last executing test programs: 16.155079837s ago: executing program 4 (id=235): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005800500190003"], 0x98}}, 0x0) 16.090360273s ago: executing program 4 (id=238): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x14, 0x0, 0x311}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24c, 0x65, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1bc, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_nat={0xa4, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645fc28bd05cca953cb4705ee5fdd6950f43ec843b0e8335d3f2f1e0027"}, {0xc}, {0xc}}}, @m_nat={0xf4, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1000, 0x10000000, 0x80000000, 0x88}, @loopback, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9dea, 0x3, 0x6}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x6, 0x8}, @multicast2, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x0, 0x4, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x80000000, 0x1, 0x80000001, 0x4}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 16.067203225s ago: executing program 4 (id=239): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000340)={0xd37, [0x7, 0x7]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 13.982787704s ago: executing program 4 (id=264): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@nouid32}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 13.932030439s ago: executing program 4 (id=266): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 13.832800309s ago: executing program 4 (id=267): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x4, 0x7, "01bf53c3", "3e32a7c1"}}, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x15, 0x3, "a4b871"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.832520269s ago: executing program 32 (id=267): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x4, 0x7, "01bf53c3", "3e32a7c1"}}, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x15, 0x3, "a4b871"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.730326778s ago: executing program 1 (id=480): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{}, {@noblock_validity}, {@resuid}, {@nobh}, {@lazytime}, {@usrquota}, {@mblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000340)='./file0\x00', 0x0, r1) 4.60197682s ago: executing program 1 (id=488): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000092000040"]) 4.428904627s ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 4.39166646s ago: executing program 0 (id=498): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r1 = socket(0x2, 0x3, 0x6) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}, 0x1, 0x0, 0x0, 0x4090}, 0x1) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4, 0x1, 0x6, 0x100, 0x9, 0x800000, r0}) 4.379955091s ago: executing program 1 (id=499): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='\x00\x00'], 0x1, 0x193, &(0x7f0000000b00)="$eJzs281qE10YB/B/+vataV0kC1fiYpauQtMrMEgFMSAoWSgIim1AOlKwENCF7c6FN+HluNUrcdmFMNJOYz9IQEGb2Px+m3ngzB+ec2A+zsA8v/V6Z2t3b/hs+DnNRiNLd1LksJF2ljJ2EADgKjmsqnyrqqq6dpDVT6mqatYdAQB/m+c/ACyex0+ePuj1+5uPiqKZlB9Gg9GgPtbjvWFepcx21tPK9xy9IJyo63v3+5vrxbF2Ppb7J/n90eC/8/luWmlPznfrfHE+/3/WzuY30sqNyfmNifmV3F45k++kla8vs5syWznKnubfd4vi7sP+hfz14/MAAADgKugUP03cv3c608brfK/xy98HLuyvl3NzebZzB4BFtff23c6Lstx+M6/Fl7W60XnpZ3oxXtJ56ef3i9XMRRt/sGgkmYM2/qGiOV6xGd6UgEtxevXPuhMAAAAAAAAAAAAAAGCay/ivaNZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDx/AgAAP//fVyNVw==") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.340832395s ago: executing program 0 (id=502): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000e80)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@sb={'sb', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000001040)) 4.227299476s ago: executing program 0 (id=505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.221626727s ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') preadv(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) 4.145084634s ago: executing program 0 (id=507): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.068770281s ago: executing program 1 (id=509): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_disconnect(r0) 4.068313611s ago: executing program 33 (id=509): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_disconnect(r0) 3.130411401s ago: executing program 3 (id=527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x0, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.834588858s ago: executing program 6 (id=532): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.7166323s ago: executing program 6 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 2.687639393s ago: executing program 2 (id=535): mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus\x00') 2.677505613s ago: executing program 6 (id=536): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r1, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0xff00) 2.662838795s ago: executing program 2 (id=537): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x2, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000d80)=ANY=[], 0x0) 2.657029126s ago: executing program 6 (id=538): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x40000000000d, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1-0:'], 0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x6a) 2.625954998s ago: executing program 6 (id=540): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.620327449s ago: executing program 2 (id=541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) select(0x40, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x100000000303, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) 2.599670771s ago: executing program 6 (id=542): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "5cc3"}, 0x0, 0x0, 0x0, 0x0}) 2.599319171s ago: executing program 2 (id=543): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.581170913s ago: executing program 2 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 2.553637476s ago: executing program 0 (id=547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200125"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.544615606s ago: executing program 2 (id=548): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 744.290148ms ago: executing program 5 (id=569): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") open(0x0, 0x101c42, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) 583.743144ms ago: executing program 3 (id=570): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 516.30172ms ago: executing program 3 (id=571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0xfffffffe, 0x3c}, 0x0, @in=@private=0xa010101}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 432.900188ms ago: executing program 3 (id=572): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000d80)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000680)={0x1f, @none}, 0x8) listen(r1, 0x0) 432.484678ms ago: executing program 5 (id=573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000080000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000400000008000500", @ANYRES32=r3], 0x20}}, 0x0) 432.298498ms ago: executing program 3 (id=574): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x8a02, 0x3) 406.771771ms ago: executing program 5 (id=575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @dev, 'veth0_to_batadv\x00'}}, 0x20000000) 385.453013ms ago: executing program 5 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) 324.875889ms ago: executing program 5 (id=577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4bfb, &(0x7f0000000000)) 324.374359ms ago: executing program 3 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 324.119749ms ago: executing program 5 (id=579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7uNwkAQBuB//Tjb0ZVwXVzqJu7qwY3QAC3QEzERizCPiBQhpO/bZKWZf0YT3mo/bJIux1q/cnnp09V5zLhWp8xjftJfe5vpFiop9/zfb9qyPMaVoUz1O6mnOjxbt3TtYZtm/bfJ/+6VtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADApzgHAAD//xodDm0=") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 0s ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000200000000010000000000008000000100"/44], 0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 21.730796][ T28] audit: type=1400 audit(1730743962.151:66): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.732101][ T282] cgroup: Unknown subsys name 'net' [ 21.753275][ T28] audit: type=1400 audit(1730743962.151:67): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.780209][ T28] audit: type=1400 audit(1730743962.181:68): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.780381][ T282] cgroup: Unknown subsys name 'devices' [ 21.920728][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.926163][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.026446][ T28] audit: type=1400 audit(1730743962.441:69): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.049441][ T28] audit: type=1400 audit(1730743962.441:70): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.074067][ T28] audit: type=1400 audit(1730743962.441:71): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.083552][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.106089][ T28] audit: type=1400 audit(1730743962.521:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.131381][ T28] audit: type=1400 audit(1730743962.521:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.162205][ T28] audit: type=1400 audit(1730743962.581:74): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.163220][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.187551][ T28] audit: type=1400 audit(1730743962.581:75): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.987273][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.994186][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.001505][ T293] device bridge_slave_0 entered promiscuous mode [ 23.009425][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.016266][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.023665][ T293] device bridge_slave_1 entered promiscuous mode [ 23.101434][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108385][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115793][ T292] device bridge_slave_0 entered promiscuous mode [ 23.131227][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.138090][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.145383][ T292] device bridge_slave_1 entered promiscuous mode [ 23.185590][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.192760][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.200078][ T295] device bridge_slave_0 entered promiscuous mode [ 23.213705][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220591][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.227878][ T294] device bridge_slave_0 entered promiscuous mode [ 23.234482][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.241362][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248602][ T295] device bridge_slave_1 entered promiscuous mode [ 23.262222][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.269092][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.276326][ T294] device bridge_slave_1 entered promiscuous mode [ 23.304914][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.311808][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.319254][ T296] device bridge_slave_0 entered promiscuous mode [ 23.340050][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.346880][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.354233][ T296] device bridge_slave_1 entered promiscuous mode [ 23.488280][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.495363][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.502497][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.509345][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.569173][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.576031][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.583163][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.589933][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.614168][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.621044][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.628234][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.635030][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.643362][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.650405][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.657482][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.664290][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.673130][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.679985][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.687100][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.693898][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.737730][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.744825][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.751916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.760264][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.767279][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.774372][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.781647][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.788975][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.796119][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.803252][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.810355][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.818392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.825723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.852309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.860394][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.867227][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.888407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.896464][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