 [ 573.398345][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.398400][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.398482][ C0] workqueue wg-kex-wg1: flags=0x6 [ 573.420247][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.420309][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.420388][ C0] workqueue wg-kex-wg2: flags=0x6 [ 573.441888][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.441942][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker