last executing test programs: 20.747543961s ago: executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19.743385598s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r2) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666702c1ffe80000000000000ff1422f4c2f96901a1"], 0xffdd) 19.631061006s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) writev(r1, &(0x7f00000000c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0x15) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) 19.328228753s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x4, 0x2ba, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 19.271573282s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 17.481482553s ago: executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.161816239s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="fe", 0x1}], 0x1, 0x0) 3.125746841s ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x25, 0x336, &(0x7f0000004200)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.032221672s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT]) 2.024608223s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.000906847s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000806, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835372c696f636861727365743d69736f383828d489a1352c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp869,fmask=00000000000000000000003,dmask=00000000000000000000027,errors=continue,fmask=00000000000000000000011,\x00'], 0x9, 0x1510, &(0x7f0000001780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 1.885796095s ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/62, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb00000000000000000000000000000000000000000000000200"/112], 0x164}}, 0x0) 1.619384147s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa3507000000000000028000083937f230095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874a978e13aab178d40dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5c1b3f97a297c9e49a018a3f53ff5a9316079c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a0b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b6c6bbd6ff2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb8488aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f607816405532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba93a34efd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000806, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835372c696f636861727365743d69736f383828d489a1352c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp869,fmask=00000000000000000000003,dmask=00000000000000000000027,errors=continue,fmask=00000000000000000000011,\x00'], 0x9, 0x1510, &(0x7f0000001780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 1.53402133s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.498154266s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$clear(0x11, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT]) 1.494262456s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 1.486379957s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40) recvmsg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) 1.475124939s ago: executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="12000000", 0x4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB='tz=UTC,shortname=mixed,quiet,utf8=0,shortname=mixed,nonumtail=0,shortname=mixed,codepage=862,shortname=win95,iocharset=cp949,\x00'], 0x1, 0x217, &(0x7f0000000480)="$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") syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.433830165s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r8, &(0x7f0000000140)='./file1\x00') setsockopt$inet_buf(r2, 0x0, 0x4, 0x0, 0x0) 1.40841448s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT]) 938.381684ms ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/62, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb00000000000000000000000000000000000000000000000200"/112], 0x164}}, 0x0) 914.035637ms ago: executing program 3: socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) sendmsg$xdp(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x8, 0x0, 0x23}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000200)="235c3918564345d625a9fd043344e50d412ec95a39378a079fb771b9b516b2df36045eefd11f0047967210f0d7621a0628b05cc73f7a82b39e057a173d3b9abf5ba22734139f02c9a04446762115f1b86957402a212d2e5cad91899f0bcd5d6c9a2ef9405c4a1f5d5a97cef4882083f200bbab22ec201e5d7a449232c5eff91c6c8be33a17d4e8e9df1ac0eef2220d200d94e8ea39bbd1c4702d036f6afdece29ead1c5c92ef5b509c38484a541d77e3f11c685c183ef6d914fe3cb3c38dc5b5560d29421fd551d7a48669f5d714413269f2a1dca269c3d7e691c5b449d44590c4294d4b92d949a114f9a7a55f6dfdfab9ee4f481091aeefcb28b4ac7bc1a0e85b79488937a756a17a85bf7706f7413b1dc941b4d0b3c27ec649fe3897b76dd042a4e626ef11b399719f49b23a32fd095afd49423957e5ade9349169428e80fb5ca6c4b2314e177947d348150e4f7adc3c605a32154e8027f83748fedb5bd71c1d2e25fad571175cf6ef8d0e9cd9db5567269c7fd077eae02dfeaafad1d0ff546dfab78ad12361311b7ea39c82b2d91e8222dd5282d76cb79de612fa17d36e0320623959a729726326f47294a51c4d226cd7d912daffefcf0eb95c080231b048acde221aafbdbc98b29f194801047c5e9b2738f483c14a484aaa285fbd479bb4488279323ace5c8d4b7bc52cc30bcfc57c45c4bb31696fcbcb7dabe469cbf3e4325e0bd9f5f0d5a03adb5a39c41edec3ca7c38d90841777fa931cf5113b0653898f3998be96ee640d34caf2f8a1e7262aeb7c818aa5d27e4b7697a999fee87534c3ddad96bf52710421cccdfb2d9a651b4a43ac926c0c2183c8898c2d6d6f39d397678b1765b24a6d0f53c7b43c068184be6885f326078b61467a842254eb9125ac5166e9fd1bf80533def815cebd72705c9c2f70453d600379695e0d71c7134c0aa57f0f184a00cfce45c3310098cd75b618c5a86d6851ff5b0937d620288e8516518355cf95d4a67ddade5288624b00458000e3acd1b37dd44d1df38fa20e9e97f624fc96cab2a620b981a82ca67a848306cb3ee0b93ccba4eeb3029afed6d7299a257ab8cba0b0313c7ff01e0afe4019aba2417eccae99e768e1dc789d335d1f3bf58ae59191c061226a66655e2cf2b39cf3cf5ad45cdd29901f903cfae368bfb025bf1f3ff3cdd5e0fda069de841419b85eb6a19e5f338f7c947a052c102cafd2d72707d613d9dfc009fb9171211677b2a486538d9eaefce2ed333b091abbd310d7771e5f9e9565d1ae37523581410a3084fc5847ea8b5e4a6310fdce733cec97bf3451ccc1ed380aca43051f9ad941bdc6d3e71ac994444e3388ee726a906815c62cb9e327c0e82bf2f573d58ef0fede4e8ad47da8a4811d77fb527db91abbbe2d1329cff37b580e153911219a30cc6d1e427352348117405b0edf0ce880b828a14dc606ebac02de3904c77d15a454bab7d579a5cc8c5601cca30b2295cc223b56ae2d4847c88b8bf902244e76f5c09e84219f9a263c62f72e4ed01092a51a46c090a513a914898c5c404d3952b7c50b634c561bfcbb9884378a5f9821b9f4d747bdc40b91fcf93318e667f158b7e03d635b3e8fc0a6e6c4e144f1e50aa04010614b74b79ad379efeb9f2a6133f628549b7d598c9b053d0f7bad1fd76a451