last executing test programs: 19.036104693s ago: executing program 0 (id=116): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x7, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/45) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2040092, 0x0) fcntl$lock(r1, 0x7, 0x0) fcntl$lock(r1, 0x6, 0x0) 18.948691923s ago: executing program 0 (id=117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (fail_nth: 9) fcntl$lock(r0, 0x7, 0x0) fcntl$lock(r0, 0x6, 0x0) 18.232394727s ago: executing program 0 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) 18.192153217s ago: executing program 0 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='dots,nodots,dots,dots,nodots,nodots,nocase,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c71756965742c747a3d5554432c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c646f74732c00447a0423afa1456047f9ca5f6da4ff5eade421c93700a1b7b99101cf529cacdba8b5c93ff0d19c155ad70fe508c69d"], 0x1, 0x1fc, &(0x7f00000008c0)="$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") 17.960747584s ago: executing program 0 (id=121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x1bc, 0x33, 0xc0a, 0x70bd28, 0x25dfdbfc, {0x20}, [@typed={0x8, 0x10a, 0x0, 0x0, @uid}, @typed={0x8, 0x149, 0x0, 0x0, @pid}, @nested={0x185, 0x2c, 0x0, 0x1, [@generic="6cfaea48e0c2bdfd9cd216c60ff4980e80702440d8a60783d628630d0f73149d3a95da7f44cb6346fad1bbf10f053fcf10233874f28a8768ad318359e39d21cfe8db4a859448579503803a894cff1a271cd84e5cdba0ee4c6e63de8edbf2b9076dbdcd87eaf2699354e0cf860ccad39ef035ad02cab44723a6beca2a8eed5adefc23d8f8d207a88b86a300cafb6a27dae04073ae9a232a23881ca6df29b926556995af0aa3a8b1d4d97ae8a145fe0f0509df18a1c5fadc5a4a8630a47e4634c721854c7d266053def2", @generic="2af7a7fef41c7882d835d9f7fac1e24c68da55556387326d5b9799369fcdc4a19b2c6fa2c93db9cdec7d2c91b4c5031d14b159e5ddbeacffa1dd453d1b3ddf113e5fa671df9ff3840c21d5190462e51f4c1a2ab12704b16b376b1ad769a94701cce46765fd6c6e3603251efe0d81fb1376625000b5126a0a3a0dc7effa1405096bfd6c082564b61da1a629ddfdd17872212a217cda6fcea11c8ffcb4f1b4647baebdaecd2c1217ecfb474636", @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x57}]}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x65, 0x0, 0x0, @uid}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) 17.799694636s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x800799c) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414aa00000000000000000000000000000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000101000000003200000000000000000000010000000000000000000000000000000000000000000000000000dc37e900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a00040000000000000000004800010078636263286165732900"/222], 0x138}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000500000000000000", @ANYRES32, @ANYBLOB="00000100000000000000000000662e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400020000000000000000030000001801000020756c2500000000002020207b1a863bbd5f1cd22ca500000000000007010000f8ffffffb702000008000000b7030000000800008500090000000000950000000000000000000000000000000000000033dcad6289122b66cc3a0f8bd6f979a2cd876ca57f00d5ebb72490fcfdce5f424e3aa80a2a2cf53acb0a04f9855047c7e4b43f3fbcf6517a57bd93297b514d850241097ee608d4bd162df61e859a29aded0dc8e198a21c"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0xb, 0x1, 0x4, 0x9, 0xa4, 0x7f, 0x7, 0xb69, 0x101, 0x0, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x0, 0xfffffffa, 0x401, 0x7, 0x9, 0x8, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x2a1, 0xe, 0x2b13, 0x100, 0x6, 0xbd50, 0xb, 0x40, 0xbed4, 0x80000001, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x100002, 0x1, 0xd44, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x2, 0x7, 0x0, 0x3, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2ad, 0xf7, 0x5, 0x1, 0x6, 0x7ff, 0xa, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8003, 0x400000, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x16, 0x1, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x3ff, 0x100, 0x85, 0x5b, 0x81, 0x338, 0x8, 0x20006, 0x5, 0x200000, 0x6, 0x2, 0x3, 0xd, 0x2a2, 0xfffffffd, 0x20007, 0x2, 0x3, 0x8, 0x0, 0x7, 0x2, 0x40, 0x78c, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0xc61, 0x7fff, 0xfffffffa, 0xc5c, 0xffffffff]}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) 17.799412806s ago: executing program 32 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x800799c) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414aa00000000000000000000000000000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000101000000003200000000000000000000010000000000000000000000000000000000000000000000000000dc37e900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a00040000000000000000004800010078636263286165732900"/222], 0x138}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000500000000000000", @ANYRES32, @ANYBLOB="00000100000000000000000000662e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400020000000000000000030000001801000020756c2500000000002020207b1a863bbd5f1cd22ca500000000000007010000f8ffffffb702000008000000b7030000000800008500090000000000950000000000000000000000000000000000000033dcad6289122b66cc3a0f8bd6f979a2cd876ca57f00d5ebb72490fcfdce5f424e3aa80a2a2cf53acb0a04f9855047c7e4b43f3fbcf6517a57bd93297b514d850241097ee608d4bd162df61e859a29aded0dc8e198a21c"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0xb, 0x1, 0x4, 0x9, 0xa4, 0x7f, 0x7, 0xb69, 0x101, 0x0, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x0, 0xfffffffa, 0x401, 0x7, 0x9, 0x8, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x2a1, 0xe, 0x2b13, 0x100, 0x6, 0xbd50, 0xb, 0x40, 0xbed4, 0x80000001, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x100002, 0x1, 0xd44, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x2, 0x7, 0x0, 0x3, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2ad, 0xf7, 0x5, 0x1, 0x6, 0x7ff, 0xa, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8003, 0x400000, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x16, 0x1, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x3ff, 0x100, 0x85, 0x5b, 0x81, 0x338, 0x8, 0x20006, 0x5, 0x200000, 0x6, 0x2, 0x3, 0xd, 0x2a2, 0xfffffffd, 0x20007, 0x2, 0x3, 0x8, 0x0, 0x7, 0x2, 0x40, 0x78c, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0xc61, 0x7fff, 0xfffffffa, 0xc5c, 0xffffffff]}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) 16.377005656s ago: executing program 5 (id=125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) socket$inet(0x2, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,euid>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f726f6c653d2c686173682c617070726190d46068e66c6162656c2c73758c9ad95d7365723d6d656d6f72792e6576656e74732e6c6f63616c002c646f6e74"]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x31) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0881}, 0x1000) 6.539931409s ago: executing program 4 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xa, 0x29, {0x29, 0x24, "0916c65c2316e7d5d37bea1f2206ff258d8c256389e71abdaf6606c6e62f4c24685ccc70c4deeb"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000007c0)={0x84, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1ea4, 0x1, [0xf]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xab7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x65}, 0x0, 0x0}) 4.423105898s ago: executing program 3 (id=244): syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xa0, 0x5b}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@generic={0x14, 0x10, 0xa, "3d2c04477ef10bb35d7fb7fb64883b026c"}, @ptm_cap={0x3}]}}) 3.549505845s ago: executing program 4 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 3.542743043s ago: executing program 4 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.461995275s ago: executing program 1 (id=250): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004) 3.460897804s ago: executing program 4 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r5, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 3.435073628s ago: executing program 1 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2, 0x0) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3.047710748s ago: executing program 2 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.944122154s ago: executing program 2 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0xfff3}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x1, 0xce7b, 0x4, 0x9, 0x1ce, 0x429, 0x2e6, 0x6, 0x9, 0x80000001, 0x6, 0x0, 0xa03e, 0x3, 0x2, 0x8, 0x7, 0x5, 0x61, 0x3, 0x200, 0x0, 0x74a, 0xb, 0x5, 0x2, 0x4000000, 0xb, 0xc5c9, 0x600, 0x1, 0x0, 0x5, 0x3, 0xfffffff8, 0x9, 0x3, 0x7, 0x0, 0x1000007, 0xd, 0x2a33, 0xd, 0x6ae, 0x3, 0x6, 0x7152, 0x3, 0x1, 0x4, 0x3ff, 0x3ff, 0x401, 0x46, 0x8, 0x1, 0x4, 0x4, 0xcb3b, 0x3, 0xa664, 0x7, 0xbb0d, 0x0, 0xb76, 0x9, 0x5, 0x9, 0x10000, 0x2, 0x6, 0x6, 0x200, 0xc42, 0x3, 0x8, 0x1, 0xfffffffc, 0x10001, 0x1, 0xc, 0x0, 0x4, 0x80000000, 0x6, 0xff, 0x0, 0x4, 0x5, 0x7, 0x1, 0x9, 0x1, 0x6, 0x7, 0xe3, 0x0, 0x91c, 0x44, 0x7, 0x10001, 0x8001, 0x0, 0x8, 0x4, 0x8, 0x5, 0x5, 0x3, 0x1db, 0x7, 0x7fffffff, 0x8, 0x4caf, 0x3, 0xfc1d, 0x9, 0x8001, 0x1, 0x2, 0x1c000000, 0x3, 0xe, 0x200, 0x6, 0x9, 0x2b3, 0xfffffff7, 0xfffffff8, 0x6, 0x921, 0x7, 0x8, 0x1, 0x2, 0xfffffffa, 0x0, 0xb, 0x9, 0x6, 0x8, 0xff, 0x8, 0x2, 0x101, 0x8, 0x0, 0x401, 0x8, 0x3, 0x6, 0x6, 0x10, 0x4, 0x0, 0x5, 0x1, 0x3, 0x6, 0x9, 0x75e1, 0x8, 0x9, 0x3ff, 0x6, 0xffff, 0x5, 0x3, 0x4, 0x0, 0x2a8ff6be, 0x441, 0x1, 0x3ff, 0x80000001, 0x4, 0x8, 0x200, 0xfffffffb, 0x9, 0x10001, 0x6, 0x81, 0x200, 0x1, 0x7, 0x3, 0x8, 0x2f, 0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffff, 0x80, 0x8000, 0x6, 0x7e0, 0xfffffffb, 0x6, 0x7ff, 0x3, 0x5, 0x1, 0x6, 0x1, 0xc17, 0x8, 0x8, 0xfffffff1, 0xe6800, 0x1, 0x80000001, 0x8, 0x5486b9d3, 0x8, 0x7fffffff, 0x3, 0x7, 0x1, 0x5, 0x3, 0x2, 0x8, 0x2, 0x1f, 0x20, 0x0, 0x5, 0x1, 0x8, 0x2, 0x406, 0x7, 0x1, 0x6, 0x9, 0x7fff, 0x3, 0x5, 0x5, 0xfffffffa, 0x4, 0x6, 0x80, 0x1166, 0x8, 0xa44c, 0x9, 0x5, 0x3, 0xffffff49, 0x9, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 2.943894294s ago: executing program 2 (id=257): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)="bc263d7f455169251dc0ac2707d978a06fffc49727783f1a8f7bc38262c61dd060fbfb2a86865578be93be281bb71fd035896c85e9179a87deaced2a55ecb9217cfa7c3b41b7f7b2c726933e601290c97b9984fb7d6ef6ff2bdfc1ad457199e99d7170b5322bd085aeaa786e365ed06082e58ccda390fd046d907dc982517001636335d7dfa35262cde7f2b76e48c0b2b4411235b8b8ec9a566d2f75a4611a2244460b7ca85a3cefe43ba6ef2a60ddb86917fe6a60d3008e226ccaba38a6aa", 0xbf}], 0x1) 2.870111037s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 2.572978438s ago: executing program 2 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 2.516133254s ago: executing program 4 (id=260): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.510842513s ago: executing program 1 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x2) 2.510442513s ago: executing program 3 (id=262): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x8040100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) 2.477079175s ago: executing program 3 (id=263): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b405000000000100611078000000000063512c00000000009500000000000000738ef650930f454218e1a9e9f16aede356c03bbd599380767544c0c1dcb552a0021f3a8e49e0569329d29028a75efbc4e22f58e114c9c70f5f8cda3ea91c5b7c23a83b5abdadea0c56b5fb4bea006ad40877b9db5a9b92febb32831adc18dc30238638ff95f9359aaea36d71965a774ad2ac8ad58849c6829cdf194e2d2f5e69b90638cc7bf5d29935e39e1a704904f863759e6c6fcbb3d121b921aba12895b8e9349b6e46d4fb3820f79629851e0a0f4f9f8504e3fd49263a1d2f9e046eb351df6a3a7fed9fe00ab494884bb19a1d32617b04e950ce59e3cfc58cb1be0f59354eb8171e3b9ab4fc0ce5868514e2b392b15b5efaa8e374ed7ddc5e50261edcf4516a003a5ba8df5ce8d855e39d692447af7aca4d5c726ddfd7a5304f5afedacad05449cd45aff97048939d5c95fe9b5fb2086dfb32f165a47551fa1128d57d58233eea9de8c0795b8f30f0057ac31006"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 2.438246996s ago: executing program 1 (id=264): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') getdents64(r0, &(0x7f0000001300)=""/4096, 0x1000) 2.437968647s ago: executing program 1 (id=265): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0xffffffff, 0x10, 0x8, 0x1, 0x8, 0x1, 0x9, 0x73, 0x40, 0xc, 0xfc}, {0x8080000, 0x30000, 0xc, 0x9, 0x0, 0x8, 0xff, 0x3, 0x7, 0x3, 0xf, 0x7}, {0xf000, 0xd05c0d4c30c53a79, 0xb, 0x7, 0x4, 0x76, 0x3, 0xf1, 0x0, 0x0, 0x3}, {0xdddd0000, 0x1000, 0x8, 0x4, 0x8, 0x1, 0x3, 0x7, 0xd, 0x5, 0x23}, {0x0, 0xc000, 0xf, 0x6, 0xec, 0x6, 0x6, 0x2e, 0x0, 0x8, 0x5, 0xec}, {0x3000, 0xffff1000, 0x9, 0x80, 0xd, 0xfe, 0x23, 0x5, 0x3, 0x3, 0xd, 0x1}, {0x50000, 0x26000, 0x0, 0x98, 0x7, 0x69, 0x5, 0x7, 0x2, 0x0, 0x9, 0x2}, {0x2002, 0x58000, 0xc, 0x3b, 0x2, 0x9, 0x3, 0x4, 0x3, 0x9, 0x8, 0x6}, {0x25000, 0xd9a4}, {0xe000, 0x4}, 0x20000000, 0x0, 0xeeee0000, 0x100090, 0x3, 0x4000, 0x30000, [0x3, 0x8, 0x5, 0x800]}) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80800) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0xafb, 0x7, 0x4, 0x80}, {0x5d6, 0x7f, 0x5d, 0x9}, {0xfffc, 0x10, 0x4, 0x9}, {0x4, 0x6, 0xa5, 0x401}, {0x2, 0x0, 0x2, 0x7}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r3, 0x561, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x69}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @enum64={0xd, 0x7, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x80000001, 0xc}, {0xd, 0x5, 0x3}, {0x1, 0x1, 0xfffffc75}, {0x2, 0x5, 0x3}, {0x2, 0x7f, 0x8}, {0x10, 0x15f, 0x9}, {0xf, 0x9, 0x5}]}]}, {0x0, [0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000580)=""/52, 0xbe, 0x34, 0x0, 0x3}, 0x28) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x6d, {0x9, 0x21, 0x10, 0x6, 0x1, {0x22, 0x3c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3af, 0x7, 0x8, 0x8}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x6, 0xf7, 0x10, 0x8}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000940)=@string={0x9b, 