.903405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.911300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.919535][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.926403][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.933821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.942102][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.948962][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.956133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.964009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.971269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.981817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.989146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.020271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.028910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.036942][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.043817][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.052094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.060395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.068372][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.075230][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.090516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.098442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.106369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.114228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.121517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.128858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.136948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.144995][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.151843][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.159171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.167265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.175331][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.182168][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.189403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.197283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.215737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.223948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.232318][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.239200][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.246663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.254625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.262903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.271275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.279466][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.286292][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.293669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.301726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.309841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.318091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.328413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.336471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.347251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.355139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.364834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.372273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.382736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.391354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.401106][ T293] device veth0_vlan entered promiscuous mode [ 24.408868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.416784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.436556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.450329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.459714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.472724][ T295] device veth0_vlan entered promiscuous mode [ 24.481725][ T292] device veth0_vlan entered promiscuous mode [ 24.489363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.497472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.504798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.512222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.520212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.528115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.536520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.545311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.552702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.566692][ T296] device veth0_vlan entered promiscuous mode [ 24.574908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.582965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.590570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.597803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.606013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.616115][ T293] device veth1_macvtap entered promiscuous mode [ 24.630378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.638426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.646232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.654602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.668341][ T292] device veth1_macvtap entered promiscuous mode [ 24.678105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.686401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.694688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.703283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.711519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.719606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.731989][ T294] device veth0_vlan entered promiscuous mode [ 24.738736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.746471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.756199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.763772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.772900][ T295] device veth1_macvtap entered promiscuous mode [ 24.790255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.798299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.806440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.814802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.822908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.838713][ T296] device veth1_macvtap entered promiscuous mode [ 24.848466][ T294] device veth1_macvtap entered promiscuous mode [ 24.865121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.876264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.884594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.893009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.901482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.919319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.927845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.963441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.972244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.985601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.993912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.997569][ T319] syz.1.2 (319) used greatest stack depth: 20552 bytes left [ 25.007953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.017599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.214678][ T349] loop3: detected capacity change from 0 to 2048 [ 25.231010][ T349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.254095][ T349] incfs: iterate_incfs_dir / -22 [ 25.275019][ T295] EXT4-fs (loop3): unmounting filesystem. [ 25.300747][ T359] syz.0.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.325626][ T361] loop0: detected capacity change from 0 to 1024 [ 25.340503][ T361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.361465][ T294] EXT4-fs (loop0): unmounting filesystem. [ 25.378617][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.398699][ T327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.569592][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.618617][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 25.738673][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.749601][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.759127][ T24] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 25.767920][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.776912][ T24] usb 3-1: config 0 descriptor?? [ 25.788900][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.799836][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.809503][ T327] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 25.818446][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.829019][ T327] usb 5-1: config 0 descriptor?? [ 25.838664][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 25.970918][ T6] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 25.978838][ T6] usb 4-1: config 0 has no interface number 0 [ 25.984658][ T6] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 26.118721][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 26.127647][ T6] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 26.135458][ T6] usb 4-1: Product: syz [ 26.139454][ T6] usb 4-1: SerialNumber: syz [ 26.146272][ T6] usb 4-1: config 0 descriptor?? [ 26.168837][ T357] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 26.230968][ T223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.259932][ T24] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 26.273496][ T24] samsung 0003:0419:0001.0001: unknown main item tag 0x0 [ 26.280733][ T24] samsung 0003:0419:0001.0001: item fetching failed at offset 3/5 [ 26.288491][ T24] samsung 0003:0419:0001.0001: parse failed [ 26.294541][ T24] samsung: probe of 0003:0419:0001.0001 failed with error -22 [ 26.298029][ T379] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 26.313035][ T327] petalynx 0003:18B1:0037.0002: collection stack underflow [ 26.320123][ T327] petalynx 0003:18B1:0037.0002: item 0 1 0 12 parsing failed [ 26.327402][ T327] petalynx 0003:18B1:0037.0002: parse failed [ 26.337907][ T327] petalynx: probe of 0003:18B1:0037.0002 failed with error -22 [ 26.388203][ T387] process 'syz.0.28' launched './file0' with NULL argv: empty string added [ 26.439348][ T6] usb 4-1: invalid MIDI in EP 0 [ 26.446570][ T6] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 26.454651][ T6] usb 4-1: USB disconnect, device number 2 [ 26.466672][ T327] usb 3-1: USB disconnect, device number 2 [ 26.468669][ T223] usb 2-1: Using ep0 maxpacket: 8 [ 26.474973][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.515643][ T24] usb 5-1: USB disconnect, device number 2 [ 26.588726][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.599896][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.609893][ T223] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 26.624146][ T223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.624448][ T401] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.636291][ T223] usb 2-1: config 0 descriptor?? [ 26.981536][ T415] loop2: detected capacity change from 0 to 256 [ 26.987863][ T415] exfat: Unknown parameter '6SI(/p\"EZ2UAJ(7>Q{' [ 26.988618][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.030202][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.104230][ T431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=431 comm=syz.4.46 [ 27.117238][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 27.117254][ T28] audit: type=1400 audit(1730743967.541:152): avc: denied { ioctl } for pid=422 comm="syz.3.42" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16153 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.123804][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 27.159503][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.163769][ T431] Zero length message leads to an empty skb [ 27.166712][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.183885][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.191460][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.198963][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.206440][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.214119][ T223] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 27.232000][ T223] playstation 0003:054C:0CE6.