ea7d7345ed94c1c582c4590bb52d9bd80993a2b3083409a76c42827a23ef32230ccc52c863187c8f80c026f9f7ff71908ee08ec2445547e4b7c5e47e114fb2b4255c84b96cc82dc83792346b8c4fe05a6db2e724089d37cd4b61b9700246da4d63b7c369c8411f2d6da815b97ac829ea97dd11ea627f646a54ab4592d45f22bf5d810777b4e5c4a67345445054622db4c331ef37fd0b62c15a97f88b422dd1eebf58b1aec524046e5f49f4af55aa525bbe575a149e1ef5df34c9ef74f24007c41fa761c17f6cc3df8088455854de83b65a718c67a62a58965db0f8173ab5e77f3e5c848fcc04031d9513b46932ed7be3d43dfcc1fd184c4738980188a0dc9f3a65e03babd4d4a70f62aafd58ba3eb740d7d5e88c2ae1cdb98fc964accdb7f898057b031f1546d205a70bfc9a8c3557ae4e55318ba24e074abd54f4d78ba2bda39d065173bc2daba4fe9a3a08d7265f55bc75210838147d126f69a11052c01eaad661f803f12770b77af0910b69afdbf52ad1f5351561856410a637fddf24ceaa46faa9af1dde8ee62a840283eac36e10a4452e4f513f2dd57df2fb6c2be60ee99794638b3735c1e2a2ad280aa4e63997c0a380e6d20d3579740f37e57ddeb5d4e5d234bb8358de22c2c41566464d85536f9cfefc1e483223fb4bb8f782b0a0a76bc45361ec22b21056eed33cffa911f06780767e3130ca328f7901b6725d3f1f50dd484dfc8e60e40cfd9dd51dcb59f0f199a69d6a9f8d3052db50f7dbd5dd05b552b228464ab060ea1d30e4c15836fc6f3b2feb1c1fb43f54bc5b1aea363a58b5620c7c055086a64876469aeaca0542ed54dbea3d6d817b9bb96c377f7b774ad22fba0f9cfadaffd6c874573eed98273d79150137faceddfafc6bb5fb9cd3e8c17d9a584d91f0062436a02efc51b45c8ad5bced0464c346ab0f0314d39c78946d28ff9b177f086568b15d88bc0c407b9c7eb96c296e030d435c1d2a517f339d4e830d4828f23ba3218ac8b1ada6c84db1f7bd963be8c333cd0857eac6690de3d57713b3e1e2eea569409c0d5aaf6564d85bfc516d4ee30da84e79166ad098d049182f3ba2369e2a7c84285661c4b8fd77abf2e66bf16d95adfb728f1525907897535b250a2d7e0eb89834a4d55e8c377641ba58529ee10e11e3346a99a9d87558f3cbfbf0203d4a5208268e08651a0e95b12409945297be3e4affe6768a056a232900b0bee47ce3269911267537bb4e20bbbce5f06ab369c93b74410f36869ea341992a47090076e9f696f7ea524a223ef3083da755dcad5a180d2bd1baf45163dc48791aaf09c2e1e617da3a33f234098f3138b0959177ce09c2af48dab717dd9481aa9399267dfdd46787da2d745d6f44b922a9ae564b495887a8d67c500f475aa6db75caceedb8d08c42ae357ab22904c664f30fb86b9764acc7f36898fcf93ce733872f3186bad0581efca3685874c9ff0149d7af1339b369a63516999ecfab66763e4a143059c362b9dc9b79ff14964f796d3c517a59708fb6557605f7fccaa3a77a05af37fce4203414ab993ff5ce72fc2cbb53ccc453bf98eb48856aebdefe2198f536a3bcdb1f1cb2cf7af704c9c66a4f4b14cfbf7691ecfc533c70a1d2e30230a0ca9d86f91f369a4633f6dad22db54afc4854324511812e24aaff854b6f0e8d2dfb2524a0b2f8f6d6fce1a63ec686e69c2ba57b4e1d9656b27dc564c39ecd338a9568404261009de102f590f296b9a56277207a68896323ae1636da099d06b49ab47a82e98784f98ad9dbe40448aa3f38117afdbbe45fdf26c9e7da289fdde3fc74201df4ec68d434e4347bb2a910a28a3c74e2d8fbaa9d2f41b7dc811127f3847ad19d0165174cfd644b958d41a25e017ee239b1ae2822ea7e4e76284a315c5be1babaf57eea65badade53f81c10f65d12578575fa8a04ac7ce258240a1432cae5cf51edaa205da445fc15dec46a12058ae49f2f6b35424248124a5fefd098ce5acd67f31b664b888ab3b25b2a36a111aedc80bb64b8df72bb8beaa5ce1dd687479b5c59d31ae7493240b0a955046024ec3a7023872983fb41200aa6ee856b6380513e8d7593cd12009e8021a98f37e6f35fa3b58470372480a636291cddc2a5d96016106073b56dd05429e347445c91480e939015583eeddc3cb72d7d625a49fbf26015961e92d15bd2760c614f737574432adfa435438c4bc1c9fc5d3daac8083a494a5fd6d7128db0fb95a4bbd54ad0c42924a93b949c0caca63c68b76c2cef36b3c5f35c5d9d9ca7533c8c3e4014c7781f66bd7252feb6d31b3a2ba33f27e4cd28de93f62e6c04f0ac572653ebe2de1e83bb93df37f74215a87c5403b52736e4a802e848d1bb425ca899d95c0cea48b33df7a970dd5180867d5503a53c5049abc0a1ef786479b2b05a5ca1fad829540bef1cf1be626cb41e1eafcaedf997c8a9168f403af9fef346ead1113ed080323fc8cf7a71e60a82a2706423d93002847958c2eb1eb66a1a5a7864df66da0bf90ba527928f985f6c569f99f2d47158b66caf46890b2f3bcf827a7eb364ff85ee76407eacecd01097bf9615d994da08ddb4868be042174581dbb35fb5029f21e882a3d2ad8385ed4868ba989c58558ac552aeb0a9a3c66d78f1b0eee7a8ef7ea7ecf19725d383278477d0f21a703ab534e46d0bcf92a637323186c44acd2e7b9bc6a6248931267023e072bd7e1ad865b37b20e9d3dfdd9b42d8a2ea1eb204330a7095562a0b32500ab884f3cb35b8eda402a9bce10e2ab730d37e9a65f9024ea8ce20bb2bf324e05b0ad56470d4c5bef9a5f89a3c4f62a769cafde21addf3847c68d882c5837c41103da5d9a1a90c2b4d9a32e336c6fa70bd35fe9b9ac4ebdfde0434bc7bcb9071f604ff4782b5ed21a65665794179d8cba01d00f49d52f95d932690366f0c07715bda2869031ec77fd62d04b61179fed1ae17e040a4117bcd6780690afb176697ebb805d03c78a77882ff93034663f05542724b01ddf8e99d9858e3c309e790a2a9301e2e5141f1ea70080187b6b7a5defafb8332428de5aef85fc41241131ef2f8fb2ee301f49636b6e41106fa6043b3201f7516785464a829dda0ca25677cea47e8140aa18bdff469bd3689b388a8cef85df511310b497f66c469672f340ce18b4b0daa3ea520e71cd0adb4b1596028d00761fcb85bb7a3dc7d608b797346a5bc124651e5cf052968246ac1ca973fbe9eb9d77f36ad9355de8b92db5413187bf73b8a0140d615348a9fa52435df4443225060a1425bdf412c95725637a4e68deabecccbe197eac206a9b6d170690bfab746ab39a7d49efabe9ffd7f28f78481741f7b041ad513ff47c0435528b28180f2641ce4361684a18427272593dfc35dace10c3dd64e50a00a479e6cce3823602424aed19250c6df61b186ad7487c83c9d91105cc71c96c3637eeaa4545858a0ceac5be4e6a1167fb959b7bf897f4e8c1bdbb8126fcede29fbd78d4a6debd4f4dbf8d6fbb3910a87e15b545b5c36af2d45c9500f826cc17e63d4d039f9d66b3f13121058786c21bcadc2f436e5d8ca840943c5e01690c16a1ffc66346b570f887d5ffc6504ea030f9afe7b95ccfde7497723aca2b4ee9b3858884773ea7fcb484f76d5f0fa4325bd03ab5ad11759bfa04df8b5d0760719d9e72530afa69a4b4f57e7a1e6a9d41b662bdf2b7c54edaa1b375c1f4de3b4ffec95f0823346226841b672ba16c905b4f2047c7dbe20b9247885f2ac9f9924382af8e9a0699e6baa637aacd6aa90cface3c79a7e0e79d6a97e3b4d8db2f05acf9d0d66689827725977547ed1b56e42eafe43cc88e6bbbaef4458d37c985c8e1a987e4c5dfe227ad590fe67dd950a596b7782de9b9731fe8d7e24f926273ca47c7a8fe3e30b130114aa28c8fb929d681ab9de28e6114c18c8633b42f6124d0ea3d7a1bfc9ef97288ceaa47e593e357b38eb47c0c78b9be7425671926a9df1e4df6dccd0882e1e75cbe0a76c34deaefe6d01fcc1ef77a8f6615794", 0xfc0}, {&(0x7f0000001200)="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", 0xfa}, {&(0x7f0000000100)="82b1904496b06166bf9ab55612a7edd752326e3d139c3deaeb7bb80b5e05493f7eb60af613524d8af01ae77358d4507bc32e208d5de0bd92b8fbc0dc22a008bde5346be9867be97dbf3e2cb2f8edaa3f50e64bf03f7445ae3b46426abdb5c0d3551451d7e70b2888600f10", 0x6b}, {&(0x7f0000001300)="512e48b43583913fc1103d2fc54079d499003086bb1347a1914494afb9caeb5292300cee930599326f4ac1af87f459ea10698c2e836acefb0ca88e57a0cc4476b30fa3f29b22788b", 0x48}, {&(0x7f0000001380)="6c3c3204ee0117756fcac1aa76fba4ac2c3ee67978cadaa58b1a1f65295bf9bbde4701157771b65fb702a7248e7a97ce727e6e70e0a00a2dabc58636d9e08bba4817044388e750d2fbf42151268b680b3449e2bedb8590a061608fb298ac", 0x5e}], 0x5, 0x0, 0x0, 0x20048822}, 0x800) 470.519487ms ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, 0x0, 0x0) write(r1, &(0x7f0000000000)='\"', 0x1) 436.552632ms