0x3, "f886e6cf5a379083c6e4c9bfcd1129adf6929d664e2621a32b377d047d75218eca72a8a49ffe1019867d9cf3786ad93e2cf44a4aa5b6be04a9740919c954b13b083b4b13d629dcd4214c80957b3d44bc86a4d9fb50a0860b1898220ede29d3b47c01039486b4016886cbe40d51dacee75e44a227d7c68da28736bffc034ac0dd42cdb04a06ecda0acc45054a05f88e206f5890c9ce13349e8c"}}, {0x2a, &(0x7f0000000a00)=@string={0x2a, 0x3, "1c7e2beaa24b8c38025af1d8c306c8b591a2bb137cfe1a71d61bd86e54e25d571ee8d75d2abc319f"}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000002180)={0x0, 0x1, 0x6, @multicast}, 0x10) syz_usb_connect$uac3(0x0, 0xac, &(0x7f0000003500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xd, 0xc0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x27, 0x7f}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x1, 0x5, 0x9, 0x1ff, 0x0, 0x5}, @mixer_unit={0xa, 0x24, 0x5, 0x2, 0x6, "0543dfe5ef"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x10, 0x6, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0xa9, 0x8, {0xa, 0x25, 0x25, 0x7f4, 0x2e, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x5, 0x9, {0xa, 0x25, 0x25, 0x7, 0x4b, 0x7}}}}}}}}]}}, &(0x7f0000003800)={0xa, &(0x7f00000035c0)={0xa, 0x6, 0x250, 0x0, 0x8d, 0x4, 0x20, 0x8}, 0x108, &(0x7f0000003600)={0x5, 0xf, 0x108, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "01935ca7feda2a569d70fc150b81fb96"}, @generic={0xc4, 0x10, 0x2, "3bbadb6819be64cf7f7a209af109d49d5949836a8e89bc2ccfbb58ad153f07c2a96b7aa97c4627a854db9317f3483a41d6ceeed7911cea30118f0e924795690f3ba91c25b5fa6021ede7d81ed7286e8f479168c56f616980c4d01dc1b7c06ad1e6fb427cff32907b42a3547281ee9029bff2f43d967266b6678c2b4a7abda54a82e2d4e7078bc51869e69170560870484aab317f3b308618c41f6afce49ac80a3f7e3b55d322ce145813cb1e9c91048ac0e6db6acb7051d6aaed349b4fb0bb8501"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0x9, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "372113c2e82028ae761f3d26e94a5d79"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2c, 0x81}]}, 0x3, [{0x4, &(0x7f0000003740)=@lang_id={0x4}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0xc09}}]}) 1.673008758s ago: executing program 2 (id=266): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x2, 0x552e, &(0x7f00000004c0)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 933.094727ms ago: executing program 33 (id=125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) socket$inet(0x2, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,euid>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f726f6c653d2c686173682c617070726190d46068e66c6162656c2c73758c9ad95d7365723d6d656d6f72792e6576656e74732e6c6f63616c002c646f6e74"]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x31) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0881}, 0x1000) 866.549451ms ago: executing program 3 (id=268): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) fsync(0xffffffffffffffff) 859.265129ms ago: executing program 3 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) 836.325834ms ago: executing program 3 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x2020) lseek(r0, 0x3, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = socket(0x2b, 0x6, 0x3) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x1004054, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, @rand_addr=' \x01\x00', [@fragment={0x2, 0x0, 0xff, 0x1, 0x0, 0xa, 0x64}]}}}}}}}, 0x0) 573.266533ms ago: executing program 1 (id=271): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0xffffffff, 0x10, 0x8, 0x1, 0x8, 0x1, 0x9, 0x73, 0x40, 0xc, 0xfc}, {0x8080000, 0x30000, 0xc, 0x9, 0x0, 0x8, 0xff, 0x3, 0x7, 0x3, 0xf, 0x7}, {0xf000, 0xd05c0d4c30c53a79, 0xb, 0x7, 0x4, 0x76, 0x3, 0xf1, 0x0, 0x0, 0x3}, {0xdddd0000, 0x1000, 0x8, 0x4, 0x8, 0x1, 0x3, 0x7, 0xd, 0x5, 0x23}, {0x0, 0xc000, 0xf, 0x6, 0xec, 0x6, 0x6, 0x2e, 0x0, 0x8, 0x5, 0xec}, {0x3000, 0xffff1000, 0x9, 0x80, 0xd, 0xfe, 0x23, 0x5, 0x3, 0x3, 0xd, 0x1}, {0x50000, 0x26000, 0x0, 0x98, 0x7, 0x69, 0x5, 0x7, 0x2, 0x0, 0x9, 0x2}, {0x2002, 0x58000, 0xc, 0x3b, 0x2, 0x9, 0x3, 0x4, 0x3, 0x9, 0x8, 0x6}, {0x25000, 0xd9a4}, {0xe000, 0x4}, 0x20000000, 0x0, 0xeeee0000, 0x100090, 0x3, 0x4000, 0x30000, [0x3, 0x8, 0x5, 0x800]}) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80800) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0xafb, 0x7, 0x4, 0x80}, {0x5d6, 0x7f, 0x5d, 0x9}, {0xfffc, 0x10, 0x4, 0x9}, {0x4, 0x6, 0xa5, 0x401}, {0x2, 0x0, 0x2, 0x7}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r3, 0x561, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x69}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @enum64={0xd, 0x7, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x80000001, 0xc}, {0xd, 0x5, 0x3}, {0x1, 0x1, 0xfffffc75}, {0x2, 0x5, 0x3}, {0x2, 0x7f, 0x8}, {0x10, 0x15f, 0x9}, {0xf, 0x9, 0x5}]}]}, {0x0, [0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000580)=""/52, 0xbe, 0x34, 0x0, 0x3}, 0x28) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x6d, {0x9, 0x21, 0x10, 0x6, 0x1, {0x22, 0x3c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3af, 0x7, 0x8, 0x8}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x6, 0xf7, 0x10, 0x8}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x9b, &(0x7f0000000940)=@string={0x9b, 0x3, "f886e6cf5a379083c6e4c9bfcd1129adf6929d664e2621a32b377d047d75218eca72a8a49ffe1019867d9cf3786ad93e2cf44a4aa5b6be04a9740919c954b13b083b4b13d629dcd4214c80957b3d44bc86a4d9fb50a0860b1898220ede29d3b47c01039486b4016886cbe40d51dacee75e44a227d7c68da28736bffc034ac0dd42cdb04a06ecda0acc45054a05f88e206f5890c9ce13349e8c"}}, {0x2a, &(0x7f0000000a00)=@string={0x2a, 0x3, "1c7e2beaa24b8c38025af1d8c306c8b591a2bb137cfe1a71d61bd86e54e25d571ee8d75d2abc319f"}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000002180)={0x0, 0x1, 0x6, @multicast}, 0x10) syz_usb_connect$uac3(0x0, 0xac, &(0x7f0000003500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xd, 0xc0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x27, 0x7f}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x1, 0x5, 0x9, 0x1ff, 0x0, 0x5}, @mixer_unit={0xa, 0x24, 0x5, 0x2, 0x6, "0543dfe5ef"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x10, 0x6, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0xa9, 0x8, {0xa, 0x25, 0x25, 0x7f4, 0x2e, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x5, 0x9, {0xa, 0x25, 0x25, 0x7, 0x4b, 0x7}}}}}}}}]}}, &(0x7f0000003800)={0xa, &(0x7f00000035c0)={0xa, 0x6, 0x250, 0x0, 0x8d, 0x4, 0x20, 0x8}, 0x108, &(0x7f0000003600)={0x5, 0xf, 0x108, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "01935ca7feda2a569d70fc150b81fb96"}, @generic={0xc4, 0x10, 0x2, "3bbadb6819be64cf7f7a209af109d49d5949836a8e89bc2ccfbb58ad153f07c2a96b7aa97c4627a854db9317f3483a41d6ceeed7911cea30118f0e924795690f3ba91c25b5fa6021ede7d81ed7286e8f479168c56f616980c4d01dc1b7c06ad1e6fb427cff32907b42a3547281ee9029bff2f43d967266b6678c2b4a7abda54a82e2d4e7078bc51869e69170560870484aab317f3b308618c41f6afce49ac80a3f7e3b55d322ce145813cb1e9c91048ac0e6db6acb7051d6aaed349b4fb0bb8501"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0x9, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "372113c2e82028ae761f3d26e94a5d79"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2c, 0x81}]}, 0x3, [{0x4, &(0x7f0000003740)=@lang_id={0x4}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0xc09}}]}) 0s ago: executing program 4 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x2020) lseek(r0, 0x3, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = socket(0x2b, 0x6, 0x3) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x2400c010) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x1004054, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, @rand_addr=' \x01\x00', [@fragment={0x2, 0x0, 0xff, 0x1, 0x0, 0xa, 0x64}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 22.602079][ T24] audit: type=1400 audit(1772270680.570:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.603044][ T267] cgroup: Unknown subsys name 'net' [ 22.624722][ T24] audit: type=1400 audit(1772270680.570:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.651958][ T24] audit: type=1400 audit(1772270680.600:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.652243][ T267] cgroup: Unknown subsys name 'devices' [ 22.792238][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.798273][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.994274][ T24] audit: type=1400 audit(1772270680.960:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.017437][ T24] audit: type=1400 audit(1772270680.960:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.042118][ T24] audit: type=1400 audit(1772270680.960:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.068683][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.077523][ T24] audit: type=1400 audit(1772270681.040:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.103000][ T24] audit: type=1400 audit(1772270681.040:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.129211][ T24] audit: type=1400 audit(1772270681.090:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.154752][ T24] audit: type=1400 audit(1772270681.090:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.154893][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.668062][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.675268][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.682687][ T275] device bridge_slave_0 entered promiscuous mode [ 23.690267][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697329][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.704589][ T275] device bridge_slave_1 entered promiscuous mode [ 23.786445][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.793619][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.800986][ T278] device bridge_slave_0 entered promiscuous mode [ 23.807777][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.814821][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.822220][ T278] device bridge_slave_1 entered promiscuous mode [ 23.849361][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.856484][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.863843][ T282] device bridge_slave_0 entered promiscuous mode [ 23.872968][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.879989][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.887391][ T282] device bridge_slave_1 entered promiscuous mode [ 23.914469][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.921613][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.928943][ T276] device bridge_slave_0 entered promiscuous mode [ 23.937941][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.945021][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.952380][ T276] device bridge_slave_1 entered promiscuous mode [ 24.024224][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.031301][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.038629][ T279] device bridge_slave_0 entered promiscuous mode [ 24.045462][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.052490][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.059830][ T279] device bridge_slave_1 entered promiscuous mode [ 24.114413][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.121465][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.128715][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.135747][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.157005][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.164062][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.171314][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.178318][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.198261][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.205318][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.212560][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.219569][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.246693][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.254031][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.261297][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.268714][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.275942][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.283088][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.290320][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.310570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.333107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.341437][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348441][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.355874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.364263][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.371287][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.378576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.386167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.393551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.401633][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.408625][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.416100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.424202][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.431315][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.438639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.446774][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453871][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.461318][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.469571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.477772][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.484791][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.505335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.513457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.521513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.529368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.538382][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.545423][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.552756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.560933][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.567934][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.575266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.594484][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.609551][ T278] device veth0_vlan entered promiscuous mode [ 24.618566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.627081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.635133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.642907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.650214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.658124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.674661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.682936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.691979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.699782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.708060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.715594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.728078][ T276] device veth0_vlan entered promiscuous mode [ 24.734452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.742057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.750058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.758705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.772697][ T282] device veth0_vlan entered promiscuous mode [ 24.784101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.792103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.799938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.808463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.816879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.825274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.833178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.841099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.848970][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.856493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.864315][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.872824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.881163][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.888180][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.895794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.904324][ T278] device veth1_macvtap entered promiscuous mode [ 24.915148][ T282] device veth1_macvtap entered promiscuous mode [ 24.925193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.933206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.941877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.950052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.958391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.966520][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.974278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.982493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.992180][ T275] device veth0_vlan entered promiscuous mode [ 24.999062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.007161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.015342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.023963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.032113][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.039108][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.049615][ T276] device veth1_macvtap entered promiscuous mode [ 25.062715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.070119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.077529][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.085949][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.094188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.102326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.110423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.118707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.126936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.135339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.143419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.151426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.159360][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.180556][ T275] device veth1_macvtap entered promiscuous mode [ 25.187477][ T278] request_module fs-gadgetfs succeeded, but still no fs? [ 25.187597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.203684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.212069][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.220079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.228209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.235826][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.244237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.261385][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.280412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.288963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.297850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.306166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.314622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.323013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.331553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.331872][ T299] FAT-fs (loop2): Unrecognized mount option "iocharsmail=0" or missing value [ 25.339956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.369320][ T279] device veth0_vlan entered promiscuous mode [ 25.391781][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.399686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.434181][ T279] device veth1_macvtap entered promiscuous mode [ 25.442108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.449841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.460756][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.469055][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.477495][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.485444][ T308] netlink: 'syz.1.2': attribute type 15 has an invalid length. [ 25.493616][ T308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.508201][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.526325][ T317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.543145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.567088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.578924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.626247][ T320] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.643941][ T320] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.654571][ T299] F2FS-fs (loop2): fault_injection options not supported [ 25.672319][ T299] F2FS-fs (loop2): invalid crc value [ 25.813007][ T299] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.897101][ T299] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.948502][ T333] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.958911][ T278] attempt to access beyond end of device [ 25.958911][ T278] loop2: rw=2049, want=45112, limit=40427 [ 26.415295][ T348] erofs: (device loop4): mounted with root inode @ nid 36. [ 26.789655][ T363] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=3 [ 26.799217][ T363] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=3 [ 26.970499][ T365] attempt to access beyond end of device [ 26.970499][ T365] loop4: rw=0, want=40, limit=16 [ 26.989438][ T365] attempt to access beyond end of device [ 26.989438][ T365] loop4: rw=0, want=40, limit=16 [ 27.653991][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 27.654001][ T24] audit: type=1400 audit(1772270685.620:149): avc: denied { read write } for pid=383 comm="syz.4.18" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.697147][ T24] audit: type=1400 audit(1772270685.620:150): avc: denied { read write } for pid=378 comm="syz.2.20" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.721020][ T24] audit: type=1400 audit(1772270685.620:151): avc: denied { open } for pid=378 comm="syz.2.20" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.744613][ T390] ====================================================== [ 27.744613][ T390] WARNING: the mand mount option is being deprecated and [ 27.744613][ T390] will be removed in v5.15! [ 27.744613][ T390] ====================================================== [ 27.744714][ T24] audit: type=1400 audit(1772270685.620:152): avc: denied { ioctl } for pid=378 comm="syz.2.20" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.795468][ T24] audit: type=1400 audit(1772270685.620:153): avc: denied { open } for pid=383 comm="syz.4.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.819516][ T24] audit: type=1400 audit(1772270685.620:154): avc: denied { name_bind } for pid=385 comm="syz.1.22" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.849526][ T24] audit: type=1400 audit(1772270685.620:155): avc: denied { write } for pid=381 comm="syz.3.19" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.897590][ T393] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.906488][ T390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.912689][ T24] audit: type=1400 audit(1772270685.650:156): avc: denied { ioctl } for pid=383 comm="syz.4.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.944356][ T24] audit: type=1400 audit(1772270685.650:157): avc: denied { create } for pid=383 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.950862][ T390] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.964536][ T24] audit: type=1400 audit(1772270685.650:158): avc: denied { write } for pid=383 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.010766][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.082615][ T390] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 13: comm syz.0.21: lblock 0 mapped to illegal pblock 13 (length 1) [ 28.111675][ T390] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.21: Failed to acquire dquot type 0 [ 28.276010][ T407] tipc: Started in network mode [ 28.280960][ T407] tipc: Own node identity 7f000001, cluster identity 4711 [ 28.288178][ T407] tipc: Enabling of bearer rejected, failed to enable media [ 28.300662][ T407] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 28.309605][ T407] tipc: Enabled bearer , priority 10 [ 28.328725][ T25] usb 3-1: device descriptor read/64, error -71 [ 28.447819][ T409] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 28.715688][ T417] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 28.850767][ T54] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 29.300779][ T424] tipc: 32-bit node address hash set to 100007f [ 29.366777][ T428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=428 comm=syz.1.31 [ 29.480929][ T54] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.530921][ T54] usb 4-1: not running at top speed; connect to a high speed hub [ 29.680980][ T54] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 29.691602][ T54] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 29.703543][ T54] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 29.714224][ T54] usb 4-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.727909][ T54] usb 4-1: config 12 interface 0 has no altsetting 0 [ 29.870837][ T25] usb 3-1: device descriptor read/64, error -71 [ 29.902206][ T54] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 29.911992][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.920145][ T54] usb 4-1: Product: syz [ 29.924557][ T54] usb 4-1: Manufacturer: syz [ 29.929128][ T54] usb 4-1: SerialNumber: syz [ 30.533802][ T54] usb 4-1: selecting invalid altsetting 0 [ 30.543848][ T54] snd-usb-audio: probe of 4-1:12.0 failed with error -12 [ 30.594222][ T54] usb 4-1: USB disconnect, device number 2 [ 30.893389][ T443] erofs: (device loop2): erofs_read_inode: bogus i_mode (177777) @ nid 36 [ 30.946074][ T440] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 30.953939][ T440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.962776][ T440] F2FS-fs (loop0): invalid crc value [ 30.969119][ T440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.976446][ T443] binder: Unknown parameter 'contexty w{' [ 30.998017][ T440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.005142][ T440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.040770][ T297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.340774][ T297] usb 5-1: Using ep0 maxpacket: 16 [ 31.496532][ T454] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.505678][ T454] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.555471][ T454] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 13: comm syz.2.37: lblock 0 mapped to illegal pblock 13 (length 1) [ 31.569582][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.596341][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.617870][ T454] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.37: Failed to acquire dquot type 0 [ 31.672087][ T469] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 31.694777][ T469] FAULT_INJECTION: forcing a failure. [ 31.694777][ T469] name failslab, interval 1, probability 0, space 0, times 1 [ 31.717272][ T469] CPU: 1 PID: 469 Comm: syz.1.40 Not tainted syzkaller #0 [ 31.724391][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.734449][ T469] Call Trace: [ 31.737825][ T469] __dump_stack+0x21/0x24 [ 31.742145][ T469] dump_stack_lvl+0x1a7/0x208 [ 31.746814][ T469] ? thaw_kernel_threads+0x220/0x220 [ 31.752089][ T469] ? show_regs_print_info+0x18/0x18 [ 31.757274][ T469] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 31.763856][ T469] dump_stack+0x15/0x1c [ 31.767993][ T469] should_fail+0x3c1/0x510 [ 31.772415][ T469] ? getname_flags+0xb9/0x500 [ 31.777115][ T469] __should_failslab+0xa4/0xe0 [ 31.781851][ T469] should_failslab+0x9/0x20 [ 31.786327][ T469] kmem_cache_alloc+0x3d/0x2d0 [ 31.791061][ T469] getname_flags+0xb9/0x500 [ 31.795538][ T469] getname+0x19/0x20 [ 31.799406][ T469] do_sys_openat2+0xde/0x750 [ 31.803980][ T469] ? __kasan_check_write+0x14/0x20 [ 31.809060][ T469] ? fput_many+0x15a/0x1a0 [ 31.813445][ T469] ? do_sys_open+0xe0/0xe0 [ 31.817830][ T469] ? fput+0x1a/0x20 [ 31.821613][ T469] ? ksys_write+0x1f4/0x250 [ 31.826084][ T469] ? __ia32_sys_read+0x90/0x90 [ 31.830822][ T469] ? __se_sys_chdir+0x180/0x220 [ 31.835646][ T469] __x64_sys_openat+0x136/0x160 [ 31.840469][ T469] do_syscall_64+0x31/0x40 [ 31.844855][ T469] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.850718][ T469] RIP: 0033:0x7f324d4ab799 [ 31.855106][ T469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.874682][ T469] RSP: 002b:00007f324bf06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 31.883246][ T469] RAX: ffffffffffffffda RBX: 00007f324d724fa0 RCX: 00007f324d4ab799 [ 31.891192][ T469] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 31.899136][ T469] RBP: 00007f324bf06090 R08: 0000000000000000 R09: 0000000000000000 [ 31.907080][ T469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.915022][ T469] R13: 00007f324d725038 R14: 00007f324d724fa0 R15: 00007ffecca59528 [ 31.960841][ T297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.969879][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.978069][ T297] usb 5-1: Product: syz [ 31.982266][ T297] usb 5-1: Manufacturer: syz [ 31.986839][ T297] usb 5-1: SerialNumber: syz [ 32.000786][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.042506][ T480] fuse: Bad value for 'fd' [ 32.048224][ T480] fuse: Bad value for 'fd' [ 33.250791][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 33.440912][ T54] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.573183][ T54] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.588494][ T54] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.600702][ C1] sched: RT throttling activated [ 33.607796][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.622508][ T54] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.632172][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.646334][ T54] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 33.656243][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.681095][ T54] usb 4-1: config 0 descriptor?? [ 33.842456][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 33.842465][ T24] audit: type=1400 audit(1772270691.810:194): avc: denied { write } for pid=498 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.850801][ T297] usb 5-1: 0:2 : does not exist [ 33.896021][ T24] audit: type=1400 audit(1772270691.860:195): avc: denied { checkpoint_restore } for pid=496 comm="syz.1.47" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.919813][ T297] usb 5-1: USB disconnect, device number 2 [ 33.943501][ T501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.944249][ T24] audit: type=1400 audit(1772270691.910:196): avc: denied { create } for pid=496 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.971667][ T54] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.980769][ T24] audit: type=1400 audit(1772270691.910:197): avc: denied { bind } for pid=496 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.996142][ T54] usb 4-1: USB disconnect, device number 3 [ 34.012277][ T54] usblp0: removed [ 34.012505][ T24] audit: type=1400 audit(1772270691.950:198): avc: denied { read } for pid=500 comm="syz.0.49" path="/9/file1/file0/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.040376][ T24] audit: type=1400 audit(1772270691.950:199): avc: denied { lock } for pid=500 comm="syz.0.49" path="/9/file1/file0/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.065093][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.107492][ T508] device batadv_slave_0 entered promiscuous mode [ 34.114229][ T508] device batadv_slave_0 left promiscuous mode [ 34.142645][ T508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.171183][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.177469][ T24] audit: type=1400 audit(1772270692.140:200): avc: denied { load_policy } for pid=507 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.207060][ T508] SELinux: unknown common [ 34.212888][ T508] SELinux: failed to load policy [ 34.302565][ T513] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.311726][ T513] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.329592][ T513] EXT4-fs error (device loop0) in ext4_do_update_inode:5355: error 27 [ 34.338485][ T513] EXT4-fs error (device loop0): ext4_dirty_inode:6162: inode #2: comm syz.0.51: mark_inode_dirty error [ 34.349880][ T513] EXT4-fs error (device loop0) in ext4_do_update_inode:5355: error 27 [ 34.358472][ T513] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.51: mark_inode_dirty error [ 34.360772][ T25] usb 3-1: device descriptor read/64, error -71 [ 34.417272][ T519] netlink: 96 bytes leftover after parsing attributes in process `syz.0.52'. [ 34.428287][ T24] audit: type=1400 audit(1772270692.400:201): avc: denied { create } for pid=518 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.481990][ T520] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 34.531408][ T519] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 34.539826][ T520] FAULT_INJECTION: forcing a failure. [ 34.539826][ T520] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.553125][ T520] CPU: 0 PID: 520 Comm: syz.4.53 Not tainted syzkaller #0 [ 34.560228][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.570269][ T520] Call Trace: [ 34.573538][ T520] __dump_stack+0x21/0x24 [ 34.577841][ T520] dump_stack_lvl+0x1a7/0x208 [ 34.582494][ T520] ? show_regs_print_info+0x18/0x18 [ 34.587665][ T520] ? stack_trace_save+0xa6/0xf0 [ 34.592840][ T520] ? path_openat+0x2970/0x31c0 [ 34.597585][ T520] dump_stack+0x15/0x1c [ 34.601713][ T520] should_fail+0x3c1/0x510 [ 34.606101][ T520] should_fail_alloc_page+0x4f/0x60 [ 34.611273][ T520] __alloc_pages_nodemask+0x119/0x620 [ 34.616616][ T520] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 34.622133][ T520] ? memset+0x35/0x40 [ 34.626088][ T520] new_slab+0x84/0x3f0 [ 34.630134][ T520] ___slab_alloc+0x2a6/0x450 [ 34.634693][ T520] ? getname_flags+0xb9/0x500 [ 34.639339][ T520] __slab_alloc+0x63/0xa0 [ 34.643640][ T520] ? getname_flags+0xb9/0x500 [ 34.648286][ T520] ? getname_flags+0xb9/0x500 [ 34.652940][ T520] kmem_cache_alloc+0x1ac/0x2d0 [ 34.657805][ T520] ? getname_flags+0xb9/0x500 [ 34.662454][ T520] getname_flags+0xb9/0x500 [ 34.666945][ T520] getname+0x19/0x20 [ 34.670815][ T520] do_sys_openat2+0xde/0x750 [ 34.675384][ T520] ? __kasan_check_write+0x14/0x20 [ 34.680471][ T520] ? fput_many+0x15a/0x1a0 [ 34.684860][ T520] ? do_sys_open+0xe0/0xe0 [ 34.689247][ T520] ? fput+0x1a/0x20 [ 34.693027][ T520] ? ksys_write+0x1f4/0x250 [ 34.697501][ T520] ? __ia32_sys_read+0x90/0x90 [ 34.702232][ T520] ? __se_sys_chdir+0x180/0x220 [ 34.707052][ T520] __x64_sys_openat+0x136/0x160 [ 34.711873][ T520] do_syscall_64+0x31/0x40 [ 34.716259][ T520] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.722121][ T520] RIP: 0033:0x7fa4f0ef3799 [ 34.726504][ T520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.746090][ T520] RSP: 002b:00007fa4ef94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.754489][ T520] RAX: ffffffffffffffda RBX: 00007fa4f116cfa0 RCX: 00007fa4f0ef3799 [ 34.762549][ T520] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 34.770497][ T520] RBP: 00007fa4ef94e090 R08: 0000000000000000 R09: 0000000000000000 [ 34.778450][ T520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.786401][ T520] R13: 00007fa4f116d038 R14: 00007fa4f116cfa0 R15: 00007fff7b65f5a8 [ 34.794933][ T25] usb 3-1: device descriptor read/64, error -71 [ 34.799013][ T54] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.923894][ T528] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 35.040758][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 35.070746][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.163466][ T54] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.419189][ T24] audit: type=1400 audit(1772270693.150:202): avc: denied { connect } for pid=533 comm="syz.2.57" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.469446][ T424] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.498917][ T54] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.554445][ T54] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.596797][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.643584][ T54] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.776948][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.461690][ T54] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.500980][ T424] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.529548][ T424] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.552057][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.565612][ T54] usb 4-1: config 0 descriptor?? [ 36.614423][ T424] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 36.640890][ T54] usb 4-1: can't set config #0, error -71 [ 36.660869][ T54] usb 4-1: USB disconnect, device number 4 [ 36.880830][ T424] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.900101][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.909931][ T424] usb 2-1: Product: syz [ 36.920738][ T424] usb 2-1: Manufacturer: syz [ 36.930848][ T424] usb 2-1: SerialNumber: syz [ 36.970454][ T551] erofs: (device loop2): erofs_read_inode: bogus i_mode (177777) @ nid 36 [ 36.981216][ T424] cdc_mbim 2-1:1.0: skipping garbage [ 37.061200][ T554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.221239][ T549] binder: Unknown parameter 'contexty w{' [ 37.332007][ T565] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 37.341050][ T565] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.400624][ T565] EXT4-fs error (device loop3) in ext4_do_update_inode:5355: error 27 [ 37.409444][ T565] EXT4-fs error (device loop3): ext4_dirty_inode:6162: inode #2: comm syz.3.62: mark_inode_dirty error [ 37.421865][ T565] EXT4-fs error (device loop3) in ext4_do_update_inode:5355: error 27 [ 37.430450][ T565] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.62: mark_inode_dirty error [ 37.441771][ T24] audit: type=1400 audit(1772270695.400:203): avc: denied { connect } for pid=572 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.481911][ T531] exfat: Deprecated parameter 'utf8' [ 37.487324][ T531] exfat: Deprecated parameter 'utf8' [ 37.598719][ T531] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 37.640792][ T424] cdc_mbim 2-1:1.0: bind() failure [ 37.649266][ T424] usb 2-1: USB disconnect, device number 2 [ 37.723101][ T586] capability: warning: `syz.4.67' uses deprecated v2 capabilities in a way that may be insecure [ 38.150796][ T550] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 38.390741][ T550] usb 4-1: Invalid ep0 maxpacket: 64 [ 39.707932][ T550] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 39.764595][ T591] F2FS-fs (loop2): Test dummy encryption mode enabled [ 39.780299][ T591] F2FS-fs (loop2): invalid crc value [ 39.847784][ T591] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.950792][ T550] usb 4-1: Invalid ep0 maxpacket: 64 [ 39.987137][ T550] usb usb4-port1: attempt power cycle [ 40.286978][ T591] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.369900][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 40.369910][ T24] audit: type=1400 audit(1772270698.340:207): avc: denied { write } for pid=610 comm="syz.0.74" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.410599][ T24] audit: type=1400 audit(1772270698.370:208): avc: denied { write } for pid=590 comm="syz.2.70" path="/11/bus/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.420961][ T591] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=16 [ 40.452466][ T591] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 40.472396][ T609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.481801][ T591] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 40.501243][ T620] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.527730][ T620] EXT4-fs (loop4): 1 orphan inode deleted [ 40.533534][ T620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.542472][ T620] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.569032][ T24] audit: type=1400 audit(1772270698.530:209): avc: denied { read } for pid=590 comm="syz.2.70" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.620739][ T550] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 40.622246][ T24] audit: type=1400 audit(1772270698.580:210): avc: denied { setattr } for pid=619 comm="syz.4.75" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.681628][ T629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.691072][ T629] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.711875][ T629] EXT4-fs error (device loop1) in ext4_do_update_inode:5355: error 27 [ 40.720455][ T629] EXT4-fs error (device loop1): ext4_dirty_inode:6162: inode #2: comm syz.1.78: mark_inode_dirty error [ 40.731723][ T550] usb 4-1: device descriptor read/8, error -71 [ 40.738468][ T629] EXT4-fs error (device loop1) in ext4_do_update_inode:5355: error 27 [ 40.749159][ T629] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.78: mark_inode_dirty error [ 40.761207][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.860215][ T24] audit: type=1400 audit(1772270698.820:211): avc: denied { write } for pid=641 comm="syz.1.82" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.860245][ T642] binder: 641:642 unknown command 0 [ 40.918700][ T642] binder: 641:642 ioctl c0306201 200000000080 returned -22 [ 40.940880][ T550] usb 4-1: device descriptor read/8, error -71 [ 40.968616][ T24] audit: type=1400 audit(1772270698.930:212): avc: denied { execute } for pid=648 comm="syz.2.79" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 41.950796][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.961149][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.206436][ T655] FAT-fs (loop4): Directory bread(block 199916) failed [ 42.214402][ T655] FAT-fs (loop4): Directory bread(block 199917) failed [ 42.222067][ T655] FAT-fs (loop4): Directory bread(block 199918) failed [ 42.229258][ T655] FAT-fs (loop4): Directory bread(block 199919) failed [ 42.242891][ T655] FAT-fs (loop4): Directory bread(block 199920) failed [ 42.250064][ T655] FAT-fs (loop4): Directory bread(block 199921) failed [ 42.257737][ T655] FAT-fs (loop4): Directory bread(block 199922) failed [ 42.267329][ T662] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.274150][ T662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.289567][ T655] FAT-fs (loop4): Directory bread(block 199923) failed [ 42.302504][ T662] EXT4-fs (loop3): 1 orphan inode deleted [ 42.308280][ T662] EXT4-fs (loop3): 1 truncate cleaned up [ 42.313961][ T662] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,test_dummy_encryption, [ 42.382508][ T658] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 42.435817][ T658] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 42.444823][ T24] audit: type=1400 audit(1772270700.410:213): avc: denied { bind } for pid=654 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.489791][ T665] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.680406][ T658] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.837171][ T24] audit: type=1400 audit(1772270700.430:214): avc: denied { listen } for pid=654 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.860230][ T658] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,noquota,nomblk_io_submit,auto_da_alloc=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000008,auto_da_alloc=0x000000000000000d,test_dummy_encryption,,errors=continue [ 42.889279][ T658] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.911838][ T24] audit: type=1400 audit(1772270700.880:215): avc: denied { mounton } for pid=657 comm="syz.2.86" path="/13/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.911872][ T658] overlayfs: unrecognized mount option "uuid=off" or missing value [ 42.942465][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.951963][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.961895][ T550] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.964048][ T25] usb 1-1: SerialNumber: syz [ 42.983826][ T24] audit: type=1400 audit(1772270700.950:216): avc: denied { create } for pid=657 comm="syz.2.86" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.011292][ T25] cdc_ether 1-1:1.0: invalid descriptor buffer length [ 43.033230][ T25] usb 1-1: bad CDC descriptors [ 43.115019][ T686] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.124503][ T686] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.153415][ T686] EXT4-fs error (device loop2) in ext4_do_update_inode:5355: error 27 [ 43.161880][ T686] EXT4-fs error (device loop2): ext4_dirty_inode:6162: inode #2: comm syz.2.91: mark_inode_dirty error [ 43.175982][ T686] EXT4-fs error (device loop2) in ext4_do_update_inode:5355: error 27 [ 43.184642][ T686] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.91: mark_inode_dirty error [ 43.241572][ T550] usb 5-1: Using ep0 maxpacket: 16 [ 43.255438][ T25] usb 1-1: USB disconnect, device number 2 [ 43.360780][ T550] usb 5-1: config 0 has no interfaces? [ 43.366487][ T550] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 43.384504][ T550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.393326][ T550] usb 5-1: config 0 descriptor?? [ 43.399814][ T696] F2FS-fs (loop2): journaled quota format not specified [ 43.629246][ T703] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 43.645919][ T694] F2FS-fs (loop1): inline_xattr_size option should be set with inline_xattr option [ 43.667048][ T655] FAT-fs (loop4): Directory bread(block 199916) failed [ 43.674033][ T655] FAT-fs (loop4): Directory bread(block 199917) failed [ 43.682299][ T655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=655 comm=syz.4.84 [ 43.830180][ T694] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 45.088896][ T550] usb 5-1: USB disconnect, device number 3 [ 45.243761][ T718] EXT4-fs (loop0): Test dummy encryption mode enabled [ 45.250629][ T718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.325932][ T718] EXT4-fs (loop0): 1 orphan inode deleted [ 45.331751][ T718] EXT4-fs (loop0): 1 truncate cleaned up [ 45.337401][ T718] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,test_dummy_encryption, [ 45.740843][ T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.849862][ T726] F2FS-fs (loop1): fault_injection options not supported [ 45.857309][ T726] F2FS-fs (loop1): fault_type options not supported [ 45.865037][ T726] F2FS-fs (loop1): invalid crc value [ 45.868609][ T728] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.872001][ T726] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.900763][ T726] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.928625][ T728] FAULT_INJECTION: forcing a failure. [ 45.928625][ T728] name failslab, interval 1, probability 0, space 0, times 0 [ 45.940998][ T726] overlayfs: failed to resolve './file0': -2 [ 45.943889][ T728] CPU: 0 PID: 728 Comm: syz.2.102 Not tainted syzkaller #0 [ 45.954392][ T728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.964440][ T728] Call Trace: [ 45.967731][ T728] __dump_stack+0x21/0x24 [ 45.972060][ T728] dump_stack_lvl+0x1a7/0x208 [ 45.976727][ T728] ? show_regs_print_info+0x18/0x18 [ 45.981902][ T728] dump_stack+0x15/0x1c [ 45.986034][ T728] should_fail+0x3c1/0x510 [ 45.990423][ T728] ? security_inode_alloc+0x33/0x110 [ 45.995697][ T728] __should_failslab+0xa4/0xe0 [ 46.000809][ T728] should_failslab+0x9/0x20 [ 46.005306][ T728] kmem_cache_alloc+0x3d/0x2d0 [ 46.010067][ T728] security_inode_alloc+0x33/0x110 [ 46.015172][ T728] inode_init_always+0x70a/0x9b0 [ 46.020088][ T728] new_inode_pseudo+0x91/0x210 [ 46.024824][ T728] new_inode+0x28/0x1e0 [ 46.028959][ T728] ? __kasan_check_write+0x14/0x20 [ 46.034046][ T728] __ext4_new_inode+0x21a/0x3630 [ 46.038965][ T728] ? __d_rehash+0x1ca/0x2c0 [ 46.043444][ T728] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 46.049137][ T728] ? ext4_lookup+0x4aa/0x8d0 [ 46.053699][ T728] ? dquot_initialize+0x20/0x20 [ 46.058526][ T728] ? may_create+0x5d8/0x7d0 [ 46.063004][ T728] ext4_create+0x21e/0x460 [ 46.067398][ T728] ? ext4_lookup+0x8d0/0x8d0 [ 46.071963][ T728] ? selinux_inode_create+0x22/0x30 [ 46.077222][ T728] ? security_inode_create+0xbd/0x110 [ 46.082573][ T728] ? ext4_lookup+0x8d0/0x8d0 [ 46.087138][ T728] path_openat+0x170a/0x31c0 [ 46.091706][ T728] ? do_filp_open+0x410/0x410 [ 46.096366][ T728] do_filp_open+0x1e2/0x410 [ 46.100844][ T728] ? vfs_tmpfile+0x2c0/0x2c0 [ 46.105415][ T728] ? get_unused_fd_flags+0x92/0xa0 [ 46.110496][ T728] do_sys_openat2+0x19f/0x750 [ 46.115151][ T728] ? __kasan_check_write+0x14/0x20 [ 46.120236][ T728] ? fput_many+0x15a/0x1a0 [ 46.124624][ T728] ? do_sys_open+0xe0/0xe0 [ 46.129015][ T728] ? fput+0x1a/0x20 [ 46.132800][ T728] ? ksys_write+0x1f4/0x250 [ 46.137368][ T728] ? __ia32_sys_read+0x90/0x90 [ 46.142106][ T728] ? __se_sys_chdir+0x180/0x220 [ 46.146943][ T728] __x64_sys_openat+0x136/0x160 [ 46.151767][ T728] do_syscall_64+0x31/0x40 [ 46.156181][ T728] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.162055][ T728] RIP: 0033:0x7f83d2d8b799 [ 46.166453][ T728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.186040][ T728] RSP: 002b:00007f83d17e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.194480][ T728] RAX: ffffffffffffffda RBX: 00007f83d3004fa0 RCX: 00007f83d2d8b799 [ 46.202446][ T728] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 46.210402][ T728] RBP: 00007f83d17e6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.218452][ T728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.226411][ T728] R13: 00007f83d3005038 R14: 00007f83d3004fa0 R15: 00007fff03e72f88 [ 46.236992][ T726] attempt to access beyond end of device [ 46.236992][ T726] loop1: rw=2049, want=45112, limit=40427 [ 46.253113][ T735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 46.264423][ T735] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.352658][ T735] EXT4-fs error (device loop3) in ext4_do_update_inode:5355: error 27 [ 46.361583][ T735] EXT4-fs error (device loop3): ext4_dirty_inode:6162: inode #2: comm syz.3.104: mark_inode_dirty error [ 46.380905][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.383530][ T735] EXT4-fs error (device loop3) in ext4_do_update_inode:5355: error 27 [ 46.396571][ T54] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.400400][ T735] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.104: mark_inode_dirty error [ 46.411333][ T54] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 105, changing to 10 [ 46.432297][ T54] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 58401, setting to 1024 [ 46.454669][ T759] EXT4-fs (loop0): 1 orphan inode deleted [ 46.460474][ T759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 46.460963][ T762] SELinux: failed to load policy [ 46.469506][ T759] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.522172][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 46.522181][ T24] audit: type=1400 audit(1772270704.490:227): avc: denied { create } for pid=767 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 46.569106][ T24] audit: type=1400 audit(1772270704.530:228): avc: denied { connect } for pid=758 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.590161][ T24] audit: type=1400 audit(1772270704.560:229): avc: denied { getopt } for pid=758 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.610760][ T550] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.631045][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 46.646305][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.679799][ T54] usb 5-1: Product: syz [ 46.692223][ T54] usb 5-1: Manufacturer: syz [ 46.708534][ T54] usb 5-1: SerialNumber: syz [ 46.796789][ T54] cdc_mbim 5-1:1.0: skipping garbage [ 46.900813][ T550] usb 2-1: device descriptor read/64, error -71 [ 46.997667][ T724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.015708][ T724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.310843][ T550] usb 2-1: device descriptor read/64, error -71 [ 47.600790][ T550] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.640809][ T473] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.681156][ T724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.688117][ T724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.761952][ T776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.770926][ T776] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.802909][ T781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 47.805718][ T24] audit: type=1400 audit(1772270705.770:230): avc: denied { remove_name } for pid=775 comm="syz.2.115" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.819311][ T776] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 47.846107][ T776] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.857124][ T776] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.115: Failed to acquire dquot type 0 [ 47.868716][ T24] audit: type=1400 audit(1772270705.780:231): avc: denied { mounton } for pid=780 comm="syz.0.116" path="/26/file1/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.870848][ T550] usb 2-1: device descriptor read/64, error -71 [ 47.893159][ T24] audit: type=1400 audit(1772270705.780:232): avc: denied { rename } for pid=775 comm="syz.2.115" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.932185][ T54] cdc_mbim 5-1:1.0: bind() failure [ 47.950828][ T54] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 47.971036][ T54] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 47.980679][ T54] usb 5-1: USB disconnect, device number 4 [ 48.023245][ T789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 48.030842][ T473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.051001][ T473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.051791][ T789] FAULT_INJECTION: forcing a failure. [ 48.051791][ T789] name failslab, interval 1, probability 0, space 0, times 0 [ 48.070754][ T473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.086043][ T789] CPU: 0 PID: 789 Comm: syz.0.117 Not tainted syzkaller #0 [ 48.086913][ T473] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.094049][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.094053][ T789] Call Trace: [ 48.094073][ T789] __dump_stack+0x21/0x24 [ 48.094082][ T789] dump_stack_lvl+0x1a7/0x208 [ 48.094090][ T789] ? show_regs_print_info+0x18/0x18 [ 48.094108][ T789] dump_stack+0x15/0x1c [ 48.103119][ T473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.113147][ T789] should_fail+0x3c1/0x510 [ 48.113159][ T789] ? mempool_alloc_slab+0x1d/0x30 [ 48.113177][ T789] __should_failslab+0xa4/0xe0 [ 48.117408][ T473] usb 4-1: config 0 descriptor?? [ 48.120748][ T789] should_failslab+0x9/0x20 [ 48.120759][ T789] kmem_cache_alloc+0x3d/0x2d0 [ 48.120768][ T789] ? find_get_entry+0x37b/0x3e0 [ 48.120777][ T789] mempool_alloc_slab+0x1d/0x30 [ 48.120785][ T789] ? mempool_free+0x340/0x340 [ 48.120795][ T789] mempool_alloc+0x11e/0x460 [ 48.120806][ T789] ? __kasan_check_write+0x14/0x20 [ 48.120816][ T789] ? mempool_resize+0x840/0x840 [ 48.120825][ T789] ? pagecache_get_page+0x844/0x930 [ 48.120835][ T789] ? __kasan_check_write+0x14/0x20 [ 48.120853][ T789] ? __find_get_block+0xe96/0xfb0 [ 48.215255][ T789] bio_alloc_bioset+0x18c/0x570 [ 48.220074][ T789] ? write_boundary_block+0x150/0x150 [ 48.225446][ T789] ? write_boundary_block+0x150/0x150 [ 48.230791][ T789] submit_bh_wbc+0x1c6/0x6f0 [ 48.235346][ T789] ? __getblk_gfp+0x3b/0x780 [ 48.239902][ T789] ? __wait_on_buffer+0x80/0x80 [ 48.244720][ T789] submit_bh+0x2a/0x40 [ 48.248760][ T789] ext4_read_bh_nowait+0x15c/0x1e0 [ 48.253839][ T789] ext4_sb_breadahead_unmovable+0xc8/0xe0 [ 48.259531][ T789] __ext4_get_inode_loc+0x8dc/0xc30 [ 48.264701][ T789] ? ext4_get_inode_loc+0x130/0x130 [ 48.269867][ T789] ? sidtab_sid2str_get+0x137/0x2c0 [ 48.275032][ T789] ? __kasan_check_write+0x14/0x20 [ 48.280408][ T789] ext4_reserve_inode_write+0x16f/0x2f0 [ 48.285924][ T789] ext4_xattr_set_handle+0x4d5/0x12b0 [ 48.291270][ T789] ? ext4_xattr_set_entry+0x3860/0x3860 [ 48.296789][ T789] ? selinux_inode_init_security+0x68e/0x960 [ 48.302737][ T789] ? selinux_inode_free_security+0x210/0x210 [ 48.308682][ T789] ext4_initxattrs+0xa6/0x110 [ 48.313328][ T789] security_inode_init_security+0x274/0x3b0 [ 48.319187][ T789] ? ext4_init_security+0x40/0x40 [ 48.324189][ T789] ? security_dentry_create_files_as+0xc0/0xc0 [ 48.330308][ T789] ? dquot_alloc_inode+0x1c2/0x7d0 [ 48.335387][ T789] ? __ext4_set_acl+0x600/0x600 [ 48.340205][ T789] ? prandom_u32+0x24d/0x290 [ 48.344774][ T789] ext4_init_security+0x34/0x40 [ 48.349597][ T789] __ext4_new_inode+0x2c1e/0x3630 [ 48.354592][ T789] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 48.360279][ T789] ? ext4_lookup+0x4aa/0x8d0 [ 48.364838][ T789] ? dquot_initialize+0x20/0x20 [ 48.369655][ T789] ? may_create+0x5d8/0x7d0 [ 48.374125][ T789] ext4_create+0x21e/0x460 [ 48.378507][ T789] ? ext4_lookup+0x8d0/0x8d0 [ 48.383066][ T789] ? selinux_inode_create+0x22/0x30 [ 48.388230][ T789] ? security_inode_create+0xbd/0x110 [ 48.393584][ T789] ? ext4_lookup+0x8d0/0x8d0 [ 48.398166][ T789] path_openat+0x170a/0x31c0 [ 48.402754][ T789] ? do_filp_open+0x410/0x410 [ 48.407407][ T789] do_filp_open+0x1e2/0x410 [ 48.411883][ T789] ? vfs_tmpfile+0x2c0/0x2c0 [ 48.416452][ T789] ? get_unused_fd_flags+0x92/0xa0 [ 48.421546][ T789] do_sys_openat2+0x19f/0x750 [ 48.426195][ T789] ? __kasan_check_write+0x14/0x20 [ 48.431276][ T789] ? fput_many+0x15a/0x1a0 [ 48.435661][ T789] ? do_sys_open+0xe0/0xe0 [ 48.440047][ T789] ? fput+0x1a/0x20 [ 48.443829][ T789] ? ksys_write+0x1f4/0x250 [ 48.448303][ T789] ? __ia32_sys_read+0x90/0x90 [ 48.453209][ T789] ? __se_sys_chdir+0x180/0x220 [ 48.458035][ T789] __x64_sys_openat+0x136/0x160 [ 48.462859][ T789] do_syscall_64+0x31/0x40 [ 48.467248][ T789] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.473113][ T789] RIP: 0033:0x7f290e43b799 [ 48.477507][ T789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.497084][ T789] RSP: 002b:00007f290ce96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.505475][ T789] RAX: ffffffffffffffda RBX: 00007f290e6b4fa0 RCX: 00007f290e43b799 [ 48.513424][ T789] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 48.521366][ T789] RBP: 00007f290ce96090 R08: 0000000000000000 R09: 0000000000000000 [ 48.529310][ T789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.537257][ T789] R13: 00007f290e6b5038 R14: 00007f290e6b4fa0 R15: 00007ffe731fe4a8 [ 48.610787][ T423] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.809559][ T799] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 48.842280][ T802] EXT4-fs error (device loop1): ext4_quota_enable:6446: inode #4: comm syz.1.120: iget: immutable or append flags not allowed on symlinks [ 48.856616][ T24] audit: type=1400 audit(1772270706.820:233): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.863442][ T802] EXT4-fs error (device loop1): ext4_quota_enable:6449: comm syz.1.120: Bad quota inode: 4, type: 1 [ 48.891280][ T802] EXT4-fs warning (device loop1): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.898869][ T24] audit: type=1400 audit(1772270706.860:234): avc: denied { watch watch_reads } for pid=765 comm="syz.3.111" path="/15/file2/file0" dev="loop3" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.906469][ T802] EXT4-fs (loop1): mount failed [ 48.970829][ T473] usbhid 4-1:0.0: can't add hid device: -71 [ 48.976811][ T473] usbhid: probe of 4-1:0.0 failed with error -71 [ 48.989621][ T473] usb 4-1: USB disconnect, device number 9 [ 49.020832][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 49.040735][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 49.060970][ T423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.094185][ T423] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.103483][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.110274][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.118641][ T812] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.118804][ T423] usb 3-1: config 0 descriptor?? [ 49.126196][ T812] device bridge_slave_0 entered promiscuous mode [ 49.140154][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.147544][ T812] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.157253][ T812] device bridge_slave_1 entered promiscuous mode [ 49.393611][ T810] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue [ 49.407062][ T810] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.433696][ T810] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.448423][ T810] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 49.460888][ T810] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.460888][ T810] [ 49.471124][ T810] EXT4-fs (loop4): Total free blocks count 0 [ 49.477119][ T810] EXT4-fs (loop4): Free/Dirty block details [ 49.483220][ T810] EXT4-fs (loop4): free_blocks=65280 [ 49.488754][ T810] EXT4-fs (loop4): dirty_blocks=33 [ 49.494217][ T810] EXT4-fs (loop4): Block reservation details [ 49.500311][ T810] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 49.525900][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.532953][ T812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.540219][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.547249][ T812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.566694][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.579180][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.588024][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.620975][ T834] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 49.632719][ T834] FAULT_INJECTION: forcing a failure. [ 49.632719][ T834] name failslab, interval 1, probability 0, space 0, times 0 [ 49.646120][ T834] CPU: 0 PID: 834 Comm: syz.4.128 Not tainted syzkaller #0 [ 49.646330][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.653406][ T834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.653410][ T834] Call Trace: [ 49.653427][ T834] __dump_stack+0x21/0x24 [ 49.653436][ T834] dump_stack_lvl+0x1a7/0x208 [ 49.653445][ T834] ? thaw_kernel_threads+0x220/0x220 [ 49.653455][ T834] ? show_regs_print_info+0x18/0x18 [ 49.653466][ T834] dump_stack+0x15/0x1c [ 49.653474][ T834] should_fail+0x3c1/0x510 [ 49.653484][ T834] ? ext4_update_inline_data+0x279/0x500 [ 49.653501][ T834] __should_failslab+0xa4/0xe0 [ 49.667097][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.671498][ T834] should_failslab+0x9/0x20 [ 49.671509][ T834] __kmalloc+0x60/0x330 [ 49.671524][ T834] ext4_update_inline_data+0x279/0x500 [ 49.671540][ T834] ? ext4_convert_inline_data+0x5f0/0x5f0 [ 49.674813][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.679136][ T834] ? __kasan_check_read+0x11/0x20 [ 49.679147][ T834] ? get_max_inline_xattr_value_size+0x4ed/0x630 [ 49.679157][ T834] ext4_try_add_inline_entry+0x327/0xac0 [ 49.679173][ T834] ? ext4_da_write_inline_data_end+0x290/0x290 [ 49.684872][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.689196][ T834] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 49.689212][ T834] ext4_add_entry+0x674/0xfa0 [ 49.696133][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.698519][ T834] ? __kasan_check_write+0x14/0x20 [ 49.698535][ T834] ? ext4_inc_count+0x1b0/0x1b0 [ 49.702942][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.708523][ T834] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 49.708537][ T834] ? ext4_lookup+0x4aa/0x8d0 [ 49.713710][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.720259][ T834] ? dquot_initialize+0x20/0x20 [ 49.720268][ T834] ? may_create+0x5d8/0x7d0 [ 49.720284][ T834] ext4_add_nondir+0x97/0x260 [ 49.725483][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.728884][ T834] ext4_create+0x2da/0x460 [ 49.728900][ T834] ? ext4_lookup+0x8d0/0x8d0 [ 49.861284][ T834] ? selinux_inode_create+0x22/0x30 [ 49.866454][ T834] ? security_inode_create+0xbd/0x110 [ 49.871797][ T834] ? ext4_lookup+0x8d0/0x8d0 [ 49.876358][ T834] path_openat+0x170a/0x31c0 [ 49.880919][ T834] ? do_filp_open+0x410/0x410 [ 49.885572][ T834] do_filp_open+0x1e2/0x410 [ 49.890055][ T834] ? vfs_tmpfile+0x2c0/0x2c0 [ 49.894622][ T834] ? get_unused_fd_flags+0x92/0xa0 [ 49.899703][ T834] do_sys_openat2+0x19f/0x750 [ 49.904353][ T834] ? __kasan_check_write+0x14/0x20 [ 49.909452][ T834] ? fput_many+0x15a/0x1a0 [ 49.913851][ T834] ? do_sys_open+0xe0/0xe0 [ 49.918238][ T834] ? fput+0x1a/0x20 [ 49.922027][ T834] ? ksys_write+0x1f4/0x250 [ 49.926498][ T834] ? __ia32_sys_read+0x90/0x90 [ 49.931229][ T834] ? __se_sys_chdir+0x180/0x220 [ 49.936050][ T834] __x64_sys_openat+0x136/0x160 [ 49.940872][ T834] do_syscall_64+0x31/0x40 [ 49.945261][ T834] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.951126][ T834] RIP: 0033:0x7fa4f0ef3799 [ 49.955511][ T834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.975087][ T834] RSP: 002b:00007fa4ef94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.983479][ T834] RAX: ffffffffffffffda RBX: 00007fa4f116cfa0 RCX: 00007fa4f0ef3799 [ 49.991435][ T834] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 49.999383][ T834] RBP: 00007fa4ef94e090 R08: 0000000000000000 R09: 0000000000000000 [ 50.007331][ T834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.015296][ T834] R13: 00007fa4f116d038 R14: 00007fa4f116cfa0 R15: 00007fff7b65f5a8 [ 50.025395][ T423] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 50.033384][ T423] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 50.046779][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.055235][ T423] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.073913][ T812] device veth0_vlan entered promiscuous mode [ 50.088699][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.101011][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.110504][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.118377][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.146218][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.161513][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.189217][ T812] device veth1_macvtap entered promiscuous mode [ 50.200331][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.208221][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.216639][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.241202][ T318] device bridge_slave_1 left promiscuous mode [ 50.249755][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.257875][ T857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 50.268393][ T318] device bridge_slave_0 left promiscuous mode [ 50.275063][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.281211][ T776] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 50.295880][ T318] device veth1_macvtap left promiscuous mode [ 50.302097][ T318] device veth0_vlan left promiscuous mode [ 50.312890][ T423] usb 3-1: USB disconnect, device number 6 [ 50.351777][ T853] F2FS-fs (loop3): invalid crc value [ 50.370455][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.379160][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.390169][ T853] F2FS-fs (loop3): invalid journal entries nats 0 sits 518 [ 50.398619][ T853] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22) [ 50.551064][ T879] process 'syz.1.136' launched './file0' with NULL argv: empty string added [ 50.714014][ T878] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 50.723379][ T878] F2FS-fs (loop4): invalid crc value [ 50.728974][ T878] F2FS-fs (loop4): invalid crc value [ 50.734429][ T878] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 50.870761][ T473] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.340769][ T473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.380742][ T285] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.510869][ T473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.520100][ T473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.528289][ T473] usb 4-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 51.549953][ T473] usb 4-1: SerialNumber: syz [ 51.700752][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.710820][ T302] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 51.750788][ T285] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 51.759455][ T285] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 51.769939][ T285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.779049][ T285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 51.790051][ T285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 51.821207][ T473] usb 4-1: bad CDC descriptors [ 51.826719][ T473] usb 4-1: USB disconnect, device number 10 [ 51.920802][ T285] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.929882][ T285] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.938070][ T285] usb 3-1: Product: syz [ 51.942296][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 51.947419][ T285] usb 3-1: Manufacturer: syz [ 51.981034][ T302] usb 2-1: Using ep0 maxpacket: 16 [ 51.991097][ T285] cdc_wdm 3-1:1.0: skipping garbage [ 51.996375][ T285] cdc_wdm 3-1:1.0: skipping garbage [ 52.002424][ T285] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 52.060800][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.070935][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 52.079936][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.088607][ T25] usb 5-1: config 0 descriptor?? [ 52.120777][ T302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.131052][ T302] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.141753][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 52.192854][ T494] usb 3-1: USB disconnect, device number 7 [ 52.290828][ T302] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 