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 27.279841][ T28] audit: type=1400 audit(1730743967.701:153): avc: denied { create } for pid=441 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.298825][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 27.303909][ T28] audit: type=1400 audit(1730743967.701:154): avc: denied { write } for pid=441 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.338450][ T28] audit: type=1400 audit(1730743967.751:155): avc: denied { create } for pid=443 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.360566][ T28] audit: type=1400 audit(1730743967.771:156): avc: denied { ioctl } for pid=443 comm="syz.3.52" path="socket:[16490]" dev="sockfs" ino=16490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.385053][ T223] playstation 0003:054C:0CE6.0003: Invalid byte count transferred, expected 20 got 0 [ 27.387884][ T28] audit: type=1400 audit(1730743967.781:157): avc: denied { write } for pid=443 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.395760][ T223] playstation 0003:054C:0CE6.0003: Failed to retrieve DualSense pairing info: -22 [ 27.414409][ T28] audit: type=1400 audit(1730743967.801:158): avc: denied { read } for pid=443 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.455888][ T223] playstation 0003:054C:0CE6.0003: Failed to get MAC address from DualSense [ 27.468698][ T223] playstation 0003:054C:0CE6.0003: Failed to create dualsense. [ 27.484107][ T452] loop3: detected capacity change from 0 to 256 [ 27.490886][ T223] playstation: probe of 0003:054C:0CE6.0003 failed with error -22 [ 27.498906][ T452] ======================================================= [ 27.498906][ T452] WARNING: The mand mount option has been deprecated and [ 27.498906][ T452] and is ignored by this kernel. Remove the mand [ 27.498906][ T452] option from the mount to silence this warning. [ 27.498906][ T452] ======================================================= [ 27.538929][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.546094][ T452] FAT-fs (loop3): Directory bread(block 64) failed [ 27.552811][ T452] FAT-fs (loop3): Directory bread(block 65) failed [ 27.559197][ T452] FAT-fs (loop3): Directory bread(block 66) failed [ 27.565419][ T452] FAT-fs (loop3): Directory bread(block 67) failed [ 27.572062][ T452] FAT-fs (loop3): Directory bread(block 68) failed [ 27.578484][ T452] FAT-fs (loop3): Directory bread(block 69) failed [ 27.585151][ T452] FAT-fs (loop3): Directory bread(block 70) failed [ 27.591725][ T452] FAT-fs (loop3): Directory bread(block 71) failed [ 27.598172][ T452] FAT-fs (loop3): Directory bread(block 72) failed [ 27.604861][ T452] FAT-fs (loop3): Directory bread(block 73) failed [ 27.614228][ T366] usb 2-1: USB disconnect, device number 2 [ 27.620091][ T28] audit: type=1400 audit(1730743968.031:159): avc: denied { mount } for pid=451 comm="syz.3.56" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.660354][ T28] audit: type=1400 audit(1730743968.081:160): avc: denied { remount } for pid=451 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.661738][ T452] syz.3.56: attempt to access beyond end of device [ 27.661738][ T452] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 27.698334][ T452] syz.3.56: attempt to access beyond end of device [ 27.698334][ T452] loop3: rw=2049, sector=1256, nr_sectors = 8 limit=256 [ 27.711963][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 27.719005][ T28] audit: type=1400 audit(1730743968.131:161): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.721213][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.748445][ T19] usb 1-1: Product: syz [ 27.752525][ T19] usb 1-1: Manufacturer: syz [ 27.756861][ T19] usb 1-1: SerialNumber: syz [ 27.764526][ T19] usb 1-1: config 0 descriptor?? [ 27.776125][ T458] loop3: detected capacity change from 0 to 1024 [ 27.783204][ T458] EXT4-fs: Ignoring removed orlov option [ 27.789657][ T458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 27.798094][ T458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.806972][ T455] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.817076][ T458] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 27.825065][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 27.833015][ T19] usb 1-1: Detected FT-X [ 27.838421][ T295] EXT4-fs (loop3): unmounting filesystem. [ 27.928689][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.939555][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.950890][ T6] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 27.960168][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.969331][ T6] usb 3-1: config 0 descriptor?? [ 28.028632][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 28.141193][ T476] tmpfs: Unknown parameter 'm' [ 28.230304][ T455] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.258599][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.298576][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.308152][ T455] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.833740][ T496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 30.844831][ T496] device macsec1 entered promiscuous mode [ 30.850450][ T496] device vlan1 entered promiscuous mode [ 30.859595][ T496] device vlan1 left promiscuous mode [ 30.940855][ T500] loop3: detected capacity change from 0 to 512 [ 30.947782][ T500] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.960519][ T500] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.73: casefold flag without casefold feature [ 30.973270][ T500] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.73: couldn't read orphan inode 15 (err -117) [ 30.984998][ T500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.053335][ T295] EXT4-fs (loop3): unmounting filesystem. [ 31.087110][ T508] sch_fq: defrate 0 ignored. [ 31.091694][ T455] usb 5-1: string descriptor 0 read error: -71 [ 31.097724][ T455] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 31.107249][ T455] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 31.130620][ T455] usb 5-1: config 0 descriptor?? [ 31.148625][ T455] usb 5-1: can't set config #0, error -71 [ 31.154708][ T455] usb 5-1: USB disconnect, device number 3 [ 31.172050][ T516] loop3: detected capacity change from 0 to 2048 [ 31.190083][ T516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.206415][ T295] EXT4-fs (loop3): unmounting filesystem. [ 31.335690][ T536] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use) [ 31.659742][ T560] loop3: detected capacity change from 0 to 40427 [ 31.666475][ T560] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 31.674057][ T560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 31.683084][ T560] F2FS-fs (loop3): invalid crc value [ 31.689955][ T560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.728687][ T19] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 31.738558][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 31.752415][ T19] usb 1-1: USB disconnect, device number 2 [ 31.753416][ T318] udevd[318]: failed to send result of seq 4372 to main daemon: Connection refused [ 31.758861][ T560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.774432][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.784331][ T560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.791835][ T19] ftdi_sio 1-1:0.0: device disconnected [ 31.838643][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.896629][ T577] random: crng reseeded on system resumption [ 31.970543][ T582] loop3: detected capacity change from 0 to 1024 [ 31.977920][ T582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.988671][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 31.990140][ T582] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.994480][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 32.006269][ T582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.034711][ T6] usb 3-1: USB disconnect, device number 3 [ 32.040665][ T582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.076817][ T295] EXT4-fs (loop3): unmounting filesystem. [ 32.098624][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 32.119379][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 32.119394][ T28] audit: type=1400 audit(32.112:196): avc: denied { unmount } for pid=591 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.175088][ T28] audit: type=1400 audit(32.162:197): avc: denied { wake_alarm } for pid=596 comm="syz.3.113" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.218778][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.229868][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.248586][ T24] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 32.258589][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.278889][ T24] usb 5-1: config 0 descriptor?? [ 32.377764][ T28] audit: type=1400 audit(32.362:198): avc: denied { read write } for pid=292 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.406488][ T28] audit: type=1400 audit(32.392:199): avc: denied { open } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.431438][ T28] audit: type=1400 audit(32.392:200): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.455998][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.464040][ T28] audit: type=1400 audit(32.422:201): avc: denied { bpf } for pid=609 comm="syz.1.119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.483826][ T28] audit: type=1400 audit(32.422:202): avc: denied { map_create } for pid=609 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.502401][ T28] audit: type=1400 audit(32.422:203): avc: denied { map_read map_write } for pid=609 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.522070][ T28] audit: type=1400 audit(32.432:204): avc: denied { prog_load } for pid=609 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.545789][ T28] audit: type=1400 audit(32.432:205): avc: denied { perfmon } for pid=609 comm="syz.1.119" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.573000][ T616] IPv6: Can't replace route, no match found [ 32.617348][ T626] capability: warning: `syz.3.127' uses deprecated v2 capabilities in a way that may be insecure [ 32.688716][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 32.759483][ T24] greenasia 0003:0E8F:0012.0004: item fetching failed at offset 0/3 [ 32.767444][ T24] greenasia 0003:0E8F:0012.0004: parse failed [ 32.773474][ T24] greenasia: probe of 0003:0E8F:0012.0004 failed with error -22 [ 32.808652][ T39] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 32.868643][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.876103][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.962447][ T24] usb 5-1: USB disconnect, device number 4 [ 32.968638][ T39] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 32.977491][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.985920][ T39] usb 1-1: Product: syz [ 32.990418][ T39] usb 1-1: Manufacturer: syz [ 32.994825][ T39] usb 1-1: SerialNumber: syz [ 33.000462][ T39] usb 1-1: config 0 descriptor?? [ 33.039333][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 33.047017][ T39] usb 1-1: Detected FT232R [ 33.248861][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 33.288739][ T312] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 33.299645][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.310367][ T312] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 33.321298][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.333973][ T312] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 33.344934][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.353739][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.361562][ T312] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 33.370750][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.378833][ T6] usb 3-1: config 0 descriptor?? [ 33.398759][ T620] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.509600][ T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 33.623625][ T312] usb 2-1: USB disconnect, device number 3 [ 33.711921][ T19] usb 1-1: USB disconnect, device number 3 [ 33.718716][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.727969][ T19] ftdi_sio 1-1:0.0: device disconnected [ 33.788618][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.839526][ T6] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.847130][ T6] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 33.855669][ T6] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.028625][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 34.041868][ T19] usb 3-1: USB disconnect, device number 4 [ 34.148640][ T39] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=72.34 [ 34.157588][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.166792][ T39] usb 5-1: config 0 descriptor?? [ 34.210049][ T39] usb 5-1: bad CDC descriptors [ 34.402301][ T666] loop0: detected capacity change from 0 to 512 [ 34.411443][ T666] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2758: inode #11: comm syz.0.143: corrupted xattr block 95 [ 34.413014][ T223] usb 5-1: USB disconnect, device number 5 [ 34.423903][ T666] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2808: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.442703][ T666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.143: bg 0: block 7: invalid block bitmap [ 34.455549][ T666] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 34.464334][ T666] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2924: inode #11: comm syz.0.143: corrupted xattr block 95 [ 34.476396][ T666] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 34.485559][ T666] EXT4-fs (loop0): 1 orphan inode deleted [ 34.491185][ T666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.510404][ T294] EXT4-fs (loop0): unmounting filesystem. [ 34.648924][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.888569][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 35.008826][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.019966][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.030239][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.043305][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 35.052529][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.068833][ T19] usb 4-1: config 0 descriptor?? [ 35.126977][ T689] loop1: detected capacity change from 0 to 8192 [ 35.134313][ T689] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.238745][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 35.392887][ T710] loop1: detected capacity change from 0 to 512 [ 35.401299][ T711] can0: slcan on ptm1. [ 35.409995][ T710] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.447167][ T710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.459823][ T710] EXT4-fs (loop1): 1 truncate cleaned up [ 35.465354][ T710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.480455][ T710] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 35.505664][ T292] EXT4-fs (loop1): unmounting filesystem. [ 35.525268][ T707] can0 (unregistered): slcan off ptm1. [ 35.549548][ T19] koneplus 0003:1E7D:2E22.0006: item fetching failed at offset 0/2 [ 35.560385][ T19] koneplus 0003:1E7D:2E22.0006: parse failed [ 35.566215][ T19] koneplus: probe of 0003:1E7D:2E22.0006 failed with error -22 [ 35.582848][ T721] loop0: detected capacity change from 0 to 512 [ 35.597835][ T721] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 35.607688][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.618596][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.628172][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 35.637149][ T721] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 