ago: executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) io_setup(0x23, &(0x7f0000000280)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x22c8, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 423.542164ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r3}, 0x10) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 389.088429ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 378.609761ms ago: executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 369.875062ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x55) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 244.212232ms ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 0s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket(0x10, 0x0, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140), 0x0) write(r2, &(0x7f0000000000)='\"', 0x1) kernel console output (not intermixed with test programs): [ 12.706505][ T30] audit: type=1400 audit(1718735497.369:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[13377]" dev="pipefs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.710743][ T30] audit: type=1400 audit(1718735497.369:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.714073][ T30] audit: type=1400 audit(1718735497.369:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 2024/06/18 18:31:44 fuzzer started 2024/06/18 18:31:44 dialing manager at 10.128.0.163:30008 [ 20.196991][ T30] audit: type=1400 audit(1718735504.859:66): avc: denied { node_bind } for pid=282 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.201265][ T30] audit: type=1400 audit(1718735504.869:67): avc: denied { name_bind } for pid=282 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 20.225613][ T30] audit: type=1400 audit(1718735504.889:69): avc: denied { integrity } for pid=292 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.252233][ T291] cgroup: Unknown subsys name 'net' [ 20.258945][ T291] cgroup: Unknown subsys name 'devices' [ 20.259380][ T30] audit: type=1400 audit(1718735504.889:68): avc: denied { integrity } for pid=291 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.287045][ T30] audit: type=1400 audit(1718735504.889:70): avc: denied { mounton } for pid=293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.311595][ T30] audit: type=1400 audit(1718735504.889:71): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.316066][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.334471][ T30] audit: type=1400 audit(1718735504.919:72): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.365962][ T30] audit: type=1400 audit(1718735504.919:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.388699][ T30] audit: type=1400 audit(1718735504.919:74): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.410804][ T30] audit: type=1400 audit(1718735504.929:75): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.431779][ T296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.608547][ T291] cgroup: Unknown subsys name 'hugetlb' [ 20.614006][ T291] cgroup: Unknown subsys name 'rlimit' 2024/06/18 18:31:45 starting 5 executor processes [ 22.280214][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.287113][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.294213][ T309] device bridge_slave_0 entered promiscuous mode [ 22.302059][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.308954][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.316003][ T309] device bridge_slave_1 entered promiscuous mode [ 22.361601][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.368804][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.375903][ T310] device bridge_slave_0 entered promiscuous mode [ 22.383764][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.390625][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.397701][ T310] device bridge_slave_1 entered promiscuous mode [ 22.414166][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.421126][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.428560][ T311] device bridge_slave_0 entered promiscuous mode [ 22.449263][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.456109][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.463384][ T311] device bridge_slave_1 entered promiscuous mode [ 22.512115][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.518988][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.526081][ T312] device bridge_slave_0 entered promiscuous mode [ 22.542406][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.549279][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.556443][ T312] device bridge_slave_1 entered promiscuous mode [ 22.569438][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.576371][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.583665][ T313] device bridge_slave_0 entered promiscuous mode [ 22.590308][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.597254][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.604261][ T313] device bridge_slave_1 entered promiscuous mode [ 22.733943][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.740807][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.747923][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.754684][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.769932][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.776783][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.783905][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.790683][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.804036][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.810898][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.817985][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.824764][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.833510][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.840389][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.847465][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.854239][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.874118][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.880989][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.888168][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.894949][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.947596][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.954667][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.961791][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.969635][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.976878][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.984277][