last executing test programs: 3.229903557s ago: executing program 2 (id=418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) 3.146519359s ago: executing program 2 (id=422): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb70200002b000000b703000000030000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='ext4_nfs_commit_metadata\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x7ff, 0x7, {{0x19, 0x4, 0x0, 0x2, 0x64, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x10, 0xa5, 0x0, 0x4, [0xfffffff9, 0x80000001, 0x4]}, @cipso={0x86, 0x20, 0x2, [{0x6, 0x4, "33b5"}, {0x1, 0x7, "15d4b38a1d"}, {0x6, 0xf, "97482ed9f9576d733890aa9519"}]}, @timestamp={0x44, 0x8, 0xd0, 0x0, 0x9, [0xffffffff]}, @timestamp_prespec={0x44, 0x4, 0x69, 0x3, 0x5}, @ssrr={0x89, 0x13, 0x5f, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @remote]}]}}}}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) listen(r2, 0x0) shutdown(r2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 3.030709511s ago: executing program 0 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001000000e27f00000100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.947460943s ago: executing program 0 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 2.937855203s ago: executing program 0 (id=430): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.634085659s ago: executing program 0 (id=432): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.56647651s ago: executing program 0 (id=434): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv1}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000578410e9) r3 = gettid() syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 2.410063903s ago: executing program 0 (id=436): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x2}, 0x0}) 2.296561435s ago: executing program 2 (id=441): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7ff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 2.269392206s ago: executing program 2 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 1.382279583s ago: executing program 3 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.293182394s ago: executing program 2 (id=460): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/236, 0xec}], 0x1}, 0x23) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f0000000b00)=""/151}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.187403747s ago: executing program 3 (id=461): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 1.186989307s ago: executing program 3 (id=462): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) 1.182982547s ago: executing program 1 (id=463): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000380), 0x2, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000002b00), 0x2, 0x0) close(r4) 1.155217938s ago: executing program 1 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 1.02990501s ago: executing program 1 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r0, 0x10, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 520.58323ms ago: executing program 4 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) 419.415202ms ago: executing program 4 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 418.801752ms ago: executing program 4 (id=469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 316.928813ms ago: executing program 4 (id=470): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 282.986624ms ago: executing program 2 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 224.485825ms ago: executing program 3 (id=472): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r6}, 0x10) 200.916226ms ago: executing program 1 (id=473): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 147.376777ms ago: executing program 3 (id=474): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 146.934327ms ago: executing program 4 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 78.841348ms ago: executing program 3 (id=476): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb70200002b000000b703000000030000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='ext4_nfs_commit_metadata\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x7ff, 0x7, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x10, 0xa5, 0x0, 0x4, [0xfffffff9, 0x80000001, 0x4]}, @cipso={0x86, 0x20, 0x2, [{0x6, 0x4, "33b5"}, {0x1, 0x7, "15d4b38a1d"}, {0x6, 0xf, "97482ed9f9576d733890aa9519"}]}, @timestamp_prespec={0x44, 0x4, 0x69, 0x3, 0x5}, @ssrr={0x89, 0x13, 0x5f, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @remote]}]}}}}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) listen(r2, 0x0) shutdown(r2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 78.569568ms ago: executing program 4 (id=477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setrlimit(0x8, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 78.305348ms ago: executing program 1 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 0s ago: executing program 1 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x8c, 0x8}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 24.264942][ T28] audit: type=1400 audit(1759328066.499:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.266408][ T275] cgroup: Unknown subsys name 'net' [ 24.287663][ T28] audit: type=1400 audit(1759328066.499:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.314966][ T28] audit: type=1400 audit(1759328066.539:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.315219][ T275] cgroup: Unknown subsys name 'devices' [ 24.458194][ T275] cgroup: Unknown subsys name 'hugetlb' [ 24.463825][ T275] cgroup: Unknown subsys name 'rlimit' [ 24.598898][ T28] audit: type=1400 audit(1759328066.839:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.622102][ T28] audit: type=1400 audit(1759328066.839:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.646974][ T28] audit: type=1400 audit(1759328066.839:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.658278][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.679696][ T28] audit: type=1400 audit(1759328066.929:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.705253][ T28] audit: type=1400 audit(1759328066.929:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.759918][ T28] audit: type=1400 audit(1759328066.999:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.760523][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.785466][ T28] audit: type=1400 audit(1759328066.999:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.641466][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.648691][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.656534][ T283] device bridge_slave_0 entered promiscuous mode [ 26.664530][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.671731][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.679237][ T283] device bridge_slave_1 entered promiscuous mode [ 26.753692][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.760851][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.768416][ T285] device bridge_slave_0 entered promiscuous mode [ 26.775299][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.782423][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.789953][ T286] device bridge_slave_0 entered promiscuous mode [ 26.798104][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.805148][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.812654][ T286] device bridge_slave_1 entered promiscuous mode [ 26.822887][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.830023][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.837453][ T285] device bridge_slave_1 entered promiscuous mode [ 26.873780][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.880861][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.888344][ T287] device bridge_slave_0 entered promiscuous mode [ 26.908795][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.915873][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.923435][ T287] device bridge_slave_1 entered promiscuous mode [ 26.985116][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.992294][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.999835][ T284] device bridge_slave_0 entered promiscuous mode [ 27.025457][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.032564][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.040139][ T284] device bridge_slave_1 entered promiscuous mode [ 27.131962][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.139045][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.146366][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.153416][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.194922][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.202115][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.209410][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.216581][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.228339][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.235402][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.242697][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.249783][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.282207][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.289862][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.297458][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.304806][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.312165][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.319854][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.329012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.336490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.359445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.367720][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.374751][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.395457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.426330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.434455][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.442827][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.449891][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.458041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.475961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.490573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.498792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.507278][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.514330][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.522028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.530198][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.537251][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.544648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.567103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.575441][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.582493][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.589957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.598653][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.605673][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.613099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.621295][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.628346][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.635798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.644131][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.651215][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.658689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.666699][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.699919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.708115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.716407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.724484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.732768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.740526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.748347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.756426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.764371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.772736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.780856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.789337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.797761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.805623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.813822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.821335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.838323][ T283] device veth0_vlan entered promiscuous mode [ 27.846283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.854934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.863188][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.870361][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.878267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.886835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.895020][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.902102][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.909730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.932036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.940180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.947959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.955436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.963608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.972301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.980573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.988738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.997238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.005533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.014044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.022973][ T284] device veth0_vlan entered promiscuous mode [ 28.032099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.040402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.058617][ T286] device veth0_vlan entered promiscuous mode [ 28.067058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.075400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.084069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.092242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.100573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.108168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.123103][ T287] device veth0_vlan entered promiscuous mode [ 28.131399][ T283] device veth1_macvtap entered promiscuous mode [ 28.140907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.148692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.157285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.165608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.173850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.182047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.190089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.198386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.206815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.214942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.222625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.230174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.237792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.247802][ T284] device veth1_macvtap entered promiscuous mode [ 28.256785][ T285] device veth0_vlan entered promiscuous mode [ 28.268105][ T286] device veth1_macvtap entered promiscuous mode [ 28.278280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.286434][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.294663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.303178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.319397][ T285] device veth1_macvtap entered promiscuous mode [ 28.328774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.337236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.345437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.354338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.362930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.371500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.379861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.387574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.395822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.404256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.412651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.431010][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.441255][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.450007][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.450227][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 28.459039][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.478269][ T287] device veth1_macvtap entered promiscuous mode [ 28.487394][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.495712][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.530869][ T337] loop2: detected capacity change from 0 to 512 [ 28.535245][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.545738][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.555448][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.564035][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.586726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.595482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.607913][ T337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.627306][ T337] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.722755][ T337] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 28.769567][ T367] loop1: detected capacity change from 0 to 128 [ 28.778422][ T369] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 28.783152][ T361] loop3: detected capacity change from 0 to 4096 [ 28.789855][ T337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 28.825644][ T337] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.825644][ T337] [ 28.835936][ T337] EXT4-fs (loop2): Total free blocks count 0 [ 28.841957][ T337] EXT4-fs (loop2): Free/Dirty block details [ 28.848733][ T337] EXT4-fs (loop2): free_blocks=65280 [ 28.854059][ T337] EXT4-fs (loop2): dirty_blocks=159 [ 28.861254][ T367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.870341][ T361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.873053][ T337] EXT4-fs (loop2): Block reservation details [ 28.887025][ T337] EXT4-fs (loop2): i_reserved_data_blocks=159 [ 28.888805][ T367] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.893801][ T361] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.907985][ T337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 28.929187][ T361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.962656][ T361] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 29.056107][ T291] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 29.238080][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.257123][ T384] loop2: detected capacity change from 0 to 512 [ 29.263967][ T291] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 29.327757][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.341515][ T291] usb 5-1: config 0 descriptor?? [ 29.348120][ T384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.358058][ T384] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.437845][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 29.437872][ T28] audit: type=1326 audit(1759328071.679:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.468185][ T28] audit: type=1326 audit(1759328071.679:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.492486][ T286] EXT4-fs (loop2): unmounting filesystem. [ 29.492859][ T28] audit: type=1326 audit(1759328071.679:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.521478][ T28] audit: type=1326 audit(1759328071.679:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.544779][ T28] audit: type=1326 audit(1759328071.679:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.586510][ T28] audit: type=1326 audit(1759328071.679:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.634531][ T28] audit: type=1326 audit(1759328071.719:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.659067][ T28] audit: type=1326 audit(1759328071.719:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.682788][ T284] EXT4-fs (loop1): unmounting filesystem. [ 29.695395][ T285] EXT4-fs (loop3): unmounting filesystem. [ 29.736021][ T28] audit: type=1326 audit(1759328071.719:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=383 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2e5798eec9 code=0x7ffc0000 [ 29.785305][ T28] audit: type=1400 audit(1759328071.719:138): avc: denied { setattr } for pid=383 comm="syz.2.15" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.810817][ T291] wacom 0003:056A:00E3.0001: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0 [ 29.960632][ T410] __vm_enough_memory: pid: 410, comm: syz.2.21, no enough memory for the allocation [ 30.159718][ T339] usb 5-1: USB disconnect, device number 2 [ 30.216007][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.417128][ T6] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 30.425457][ T6] usb 4-1: config 0 has no interface number 0 [ 30.431924][ T6] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 30.442171][ T6] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 30.451446][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.460994][ T6] usb 4-1: config 0 descriptor?? [ 30.668922][ T339] usb 4-1: USB disconnect, device number 2 [ 30.669001][ T421] loop2: detected capacity change from 0 to 256 [ 30.682280][ T421] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.693008][ T421] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 30.705641][ T421] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 30.739735][ T424] loop4: detected capacity change from 0 to 4096 [ 30.788588][ T424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.818388][ T430] loop1: detected capacity change from 0 to 16 [ 30.841112][ T430] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.848634][ T430] SELinux: (dev loop1, type erofs) getxattr errno 117 [ 30.910400][ T435] loop1: detected capacity change from 0 to 128 [ 30.910968][ T433] binder: BINDER_SET_CONTEXT_MGR already set [ 30.920089][ T435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.925201][ T433] binder: 432:433 ioctl 4018620d 200000000140 returned -16 [ 30.933013][ T435] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.095957][ T291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.282002][ T291] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 31.306874][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.309146][ T442] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.315065][ T291] usb 3-1: SerialNumber: syz [ 31.338640][ T291] usb 3-1: config 0 descriptor?? [ 31.548816][ T291] usb 3-1: USB disconnect, device number 2 [ 31.577310][ T287] EXT4-fs (loop4): unmounting filesystem. [ 31.785645][ T284] EXT4-fs (loop1): unmounting filesystem. [ 32.186654][ T464] loop3: detected capacity change from 0 to 8192 [ 32.387963][ T475] loop3: detected capacity change from 0 to 128 [ 32.412131][ T475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.422526][ T475] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.904821][ T483] loop0: detected capacity change from 0 to 4096 [ 32.916750][ T483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.925587][ T483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.934928][ T483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.950207][ T485] loop4: detected capacity change from 0 to 4096 [ 32.970903][ T485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.175982][ T339] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 33.259142][ T285] EXT4-fs (loop3): unmounting filesystem. [ 33.709539][ T501] loop3: detected capacity change from 0 to 256 [ 33.718219][ T501] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.729098][ T501] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 33.779616][ T501] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 33.796988][ T287] EXT4-fs (loop4): unmounting filesystem. [ 34.016916][ T339] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 34.029625][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.048419][ T339] usb 2-1: config 0 descriptor?? [ 34.065976][ T40] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.076597][ T283] EXT4-fs (loop0): unmounting filesystem. [ 34.269158][ T40] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 34.278567][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.300768][ T40] usb 4-1: SerialNumber: syz [ 34.318387][ T40] usb 4-1: config 0 descriptor?? [ 34.366064][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.407963][ T519] loop4: detected capacity change from 0 to 512 [ 34.418385][ T519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.433881][ T519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.446752][ T519] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.460052][ T519] EXT4-fs (loop4): 1 truncate cleaned up [ 34.466055][ T519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.496661][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 34.496676][ T28] audit: type=1400 audit(1759328076.739:184): avc: denied { read append open } for pid=518 comm="syz.4.59" path="/10/bus/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.529524][ T60] usb 4-1: USB disconnect, device number 3 [ 34.530626][ T28] audit: type=1400 audit(1759328076.739:185): avc: denied { append } for pid=518 comm="syz.4.59" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.559044][ T8] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 34.560491][ T28] audit: type=1400 audit(1759328076.739:186): avc: denied { map } for pid=518 comm="syz.4.59" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.573542][ T287] EXT4-fs (loop4): unmounting filesystem. [ 34.595834][ T28] audit: type=1400 audit(1759328076.739:187): avc: denied { ioctl } for pid=518 comm="syz.4.59" path="/10/bus/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.633937][ T524] loop4: detected capacity change from 0 to 128 [ 34.646357][ T524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.655210][ T524] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.124089][ T535] loop3: detected capacity change from 0 to 4096 [ 35.162504][ T535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.284994][ T28] audit: type=1400 audit(1759328077.519:188): avc: denied { write } for pid=538 comm="syz.0.64" lport=252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.509031][ T542] loop0: detected capacity change from 0 to 4096 [ 35.548438][ T287] EXT4-fs (loop4): unmounting filesystem. [ 35.548555][ T542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.602148][ T542] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.642277][ T542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.778605][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.118660][ T285] EXT4-fs (loop3): unmounting filesystem. [ 36.139189][ T28] audit: type=1326 audit(1759328078.379:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313d8eec9 code=0x7ffc0000 [ 36.162686][ T28] audit: type=1326 audit(1759328078.379:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313d8eec9 code=0x7ffc0000 [ 36.186650][ T28] audit: type=1326 audit(1759328078.379:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1313d8eec9 code=0x7ffc0000 [ 36.237541][ T28] audit: type=1326 audit(1759328078.379:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313d8eec9 code=0x7ffc0000 [ 36.261616][ T283] EXT4-fs (loop0): unmounting filesystem. [ 36.272748][ T28] audit: type=1326 audit(1759328078.379:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=564 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313d8eec9 code=0x7ffc0000 [ 36.436049][ T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 36.449470][ T339] asix: probe of 2-1:0.0 failed with error -71 [ 36.457207][ T574] Zero length message leads to an empty skb [ 36.463983][ T339] usb 2-1: USB disconnect, device number 2 [ 36.541801][ T574] loop0: detected capacity change from 0 to 256 [ 36.550080][ T574] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.560850][ T574] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 36.570763][ T574] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 36.846045][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.966530][ T577] loop1: detected capacity change from 0 to 1024 [ 36.975396][ T577] ======================================================= [ 36.975396][ T577] WARNING: The mand mount option has been deprecated and [ 36.975396][ T577] and is ignored by this kernel. Remove the mand [ 36.975396][ T577] option from the mount to silence this warning. [ 36.975396][ T577] ======================================================= [ 37.022131][ T577] EXT4-fs: Ignoring removed bh option [ 37.027821][ T577] EXT4-fs: Ignoring removed nobh option [ 37.042951][ T581] loop3: detected capacity change from 0 to 128 [ 37.048261][ T577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.052010][ T24] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 37.070831][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.090608][ T577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.100596][ T581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.109462][ T581] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.159248][ T577] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.76: Allocating blocks 497-513 which overlap fs metadata [ 37.175062][ T577] EXT4-fs (loop1): pa ffff88813522c888: logic 256, phys. 385, len 8 [ 37.183225][ T577] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 37.200803][ T577] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 37.215884][ T24] usb 1-1: SerialNumber: syz [ 37.226784][ T24] usb 1-1: config 0 descriptor?? [ 37.272734][ T284] EXT4-fs (loop1): unmounting filesystem. [ 37.462682][ T24] usb 1-1: USB disconnect, device number 2 [ 37.816097][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 37.816820][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.947636][ T285] EXT4-fs (loop3): unmounting filesystem. [ 38.669874][ T601] loop1: detected capacity change from 0 to 4096 [ 38.720616][ T601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.116394][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.326466][ T627] loop3: detected capacity change from 0 to 128 [ 39.336035][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 39.342763][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 39.384740][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.394036][ T627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.430690][ T627] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.445515][ T24] usb 3-1: config 0 descriptor?? [ 39.525228][ T632] loop0: detected capacity change from 0 to 256 [ 39.568494][ T632] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.579197][ T632] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 39.590724][ T632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 39.606626][ T284] EXT4-fs (loop1): unmounting filesystem. [ 39.725858][ T636] loop4: detected capacity change from 0 to 4096 [ 39.775845][ T636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.806019][ T636] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.926047][ T624] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.049359][ T636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.059715][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 40.073591][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 40.147531][ T644] loop1: detected capacity change from 0 to 1024 [ 40.170201][ T644] EXT4-fs: Ignoring removed orlov option [ 40.196303][ T24] asix: probe of 3-1:0.0 failed with error -32 [ 40.202037][ T285] EXT4-fs (loop3): unmounting filesystem. [ 40.204945][ T24] usb 3-1: USB disconnect, device number 3 [ 40.228516][ T624] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 40.238416][ T644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.245943][ T624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.254925][ T624] usb 1-1: SerialNumber: syz [ 40.267868][ T624] usb 1-1: config 0 descriptor?? [ 40.660251][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 40.660266][ T28] audit: type=1400 audit(1759328082.899:216): avc: denied { write } for pid=638 comm="syz.1.96" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.691203][ T24] usb 1-1: USB disconnect, device number 3 [ 40.768553][ T287] EXT4-fs (loop4): unmounting filesystem. [ 40.825407][ T284] EXT4-fs (loop1): unmounting filesystem. [ 40.882090][ T28] audit: type=1400 audit(1759328083.119:217): avc: denied { create } for pid=661 comm="syz.3.101" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.913092][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.939992][ T28] audit: type=1400 audit(1759328083.119:218): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.270010][ T674] loop2: detected capacity change from 0 to 128 [ 41.374571][ T674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.391026][ T674] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.422256][ T675] loop4: detected capacity change from 0 to 4096 [ 41.535016][ T675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.554723][ T681] loop0: detected capacity change from 0 to 4096 [ 41.908685][ T681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.925522][ T681] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.934006][ T681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.072220][ T28] audit: type=1326 audit(1759328084.309:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=699 comm="syz.3.115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31d558eec9 code=0x0 [ 42.345917][ T287] EXT4-fs (loop4): unmounting filesystem. [ 42.372364][ T286] EXT4-fs (loop2): unmounting filesystem. [ 42.544638][ T702] fuse: root generation should be zero [ 42.557711][ T283] EXT4-fs (loop0): unmounting filesystem. [ 42.561572][ T707] loop2: detected capacity change from 0 to 7 [ 42.672239][ T711] loop2: detected capacity change from 0 to 256 [ 42.691413][ T711] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.702135][ T711] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 42.722945][ T711] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 42.927112][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.927146][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 43.005967][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.150758][ T731] loop3: detected capacity change from 0 to 4096 [ 43.199783][ T731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.211252][ T24] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 43.222304][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.315486][ T24] usb 3-1: SerialNumber: syz [ 43.324319][ T24] usb 3-1: config 0 descriptor?? [ 43.438323][ T737] loop4: detected capacity change from 0 to 128 [ 43.448652][ T737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.457467][ T737] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.528495][ T28] audit: type=1400 audit(1759328085.769:220): avc: denied { sqpoll } for pid=739 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.549439][ T24] usb 3-1: USB disconnect, device number 4 [ 44.306995][ T285] EXT4-fs (loop3): unmounting filesystem. [ 44.331832][ T287] EXT4-fs (loop4): unmounting filesystem. [ 44.355092][ T752] loop3: detected capacity change from 0 to 1024 [ 44.370961][ T752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.383330][ T752] process 'syz.3.131' launched './file2' with NULL argv: empty string added [ 44.414138][ T28] audit: type=1400 audit(1759328086.629:221): avc: denied { execute } for pid=751 comm="syz.3.131" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.456360][ T28] audit: type=1400 audit(1759328086.629:222): avc: denied { nosuid_transition } for pid=751 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 44.481855][ T28] audit: type=1400 audit(1759328086.629:223): avc: denied { transition } for pid=751 comm="syz.3.131" path="/34/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 44.505518][ T28] audit: type=1400 audit(1759328086.629:224): avc: denied { entrypoint } for pid=751 comm="syz.3.131" path="/34/file0/file2" dev="loop3" ino=16 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.531767][ T28] audit: type=1400 audit(1759328086.629:225): avc: denied { noatsecure } for pid=751 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 44.547487][ T285] EXT4-fs (loop3): unmounting filesystem. [ 44.595941][ T748] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.674071][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.777148][ T748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.795963][ T339] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.803666][ T748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.833986][ T748] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.864637][ T780] loop3: detected capacity change from 0 to 4096 [ 44.871257][ T748] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.880998][ T748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.891575][ T748] usb 1-1: config 0 descriptor?? [ 44.899846][ T780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.009332][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 45.016883][ T339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.023737][ T339] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.034989][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.055212][ T339] usb 2-1: config 0 descriptor?? [ 45.169729][ T784] loop2: detected capacity change from 0 to 128 [ 45.181543][ T784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.190432][ T784] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.314470][ T748] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 45.324827][ T748] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 45.658478][ T748] usb 1-1: USB disconnect, device number 4 [ 45.665087][ T339] hid (null): invalid report_size 29797 [ 45.677108][ T285] EXT4-fs (loop3): unmounting filesystem. [ 45.699820][ T624] usb 2-1: USB disconnect, device number 3 [ 45.732055][ T790] fido_id[790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 45.800641][ T789] loop3: detected capacity change from 0 to 256 [ 45.810363][ T789] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.821042][ T789] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 45.831036][ T789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 46.030571][ T286] EXT4-fs (loop2): unmounting filesystem. [ 46.105956][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.113987][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 46.114001][ T28] audit: type=1400 audit(1759328088.349:235): avc: denied { ioctl } for pid=794 comm="syz.0.146" path="socket:[17945]" dev="sockfs" ino=17945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.144855][ T795] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.299577][ T24] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 46.436728][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.462946][ T24] usb 4-1: SerialNumber: syz [ 46.470340][ T24] usb 4-1: config 0 descriptor?? [ 46.678335][ T339] usb 4-1: USB disconnect, device number 4 [ 46.686064][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 46.692202][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.710553][ T821] loop0: detected capacity change from 0 to 128 [ 46.716422][ T819] loop1: detected capacity change from 0 to 4096 [ 46.729675][ T819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.734625][ T821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.752345][ T821] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.773759][ T283] EXT4-fs (loop0): unmounting filesystem. [ 47.786326][ T284] EXT4-fs (loop1): unmounting filesystem. [ 47.935357][ T855] loop4: detected capacity change from 0 to 256 [ 47.945943][ T855] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.956612][ T855] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 47.967519][ T855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 48.028702][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.256023][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.449327][ T24] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 48.494970][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.536545][ T24] usb 5-1: SerialNumber: syz [ 48.557025][ T24] usb 5-1: config 0 descriptor?? [ 48.620592][ T871] loop1: detected capacity change from 0 to 512 [ 48.636020][ T871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.657052][ T871] EXT4-fs (loop1): 1 truncate cleaned up [ 48.663922][ T871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.675706][ T28] audit: type=1400 audit(1759328090.909:236): avc: denied { create } for pid=870 comm="syz.1.171" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 48.767729][ T284] EXT4-fs (loop1): unmounting filesystem. [ 48.775807][ T6] usb 5-1: USB disconnect, device number 3 [ 48.805836][ T879] loop1: detected capacity change from 0 to 512 [ 48.868705][ T28] audit: type=1400 audit(1759328091.109:237): avc: denied { write } for pid=873 comm="syz.2.172" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.911722][ T28] audit: type=1400 audit(1759328091.139:238): avc: denied { write } for pid=873 comm="syz.2.172" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.980030][ T28] audit: type=1400 audit(1759328091.139:239): avc: denied { open } for pid=873 comm="syz.2.172" path="/27/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.002594][ T28] audit: type=1400 audit(1759328091.139:240): avc: denied { ioctl } for pid=873 comm="syz.2.172" path="/27/file0" dev="tmpfs" ino=169 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.007319][ T879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.055244][ T284] EXT4-fs (loop1): unmounting filesystem. [ 49.131862][ T888] bridge0: port 3(syz_tun) entered blocking state [ 49.138542][ T888] bridge0: port 3(syz_tun) entered disabled state [ 49.145757][ T888] device syz_tun entered promiscuous mode [ 49.151684][ T888] bridge0: port 3(syz_tun) entered blocking state [ 49.158180][ T888] bridge0: port 3(syz_tun) entered forwarding state [ 49.251194][ T28] audit: type=1400 audit(1759328091.489:241): avc: denied { read } for pid=885 comm="syz.0.176" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.273913][ T28] audit: type=1400 audit(1759328091.489:242): avc: denied { open } for pid=885 comm="syz.0.176" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.475943][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 49.616022][ T339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.658114][ T898] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 49.755931][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 49.762188][ T24] usb 2-1: config index 0 descriptor too short (expected 88, got 72) [ 49.770405][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 49.778688][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.788819][ T24] usb 2-1: config 0 has no interface number 0 [ 49.796392][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 49.805674][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.813723][ T24] usb 2-1: Product: syz [ 49.817939][ T24] usb 2-1: Manufacturer: syz [ 49.822546][ T24] usb 2-1: SerialNumber: syz [ 49.825934][ T339] usb 5-1: Using ep0 maxpacket: 8 [ 49.832418][ T24] usb 2-1: config 0 descriptor?? [ 49.833975][ T339] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64 [ 49.840349][ T24] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 49.847800][ T339] usb 5-1: config 1 interface 0 has no altsetting 0 [ 49.853782][ T24] usb 2-1: No valid video chain found. [ 49.862342][ T339] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 49.875078][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.883125][ T339] usb 5-1: Product: syz [ 49.887483][ T339] usb 5-1: Manufacturer: syz [ 49.892181][ T339] usb 5-1: SerialNumber: syz [ 49.903147][ T894] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 50.005452][ T903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=903 comm=syz.0.182 [ 50.040774][ T6] usb 2-1: USB disconnect, device number 4 [ 50.046247][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 50.048430][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.129641][ T339] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 14 proto 1 vid 0x04B8 pid 0x0202 [ 50.144479][ T339] usb 5-1: USB disconnect, device number 4 [ 50.159665][ T339] usblp0: removed [ 50.234069][ T913] loop0: detected capacity change from 0 to 4096 [ 50.245816][ T913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.554581][ T922] loop1: detected capacity change from 0 to 128 [ 50.604157][ T922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.616174][ T922] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.721564][ T932] loop2: detected capacity change from 0 to 4096 [ 50.747902][ T932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.763037][ T932] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.852091][ T924] loop3: detected capacity change from 0 to 256 [ 50.922375][ T924] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.011890][ T932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.040188][ T924] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 51.089820][ T283] EXT4-fs (loop0): unmounting filesystem. [ 51.103614][ T924] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 51.213383][ T28] audit: type=1400 audit(1759328093.449:243): avc: denied { getopt } for pid=941 comm="syz.0.195" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.239651][ T942] loop0: detected capacity change from 0 to 256 [ 51.267718][ T942] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119dbd0) [ 51.281735][ T942] exFAT-fs (loop0): invalid boot region [ 51.287847][ T942] exFAT-fs (loop0): failed to recognize exfat type [ 51.428335][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.437268][ T284] EXT4-fs (loop1): unmounting filesystem. [ 51.444619][ T28] audit: type=1400 audit(1759328093.679:244): avc: denied { mounton } for pid=946 comm="syz.0.197" path="/48/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 51.561648][ T28] audit: type=1400 audit(1759328093.799:245): avc: denied { load_policy } for pid=951 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.563572][ T952] SELinux: failed to load policy [ 51.628472][ T24] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 51.640670][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.651746][ T24] usb 4-1: SerialNumber: syz [ 51.661873][ T24] usb 4-1: config 0 descriptor?? [ 51.764835][ T286] EXT4-fs (loop2): unmounting filesystem. [ 51.797384][ T343] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.874188][ T24] usb 4-1: USB disconnect, device number 5 [ 51.915937][ T339] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.127993][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.131128][ T965] loop4: detected capacity change from 0 to 512 [ 52.138307][ T339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.150764][ T965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.154470][ T339] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.166101][ T965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.174116][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.192006][ T339] usb 2-1: SerialNumber: syz [ 52.197903][ T965] EXT4-fs error (device loop4): __ext4_iget:5079: inode #15: block 1803188595: comm syz.4.204: invalid block [ 52.209965][ T965] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.204: couldn't read orphan inode 15 (err -117) [ 52.222077][ T965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.242043][ T287] EXT4-fs (loop4): unmounting filesystem. [ 52.296796][ T972] loop4: detected capacity change from 0 to 128 [ 52.307708][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 52.321576][ T972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.330482][ T972] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.409551][ T339] usb 2-1: 0:2 : does not exist [ 52.441034][ T339] usb 2-1: USB disconnect, device number 5 [ 53.540877][ T28] audit: type=1400 audit(1759328095.749:246): avc: denied { setattr } for pid=980 comm="syz.0.210" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.565874][ T287] EXT4-fs (loop4): unmounting filesystem. [ 53.722248][ T28] audit: type=1400 audit(1759328095.959:247): avc: denied { unmount } for pid=988 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.806221][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 53.812309][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.942167][ T991] loop4: detected capacity change from 0 to 4096 [ 53.950692][ T991] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.960235][ T991] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.979729][ T991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.143913][ T28] audit: type=1400 audit(1759328096.379:248): avc: denied { name_bind } for pid=997 comm="syz.1.216" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.165307][ T998] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 54.423826][ T28] audit: type=1400 audit(1759328096.659:249): avc: denied { ioctl } for pid=1013 comm="syz.2.221" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.635977][ T28] audit: type=1326 audit(1759328096.869:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1015 comm="syz.0.222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76e198eec9 code=0x0 [ 54.668157][ T1023] loop2: detected capacity change from 0 to 512 [ 54.680124][ T1023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.689921][ T1018] usb usb8: usbfs: process 1018 (syz.0.222) did not claim interface 0 before use [ 54.690091][ T1023] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.719675][ T28] audit: type=1400 audit(1759328096.959:251): avc: denied { write } for pid=1022 comm="syz.2.223" path="/35/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.742377][ T28] audit: type=1400 audit(1759328096.959:252): avc: denied { ioctl } for pid=1022 comm="syz.2.223" path="/35/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.746617][ T286] EXT4-fs (loop2): unmounting filesystem. [ 54.811204][ T1030] loop2: detected capacity change from 0 to 128 [ 54.824004][ T287] EXT4-fs (loop4): unmounting filesystem. [ 54.829662][ T1030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.838574][ T1030] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.542495][ T1052] loop1: detected capacity change from 0 to 256 [ 55.555983][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 55.559952][ T1052] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.590859][ T1052] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 55.592923][ T1057] loop4: detected capacity change from 0 to 16 [ 55.611578][ T1052] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 55.666440][ T1057] erofs: (device loop4): mounted with root inode @ nid 36. [ 55.746009][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 55.756672][ T286] EXT4-fs (loop2): unmounting filesystem. [ 55.758224][ T6] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.787753][ T6] usb 1-1: New USB device found, idVendor=0263, idProduct=0000, bcdDevice=d9.00 [ 55.811196][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.827187][ T6] usb 1-1: Product: syz [ 55.831406][ T6] usb 1-1: Manufacturer: syz [ 55.837865][ T1069] loop4: detected capacity change from 0 to 128 [ 55.848389][ T1065] loop2: detected capacity change from 0 to 4096 [ 55.849753][ T6] usb 1-1: SerialNumber: syz [ 55.869747][ T1065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.880645][ T1069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.891141][ T6] usb 1-1: config 0 descriptor?? [ 55.897577][ T1069] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.903177][ T1074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 55.929658][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.938736][ T1065] EXT4-fs (loop2): Test dummy encryption mode enabled [ 55.976166][ T1065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.129268][ T24] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 56.155996][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.175493][ T24] usb 2-1: SerialNumber: syz [ 56.219657][ T24] usb 2-1: config 0 descriptor?? [ 56.270207][ T24] usb 1-1: USB disconnect, device number 5 [ 56.279876][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 56.279890][ T28] audit: type=1400 audit(1759328098.519:255): avc: denied { bpf } for pid=1079 comm="syz.3.245" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.325949][ T28] audit: type=1400 audit(1759328098.549:256): avc: denied { create } for pid=1079 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.362835][ T28] audit: type=1400 audit(1759328098.549:257): avc: denied { write } for pid=1079 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.401032][ T28] audit: type=1400 audit(1759328098.549:258): avc: denied { create } for pid=1079 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.442675][ T28] audit: type=1400 audit(1759328098.559:259): avc: denied { prog_load } for pid=1079 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.465081][ T339] usb 2-1: USB disconnect, device number 6 [ 56.486477][ T28] audit: type=1400 audit(1759328098.559:260): avc: denied { perfmon } for pid=1079 comm="syz.3.245" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.516113][ T28] audit: type=1400 audit(1759328098.629:261): avc: denied { bind } for pid=1085 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.544456][ T28] audit: type=1400 audit(1759328098.659:262): avc: denied { prog_run } for pid=1064 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.570942][ T28] audit: type=1400 audit(1759328098.659:263): avc: denied { write } for pid=1064 comm="syz.2.237" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.623817][ T28] audit: type=1400 audit(1759328098.659:264): avc: denied { add_name } for pid=1064 comm="syz.2.237" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.722150][ T287] EXT4-fs (loop4): unmounting filesystem. [ 56.828568][ T1096] loop4: detected capacity change from 0 to 16 [ 56.848618][ T1096] erofs: (device loop4): mounted with root inode @ nid 36. [ 56.923992][ T1098] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 56.964118][ T1098] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 56.993662][ T1098] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 57.025934][ T1098] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 57.055948][ T1098] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 57.086027][ T339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 57.142908][ T286] EXT4-fs (loop2): unmounting filesystem. [ 57.191671][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.285954][ T339] usb 1-1: Using ep0 maxpacket: 8 [ 57.292321][ T339] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 57.327375][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.338091][ T1112] loop2: detected capacity change from 0 to 512 [ 57.346391][ T339] usb 1-1: config 0 descriptor?? [ 57.356450][ T1112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.526915][ T1112] EXT4-fs (loop2): 1 truncate cleaned up [ 57.612543][ T1112] syz.2.256 (pid 1112) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 58.584325][ T1131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 58.700191][ T1135] loop0: detected capacity change from 0 to 256 [ 58.708305][ T1135] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.719026][ T1135] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 58.730729][ T1135] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 58.839354][ T339] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 58.849526][ T339] asix: probe of 1-1:0.0 failed with error -71 [ 58.858702][ T339] usb 1-1: USB disconnect, device number 6 [ 58.952425][ T1137] loop2: detected capacity change from 0 to 4096 [ 58.960138][ T1137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.969051][ T1137] EXT4-fs (loop2): Test dummy encryption mode enabled [ 59.245964][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 59.252066][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.346026][ T339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 59.659207][ T339] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 59.668834][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.677846][ T339] usb 1-1: SerialNumber: syz [ 59.677863][ T1149] loop4: detected capacity change from 0 to 512 [ 59.686841][ T339] usb 1-1: config 0 descriptor?? [ 59.693153][ T1149] EXT4-fs: Ignoring removed bh option [ 59.701511][ T1149] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 59.723438][ T1149] EXT4-fs (loop4): 1 truncate cleaned up [ 59.748382][ T1149] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 863271013 > max in inode 18 [ 59.913651][ T339] usb 1-1: USB disconnect, device number 7 [ 61.590848][ T1170] loop2: detected capacity change from 0 to 128 [ 61.627968][ T1170] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.650074][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 61.650090][ T28] audit: type=1400 audit(1759328103.889:322): avc: denied { write } for pid=1176 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.792490][ T28] audit: type=1400 audit(1759328103.889:323): avc: denied { mount } for pid=1177 comm="syz.1.278" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.138815][ T28] audit: type=1400 audit(1759328103.899:324): avc: denied { setopt } for pid=1169 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.160054][ T28] audit: type=1400 audit(1759328103.899:325): avc: denied { bind } for pid=1169 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.180985][ T28] audit: type=1400 audit(1759328103.919:326): avc: denied { read } for pid=1176 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.407163][ T28] audit: type=1400 audit(1759328104.369:327): avc: denied { listen } for pid=1169 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.438421][ T28] audit: type=1400 audit(1759328104.369:328): avc: denied { shutdown } for pid=1169 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.458704][ T28] audit: type=1400 audit(1759328104.649:329): avc: denied { write } for pid=1174 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.558197][ T343] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.576276][ T28] audit: type=1400 audit(1759328104.679:330): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.633099][ T1200] netlink: 'syz.0.288': attribute type 16 has an invalid length. [ 62.644262][ T1200] netlink: 'syz.0.288': attribute type 17 has an invalid length. [ 62.655981][ T1200] netlink: 'syz.0.288': attribute type 27 has an invalid length. [ 62.704619][ T28] audit: type=1400 audit(1759328104.939:331): avc: denied { create } for pid=1207 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.711752][ T1210] tmpfs: Bad value for 'nr_blocks' [ 62.929951][ T1222] loop4: detected capacity change from 0 to 4096 [ 63.577706][ T1233] loop2: detected capacity change from 0 to 512 [ 63.591025][ T1233] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.299: casefold flag without casefold feature [ 63.609294][ T1233] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.299: couldn't read orphan inode 15 (err -117) [ 63.622601][ T1233] EXT4-fs (loop2): shut down requested (1) [ 64.075999][ T339] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 64.105983][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.255951][ T339] usb 1-1: Using ep0 maxpacket: 8 [ 64.265993][ T339] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 64.274136][ T339] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 64.284484][ T339] usb 1-1: config 0 has no interface number 0 [ 64.287246][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.290884][ T339] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 64.301740][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.312811][ T339] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 64.322740][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.335003][ T339] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.346997][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.369218][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.430610][ T24] usb 5-1: config 0 descriptor?? [ 64.570502][ T339] usb 1-1: config 0 interface 52 has no altsetting 0 [ 64.578045][ T339] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 64.587126][ T339] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 64.595252][ T339] usb 1-1: Manufacturer: syz [ 64.600657][ T339] usb 1-1: config 0 descriptor?? [ 64.606020][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 64.606071][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.607313][ T339] hub 1-1:0.52: bad descriptor, ignoring hub [ 64.618241][ T339] hub: probe of 1-1:0.52 failed with error -5 [ 64.944476][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xe [ 64.961357][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 64.969100][ T24] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 64.979544][ T24] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 65.157638][ T1286] loop1: detected capacity change from 0 to 4096 [ 65.170115][ T1286] EXT4-fs mount: 12 callbacks suppressed [ 65.170134][ T1286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.218501][ T339] usb 5-1: USB disconnect, device number 5 [ 66.246379][ T284] EXT4-fs (loop1): unmounting filesystem. [ 66.480890][ T1320] loop2: detected capacity change from 0 to 512 [ 66.495009][ T1320] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.507025][ T1320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.522668][ T1325] binder: 1324:1325 ioctl 400c620e 200000000240 returned -22 [ 66.522738][ T1320] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.333: invalid indirect mapped block 4294967295 (level 1) [ 66.544631][ T1320] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.333: invalid indirect mapped block 4294967295 (level 1) [ 66.565476][ T1320] EXT4-fs (loop2): 2 truncates cleaned up [ 66.571483][ T1320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.584383][ T1320] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1440: inode #12: block 7: comm syz.2.333: path /62/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 66.614123][ T286] EXT4-fs (loop2): unmounting filesystem. [ 66.702554][ T1329] loop1: detected capacity change from 0 to 256 [ 66.720543][ T1329] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.731440][ T1329] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 66.742433][ T1329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 67.104134][ T1340] loop1: detected capacity change from 0 to 512 [ 67.129092][ T1340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.138108][ T1340] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.159202][ T284] EXT4-fs (loop1): unmounting filesystem. [ 67.408302][ T1354] loop4: detected capacity change from 0 to 2048 [ 67.460203][ T1354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.504785][ T43] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 67.520777][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 67.533806][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.533806][ T43] [ 67.543824][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 67.550103][ T43] EXT4-fs (loop4): Free/Dirty block details [ 67.556181][ T43] EXT4-fs (loop4): free_blocks=2415919504 [ 67.561953][ T43] EXT4-fs (loop4): dirty_blocks=48 [ 67.567447][ T43] EXT4-fs (loop4): Block reservation details [ 67.573456][ T43] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 67.580028][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 67.717634][ T338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 67.896884][ T338] usb 2-1: too many configurations: 161, using maximum allowed: 8 [ 67.907333][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 67.918199][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.929948][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 67.940296][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.950852][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 67.961198][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.971358][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 67.981639][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.025021][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 68.040951][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.043233][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 68.043250][ T28] audit: type=1400 audit(1759328110.279:347): avc: denied { mount } for pid=1369 comm="syz.2.350" name="/" dev="ramfs" ino=19237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.051017][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 68.088874][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.099296][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 68.109457][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.119998][ T338] usb 2-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 68.130568][ T338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.142602][ T338] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 68.152206][ T338] usb 2-1: New USB device strings: Mfr=1, Product=157, SerialNumber=151 [ 68.162959][ T338] usb 2-1: Product: syz [ 68.163518][ T6] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 68.167369][ T338] usb 2-1: Manufacturer: syz [ 68.233233][ T338] usb 2-1: SerialNumber: syz [ 68.319473][ T28] audit: type=1400 audit(1759328110.549:348): avc: denied { write } for pid=1367 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.480987][ T338] usb 2-1: config 0 descriptor?? [ 68.792829][ T624] usb 2-1: USB disconnect, device number 7 [ 68.900133][ T1386] loop2: detected capacity change from 0 to 128 [ 68.928386][ T28] audit: type=1400 audit(1759328111.169:349): avc: denied { mount } for pid=1385 comm="syz.2.354" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.031335][ T28] audit: type=1400 audit(1759328111.269:350): avc: denied { create } for pid=1390 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.091276][ T28] audit: type=1400 audit(1759328111.299:351): avc: denied { ioctl } for pid=1390 comm="syz.3.356" path="socket:[20245]" dev="sockfs" ino=20245 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.249820][ T6] usb 1-1: device firmware changed [ 69.255126][ T6] usb 1-1: USB disconnect, device number 8 [ 69.452779][ T1406] loop1: detected capacity change from 0 to 4096 [ 69.575080][ T1406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.684595][ T1406] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.719539][ T1406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.789076][ T28] audit: type=1400 audit(1759328112.029:352): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.827578][ T1411] loop2: detected capacity change from 0 to 256 [ 69.843572][ T28] audit: type=1400 audit(1759328112.079:353): avc: denied { ioctl } for pid=1410 comm="syz.2.363" path="socket:[20258]" dev="sockfs" ino=20258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.866001][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 69.877489][ T28] audit: type=1400 audit(1759328112.109:354): avc: denied { bind } for pid=1410 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.096299][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 70.521748][ T284] EXT4-fs (loop1): unmounting filesystem. [ 70.535739][ T28] audit: type=1400 audit(1759328112.779:355): avc: denied { getopt } for pid=1413 comm="syz.2.364" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.755477][ T1422] loop0: detected capacity change from 0 to 512 [ 70.783089][ T28] audit: type=1400 audit(1759328112.959:356): avc: denied { set_context_mgr } for pid=1418 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.850031][ T1422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.878830][ T1422] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.898920][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.906299][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.063991][ T6] usb 1-1: device descriptor read/all, error -71 [ 71.064112][ T283] EXT4-fs (loop0): unmounting filesystem. [ 71.103513][ T324] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.118484][ T1305] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.153116][ T1444] loop0: detected capacity change from 0 to 4096 [ 71.160367][ T1444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.169135][ T1444] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.177415][ T1444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.335983][ T1305] usb 5-1: Using ep0 maxpacket: 32 [ 71.343686][ T1305] usb 5-1: config 0 has no interfaces? [ 71.356536][ T1305] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 71.366052][ T1305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.374539][ T1305] usb 5-1: Product: syz [ 71.379422][ T1305] usb 5-1: Manufacturer: syz [ 71.384184][ T1305] usb 5-1: SerialNumber: syz [ 71.392738][ T1305] usb 5-1: config 0 descriptor?? [ 71.600261][ T60] usb 5-1: USB disconnect, device number 6 [ 71.732308][ T1458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1458 comm=syz.2.381 [ 71.744940][ T1458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=1458 comm=syz.2.381 [ 72.006404][ T283] EXT4-fs (loop0): unmounting filesystem. [ 72.071356][ T1466] loop0: detected capacity change from 0 to 512 [ 72.080083][ T1466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.088080][ T1466] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.096127][ T1466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 72.104422][ T1466] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.111433][ T1466] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.120603][ T1466] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #16: comm syz.0.385: casefold flag without casefold feature [ 72.135210][ T1466] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.385: couldn't read orphan inode 16 (err -117) [ 72.147692][ T1466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.198435][ T1474] loop4: detected capacity change from 0 to 512 [ 72.208590][ T1474] EXT4-fs: Ignoring removed nobh option [ 72.216650][ T1474] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.228237][ T1474] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 72.238515][ T1474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.388: Corrupt directory, running e2fsck is recommended [ 72.251945][ T1474] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 