35.648182][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.656357][ T721] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 35.666651][ T6] usb 5-1: config 0 descriptor?? [ 35.672092][ T721] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.679907][ T721] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 35.688026][ T721] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.695519][ T721] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.165: Invalid block bitmap block 0 in block_group 1 [ 35.709176][ T721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.165: bg 0: block 34: padding at end of block bitmap is not set [ 35.718594][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.723834][ T721] EXT4-fs error (device loop0): ext4_acquire_dquot:6787: comm syz.0.165: Failed to acquire dquot type 1 [ 35.742370][ T721] EXT4-fs (loop0): 1 truncate cleaned up [ 35.748068][ T721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.753122][ T455] usb 4-1: USB disconnect, device number 3 [ 35.768759][ T721] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.777053][ T721] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 35.791696][ T721] syz.0.165 (721) used greatest stack depth: 20072 bytes left [ 35.791952][ T294] EXT4-fs (loop0): unmounting filesystem. [ 36.088617][ T366] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 36.098664][ T19] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 36.107576][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.116547][ T19] usb 3-1: config 0 descriptor?? [ 36.150189][ T6] wacom 0003:056A:00D0.0007: unknown main item tag 0x0 [ 36.157191][ T6] wacom 0003:056A:00D0.0007: unknown main item tag 0x0 [ 36.164607][ T6] wacom 0003:056A:00D0.0007: unknown main item tag 0x0 [ 36.171349][ T6] wacom 0003:056A:00D0.0007: unknown main item tag 0x0 [ 36.178196][ T6] wacom 0003:056A:00D0.0007: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 36.188100][ T6] wacom 0003:056A:00D0.0007: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 36.199606][ T6] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0007/input/input4 [ 36.281158][ T733] loop3: detected capacity change from 0 to 128 [ 36.289347][ T733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.308471][ T295] EXT4-fs (loop3): unmounting filesystem. [ 36.351922][ T6] usb 5-1: USB disconnect, device number 6 [ 36.449537][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.460589][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.470204][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 36.480916][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 36.490518][ T366] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 36.503425][ T366] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 36.512421][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.521015][ T366] usb 1-1: config 0 descriptor?? [ 36.532080][ T752] serio: Serial port pts1 [ 36.600079][ T19] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 37.000810][ T366] ntrig 0003:1B96:000A.0009: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 37.028782][ T19] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 32: -71 [ 37.038083][ T19] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -71 [ 37.047197][ T19] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 37.056512][ T19] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 37.079110][ T19] playstation: probe of 0003:054C:0DF2.0008 failed with error -71 [ 37.087681][ T19] usb 3-1: USB disconnect, device number 5 [ 37.208650][ T366] ntrig 0003:1B96:000A.0009: Firmware version: 2.12.22.36.1 (7224 99c4) [ 37.412774][ T39] usb 1-1: USB disconnect, device number 4 [ 37.458707][ T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 37.648603][ T724] Bluetooth: hci0: command 0x1003 tx timeout [ 37.654457][ T462] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.670557][ T798] loop1: detected capacity change from 0 to 128 [ 37.818670][ T6] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 37.826846][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.838369][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 37.849762][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.855603][ T801] loop1: detected capacity change from 0 to 40427 [ 37.863377][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.870475][ T801] F2FS-fs (loop1): invalid crc value [ 37.877772][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.885079][ T801] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.891438][ T6] usb 5-1: config 0 descriptor?? [ 37.918647][ T786] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 37.932926][ T801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 38.208626][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.278598][ T316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.379525][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.389351][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.396578][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.404569][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.414608][ T817] loop3: detected capacity change from 0 to 256 [ 38.420891][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.431422][ T817] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 38.443426][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.451108][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 38.456213][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.463814][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.472277][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 38.472289][ T28] audit: type=1400 audit(38.462:287): avc: denied { mount } for pid=816 comm="syz.3.204" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.500376][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.508492][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.516147][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.523641][ T28] audit: type=1400 audit(38.492:288): avc: denied { write } for pid=816 comm="syz.3.204" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.523790][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.552084][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.564968][ T28] audit: type=1400 audit(38.492:289): avc: denied { add_name } for pid=816 comm="syz.3.204" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.565368][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.595665][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 38.603037][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.614033][ T6] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 38.619609][ T28] audit: type=1400 audit(38.492:290): avc: denied { associate } for pid=816 comm="syz.3.204" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.622323][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.653788][ T28] audit: type=1400 audit(38.492:291): avc: denied { read append open } for pid=816 comm="syz.3.204" path="/79/file0/blkio.bfq.io_service_bytes_recursive" dev="loop3" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.662083][ T6] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 38.683312][ T28] audit: type=1400 audit(38.522:292): avc: denied { map } for pid=816 comm="syz.3.204" path="/79/file0/blkio.bfq.io_service_bytes_recursive" dev="loop3" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.717566][ T19] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.718365][ T28] audit: type=1400 audit(38.552:293): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.731883][ T6] usb 5-1: USB disconnect, device number 7 [ 38.768641][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.779429][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.788919][ T316] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 38.797758][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.806782][ T316] usb 2-1: config 0 descriptor?? [ 38.908673][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.917620][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.925393][ T19] usb 1-1: Product: syz [ 38.929441][ T19] usb 1-1: Manufacturer: syz [ 38.933773][ T19] usb 1-1: SerialNumber: syz [ 38.968639][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.217704][ T28] audit: type=1400 audit(39.202:294): avc: denied { create } for pid=828 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.236831][ T28] audit: type=1400 audit(39.202:295): avc: denied { setopt } for pid=828 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.256110][ T28] audit: type=1400 audit(39.202:296): avc: denied { getopt } for pid=828 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.299616][ T316] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 39.317574][ T316] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 39.329673][ T316] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 39.394909][ T831] loop4: detected capacity change from 0 to 40427 [ 39.401612][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.402895][ T831] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 39.419269][ T831] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.419448][ T19] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 39.430293][ T831] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.477284][ T831] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.484343][ T831] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.502667][ T366] usb 2-1: USB disconnect, device number 4 [ 39.517883][ T831] syz.4.209: attempt to access beyond end of device [ 39.517883][ T831] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 39.531435][ C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -2 [ 39.588711][ T39] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 39.608280][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.628941][ T39] usb 3-1: Product: syz [ 39.632948][ T39] usb 3-1: Manufacturer: syz [ 39.637372][ T39] usb 3-1: SerialNumber: syz [ 39.650042][ T39] usb 3-1: config 0 descriptor?? [ 39.663482][ T839] loop3: detected capacity change from 0 to 40427 [ 39.670275][ T839] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 39.677022][ T839] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.685491][ T839] F2FS-fs (loop3): Image doesn't support compression [ 39.692925][ T839] F2FS-fs (loop3): invalid crc value [ 39.700426][ T839] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.747284][ T839] F2FS-fs (loop3): Start checkpoint disabled! [ 39.754080][ T839] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.761442][ T839] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 39.913235][ T843] loop4: detected capacity change from 0 to 40427 [ 39.921173][ T843] F2FS-fs (loop4): invalid crc value [ 39.927963][ T843] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.977108][ T843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 40.025915][ T866] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.033186][ T866] overlayfs: failed to set xattr on upper [ 40.039178][ T866] overlayfs: ...falling back to index=off,metacopy=off. [ 40.045985][ T866] overlayfs: ...falling back to xino=off. [ 40.051930][ T866] overlayfs: conflicting lowerdir path [ 40.069821][ T868] loop3: detected capacity change from 0 to 256 [ 40.079676][ T868] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 40.200878][ T893] 9pnet: p9_errstr2errno: server reported unknown error @hQIte [ 40.219106][ T896] netlink: 'syz.4.235': attribute type 25 has an invalid length. [ 40.227320][ T896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.235'. [ 40.237035][ T896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.235'. [ 40.246960][ T896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 40.288645][ T19] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 40.312453][ T19] usb 1-1: USB disconnect, device number 5 [ 40.330199][ T39] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 40.337409][ T39] usb 3-1: USB disconnect, device number 6 [ 40.398355][ T897] loop3: detected capacity change from 0 to 40427 [ 40.405717][ T897] F2FS-fs (loop3): invalid crc value [ 40.412726][ T897] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.455690][ T897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 40.538105][ T920] input: syz0 as /devices/virtual/input/input7 [ 40.548658][ T366] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.601334][ T926] loop2: detected capacity change from 0 to 1024 [ 40.607762][ T926] ext4: Bad value for 'sb' [ 40.908620][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.919371][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.928561][ T39] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 40.929811][ T366] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 40.945523][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.968791][ T366] usb 2-1: config 0 descriptor?? [ 41.038582][ T223] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.308689][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.318852][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.329761][ T39] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.342586][ T39] usb 3-1: config 1 interface 1 has no altsetting 0 [ 41.408676][ T223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.419472][ T223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.432278][ T223] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.441169][ T223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.449569][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.449619][ T223] usb 4-1: config 0 descriptor?? [ 41.456880][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.467695][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.474347][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.480985][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.487526][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.494374][ T366] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 