52.299949][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.308435][ T302] usb 2-1: Product: syz [ 52.312680][ T302] usb 2-1: Manufacturer: syz [ 52.317250][ T302] usb 2-1: SerialNumber: syz [ 52.322355][ T302] usb 2-1: config 0 descriptor?? [ 52.560737][ T25] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 52.563086][ T494] usb 2-1: USB disconnect, device number 5 [ 52.960783][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.000767][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 53.056009][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 53.056031][ T24] audit: type=1400 audit(1772270711.020:263): avc: denied { lock } for pid=932 comm="syz.2.161" path="socket:[17369]" dev="sockfs" ino=17369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 53.086174][ T25] usb 4-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 53.099383][ T25] usb 4-1: config 56 has 0 interfaces, different from the descriptor's value: 1 [ 53.108837][ T24] audit: type=1400 audit(1772270711.070:264): avc: denied { map } for pid=934 comm="syz.1.162" path="socket:[17376]" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.132776][ T24] audit: type=1400 audit(1772270711.070:265): avc: denied { read } for pid=934 comm="syz.1.162" path="socket:[17376]" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.270814][ T25] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 53.279979][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.288133][ T25] usb 4-1: Product: syz [ 53.292388][ T25] usb 4-1: Manufacturer: syz [ 53.296969][ T25] usb 4-1: SerialNumber: syz [ 53.583816][ T25] usb 4-1: USB disconnect, device number 11 [ 53.907990][ T24] audit: type=1400 audit(1772270711.870:266): avc: denied { read write } for pid=943 comm="syz.2.166" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.914835][ T473] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.931463][ T24] audit: type=1400 audit(1772270711.870:267): avc: denied { open } for pid=943 comm="syz.2.166" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.951709][ T473] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.088765][ T957] capability: warning: `syz.1.171' uses 32-bit capabilities (legacy support in use) [ 54.104975][ T24] audit: type=1400 audit(1772270712.070:268): avc: denied { bind } for pid=958 comm="syz.3.172" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.460834][ T24] audit: type=1400 audit(1772270712.390:269): avc: denied { execute } for pid=978 comm="syz.2.180" name="file1" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.597801][ T25] usb 5-1: USB disconnect, device number 5 [ 54.683281][ T24] audit: type=1400 audit(1772270712.390:270): avc: denied { execute_no_trans } for pid=978 comm="syz.2.180" path="/42/file1" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.120748][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.390722][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 55.400876][ T24] audit: type=1326 audit(1772270713.370:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426c405799 code=0x7ffc0000 [ 55.424102][ T494] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.465911][ T24] audit: type=1326 audit(1772270713.370:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f426c405799 code=0x7ffc0000 [ 55.471319][ T1006] input: syz1 as /devices/virtual/input/input4 [ 55.540791][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.562643][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.760810][ T25] usb 5-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=de.dd [ 55.770003][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.778202][ T25] usb 5-1: Product: syz [ 55.782628][ T25] usb 5-1: Manufacturer: syz [ 55.787269][ T25] usb 5-1: SerialNumber: syz [ 55.792837][ T25] usb 5-1: config 0 descriptor?? [ 55.820761][ T494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.830747][ T54] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 55.900772][ T494] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 55.920737][ T494] usb 2-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 56.043131][ T25] usb 5-1: USB disconnect, device number 6 [ 56.070731][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 56.080780][ T494] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=24.ae [ 56.089805][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.110821][ T494] usb 2-1: Product: syz [ 56.114980][ T494] usb 2-1: Manufacturer: syz [ 56.119552][ T494] usb 2-1: SerialNumber: syz [ 56.190778][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.210733][ T54] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 56.370780][ T54] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=46.57 [ 56.379812][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.388319][ T54] usb 4-1: Product: syz [ 56.392583][ T54] usb 4-1: Manufacturer: syz [ 56.397175][ T54] usb 4-1: SerialNumber: syz [ 56.402380][ T54] usb 4-1: config 0 descriptor?? [ 56.411273][ T494] usb 2-1: USB disconnect, device number 6 [ 56.643837][ T25] usb 4-1: USB disconnect, device number 12 [ 56.823006][ T1017] kvm: emulating exchange as write [ 56.828248][ T1017] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.923188][ T1027] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 57.185162][ T1042] tmpfs: Unsupported parameter 'mpol' [ 57.630812][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 57.700751][ T494] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 57.940731][ T494] usb 5-1: Using ep0 maxpacket: 8 [ 57.990780][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.001287][ T54] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.140889][ T494] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 58.151352][ T494] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 58.160917][ T54] usb 2-1: New USB device found, idVendor=19d2, idProduct=349a, bcdDevice=fa.9f [ 58.169929][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.177999][ T54] usb 2-1: Product: syz [ 58.182167][ T54] usb 2-1: Manufacturer: syz [ 58.186735][ T54] usb 2-1: SerialNumber: syz [ 58.191869][ T54] usb 2-1: config 0 descriptor?? [ 58.310818][ T494] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=93.3f [ 58.319918][ T494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.327915][ T494] usb 5-1: Product: syz [ 58.332131][ T494] usb 5-1: Manufacturer: syz [ 58.336701][ T494] usb 5-1: SerialNumber: syz [ 58.370896][ T550] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 58.432329][ T54] usb 2-1: USB disconnect, device number 7 [ 58.611342][ T494] usb 5-1: USB disconnect, device number 7 [ 58.619700][ T550] usb 4-1: Using ep0 maxpacket: 8 [ 58.740764][ T550] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 58.751065][ T550] usb 4-1: config 129 has 0 interfaces, different from the descriptor's value: 2 [ 58.910749][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.910798][ T550] usb 4-1: New USB device found, idVendor=10c4, idProduct=817d, bcdDevice=2d.ec [ 58.927267][ T550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.935260][ T550] usb 4-1: Product:   [ 58.939641][ T550] usb 4-1: Manufacturer: 㕷輚리ﴛ揑ꡫ냬衪閺똕ᶍﬓ꺥ﻧ졌鯡덩뜒槒䴁緬滿㚕礙纶䷝౭丰챗ლ뼆檼唋樁鲼첚怞⇃G埣ҍ˷⁕ྦྷ坖倗淅┯ἰ鐜驗⊷微࣊옼꿚臡契炠⭊桛秹쟭鶥왃ؚ省䜋須ᗔ⎺轄㚘叺碭㑲ㄧ骛篔寘滚驫䑱ⷖ澇塤㺉壝ᦷ靖ꕭ [ 58.971637][ T550] usb 4-1: SerialNumber: syz [ 58.975345][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 58.975356][ T24] audit: type=1400 audit(1772270716.940:280): avc: denied { write } for pid=1078 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.012918][ T24] audit: type=1400 audit(1772270716.980:281): avc: denied { read } for pid=1078 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.174247][ T24] audit: type=1400 audit(1772270717.140:282): avc: denied { create } for pid=1083 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.194110][ T24] audit: type=1400 audit(1772270717.160:283): avc: denied { connect } for pid=1083 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.256783][ T550] usb 4-1: USB disconnect, device number 13 [ 59.340755][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.350968][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 59.360205][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.362392][ T24] audit: type=1326 audit(1772270717.320:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1089 comm="syz.4.228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4f0ef3799 code=0x0 [ 59.372276][ T25] usb 3-1: config 0 descriptor?? [ 59.431142][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 60.140745][ T550] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 60.380729][ T550] usb 4-1: Using ep0 maxpacket: 32 [ 60.480747][ T473] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 60.510808][ T550] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.520970][ T550] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.680817][ T550] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=cb.7c [ 60.689848][ T550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.697866][ T550] usb 4-1: Product: syz [ 60.702079][ T550] usb 4-1: Manufacturer: syz [ 60.706640][ T550] usb 4-1: SerialNumber: syz [ 60.711956][ T550] usb 4-1: config 0 descriptor?? [ 60.850781][ T473] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.860912][ T473] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 60.869916][ T473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.878453][ T473] usb 5-1: config 0 descriptor?? [ 60.921137][ T473] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 60.940725][ T285] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 60.952343][ T473] usb 4-1: USB disconnect, device number 14 [ 61.180722][ T285] usb 2-1: Using ep0 maxpacket: 32 [ 61.300780][ T285] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 61.310912][ T285] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 61.470819][ T285] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=68.9e [ 61.480033][ T285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.488080][ T285] usb 2-1: Product: syz [ 61.492391][ T285] usb 2-1: Manufacturer: syz [ 61.496964][ T285] usb 2-1: SerialNumber: syz [ 61.592424][ T1113] kernel profiling enabled (shift: 9) [ 61.713427][ T285] usb 3-1: USB disconnect, device number 8 [ 61.785332][ T297] usb 2-1: USB disconnect, device number 8 [ 62.180730][ T285] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.265379][ T1119] HTB: quantum of class FFF10008 is big. Consider r2q change. [ 62.440734][ T285] usb 3-1: Using ep0 maxpacket: 32 [ 62.560800][ T285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.570998][ T285] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.630752][ T54] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 62.730817][ T285] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0122, bcdDevice=a9.a8 [ 62.739887][ T285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.747892][ T285] usb 3-1: Product: syz [ 62.752069][ T285] usb 3-1: Manufacturer: syz [ 62.756632][ T285] usb 3-1: SerialNumber: syz [ 62.761710][ T285] usb 3-1: config 0 descriptor?? [ 62.870732][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 63.002523][ T285] usb 3-1: USB disconnect, device number 9 [ 63.070790][ T54] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.227405][ T285] usb 5-1: USB disconnect, device number 8 [ 63.240936][ T54] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.253015][ T24] audit: type=1400 audit(1772270721.210:285): avc: denied { append } for pid=1140 comm="syz.4.248" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.255338][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.283953][ T54] usb 4-1: Product: syz [ 63.288201][ T54] usb 4-1: Manufacturer: syz [ 63.292895][ T54] usb 4-1: SerialNumber: syz [ 63.633009][ T54] usb 4-1: USB disconnect, device number 15 [ 64.423240][ T24] audit: type=1400 audit(1772270722.380:286): avc: denied { watch watch_reads } for pid=1168 comm="syz.2.259" path="/65" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.600782][ T297] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 64.680743][ T550] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 64.688267][ T302] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 64.920759][ T550] usb 2-1: Using ep0 maxpacket: 8 [ 65.000807][ T297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.010931][ T297] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 65.019981][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.028796][ T297] usb 4-1: config 0 descriptor?? [ 65.101972][ T297] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 65.210793][ T302] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 65.211382][ T1186] F2FS-fs (loop2): Invalid segment count (0) [ 65.223073][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.225950][ T1186] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 65.234091][ T302] usb 5-1: Product: syz [ 65.242736][ T1186] F2FS-fs (loop2): invalid crc value [ 65.246715][ T302] usb 5-1: Manufacturer: syz [ 65.256223][ T302] usb 5-1: SerialNumber: syz [ 65.263748][ T302] usb 5-1: config 0 descriptor?? [ 65.268615][ T1186] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.280814][ T550] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 65.290122][ T550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.296860][ T1186] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 65.305146][ T1186] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.321037][ T550] usb 2-1: Product: ఉ [ 65.323500][ T24] audit: type=1400 audit(1772270723.290:287): avc: denied { ioctl } for pid=1177 comm="syz.3.263" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.326092][ T550] usb 2-1: Manufacturer: Ќ [ 65.354415][ T550] usb 2-1: SerialNumber: syz [ 65.402825][ T302] usb 4-1: USB disconnect, device number 16 [ 65.580733][ T297] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 65.631670][ T550] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 65.641081][ T550] usb 2-1: USB disconnect, device number 9 [ 65.870743][ T297] usb 3-1: device descriptor read/64, error -71 [ 65.898477][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.906124][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.916215][ T1194] device bridge_slave_0 entered promiscuous mode [ 65.923918][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.931359][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.938785][ T1194] device bridge_slave_1 entered promiscuous mode [ 66.040816][ T24] audit: type=1400 audit(1772270723.970:288): avc: denied { create } for pid=1202 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.155163][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.162244][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.169496][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.176517][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.328671][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.337403][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.347785][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.355901][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.392081][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.402110][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.409134][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.418270][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.427276][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.434327][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.482240][ T297] usb 3-1: device descriptor read/64, error -71 [ 66.482297][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.497674][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.540801][ T550] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 66.598369][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.676690][ T1194] device veth0_vlan entered promiscuous mode [ 66.684321][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.698719][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.708737][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.727344][ T302] usb 5-1: USB disconnect, device number 9 [ 66.781292][ T550] usb 2-1: Using ep0 maxpacket: 8 [ 66.803079][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.845291][ T1194] device veth1_macvtap entered promiscuous mode [ 66.900757][ T297] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.950676][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 166.957677][ C0] (detected by 0, t=10002 jiffies, g=5025, q=681) [ 166.964178][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294953915-4294943912), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 166.977613][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g5025 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.988695][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 166.998665][ C0] rcu: RCU grace-period kthread stack dump: [ 167.004569][ C0] task:rcu_preempt state:R running task stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 167.015335][ C0] Call Trace: [ 167.018636][ C0] __schedule+0xb53/0x1320 [ 167.023044][ C0] ? __sched_text_start+0x8/0x8 [ 167.027881][ C0] ? __mod_timer+0x7da/0xb50 [ 167.032456][ C0] schedule+0x13c/0x1d0 [ 167.036597][ C0] schedule_timeout+0x159/0x330 [ 167.041438][ C0] ? console_conditional_schedule+0x10/0x10 [ 167.047312][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 167.052758][ C0] ? run_local_timers+0x160/0x160 [ 167.057770][ C0] ? prepare_to_swait_event+0x320/0x340 [ 167.063302][ C0] rcu_gp_kthread+0x1045/0x2730 [ 167.068176][ C0] ? rcu_barrier_callback+0x50/0x50 [ 167.073368][ C0] ? __kasan_check_read+0x11/0x20 [ 167.078464][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 167.083390][ C0] kthread+0x346/0x3d0 [ 167.087451][ C0] ? rcu_barrier_callback+0x50/0x50 [ 167.092725][ C0] ? kthread_blkcg+0xd0/0xd0 [ 167.097297][ C0] ret_from_fork+0x1f/0x30 [ 285.411487][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 218s! [ 285.420423][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 213s! [ 285.429478][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 218s! [ 285.437910][ C0] Showing busy workqueues and worker pools: [ 285.443795][ C0] workqueue events: flags=0x0 [ 285.448459][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.456095][ C0] pending: kfree_rcu_monitor [ 285.461112][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.468847][ C0] pending: vmstat_shepherd, psi_avgs_work, rht_deferred_worker [ 285.476811][ C0] workqueue events_unbound: flags=0x2 [ 285.482179][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.489376][ C0] in-flight: 318:linkwatch_event [ 285.494660][ C0] pending: toggle_allocation_gate [ 285.500119][ C0] workqueue events_power_efficient: flags=0x80 [ 285.506283][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.513925][ C0] pending: check_lifetime [ 285.518612][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.526260][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, gc_worker [ 285.536566][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.541850][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.549503][ C0] pending: vmstat_update [ 285.554119][ C0] workqueue writeback: flags=0x4a [ 285.559128][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.566329][ C0] pending: wb_workfn [ 285.570591][ C0] workqueue kblockd: flags=0x18 [ 285.575418][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.583306][ C0] pending: blk_mq_timeout_work [ 285.588646][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.596516][ C0] pending: blk_mq_timeout_work [ 285.601732][ C0] workqueue usb_hub_wq: flags=0x4 [ 285.606736][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.614382][ C0] in-flight: 297:hub_event hub_event [ 285.620249][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.627987][ C0] in-flight: 550:hub_event hub_event, 302:hub_event hub_event [ 285.636043][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.641418][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.649143][ C0] pending: work_fn [ 285.653317][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.658930][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=16 [ 285.666476][ C0] in-flight: 473:addrconf_dad_work [ 285.671932][ C0] delayed: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work [ 285.698785][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=39 [ 285.706341][ C0] in-flight: 494:addrconf_dad_work [ 285.711881][ C0] delayed: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 285.777394][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.782591][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.789792][ C0] pending: wg_packet_handshake_send_worker [ 285.795962][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.801256][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.808903][ C0] pending: wg_packet_encrypt_worker [ 285.814466][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.822453][ C0] pending: wg_packet_encrypt_worker [ 285.828194][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.833214][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.840415][ C0] pending: wg_packet_handshake_send_worker [ 285.846579][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.851854][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.859663][ C0] pending: wg_packet_encrypt_worker [ 285.865222][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.872861][ C0] pending: wg_packet_encrypt_worker [ 285.878420][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.883693][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.891337][ C0] pending: wg_packet_encrypt_worker [ 285.896892][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.904531][ C0] pending: wg_packet_encrypt_worker [ 285.910103][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.915122][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.922319][ C0] pending: wg_packet_handshake_send_worker [ 285.928494][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.933778][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.941414][ C0] pending: wg_packet_encrypt_worker [ 285.946970][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.954603][ C0] pending: wg_packet_encrypt_worker [ 285.960163][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.965181][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.972382][ C0] pending: wg_packet_handshake_send_worker [ 285.978548][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.984005][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.991638][ C0] pending: wg_packet_encrypt_worker [ 285.997190][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.004833][ C0] pending: wg_packet_encrypt_worker [ 286.010388][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.015399][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.022601][ C0] pending: wg_packet_handshake_send_worker [ 286.028766][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.034045][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.041738][ C0] pending: wg_packet_encrypt_worker [ 286.047302][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.055126][ C0] pending: wg_packet_encrypt_worker [ 286.060952][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.066314][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.073949][ C0] pending: wg_packet_encrypt_worker [ 286.079502][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.087136][ C0] pending: wg_packet_encrypt_worker [ 286.092777][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.097777][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.104968][ C0] pending: wg_packet_handshake_send_worker [ 286.111132][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.116396][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.124031][ C0] pending: wg_packet_encrypt_worker [ 286.129583][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.137228][ C0] pending: wg_packet_encrypt_worker [ 286.142795][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.147801][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.155003][ C0] pending: wg_packet_handshake_send_worker [ 286.161173][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.166437][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.174077][ C0] pending: wg_packet_encrypt_worker [ 286.179634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.187277][ C0] pending: wg_packet_encrypt_worker [ 286.192852][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.198117][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.205798][ C0] pending: wg_packet_encrypt_worker [ 286.211355][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.218998][ C0] pending: wg_packet_encrypt_worker [ 286.224555][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.229644][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.236845][ C0] pending: wg_packet_handshake_send_worker [ 286.243008][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.248273][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.255908][ C0] pending: wg_packet_encrypt_worker [ 286.261465][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.269100][ C0] pending: wg_packet_encrypt_worker [ 286.274654][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.279918][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.287555][ C0] pending: wg_packet_encrypt_worker [ 286.293110][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.300747][ C0] pending: wg_packet_encrypt_worker [ 286.306416][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.311523][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.318722][ C0] pending: wg_packet_handshake_send_worker [ 286.324910][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.330192][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.337839][ C0] pending: wg_packet_encrypt_worker [ 286.343411][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.351064][ C0] pending: wg_packet_encrypt_worker [ 286.356718][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.361749][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.368969][ C0] pending: wg_packet_handshake_send_worker [ 286.375191][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.380460][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.388104][ C0] pending: wg_packet_encrypt_worker [ 286.393669][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.401403][ C0] pending: wg_packet_encrypt_worker [ 286.406977][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.412081][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.419284][ C0] pending: wg_packet_handshake_send_worker [ 286.425454][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.430751][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.438459][ C0] pending: wg_packet_encrypt_worker [ 286.444176][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.451918][ C0] pending: wg_packet_encrypt_worker [ 286.457697][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.462724][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 286.469924][ C0] in-flight: 441:wg_packet_handshake_send_worker [ 286.476610][ C0] pending: wg_packet_handshake_send_worker [ 286.482889][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.487918][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 286.495133][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 286.504405][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.509417][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 286.516636][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 286.525775][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=219s workers=8 idle: 54 423 15 5 424 [ 286.535283][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=219s workers=8 idle: 25 285 361 20 474 475 [ 286.545323][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=219s workers=7 idle: 547 296 9 7 49