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.991456][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.998506][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.006024][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.013413][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.020513][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.027851][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.049445][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.057564][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.065171][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.073246][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.080295][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.087624][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.095570][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.102423][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.109657][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.117953][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.124775][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.131983][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.140019][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.146864][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.153990][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.161893][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.168821][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.200834][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.210082][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.217979][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.225897][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232747][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.240081][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.248009][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.254714][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.261932][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.269696][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.277538][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.285202][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.292993][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.300251][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.307511][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.315406][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.322187][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.329310][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.337322][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.344152][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.351359][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.359139][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.367174][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.374002][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.383695][ T313] device veth0_vlan entered promiscuous mode [ 23.394708][ T312] device veth0_vlan entered promiscuous mode [ 23.406582][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.415030][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.423113][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.430599][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.437959][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.445620][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.453475][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.468982][ T312] device veth1_macvtap entered promiscuous mode [ 23.475639][ T313] device veth1_macvtap entered promiscuous mode [ 23.483559][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.490947][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.498486][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.506325][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.514320][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.521714][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.529709][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.537607][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.549810][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.558041][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.566079][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.574193][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.587076][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.595164][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.603761][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.611808][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.628736][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.636650][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.644570][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.652480][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.674781][ T309] device veth0_vlan entered promiscuous mode [ 23.697716][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.705882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.721229][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.729102][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.737101][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.745249][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.754359][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.761781][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.770920][ T310] device veth0_vlan entered promiscuous mode [ 23.782366][ T309] device veth1_macvtap entered promiscuous mode [ 23.799796][ T342] device syzkaller0 entered promiscuous mode [ 23.806050][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.814366][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.822384][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.831353][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.839647][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.853449][ T310] device veth1_macvtap entered promiscuous mode [ 23.876982][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.884863][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.892854][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.901183][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.910043][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.917734][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.925899][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.934855][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.943077][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.951341][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.959577][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.972222][ T311] device veth0_vlan entered promiscuous mode [ 23.989275][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.001606][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.010034][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.017372][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.033291][ T311] device veth1_macvtap entered promiscuous mode [ 24.052128][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.060558][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.069203][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.079354][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.087397][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.100891][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.119184][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.134433][ T356] loop1: detected capacity change from 0 to 1024 [ 24.141126][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.150864][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.174661][ T360] device syzkaller0 entered promiscuous mode [ 24.185864][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.194205][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.223347][ T368] loop4: detected capacity change from 0 to 128 [ 24.233778][ T356] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 24.248372][ T368] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 24.273109][ T356] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 24.308208][ T356] syz-executor.1[356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.308272][ T356] syz-executor.1[356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.314758][ T369] device syzkaller0 entered promiscuous mode [ 24.360295][ T377] device syzkaller0 entered promiscuous mode [ 24.364520][ T356] input: syz1 as /devices/virtual/input/input4 [ 24.470025][ T393] device syzkaller0 entered promiscuous mode [ 24.477215][ T356] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 24.489319][ T396] Bluetooth: hci0: sending frame failed (-49) [ 24.550656][ T407] device syzkaller0 entered promiscuous mode [ 24.665452][ T419] device syzkaller0 entered promiscuous mode [ 24.859856][ T428] device syzkaller0 entered promiscuous mode [ 24.923971][ T437] device syzkaller0 entered promiscuous mode [ 24.965103][ T441] loop2: detected capacity change from 0 to 128 [ 25.226666][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 25.226688][ T30] audit: type=1326 audit(1718735509.889:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5525aa8f29 code=0x0 [ 25.436980][ T330] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.550897][ T30] audit: type=1400 audit(1718735510.019:135): avc: denied { mounton } for pid=446 comm="syz-executor.0" path="/root/syzkaller-testdir2534683943/syzkaller.NrB6sg/15/file0" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 25.584784][ T30] audit: type=1400 audit(1718735510.159:136): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.636746][ T457] device syzkaller0 entered promiscuous mode [ 25.726974][ T330] usb 5-1: Using ep0 maxpacket: 8 [ 25.847334][ T330] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 25.861380][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.874517][ T330] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 25.885606][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.895357][ T330] usb 5-1: config 0 descriptor?? [ 25.917983][ T309] syz-executor.3 (309) used greatest stack depth: 20912 bytes left [ 25.937467][ T330] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 25.955349][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.962365][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.969727][ T472] device bridge_slave_0 entered promiscuous mode [ 25.980205][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.987396][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.994497][ T472] device bridge_slave_1 entered promiscuous mode [ 26.043797][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.050647][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.057840][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.064609][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.096783][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.104358][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.111523][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.123070][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.131188][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.138062][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.151280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.159627][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.166550][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.181805][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.189610][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.205327][ T472] device veth0_vlan entered promiscuous mode [ 26.211545][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.220203][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.228025][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.235227][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.249061][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.258194][ T472] device veth1_macvtap entered promiscuous mode [ 26.268468][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.282099][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.293691][ T30] audit: type=1400 audit(1718735510.969:137): avc: denied { mounton } for pid=472 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.340839][ T481] device syzkaller0 entered promiscuous mode [ 26.557108][ T339] Bluetooth: hci0: command 0x1003 tx timeout [ 26.563094][ T397] Bluetooth: hci0: sending frame failed (-49) [ 26.569468][ T357] device bridge_slave_1 left promiscuous mode [ 26.575485][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.582956][ T357] device bridge_slave_0 left promiscuous mode [ 26.589192][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.596718][ T357] device veth1_macvtap left promiscuous mode [ 26.602773][ T357] device veth0_vlan left promiscuous mode [ 26.745226][ T30] audit: type=1400 audit(1718735511.409:138): avc: denied { read write } for pid=487 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.768729][ T30] audit: type=1400 audit(1718735511.409:139): avc: denied { open } for pid=487 comm="syz-executor.2" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.030069][ T30] audit: type=1400 