41.501570][ T366] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 41.518676][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.527729][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.535610][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.542916][ T39] usb 3-1: Product: syz [ 41.546809][ T39] usb 3-1: Manufacturer: syz [ 41.551327][ T39] usb 3-1: SerialNumber: syz [ 41.668636][ T366] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device [ 41.675894][ T366] arvo 0003:1E7D:30D4.000C: couldn't install keyboard [ 41.682935][ T366] arvo: probe of 0003:1E7D:30D4.000C failed with error -71 [ 41.690899][ T366] usb 2-1: USB disconnect, device number 5 [ 41.798641][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 41.808647][ T39] usb 3-1: selecting invalid altsetting 0 [ 41.814222][ T39] usb 3-1: selecting invalid altsetting 0 [ 41.819992][ T39] cdc_ncm 3-1:1.0: bind() failure [ 41.825501][ T39] usb 3-1: selecting invalid altsetting 0 [ 41.831180][ T39] cdc_ncm: probe of 3-1:1.1 failed with error -22 [ 41.837461][ T39] usb 3-1: selecting invalid altsetting 0 [ 41.843158][ T39] cdc_mbim: probe of 3-1:1.1 failed with error -22 [ 41.918626][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.928637][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 41.938099][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.951766][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.959025][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.967181][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.974417][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.981667][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.988808][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 41.995984][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 42.003314][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 42.010555][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 42.017733][ T223] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 42.025019][ T223] plantronics 0003:047F:FFFF.000D: unbalanced collection at end of report description [ 42.034577][ T223] plantronics 0003:047F:FFFF.000D: parse failed [ 42.040795][ T223] plantronics: probe of 0003:047F:FFFF.000D failed with error -22 [ 42.118649][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=00f0, bcdDevice=c7.3d [ 42.127615][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.135469][ T24] usb 1-1: Product: syz [ 42.139442][ T24] usb 1-1: Manufacturer: syz [ 42.143823][ T24] usb 1-1: SerialNumber: syz [ 42.148992][ T24] usb 1-1: config 0 descriptor?? [ 42.157472][ T366] usb 4-1: USB disconnect, device number 4 [ 42.178788][ T954] bridge0: port 3(vlan2) entered blocking state [ 42.184870][ T954] bridge0: port 3(vlan2) entered disabled state [ 42.368667][ T724] Bluetooth: hci0: command 0x1003 tx timeout [ 42.368663][ T462] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.399162][ T967] loop4: detected capacity change from 0 to 1024 [ 42.406009][ T967] EXT4-fs: Ignoring removed orlov option [ 42.412162][ T967] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.420942][ T967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.470387][ T24] usb 1-1: USB disconnect, device number 6 [ 42.481316][ T293] EXT4-fs (loop4): unmounting filesystem. [ 42.604564][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.611713][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.619569][ T973] device bridge_slave_0 entered promiscuous mode [ 42.628256][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.635171][ T973] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.642369][ T973] device bridge_slave_1 entered promiscuous mode [ 42.668613][ T223] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.708021][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.715038][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.722108][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.728898][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.758492][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.766144][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.774591][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.793197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.801635][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.808558][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.815808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.824213][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.831097][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.849310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.857212][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.869590][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.883538][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.891423][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.898771][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.906615][ T973] device veth0_vlan entered promiscuous mode [ 42.917161][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.928618][ T223] usb 2-1: Using ep0 maxpacket: 16 [ 42.933951][ T973] device veth1_macvtap entered promiscuous mode [ 42.945088][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.960365][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.017940][ T1018] loop0: detected capacity change from 0 to 512 [ 43.024468][ T315] device bridge_slave_1 left promiscuous mode [ 43.027431][ T1018] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.278: bad orphan inode 17 [ 43.031722][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.047271][ T1018] ext4_test_bit(bit=16, block=4) = 1 [ 43.052594][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.063485][ T1018] is_bad_inode(inode)=0 [ 43.067452][ T1018] NEXT_ORPHAN(inode)=0 [ 43.071594][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.081261][ T1018] max_ino=32 [ 43.081410][ T315] device bridge_slave_0 left promiscuous mode [ 43.084270][ T1018] i_nlink=1 [ 43.084312][ T1018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.101484][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.101482][ T223] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 43.101510][ T223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.125892][ T315] device veth1_macvtap left promiscuous mode [ 43.128604][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.139152][ T315] device veth0_vlan left promiscuous mode [ 43.140632][ T223] usb 2-1: config 0 descriptor?? [ 43.152400][ T1018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.278: bg 0: block 7: invalid block bitmap [ 43.163195][ T1024] loop5: detected capacity change from 0 to 256 [ 43.170998][ T1024] exfat: Deprecated parameter 'utf8' [ 43.176132][ T1024] exfat: Deprecated parameter 'utf8' [ 43.187955][ T1024] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 43.200566][ T294] EXT4-fs (loop0): unmounting filesystem. [ 43.378689][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 43.481146][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 43.481162][ T28] audit: type=1400 audit(43.472:338): avc: denied { unmount } for pid=973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.508894][ T366] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.639441][ T223] hid-multitouch 0003:1FD2:6007.000E: unknown global tag 0xc [ 43.646652][ T223] hid-multitouch 0003:1FD2:6007.000E: item 0 0 1 12 parsing failed [ 43.654798][ T223] hid-multitouch: probe of 0003:1FD2:6007.000E failed with error -22 [ 43.662828][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 43.667429][ T19] usb 3-1: USB disconnect, device number 7 [ 43.673052][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.685278][ T24] usb 4-1: Product: syz [ 43.689304][ T24] usb 4-1: Manufacturer: syz [ 43.693720][ T24] usb 4-1: SerialNumber: syz [ 43.698915][ T24] usb 4-1: config 0 descriptor?? [ 43.778637][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.795756][ T28] audit: type=1400 audit(43.782:339): avc: denied { validate_trans } for pid=1045 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.844644][ T223] usb 2-1: USB disconnect, device number 6 [ 43.918718][ T366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.928713][ T366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.018764][ T366] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.027698][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.035470][ T366] usb 1-1: SerialNumber: syz [ 44.138664][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.149767][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.159365][ T39] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 44.168173][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.176617][ T39] usb 6-1: config 0 descriptor?? [ 44.349211][ T366] usb 1-1: 0:2 : does not exist [ 44.390097][ T366] usb 1-1: USB disconnect, device number 7 [ 44.409231][ T28] audit: type=1400 audit(44.402:340): avc: denied { read } for pid=1056 comm="syz.1.293" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.432527][ T28] audit: type=1400 audit(44.402:341): avc: denied { open } for pid=1056 comm="syz.1.293" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.455218][ T28] audit: type=1400 audit(44.402:342): avc: denied { ioctl } for pid=1056 comm="syz.1.293" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.548686][ T28] audit: type=1400 audit(44.542:343): avc: denied { getopt } for pid=1068 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.602795][ T1078] loop3: detected capacity change from 0 to 128 [ 44.609518][ T1078] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 44.700517][ T39] holtek 0003:1241:5015.000F: collection stack underflow [ 44.705024][ T1095] device pim6reg1 entered promiscuous mode [ 44.707410][ T39] holtek 0003:1241:5015.000F: item 0 1 0 12 parsing failed [ 44.720744][ T39] holtek 0003:1241:5015.000F: parse failed [ 44.731440][ T39] holtek: probe of 0003:1241:5015.000F failed with error -22 [ 44.752780][ T28] audit: type=1400 audit(44.742:344): avc: denied { read } for pid=1101 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.810929][ T28] audit: type=1400 audit(44.802:345): avc: denied { map } for pid=1110 comm="syz.0.318" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.843139][ T28] audit: type=1400 audit(44.802:346): avc: denied { read write } for pid=1110 comm="syz.0.318" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.906525][ T39] usb 6-1: USB disconnect, device number 2 [ 44.907017][ T1120] loop0: detected capacity change from 0 to 512 [ 44.930700][ T1120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.952042][ T294] EXT4-fs (loop0): unmounting filesystem. [ 44.967245][ T28] audit: type=1400 audit(44.952:347): avc: denied { mount } for pid=1126 comm="syz.0.324" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.018391][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 45.058567][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.105353][ T1143] loop1: detected capacity change from 0 to 512 [ 45.113716][ T1143] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.332: bg 0: block 393: padding at end of block bitmap is not set [ 45.128696][ T1143] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 45.137458][ T1143] EXT4-fs (loop1): 2 truncates cleaned up [ 45.143094][ T1143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.160116][ T292] EXT4-fs (loop1): unmounting filesystem. [ 45.278437][ T1146] loop1: detected capacity change from 0 to 40427 [ 45.285139][ T1146] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 45.292834][ T1146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.301694][ T1146] F2FS-fs (loop1): invalid crc value [ 45.308197][ T1146] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.342841][ T1146] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.349823][ T1146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.359013][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.418247][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.425539][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.440124][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.449159][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.456387][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.464552][ T1156] netlink: 'syz.3.335': attribute type 15 has an invalid length. [ 45.468699][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.472384][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.490281][ T1156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 45.493142][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.514981][ T6] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 45.521738][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.524610][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.537892][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.548500][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.549548][ T6] usb 3-1: config 0 descriptor?? [ 45.555968][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.555995][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.556017][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.556038][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.556060][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.556082][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.598839][ T1166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1166 comm=syz.5.341 [ 