72.261631][ T1474] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.388: corrupted in-inode xattr [ 72.273993][ T1474] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.388: couldn't read orphan inode 15 (err -117) [ 72.286303][ T1474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.312922][ T1478] device veth0_to_team entered promiscuous mode [ 72.328237][ T1474] capability: warning: `syz.4.388' uses 32-bit capabilities (legacy support in use) [ 72.455934][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 72.647008][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.657439][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.667271][ T19] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.676573][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 72.684654][ T19] usb 1-1: SerialNumber: syz [ 72.897658][ T19] usb 1-1: 0:2 : does not exist [ 72.907173][ T19] usb 1-1: USB disconnect, device number 11 [ 73.118085][ T287] EXT4-fs (loop4): unmounting filesystem. [ 73.126686][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.165927][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 73.172023][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.201109][ T1496] loop4: detected capacity change from 0 to 512 [ 73.219793][ T1496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.251312][ T1496] EXT4-fs (loop4): 1 truncate cleaned up [ 73.259645][ T1496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.293664][ T1496] EXT4-fs (loop4): shut down requested (2) [ 73.300978][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 73.300992][ T28] audit: type=1400 audit(1759328115.539:362): avc: denied { create } for pid=1495 comm="syz.4.395" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 73.349614][ T287] EXT4-fs (loop4): unmounting filesystem. [ 73.405798][ T283] EXT4-fs (loop0): unmounting filesystem. [ 73.436043][ T28] audit: type=1400 audit(1759328115.649:363): avc: denied { read } for pid=1502 comm="syz.2.397" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.466439][ T28] audit: type=1400 audit(1759328115.649:364): avc: denied { open } for pid=1502 comm="syz.2.397" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.519307][ T28] audit: type=1400 audit(1759328115.729:365): avc: denied { append } for pid=1502 comm="syz.2.397" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.521657][ T1508] loop2: detected capacity change from 0 to 512 [ 73.603110][ T1508] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.655940][ T1305] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.712620][ T1512] loop2: detected capacity change from 0 to 512 [ 73.729970][ T1512] EXT4-fs: Ignoring removed nobh option [ 73.745524][ T1512] EXT4-fs: dax option not supported [ 73.845957][ T1305] usb 5-1: Using ep0 maxpacket: 8 [ 73.852179][ T1305] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64 [ 73.872496][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 73.881069][ T1305] usb 5-1: config 1 interface 0 has no altsetting 0 [ 73.889917][ T1519] loop1: detected capacity change from 0 to 256 [ 73.897449][ T28] audit: type=1400 audit(1759328116.139:366): avc: denied { read write } for pid=1520 comm="syz.2.405" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.921648][ T1519] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.932309][ T1519] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 73.942369][ T1519] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 73.967242][ T1305] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 73.978502][ T1305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.985989][ T28] audit: type=1400 audit(1759328116.139:367): avc: denied { open } for pid=1520 comm="syz.2.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.986660][ T1305] usb 5-1: Product: syz [ 74.025982][ T1305] usb 5-1: Manufacturer: syz [ 74.029425][ T28] audit: type=1400 audit(1759328116.139:368): avc: denied { ioctl } for pid=1520 comm="syz.2.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.030622][ T1305] usb 5-1: SerialNumber: syz [ 74.036544][ T1501] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.075935][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 74.082356][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.098798][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 74.112355][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.129464][ T60] usb 1-1: config 0 descriptor?? [ 74.225969][ T338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 74.402002][ T1305] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 14 proto 1 vid 0x04B8 pid 0x0202 [ 74.433991][ T1305] usb 5-1: USB disconnect, device number 7 [ 74.444189][ T1305] usblp0: removed [ 74.548410][ T338] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 74.563228][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.594007][ T338] usb 2-1: SerialNumber: syz [ 74.619723][ T338] usb 2-1: config 0 descriptor?? [ 74.827938][ T28] audit: type=1400 audit(1759328118.075:369): avc: denied { write } for pid=1538 comm="syz.2.410" path="socket:[20505]" dev="sockfs" ino=20505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.837808][ T60] logitech-djreceiver 0003:046D:C51B.0005: hidraw0: USB HID v0.09 Device [HID 046d:c51b] on usb-dummy_hcd.0-1/input0 [ 74.853631][ T1305] usb 2-1: USB disconnect, device number 8 [ 75.110024][ T60] usb 1-1: USB disconnect, device number 12 [ 75.161474][ T1544] fido_id[1544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 75.253071][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.260469][ T28] audit: type=1400 audit(1759328118.505:370): avc: denied { connect } for pid=1547 comm="syz.2.412" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.310196][ T1552] loop2: detected capacity change from 0 to 512 [ 75.317300][ T1552] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 75.327545][ T28] audit: type=1400 audit(1759328118.575:371): avc: denied { mounton } for pid=1551 comm="syz.2.415" path="/proc/230/task" dev="proc" ino=21617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.480985][ T1567] loop2: detected capacity change from 0 to 128 [ 75.511098][ T1567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.533369][ T1567] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.658573][ T1580] device pim6reg1 entered promiscuous mode [ 76.085806][ T1596] loop0: detected capacity change from 0 to 4096 [ 76.099880][ T1596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.112789][ T1596] EXT4-fs (loop0): Test dummy encryption mode enabled [ 76.131477][ T1596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.136884][ T1598] device syzkaller0 entered promiscuous mode [ 76.234472][ T283] EXT4-fs (loop0): unmounting filesystem. [ 76.293731][ T1609] device pim6reg1 entered promiscuous mode [ 76.347441][ T286] EXT4-fs (loop2): unmounting filesystem. [ 76.394547][ T1615] loop2: detected capacity change from 0 to 4096 [ 76.407324][ T1615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.526013][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 76.850680][ T1628] loop1: detected capacity change from 0 to 4096 [ 76.869559][ T1628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.878614][ T1628] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.888700][ T1628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.997849][ T284] EXT4-fs (loop1): unmounting filesystem. [ 77.027138][ T19] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 77.040021][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.058977][ T19] usb 1-1: config 0 descriptor?? [ 77.149641][ T1651] device wg2 entered promiscuous mode [ 77.336017][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 77.336049][ T419] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.360192][ T286] EXT4-fs (loop2): unmounting filesystem. [ 78.145115][ T1680] syz.4.467[1680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.145195][ T1680] syz.4.467[1680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.231216][ T19] usb 1-1: Cannot set autoneg [ 78.257191][ T19] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 78.345751][ T1688] syz.4.470[1688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.345837][ T1688] syz.4.470[1688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.400859][ T1690] loop2: detected capacity change from 0 to 4096 [ 78.434819][ T624] usb 1-1: USB disconnect, device number 13 [ 78.470764][ T1690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.577902][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.845866][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 178.852915][ C1] (detected by 1, t=10002 jiffies, g=8077, q=402 ncpus=2) [ 178.860132][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294955097-4294945096), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 178.873518][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g8077 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 178.884664][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 178.894682][ C1] rcu: RCU grace-period kthread stack dump: [ 178.900604][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 178.911505][ C1] Call Trace: [ 178.914801][ C1] [ 178.917758][ C1] __schedule+0xb87/0x14e0 [ 178.922244][ C1] ? release_firmware_map_entry+0x194/0x194 [ 178.928175][ C1] ? __mod_timer+0x7ae/0xb30 [ 178.932807][ C1] schedule+0xbd/0x170 [ 178.936898][ C1] schedule_timeout+0x12c/0x2e0 [ 178.941782][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 178.947189][ C1] ? __cfi_process_timeout+0x10/0x10 [ 178.952590][ C1] ? prepare_to_swait_event+0x308/0x320 [ 178.958165][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 178.963032][ C1] ? __cfi_dyntick_save_progress_counter+0x10/0x10 [ 178.969549][ C1] ? rcu_gp_init+0xf10/0xf10 [ 178.974155][ C1] rcu_gp_kthread+0x95/0x370 [ 178.978758][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 178.983978][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 178.989199][ C1] ? __kasan_check_read+0x11/0x20 [ 178.994245][ C1] ? __kthread_parkme+0x142/0x180 [ 178.999283][ C1] kthread+0x281/0x320 [ 179.003379][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 179.008625][ C1] ? __cfi_kthread+0x10/0x10 [ 179.013247][ C1] ret_from_fork+0x1f/0x30 [ 179.017701][ C1] [ 179.020758][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 179.027100][ C1] CPU: 1 PID: 1690 Comm: syz.2.471 Not tainted syzkaller #0 [ 179.034486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.044558][ C1] RIP: 0010:handle_softirqs+0x144/0x600 [ 179.050125][ C1] Code: 85 e8 a0 b6 aa 03 65 66 89 1d c8 b3 c0 7e 48 c7 c7 80 04 49 85 e8 8c b6 aa 03 65 44 89 25 4c b1 bf 7e fb 49 c7 c5 c0 a0 e0 86 <44> 89 65 ac b8 ff ff ff ff 0f bc 45 ac 89 c3 ff c3 0f 84 a2 02 00 [ 179.069776][ C1] RSP: 0018:ffffc900001b0f30 EFLAGS: 00000286 [ 179.075875][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 4d400ca038f3ad00 [ 179.083989][ C1] RDX: 1ffffffff0f2d408 RSI: ffffffff85490480 RDI: ffffffff85aa10e0 [ 179.091989][ C1] RBP: ffffc900001b0fc0 R08: ffffffff8796a048 R09: ffffffff8796a058 [ 179.099981][ C1] R10: ffffffff8796a043 R11: 1ffffffff0f2d408 R12: 0000000000000000 [ 179.107977][ C1] R13: ffffffff86e0a0c0 R14: 0000000000000008 R15: ffff88812047bcc0 [ 179.115962][ C1] FS: 00007f2e5887f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 179.124902][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.131586][ C1] CR2: 000000110c29aad8 CR3: 000000011e42f000 CR4: 00000000003506a0 [ 179.139578][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.147566][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.155551][ C1] Call Trace: [ 179.158839][ C1] [ 179.161701][ C1] ? irqtime_account_irq+0xc4/0x240 [ 179.166936][ C1] __irq_exit_rcu+0x52/0xf0 [ 179.171459][ C1] irq_exit_rcu+0x9/0x10 [ 179.175889][ C1] sysvec_irq_work+0xa6/0xc0 [ 179.180502][ C1] [ 179.183438][ C1] [ 179.186381][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 179.191346][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 179.197266][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ea f9 56 01 5d c3 0f 1f 84 00 00 00 00 [ 179.216983][ C1] RSP: 0018:ffffc90000a3fc20 EFLAGS: 00000246 [ 179.223124][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 179.231111][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 179.239102][ C1] RBP: ffffc90000a3fc20 R08: dffffc0000000000 R09: fffff52000147f81 [ 179.247088][ C1] R10: 0000000000000000 R11: ffffffff813434d0 R12: 0000000000000000 [ 179.255163][ C1] R13: dffffc0000000001 R14: ffffffff86494b60 R15: dffffc0000000000 [ 179.263164][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 179.269013][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 179.274150][ C1] arch_irq_work_raise+0x98/0xf0 [ 179.279114][ C1] __irq_work_queue_local+0x115/0x190 [ 179.284514][ C1] irq_work_queue+0x9e/0x150 [ 179.289124][ C1] bpf_send_signal_common+0x2b2/0x420 [ 179.294630][ C1] ? __set_printk_clr_event+0x80/0x80 [ 179.300035][ C1] ? __cfi_do_futex+0x10/0x10 [ 179.304747][ C1] bpf_send_signal+0x19/0x20 [ 179.309355][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 179.314838][ C1] bpf_trace_run2+0xff/0x250 [ 179.319450][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 179.324677][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 179.329810][ C1] trace_sys_enter+0x3d/0x50 [ 179.334416][ C1] syscall_trace_enter+0xf3/0x150 [ 179.339462][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 179.345211][ C1] do_syscall_64+0x24/0xa0 [ 179.349640][ C1] ? clear_bhb_loop+0x30/0x80 [ 179.354351][ C1] ? clear_bhb_loop+0x30/0x80 [ 179.359052][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.364962][ C1] RIP: 0033:0x7f2e5798eec9 [ 179.369387][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.389019][ C1] RSP: 002b:00007f2e5887f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.397454][ C1] RAX: ffffffffffffffda RBX: 00007f2e57be5fa8 RCX: 00007f2e5798eec9 [ 179.405467][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e57be5fa8 [ 179.413458][ C1] RBP: 00007f2e57be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 179.421443][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.429431][ C1] R13: 00007f2e57be6038 R14: 00007fffdc968250 R15: 00007fffdc968338 [ 179.437424][ C1] [ 285.486633][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 206s! [ 285.495888][ C0] Showing busy workqueues and worker pools: [ 285.501812][ C0] workqueue events: flags=0x0 [ 285.506542][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.506593][ C0] pending: kfree_rcu_monitor, key_garbage_collector [ 285.506726][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 285.506764][ C0] pending: bpf_prog_free_deferred, bpf_prog_free_deferred, vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor [ 285.506944][ C0] workqueue events_unbound: flags=0x2 [ 285.546519][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 285.546562][ C0] in-flight: 10:fsnotify_connector_destroy_workfn, 1434:fsnotify_mark_destroy_workfn [ 285.546617][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 285.546786][ C0] workqueue events_power_efficient: flags=0x80 [ 285.577552][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 285.577603][ C0] pending: neigh_managed_work, neigh_periodic_work, neigh_managed_work, neigh_periodic_work, check_lifetime [ 285.577718][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.577756][ C0] pending: wg_ratelimiter_gc_entries, gc_worker [ 285.577809][ C0] workqueue rcu_gp: flags=0x8 [ 285.616177][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.616224][ C0] pending: process_srcu, srcu_invoke_callbacks, process_srcu [ 285.616289][ C0] workqueue netns: flags=0xe000a [ 285.636651][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 285.636692][ C0] in-flight: 343:cleanup_net [ 285.636734][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.654049][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.654095][ C0] pending: vmstat_update [ 285.654141][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.654178][ C0] pending: vmstat_update [ 285.654213][ C0] workqueue writeback: flags=0x4a [ 285.683820][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 285.683861][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 285.683930][ C0] workqueue kblockd: flags=0x18 [ 285.703133][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 285.703253][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 285.703362][ C0] workqueue usb_hub_wq: flags=0x4 [ 285.724996][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.725043][ C0] in-flight: 624:hub_event hub_event [ 285.725492][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.744241][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.744292][ C0] pending: work_fn [ 285.744332][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.761788][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 285.761844][ C0] pending: addrconf_verify_work [ 285.761966][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 285.762012][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 285.762059][ C0] pending: addrconf_verify_work [ 285.762082][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 285.762270][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.807176][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.807224][ C0] pending: wg_packet_handshake_send_worker [ 285.807257][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.825985][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.826038][ C0] pending: wg_packet_encrypt_worker [ 285.826074][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.826113][ C0] pending: wg_packet_encrypt_worker [ 285.826143][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.857562][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.857607][ C0] pending: wg_packet_handshake_send_worker [ 285.857639][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.876348][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.876397][ C0] pending: wg_packet_encrypt_worker [ 285.876430][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.876471][ C0] pending: wg_packet_encrypt_worker [ 285.876500][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.907920][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.907966][ C0] pending: wg_packet_handshake_send_worker [ 285.907998][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.926661][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.926708][ C0] pending: wg_packet_encrypt_worker [ 285.926740][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.926779][ C0] pending: wg_packet_encrypt_worker [ 285.926808][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.958619][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.958659][ C0] pending: wg_packet_encrypt_worker [ 285.958686][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.958719][ C0] pending: wg_packet_encrypt_worker [ 285.958747][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.990507][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.990553][ C0] pending: wg_packet_encrypt_worker [ 285.990585][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.990622][ C0] pending: wg_packet_encrypt_worker [ 285.990651][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.022104][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.022151][ C0] pending: wg_packet_handshake_send_worker [ 286.022185][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.040873][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.040923][ C0] pending: wg_packet_encrypt_worker [ 286.040957][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.040997][ C0] pending: wg_packet_encrypt_worker [ 286.041026][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.072620][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.072666][ C0] pending: wg_packet_handshake_send_worker [ 286.072699][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.091378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.091424][ C0] pending: wg_packet_encrypt_worker [ 286.091458][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.091497][ C0] pending: wg_packet_encrypt_worker [ 286.091528][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.123208][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.123258][ C0] pending: wg_packet_encrypt_worker [ 286.123291][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.123330][ C0] pending: wg_packet_encrypt_worker [ 286.123358][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.155197][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.155251][ C0] pending: wg_packet_encrypt_worker [ 286.155284][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.155325][ C0] pending: wg_packet_encrypt_worker [ 286.155353][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.186935][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.186983][ C0] pending: wg_packet_handshake_send_worker [ 286.187017][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.205691][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.205738][ C0] pending: wg_packet_encrypt_worker [ 286.205773][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.205815][ C0] pending: wg_packet_encrypt_worker [ 286.232229][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.237543][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.237593][ C0] pending: wg_packet_encrypt_worker [ 286.237626][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.237664][ C0] pending: wg_packet_encrypt_worker [ 286.237693][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.269396][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.269445][ C0] pending: wg_packet_encrypt_worker [ 286.269477][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.269516][ C0] pending: wg_packet_encrypt_worker [ 286.269544][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.300978][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.301024][ C0] pending: wg_packet_handshake_send_worker [ 286.301058][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.319782][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.319844][ C0] pending: wg_packet_encrypt_worker [ 286.319880][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.319919][ C0] pending: wg_packet_encrypt_worker [ 286.320039][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.351904][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.351965][ C0] pending: wg_packet_encrypt_worker [ 286.352001][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.352040][ C0] pending: wg_packet_encrypt_worker [ 286.352068][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.383571][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.383621][ C0] pending: wg_packet_handshake_send_worker [ 286.383655][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.402330][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.402378][ C0] pending: wg_packet_encrypt_worker [ 286.402410][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.402450][ C0] pending: wg_packet_encrypt_worker [ 286.402573][ C0] workqueue hci0: flags=0xa0012 [ 286.433825][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 286.433947][ C0] pending: hci_cmd_timeout [ 286.433978][ C0] workqueue hci0: flags=0xa0012 [ 286.450855][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=4 [ 286.450892][ C0] in-flight: 1658:hci_power_on BAR(1702) [ 286.450937][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=207s workers=7 idle: 1305 24 291 338 40 651 [ 286.451087][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=207s workers=6 idle: 43 324 8 [ 286.451138][ C0] pool 5: cpus=0-1 flags=0x4 nice=-20 hung=205s workers=4 idle: 472 419 45