45.604414][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.624153][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.631411][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.638767][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.646024][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.653293][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.660587][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.667710][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.674964][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.682191][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.689353][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.696507][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.703844][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.711060][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.718239][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.725623][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.732855][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.740138][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.747350][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.754569][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.762198][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.768674][ T19] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 45.769352][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.779959][ T19] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 45.786677][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.795953][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.802705][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.817616][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.824923][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.832170][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.839405][ T39] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 45.847223][ T39] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 45.867119][ T19] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 45.943966][ T1191] loop1: detected capacity change from 0 to 16 [ 45.951029][ T1191] erofs: (device loop1): mounted with root inode @ nid 36. [ 46.038708][ T24] rtl8150 4-1:0.0: couldn't reset the device [ 46.040094][ T6] hid-led 0003:1D34:000A.0011: unknown main item tag 0x0 [ 46.044697][ T24] rtl8150: probe of 4-1:0.0 failed with error -5 [ 46.087541][ T24] usb 4-1: USB disconnect, device number 5 [ 46.101625][ T455] usb 1-1: USB disconnect, device number 8 [ 46.212676][ T1187] loop3: detected capacity change from 0 to 40427 [ 46.229104][ T1187] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.238481][ T1187] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.248617][ T6] hid-led: probe of 0003:1D34:000A.0011 failed with error -71 [ 46.249041][ T1187] F2FS-fs (loop3): invalid crc value [ 46.262515][ T6] usb 3-1: USB disconnect, device number 8 [ 46.283484][ T1203] loop5: detected capacity change from 0 to 512 [ 46.290790][ T1187] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.317234][ T1203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.350430][ T1203] EXT4-fs (loop5): 1 truncate cleaned up [ 46.355918][ T1203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 46.374835][ T1187] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.384958][ T1187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.406262][ T973] EXT4-fs (loop5): unmounting filesystem. [ 46.716642][ T1230] loop0: detected capacity change from 0 to 16 [ 46.725935][ T1230] erofs: (device loop0): mounted with root inode @ nid 36. [ 46.754744][ T1230] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 46.766081][ T1230] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 46.778593][ T1230] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 46.793721][ T1230] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 47.247882][ T1245] loop3: detected capacity change from 0 to 40427 [ 47.257002][ T1245] F2FS-fs (loop3): fault_type options not supported [ 47.264154][ T1245] F2FS-fs (loop3): Image doesn't support compression [ 47.271698][ T1245] F2FS-fs (loop3): invalid crc value [ 47.278966][ T1245] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.288771][ T455] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.356940][ T1245] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.390656][ T1245] syz.3.374: attempt to access beyond end of device [ 47.390656][ T1245] loop3: rw=34817, sector=77824, nr_sectors = 848 limit=40427 [ 47.420842][ T295] syz-executor: attempt to access beyond end of device [ 47.420842][ T295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.478621][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.510892][ T1286] loop5: detected capacity change from 0 to 16 [ 47.517426][ T1286] erofs: (device loop5): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 47.698599][ T455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.725309][ T455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.757405][ T455] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 47.766441][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.786367][ T455] usb 3-1: config 0 descriptor?? [ 47.836723][ T1310] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 47.838658][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.865805][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.896649][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.920599][ T1302] hub 9-0:1.0: USB hub found [ 47.925113][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 47.934489][ T1302] hub 9-0:1.0: 1 port detected [ 47.944495][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.964826][ T24] usb 1-1: config 0 descriptor?? [ 48.051541][ T1323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 48.280199][ T455] uclogic 0003:5543:0781.0012: item fetching failed at offset 5/7 [ 48.298127][ T455] uclogic 0003:5543:0781.0012: parse failed [ 48.303947][ T455] uclogic: probe of 0003:5543:0781.0012 failed with error -22 [ 48.449967][ T24] logitech 0003:046D:C293.0013: item fetching failed at offset 5/7 [ 48.458411][ T24] logitech 0003:046D:C293.0013: parse failed [ 48.464837][ T24] logitech: probe of 0003:046D:C293.0013 failed with error -22 [ 48.489235][ T455] usb 3-1: USB disconnect, device number 9 [ 48.656783][ T223] usb 1-1: USB disconnect, device number 9 [ 48.829350][ T1350] 9pnet_fd: Insufficient options for proto=fd [ 48.973222][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 48.973238][ T28] audit: type=1400 audit(48.962:422): avc: denied { bind } for pid=1363 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.998164][ T28] audit: type=1400 audit(48.962:423): avc: denied { listen } for pid=1363 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.012313][ T1368] loop5: detected capacity change from 0 to 256 [ 49.024322][ T28] audit: type=1400 audit(48.962:424): avc: denied { connect } for pid=1363 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.044046][ T28] audit: type=1400 audit(48.962:425): avc: denied { read } for pid=1363 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.063128][ T28] audit: type=1400 audit(49.022:426): avc: denied { remount } for pid=1367 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.082063][ T28] audit: type=1400 audit(49.022:427): avc: denied { mount } for pid=1365 comm="syz.1.427" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.105629][ T28] audit: type=1400 audit(49.102:428): avc: denied { create } for pid=1367 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.106697][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.428'. [ 49.125157][ T28] audit: type=1400 audit(49.102:429): avc: denied { write } for pid=1367 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.152838][ T28] audit: type=1400 audit(49.102:430): avc: denied { nlmsg_write } for pid=1367 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.194303][ T1368] loop5: detected capacity change from 0 to 2048 [ 49.237106][ T1368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.249228][ T1383] loop3: detected capacity change from 0 to 512 [ 49.256038][ T28] audit: type=1400 audit(49.242:431): avc: denied { read write } for pid=1384 comm="syz.2.435" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.290441][ T1368] netlink: 104 bytes leftover after parsing attributes in process `syz.5.428'. [ 49.307475][ T1383] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.324580][ T973] EXT4-fs (loop5): unmounting filesystem. [ 49.330233][ T1383] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.434: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.368582][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.388639][ T1383] EXT4-fs error (device loop3): ext4_quota_enable:6981: comm syz.3.434: Bad quota inode: 4, type: 1 [ 49.399611][ T1383] EXT4-fs warning (device loop3): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.427203][ T1383] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 49.433793][ T1383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.489956][ T1383] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 49.514070][ T1378] loop0: detected capacity change from 0 to 40427 [ 49.527832][ T1378] F2FS-fs (loop0): invalid crc value [ 49.540949][ T1383] EXT4-fs warning (device loop3): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 49.540949][ T1383] [ 49.554689][ T1378] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.571915][ T295] EXT4-fs (loop3): unmounting filesystem. [ 49.607372][ T1398] loop3: detected capacity change from 0 to 512 [ 49.639191][ T1398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.652425][ T1378] F2FS-fs (loop0): Start checkpoint disabled! [ 49.669953][ T1398] EXT4-fs (loop3): 1 truncate cleaned up [ 49.675516][ T1398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.687672][ T1378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 49.727963][ T1404] loop5: detected capacity change from 0 to 512 [ 49.738652][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.751190][ T295] EXT4-fs (loop3): unmounting filesystem. [ 49.767861][ T315] kworker/u4:3: attempt to access beyond end of device [ 49.767861][ T315] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 49.781463][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.782667][ T1404] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 49.791121][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 49.807744][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.813999][ T315] kworker/u4:3: attempt to access beyond end of device [ 49.813999][ T315] loop0: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 49.830369][ T1404] EXT4-fs (loop5): 1 truncate cleaned up [ 49.835832][ T1404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 49.835995][ T24] usb 2-1: config 0 descriptor?? [ 49.864958][ T315] kworker/u4:3: attempt to access beyond end of device [ 49.864958][ T315] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 49.882387][ T1404] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.440: Logical block already allocated [ 49.905087][ T1404] EXT4-fs (loop5): Remounting filesystem read-only [ 49.914800][ T1413] loop3: detected capacity change from 0 to 512 [ 49.941024][ T1404] EXT4-fs error (device loop5): __ext4_remount:6435: comm syz.5.440: Abort forced by user [ 49.969531][ T1413] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 49.994883][ T1413] EXT4-fs (loop3): 1 truncate cleaned up [ 50.000800][ T973] EXT4-fs (loop5): unmounting filesystem. [ 50.006470][ T1413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.066757][ T1413] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 50.093741][ T295] EXT4-fs (loop3): unmounting filesystem. [ 50.170095][ T1434] syz.3.452[1434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.170174][ T1434] syz.3.452[1434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.189798][ T1431] netlink: 'syz.2.451': attribute type 5 has an invalid length. [ 50.211555][ T1434] netem: incorrect ge model size [ 50.239842][ T1442] 9pnet: p9_errstr2errno: server reported unknown error @ [ 50.339588][ T24] appleir 0003:05AC:8243.0014: report_id 0 is invalid [ 50.346201][ T24] appleir 0003:05AC:8243.0014: item 0 0 1 8 parsing failed [ 50.353799][ T1453] xt_hashlimit: size too large, truncated to 1048576 [ 50.360565][ T24] appleir 0003:05AC:8243.0014: parse failed [ 50.376643][ T24] appleir: probe of 0003:05AC:8243.0014 failed with error -22 [ 50.489506][ T1470] loop0: detected capacity change from 0 to 512 [ 50.496942][ T1470] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 50.503692][ T1470] EXT4-fs (loop0): mount failed [ 50.551136][ T6] usb 2-1: USB disconnect, device number 7 [ 51.576380][ T1485] loop3: detected capacity change from 0 to 128 [ 51.602360][ T1485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.630728][ T6] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 51.641759][ T295] EXT4-fs (loop3): unmounting filesystem. [ 51.642861][ T6] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 51.654281][ T1501] loop1: detected capacity change from 0 to 1024 [ 51.655557][ T6] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 51.661291][ T1501] EXT4-fs: Ignoring removed nobh option [ 51.674580][ T1501] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.686353][ T6] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 51.689014][ T1504] input: syz1 as /devices/virtual/input/input8 [ 51.707228][ T1501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.746138][ T1512] loop0: detected capacity change from 0 to 1024 [ 51.757068][ T1512] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.768237][ T1512] EXT4-fs (loop0): group descriptors corrupted! [ 51.768382][ T292] EXT4-fs (loop1): unmounting filesystem. [ 51.835364][ T1518] syz.0.489[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.835445][ T1518] syz.0.489[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.996324][ T1541] loop1: detected capacity change from 0 to 128 [ 52.050801][ T1549] loop0: detected capacity change from 0 to 1024 [ 52.052393][ T1551] loop2: detected capacity change from 0 to 512 [ 52.088831][ T1551] EXT4-fs: Ignoring removed oldalloc option [ 52.109612][ T1551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.503: inode #11614: comm syz.2.503: iget: illegal inode # [ 52.123237][ T1551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.503: error while reading EA inode 11614 err=-117 [ 52.172557][ T1551] EXT4-fs (loop2): 1 truncate cleaned up [ 52.178042][ T1551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.238420][ T1551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.503: inode #11614: comm syz.2.503: iget: illegal inode # [ 52.248075][ T1561] loop5: detected capacity change from 0 to 256 [ 52.298793][ T1551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.503: error while reading EA inode 11614 err=-117 [ 52.334998][ T296] EXT4-fs (loop2): unmounting filesystem. [ 52.396528][ T1572] netlink: 165 bytes leftover after parsing attributes in process `syz.3.515'. [ 52.421360][ T1572] netlink: 277 bytes leftover after parsing attributes in process `syz.3.515'. [ 52.532202][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.539273][ T316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 52.556211][ T1574] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.563688][ T1574] device bridge_slave_0 entered promiscuous mode [ 52.572941][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.579866][ T1574] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.587189][ T1574] device bridge_slave_1 entered promiscuous mode [ 52.675414][ T1591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 52.768650][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.775556][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.782671][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.789534][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.799627][ T1408] device bridge_slave_1 left promiscuous mode [ 52.805857][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.814585][ T1408] device bridge_slave_0 left promiscuous mode [ 52.821785][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.831528][ T1408] device veth1_macvtap left promiscuous mode [ 52.837391][ T1408] device veth0_vlan left promiscuous mode [ 52.909835][ T316] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 52.929193][ T316] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.948553][ T316] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.957412][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.024533][ T1595] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 53.071915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.081867][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.095500][ T1600] loop3: detected capacity change from 0 to 128 [ 53.102542][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.118261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.127574][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.134449][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.142952][ T1600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.159621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.179085][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.185949][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.196014][ T295] EXT4-fs (loop3): unmounting filesystem. [ 53.215308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.230026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.262353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.271843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.280181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.288357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.301170][ T1574] device veth0_vlan entered promiscuous mode [ 53.309451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.319476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.333111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.338630][ T316] usb 1-1: string descriptor 0 read error: -71 [ 53.346540][ T316] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 53.348186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.366656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.369518][ T316] usb 1-1: USB disconnect, device number 10 [ 53.375098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.389894][ T1574] device veth1_macvtap entered promiscuous mode [ 53.403655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.411741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.420136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.441674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.457838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.518657][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.557156][ T1618] loop6: detected capacity change from 0 to 1024 [ 53.565681][ T1618] EXT4-fs: Ignoring removed orlov option [ 53.573486][ T1618] EXT4-fs (loop6): Test dummy encryption mode enabled [ 53.589687][ T1618] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 53.609183][ T1618] fscrypt: AES-256-XTS using blk-crypto-fallback [ 53.654069][ T1574] EXT4-fs (loop6): unmounting filesystem. [ 53.670828][ T1623] SELinux: Context is not valid (left unmapped). [ 53.691433][ T1625] loop5: detected capacity change from 0 to 4096 [ 53.699007][ T1625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.714566][ T1625] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 53.737068][ T973] EXT4-fs (loop5): unmounting filesystem. [ 53.758589][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 53.888661][ T6] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 53.904751][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.916475][ T1657] loop5: detected capacity change from 0 to 128 [ 53.923052][ T6] usb 4-1: config 0 descriptor?? [ 53.930077][ T1657] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.948213][ T973] EXT4-fs (loop5): unmounting filesystem. [ 53.977302][ T1664] syz.5.551[1664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.977380][ T1664] syz.5.551[1664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.088610][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 54.098624][ T316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.348861][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 54.358597][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 54.468713][ T316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.479663][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.488927][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.498637][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.509452][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.519859][ T19] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 54.529029][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.529562][ T316] hub 3-1:4.0: bad descriptor, ignoring hub [ 54.543559][ T316] hub: probe of 3-1:4.0 failed with error -5 [ 54.545256][ T19] usb 1-1: config 0 descriptor?? [ 54.550039][ T316] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 55.009984][ T19] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 55.017006][ T19] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 55.024458][ T19] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 55.028847][ T316] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 55.031716][ T19] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 55.046150][ T19] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 55.054924][ T19] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 55.097987][ T1681] loop5: detected capacity change from 0 to 512 [ 55.111388][ T1681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 55.119323][ T1681] System zones: 0-2, 18-18, 34-34 [ 55.126821][ T1681] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.558: bg 0: block 248: padding at end of block bitmap is not set [ 55.142248][ T1681] __quota_error: 80 callbacks suppressed [ 55.142265][ T1681] Quota error (device loop5): write_blk: dquota write failed [ 55.155388][ T1681] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 55.165497][ T1681] EXT4-fs error (device loop5): ext4_acquire_dquot:6787: comm syz.5.558: Failed to acquire dquot type 1 [ 55.178258][ T1681] EXT4-fs (loop5): 1 truncate cleaned up [ 55.184212][ T1681] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 55.203070][ T973] EXT4-fs (loop5): unmounting filesystem. [ 55.218949][ T19] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 55.258643][ T6] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 55.278572][ T6] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 55.289586][ T6] asix: probe of 4-1:0.0 failed with error -71 [ 55.299488][ T6] usb 4-1: USB disconnect, device number 6 [ 55.310582][ T1691] loop5: detected capacity change from 0 to 1024 [ 55.320542][ T1691] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.346924][ T28] audit: type=1400 audit(55.332:512): avc: denied { ioctl } for pid=1690 comm="syz.5.561" path="/84/file1/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop5" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.385959][ T973] EXT4-fs (loop5): unmounting filesystem. [ 55.404127][ T28] audit: type=1400 audit(55.392:513): avc: denied { write } for pid=1694 comm="syz.5.562" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.519069][ T28] audit: type=1400 audit(55.512:514): avc: denied { ioctl } for pid=1702 comm="syz.5.566" path="socket:[23832]" dev="sockfs" ino=23832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.558113][ T28] audit: type=1400 audit(55.512:515): avc: denied { bind } for pid=1702 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.607882][ T1710] loop5: detected capacity change from 0 to 512 [ 55.622678][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #3: comm syz.5.569: corrupted inode contents [ 55.634537][ T1710] EXT4-fs error (device loop5): ext4_dirty_inode:6088: inode #3: comm syz.5.569: mark_inode_dirty error [ 55.646479][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #3: comm syz.5.569: corrupted inode contents [ 55.660363][ T1710] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.569: mark_inode_dirty error [ 55.671959][ T1710] Quota error (device loop5): write_blk: dquota write failed [ 55.679702][ T1710] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 55.689796][ T1710] EXT4-fs error (device loop5): ext4_acquire_dquot:6787: comm syz.5.569: Failed to acquire dquot type 0 [ 55.701578][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.569: corrupted inode contents [ 55.713819][ T1710] EXT4-fs error (device loop5): ext4_dirty_inode:6088: inode #16: comm syz.5.569: mark_inode_dirty error [ 55.725526][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.569: corrupted inode contents [ 55.737810][ T1710] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.569: mark_inode_dirty error [ 55.749364][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.569: corrupted inode contents [ 55.765987][ T1710] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 55.774879][ T1710] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.569: corrupted inode contents [ 55.786989][ T1710] EXT4-fs error (device loop5): ext4_truncate:4313: inode #16: comm syz.5.569: mark_inode_dirty error [ 55.798507][ T1710] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 55.812097][ T28] audit: type=1400 audit(55.802:516): avc: denied { create } for pid=1713 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.831890][ T1710] EXT4-fs (loop5): 1 truncate cleaned up [ 55.837362][ T1710] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 55.856963][ T28] audit: type=1400 audit(55.822:517): avc: denied { setopt } for pid=1713 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.876251][ T19] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 55.893461][ T19] usb 1-1: USB disconnect, device number 11 [ 55.918863][ T973] EXT4-fs (loop5): unmounting filesystem. [ 55.939806][ T1721] loop3: detected capacity change from 0 to 16 [ 55.966827][ T1721] erofs: (device loop3): mounted with root inode @ nid 36. [ 56.024857][ T1733] loop5: detected capacity change from 0 to 1024 [ 56.048402][ T1733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.018488][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 156.025280][ C0] (detected by 0, t=10002 jiffies, g=7061, q=7445 ncpus=2) [ 156.032389][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294952821-4294942819), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 156.045581][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g7061 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 156.056527][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 156.066323][ C0] rcu: RCU grace-period kthread stack dump: [ 156.072059][ C0] task:rcu_preempt state:R running task stack:28008 pid:14 ppid:2 flags:0x00004000 [ 156.082655][ C0] Call Trace: [ 156.085766][ C0] [ 156.088549][ C0] __schedule+0xcb5/0x1560 [ 156.092795][ C0] ? update_load_avg+0x513/0x1530 [ 156.097662][ C0] ? __sched_text_start+0x8/0x8 [ 156.102452][ C0] ? __kasan_check_write+0x14/0x20 [ 156.107396][ C0] schedule+0xc3/0x180 [ 156.111303][ C0] schedule_timeout+0x18c/0x380 [ 156.115993][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 156.121025][ C0] ? console_conditional_schedule+0x10/0x10 [ 156.126751][ C0] ? update_process_times+0x1b0/0x1b0 [ 156.131958][ C0] ? prepare_to_swait_event+0x308/0x320 [ 156.137426][ C0] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 156.142110][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 156.147145][ C0] ? rcu_gp_init+0xc7f/0xfa0 [ 156.151574][ C0] ? rcu_gp_init+0xfa0/0xfa0 [ 156.156013][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 156.161639][ C0] ? finish_swait+0x17d/0x1b0 [ 156.166153][ C0] rcu_gp_kthread+0xa3/0x3a0 [ 156.170583][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 156.176044][ C0] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 156.181087][ C0] ? __kasan_check_read+0x11/0x20 [ 156.185940][ C0] ? __kthread_parkme+0x12d/0x180 [ 156.190802][ C0] kthread+0x26d/0x300 [ 156.194708][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 156.200191][ C0] ? kthread_blkcg+0xd0/0xd0 [ 156.204606][ C0] ret_from_fork+0x1f/0x30 [ 156.208860][ C0] [ 156.211718][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 156.217891][ C0] Sending NMI from CPU 0 to CPUs 1: [ 156.223010][ C1] NMI backtrace for cpu 1 [ 156.223038][ C1] CPU: 1 PID: 1731 Comm: syz.3.578 Not tainted 6.1.112-syzkaller-00109-gfadb08b36671 #0 [ 156.223057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.223068][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 156.223090][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d 8a f9 50 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 156.223105][ C1] RSP: 0018:ffffc900007cf2e0 EFLAGS: 00000046 [ 156.223121][ C1] RAX: 0000000000000003 RBX: 1ffff920000f9e60 RCX: ffffffff85214c9c [ 156.223134][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f6f27b80 [ 156.223147][ C1] RBP: ffffc900007cf390 R08: dffffc0000000000 R09: ffffed103ede4f71 [ 156.223160][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 156.223173][ C1] R13: ffff8881f6f27b80 R14: 0000000000000003 R15: 1ffff920000f9e64 [ 156.223186][ C1] FS: 00007fbd4da476c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 156.223202][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.223214][ C1] CR2: 000000110c2432eb CR3: 000000011e721000 CR4: 00000000003506a0 [ 156.223230][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.223240][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.223252][ C1] Call Trace: [ 156.223258][ C1] [ 156.223264][ C1] ? show_regs+0x58/0x60 [ 156.223292][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 156.223328][ C1] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 156.223367][ C1] ? kvm_wait+0x117/0x180 [ 156.223392][ C1] ? kvm_wait+0x117/0x180 [ 156.223417][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 156.223443][ C1] ? nmi_handle+0xa7/0x280 [ 156.223462][ C1] ? kvm_wait+0x117/0x180 [ 156.223478][ C1] ? default_do_nmi+0x69/0x160 [ 156.223499][ C1] ? exc_nmi+0xad/0x100 [ 156.223518][ C1] ? end_repeat_nmi+0x16/0x31 [ 156.223541][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 156.223563][ C1] ? kvm_wait+0x117/0x180 [ 156.223579][ C1] ? kvm_wait+0x117/0x180 [ 156.223595][ C1] ? kvm_wait+0x117/0x180 [ 156.223611][ C1] [ 156.223616][ C1] [ 156.223622][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 156.223640][ C1] ? pv_hash+0x86/0x150 [ 156.223662][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 156.223705][ C1] ? 0xffffffffa0001b7c [ 156.223720][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 156.223740][ C1] ? __kernel_text_address+0xd/0x40 [ 156.223756][ C1] ? unwind_get_return_address+0x4d/0x90 [ 156.223780][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 156.223799][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 156.223817][ C1] ? stack_trace_save+0x113/0x1c0 [ 156.223836][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 156.223855][ C1] lock_timer_base+0x12f/0x270 [ 156.223879][ C1] __mod_timer+0x1c9/0xcf0 [ 156.223900][ C1] ? kasan_save_stack+0x4d/0x60 [ 156.223924][ C1] ? kasan_save_stack+0x3b/0x60 [ 156.223946][ C1] ? __kasan_record_aux_stack+0xb4/0xc0 [ 156.223962][ C1] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 156.223979][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 156.223995][ C1] ? bpf_trace_run3+0x177/0x2e0 [ 156.224011][ C1] ? __bpf_trace_timer_start+0x2b/0x40 [ 156.224033][ C1] ? __mod_timer+0x8d3/0xcf0 [ 156.224054][ C1] ? mod_timer+0x1f/0x30 [ 156.224076][ C1] ? mod_timer_pending+0x30/0x30 [ 156.224098][ C1] ? do_syscall_64+0x3b/0xb0 [ 156.224115][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.224140][ C1] add_timer+0x68/0x80 [ 156.224162][ C1] __queue_delayed_work+0x16d/0x1f0 [ 156.224183][ C1] queue_delayed_work_on+0x10f/0x180 [ 156.224205][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 156.224229][ C1] kvfree_call_rcu+0x490/0x800 [ 156.224249][ C1] ? __kasan_check_write+0x14/0x20 [ 156.224267][ C1] ? call_rcu+0x10f0/0x10f0 [ 156.224288][ C1] ? longest_prefix_match+0x331/0x650 [ 156.224317][ C1] trie_delete_elem+0x5a6/0x760 [ 156.224345][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 156.224360][ C1] bpf_trace_run3+0x177/0x2e0 [ 156.224378][ C1] ? bpf_trace_run2+0x290/0x290 [ 156.224393][ C1] ? calc_wheel_index+0x40c/0xa50 [ 156.224418][ C1] ? timer_update_keys+0xb0/0xb0 [ 156.224449][ C1] ? debug_smp_processor_id+0x17/0x20 [ 156.224471][ C1] ? get_nohz_timer_target+0x79/0x740 [ 156.224494][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 156.224517][ C1] enqueue_timer+0x303/0x480 [ 156.224543][ C1] __mod_timer+0x8d3/0xcf0 [ 156.224568][ C1] ? mod_timer_pending+0x30/0x30 [ 156.224592][ C1] ? selinux_socket_post_create+0x2fe/0x500 [ 156.224615][ C1] ? selinux_socket_create+0x330/0x330 [ 156.224636][ C1] mod_timer+0x1f/0x30 [ 156.224658][ C1] sk_reset_timer+0x22/0xb0 [ 156.224679][ C1] tipc_sk_finish_conn+0x164/0x860 [ 156.224710][ C1] tipc_socketpair+0x2a8/0x4f0 [ 156.224733][ C1] __sys_socketpair+0x3e0/0x6e0 [ 156.224757][ C1] ? __ia32_sys_socket+0x90/0x90 [ 156.224781][ C1] ? fpregs_restore_userregs+0x130/0x290 [ 156.224803][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 156.224826][ C1] x64_sys_call+0x19b/0x9a0 [ 156.224846][ C1] do_syscall_64+0x3b/0xb0 [ 156.224862][ C1] ? clear_bhb_loop+0x55/0xb0 [ 156.224884][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.224904][ C1] RIP: 0033:0x7fbd4cb7e719 [ 156.224918][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.224932][ C1] RSP: 002b:00007fbd4da47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 156.224950][ C1] RAX: ffffffffffffffda RBX: 00007fbd4cd35f80 RCX: 00007fbd4cb7e719 [ 156.224963][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 156.224974][ C1] RBP: 00007fbd4cbf139e R08: 0000000000000000 R09: 0000000000000000 [ 156.224985][ C1] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 156.224997][ C1] R13: 0000000000000000 R14: 00007fbd4cd35f80 R15: 00007ffeb77e1c88 [ 156.225013][ C1] [ 285.439008][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 227s! [ 285.447371][ C0] Showing busy workqueues and worker pools: [ 285.453055][ C0] workqueue events: flags=0x0 [ 285.457540][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.457574][ C0] pending: kfree_rcu_monitor, vmstat_shepherd, xfrm_state_gc_task [ 285.457647][ C0] workqueue events_unbound: flags=0x2 [ 285.478192][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.478221][ C0] in-flight: 8:toggle_allocation_gate [ 285.478243][ C0] pending: flush_memcg_stats_dwork [ 285.478304][ C0] workqueue events_power_efficient: flags=0x80 [ 285.502071][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.502103][ C0] pending: wg_ratelimiter_gc_entries, gc_worker, reg_check_chans_work, check_lifetime [ 285.502169][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.524516][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.524552][ C0] pending: vmstat_update [ 285.524583][ C0] workqueue writeback: flags=0x4a [ 285.541280][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 285.541308][ C0] pending: wb_workfn, wb_workfn [ 285.541343][ C0] workqueue kblockd: flags=0x18 [ 285.558023][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=5/256 refcnt=6 [ 285.558053][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 285.558297][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.583607][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=6 [ 285.583643][ C0] pending: addrconf_verify_work [ 285.583665][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 285.583872][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.611908][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.611942][ C0] pending: wg_packet_handshake_send_worker [ 285.611969][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.630139][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.630173][ C0] pending: wg_packet_encrypt_worker [ 285.630289][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.630318][ C0] pending: wg_packet_encrypt_worker [ 285.630339][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.661296][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.661326][ C0] pending: wg_packet_handshake_send_worker [ 285.661350][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.679443][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.679472][ C0] pending: wg_packet_encrypt_worker [ 285.679494][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.697133][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.697158][ C0] pending: wg_packet_handshake_send_worker [ 285.697179][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.715008][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.715033][ C0] pending: wg_packet_handshake_send_worker [ 285.715054][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.733247][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.733276][ C0] pending: wg_packet_encrypt_worker [ 285.733297][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.733323][ C0] pending: wg_packet_encrypt_worker [ 285.733342][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.763896][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.763932][ C0] pending: wg_packet_handshake_send_worker [ 285.763959][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.782023][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.782055][ C0] pending: wg_packet_encrypt_worker [ 285.782076][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.782103][ C0] pending: wg_packet_encrypt_worker [ 285.782135][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.812573][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.812605][ C0] pending: wg_packet_handshake_send_worker [ 285.812627][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.830717][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.830747][ C0] pending: wg_packet_encrypt_worker [ 285.830768][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.848425][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.848452][ C0] pending: wg_packet_handshake_send_worker [ 285.848473][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.866637][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.866665][ C0] pending: wg_packet_encrypt_worker [ 285.866686][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.884341][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.884369][ C0] pending: wg_packet_handshake_send_worker [ 285.884390][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.902492][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.902522][ C0] pending: wg_packet_encrypt_worker [ 285.902542][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.902567][ C0] pending: wg_packet_encrypt_worker [ 285.902593][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.933043][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.933072][ C0] pending: wg_packet_handshake_send_worker [ 285.933094][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.951178][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.951207][ C0] pending: wg_packet_encrypt_worker [ 285.951227][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.951253][ C0] pending: wg_packet_encrypt_worker [ 285.951353][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.981866][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.981893][ C0] pending: wg_packet_handshake_send_worker [ 285.981937][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.000016][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.000043][ C0] pending: wg_packet_encrypt_worker [ 286.000064][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.000089][ C0] pending: wg_packet_encrypt_worker [ 286.000141][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.030655][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.030683][ C0] pending: wg_packet_handshake_send_worker [ 286.030705][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.048887][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.048919][ C0] pending: wg_packet_encrypt_worker [ 286.048939][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.048965][ C0] pending: wg_packet_encrypt_worker [ 286.048986][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.079486][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.079517][ C0] pending: wg_packet_handshake_send_worker [ 286.079538][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.097568][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.097598][ C0] pending: wg_packet_encrypt_worker [ 286.097619][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.097645][ C0] pending: wg_packet_encrypt_worker [ 286.097667][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.128211][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.128250][ C0] pending: wg_packet_handshake_send_worker [ 286.128277][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.146462][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.146498][ C0] pending: wg_packet_encrypt_worker [ 286.146523][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.146570][ C0] pending: wg_packet_encrypt_worker [ 286.146641][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.177242][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.177277][ C0] pending: wg_packet_handshake_send_worker [ 286.177303][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.195374][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.195406][ C0] pending: wg_packet_encrypt_worker [ 286.195427][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.195453][ C0] pending: wg_packet_encrypt_worker [ 286.195522][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.226301][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.226339][ C0] pending: wg_packet_encrypt_worker [ 286.226363][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.226389][ C0] pending: wg_packet_encrypt_worker [ 286.226416][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=228s workers=6 idle: 1408 315 712 10 43