audit(1718735511.699:140): avc: denied { unmount } for pid=311 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.063450][ T30] audit: type=1400 audit(1718735511.729:141): avc: denied { read } for pid=493 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.086440][ T30] audit: type=1400 audit(1718735511.729:142): avc: denied { open } for pid=493 comm="syz-executor.2" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.087308][ T494] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.109965][ T30] audit: type=1400 audit(1718735511.749:143): avc: denied { ioctl } for pid=493 comm="syz-executor.2" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.365725][ T505] loop3: detected capacity change from 0 to 128 [ 27.471307][ T506] syz-executor.2 (pid 506) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 27.600540][ T505] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 27.934709][ T507] usb 5-1: USB disconnect, device number 2 [ 28.397229][ T525] loop2: detected capacity change from 0 to 512 [ 28.433141][ T525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.446700][ T525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 28.525426][ T525] EXT4-fs (loop2): 1 orphan inode deleted [ 28.531066][ T525] EXT4-fs (loop2): 1 truncate cleaned up [ 28.536500][ T525] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 28.780253][ T314] Bluetooth: hci0: command 0x1001 tx timeout [ 28.786262][ T397] Bluetooth: hci0: sending frame failed (-49) [ 29.119416][ T549] loop2: detected capacity change from 0 to 512 [ 29.206661][ T549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.217867][ T549] ext4 filesystem being mounted at /root/syzkaller-testdir3139420238/syzkaller.NWT6eC/24/file0 supports timestamps until 2038 (0x7fffffff) [ 29.278121][ T357] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 29.293125][ T357] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 29.305592][ T357] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.305592][ T357] [ 29.315358][ T357] EXT4-fs (loop2): Total free blocks count 0 [ 29.321269][ T357] EXT4-fs (loop2): Free/Dirty block details [ 29.327274][ T357] EXT4-fs (loop2): free_blocks=65280 [ 29.332591][ T357] EXT4-fs (loop2): dirty_blocks=31 [ 29.337821][ T357] EXT4-fs (loop2): Block reservation details [ 29.343630][ T357] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 29.440811][ T559] overlayfs: missing 'lowerdir' [ 29.868534][ T571] loop2: detected capacity change from 0 to 512 [ 29.967615][ T571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.065727][ T571] EXT4-fs (loop2): 1 orphan inode deleted [ 30.071419][ T571] EXT4-fs (loop2): 1 truncate cleaned up [ 30.077014][ T571] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 30.616158][ T591] loop3: detected capacity change from 0 to 128 [ 30.625291][ T591] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.871675][ T339] Bluetooth: hci0: command 0x1009 tx timeout [ 30.902554][ T600] device pim6reg1 entered promiscuous mode [ 30.911180][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 30.911197][ T30] audit: type=1400 audit(1718735515.579:156): avc: denied { connect } for pid=597 comm="syz-executor.2" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.105148][ T607] overlayfs: missing 'lowerdir' [ 31.387577][ T611] device pim6reg1 entered promiscuous mode [ 31.603872][ T615] loop4: detected capacity change from 0 to 512 [ 31.676632][ T615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.753013][ T615] EXT4-fs (loop4): 1 orphan inode deleted [ 31.758637][ T615] EXT4-fs (loop4): 1 truncate cleaned up [ 31.764091][ T615] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 32.069635][ T624] loop3: detected capacity change from 0 to 256 [ 32.131336][ T30] audit: type=1400 audit(1718735516.799:157): avc: denied { write } for pid=621 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.153185][ T30] audit: type=1400 audit(1718735516.799:158): avc: denied { add_name } for pid=621 comm="syz-executor.3" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.175130][ T30] audit: type=1400 audit(1718735516.799:159): avc: denied { associate } for pid=621 comm="syz-executor.3" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.197988][ T30] audit: type=1400 audit(1718735516.799:160): avc: denied { read append open } for pid=621 comm="syz-executor.3" path=2F726F6F742F73797A6B616C6C65722D74657374646972313231333832343834342F73797A6B616C6C65722E6558456B4F722F32312FE91F7189591E9233614B2F6367726F75702E636F6E74726F6C6C657273 dev="loop3" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.235744][ T30] audit: type=1400 audit(1718735516.799:161): avc: denied { write } for pid=621 comm="syz-executor.3" name="cgroup.controllers" dev="loop3" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.259557][ T30] audit: type=1400 audit(1718735516.799:162): avc: denied { mounton } for pid=621 comm="syz-executor.3" path=2F726F6F742F73797A6B616C6C65722D74657374646972313231333832343834342F73797A6B616C6C65722E6558456B4F722F32312FE91F7189591E9233614B2F627573 dev="loop3" ino=1048593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.294354][ T30] audit: type=1400 audit(1718735516.819:163): avc: denied { unmount } for pid=472 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.387664][ T472] syz-executor.3 (472) used greatest stack depth: 20880 bytes left [ 32.501805][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.508964][ T639] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.516116][ T639] device bridge_slave_0 entered promiscuous mode [ 32.524506][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.531393][ T639] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.538632][ T639] device bridge_slave_1 entered promiscuous mode [ 32.582061][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.588929][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.595981][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.602924][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.623755][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.631386][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.639112][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.650303][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.658496][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.665354][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.673754][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.682166][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.689279][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.703000][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.712286][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.727685][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.740009][ T639] device veth0_vlan entered promiscuous mode [ 32.746277][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.754306][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.761966][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.773618][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.782867][ T639] device veth1_macvtap entered promiscuous mode [ 32.793840][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.805679][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.819278][ T573] device bridge_slave_1 left promiscuous mode [ 32.828963][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.836461][ T573] device bridge_slave_0 left promiscuous mode [ 32.844149][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.853138][ T573] device veth1_macvtap left promiscuous mode [ 32.853507][ T647] overlayfs: missing 'lowerdir' [ 32.859169][ T573] device veth0_vlan left promiscuous mode [ 33.235242][ T30] audit: type=1326 audit(1718735517.899:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5525aa8f29 code=0x0 [ 33.516489][ T663] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 34.548377][ T664] loop4: detected capacity change from 0 to 512 [ 34.600029][ T664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.804498][ T30] audit: type=1400 audit(1718735519.469:165): avc: denied { remove_name } for pid=312 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.817820][ T664] EXT4-fs (loop4): 1 orphan inode deleted [ 34.833067][ T664] EXT4-fs (loop4): 1 truncate cleaned up [ 34.839050][ T664] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 34.848524][ T672] loop0: detected capacity change from 0 to 512 [ 34.890697][ T675] loop3: detected capacity change from 0 to 256 [ 34.945563][ T672] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.957122][ T672] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/23/file0 supports timestamps until 2038 (0x7fffffff) [ 35.467953][ T693] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.474874][ T693] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.483511][ T693] device bridge_slave_0 entered promiscuous mode [ 35.494401][ T693] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.502039][ T693] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.538531][ T693] device bridge_slave_1 entered promiscuous mode [ 35.670318][ T702] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 35.968845][ T710] overlayfs: missing 'lowerdir' [ 36.012489][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.017900][ T712] loop2: detected capacity change from 0 to 512 [ 36.020709][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.045246][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.053832][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.062548][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.069436][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.077996][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.086702][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.095541][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.099775][ T712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.102413][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.127047][ T712] ext4 filesystem being mounted at /root/syzkaller-testdir3139420238/syzkaller.NWT6eC/42/file0 supports timestamps until 2038 (0x7fffffff) [ 36.131343][ T708] loop4: detected capacity change from 0 to 40427 [ 36.152667][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.160613][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.169327][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.182575][ T693] device veth0_vlan entered promiscuous mode [ 36.187995][ T708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 36.197225][ T708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.200427][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.213819][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.222082][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.232205][ T708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.234795][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.252291][ T357] device bridge_slave_1 left promiscuous mode [ 36.259035][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.266468][ T357] device bridge_slave_0 left promiscuous mode [ 36.272767][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.292653][ T357] device veth1_macvtap left promiscuous mode [ 36.309029][ T357] device veth0_vlan left promiscuous mode [ 36.328334][ T724] loop0: detected capacity change from 0 to 256 [ 36.338873][ T708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.351977][ T708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.446351][ T726] loop2: detected capacity change from 0 to 512 [ 36.537746][ T726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.558813][ T724] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 36.562390][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 36.562403][ T30] audit: type=1400 audit(1718735521.229:173): avc: denied { create } for pid=707 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.601156][ T726] EXT4-fs (loop2): 1 orphan inode deleted [ 36.606719][ T726] EXT4-fs (loop2): 1 truncate cleaned up [ 36.609383][ T30] audit: type=1400 audit(1718735521.249:174): avc: denied { map } for pid=723 comm="syz-executor.0" path="/root/syzkaller-testdir2534683943/syzkaller.NrB6sg/26/file1/cpu.stat" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.612225][ T726] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 36.739262][ T736] loop0: detected capacity change from 0 to 512 [ 36.787767][ T736] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz-executor.0: bad orphan inode 1 [ 36.798409][ T736] EXT4-fs (loop0): Remounting filesystem read-only [ 36.804860][ T736] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,i_version,usrquota,min_batch_time=0x0000000000000005,errors=remount-ro,noinit_itable,jqfmt=vfsold,. Quota mode: writeback. [ 36.829995][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.838781][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.848458][ T693] device veth1_macvtap entered promiscuous mode [ 36.859503][ T736] overlayfs: missing 'lowerdir' [ 36.866506][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.874234][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.882466][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.898352][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.906700][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.934270][ T30] audit: type=1326 audit(1718735521.599:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7d0198f29 code=0x0 [ 36.957656][ T746] loop0: detected capacity change from 0 to 512 [ 37.008128][ T746] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.017184][ T754] loop4: detected capacity change from 0 to 256 [ 37.023768][ T746] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/31/file0 supports timestamps until 2038 (0x7fffffff) [ 37.176359][ T757] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 37.507357][ T759] loop0: detected capacity change from 0 to 128 [ 37.537575][ T310] syz-executor.4 (310) used greatest stack depth: 20248 bytes left [ 37.630626][ T767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.655417][ T770] overlayfs: missing 'lowerdir' [ 37.673611][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.680674][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.688076][ T763] device bridge_slave_0 entered promiscuous mode [ 37.696369][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.703419][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.710590][ T763] device bridge_slave_1 entered promiscuous mode [ 37.756008][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.762877][ T763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.770039][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.770055][ T763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.806545][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.814731][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.822800][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.841819][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.850531][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.857506][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.871825][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.880799][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.887668][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.905001][ T727] device bridge_slave_1 left promiscuous mode [ 37.911754][ T727] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.927106][ T727] device bridge_slave_0 left promiscuous mode [ 37.933229][ T727] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.941631][ T783] loop3: detected capacity change from 0 to 512 [ 37.948917][ T727] device veth1_macvtap left promiscuous mode [ 37.954890][ T727] device veth0_vlan left promiscuous mode [ 38.004474][ T783] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.016498][ T783] ext4 filesystem being mounted at /root/syzkaller-testdir4003365492/syzkaller.Oxo0hO/3/file0 supports timestamps until 2038 (0x7fffffff) [ 38.032019][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.044439][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.052588][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.062308][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.081952][ T763] device veth0_vlan entered promiscuous mode [ 38.088173][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.096432][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.112754][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.121761][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.136104][ T763] device veth1_macvtap entered promiscuous mode [ 38.142708][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.151444][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.159393][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.162653][ T667] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.168423][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.184368][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.197155][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.205209][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.217720][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.225958][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.318507][ T792] loop3: detected capacity change from 0 to 512 [ 38.437324][ T792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.480486][ T792] EXT4-fs (loop3): 1 orphan inode deleted [ 38.486127][ T792] EXT4-fs (loop3): 1 truncate cleaned up [ 38.491862][ T792] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 38.529752][ T798] loop0: detected capacity change from 0 to 512 [ 38.546086][ T800] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 38.586997][ T667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.609787][ T667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.630535][ T798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.647441][ T798] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/36/file0 supports timestamps until 2038 (0x7fffffff) [ 38.657322][ T667] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.717925][ T667] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.732341][ T667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.787635][ T667] usb 2-1: config 0 descriptor?? [ 38.813389][ T808] loop4: detected capacity change from 0 to 40427 [ 38.840327][ T821] loop0: detected capacity change from 0 to 256 [ 38.854939][ T821] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 38.874365][ T808] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.883159][ T808] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.893934][ T808] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.931995][ T808] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 38.934993][ T828] overlayfs: missing 'lowerdir' [ 38.941745][ T808] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.015488][ T833] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 39.042018][ T835] loop3: detected capacity change from 0 to 256 [ 39.127072][ T835] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 39.254306][ T846] loop4: detected capacity change from 0 to 512 [ 39.267991][ T667] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.279569][ T667] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 39.287625][ T667] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 39.301682][ T667] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 39.314378][ T846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.328436][ T846] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/8/file0 supports timestamps until 2038 (0x7fffffff) [ 39.368401][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.375356][ T847] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.382864][ T847] device bridge_slave_0 entered promiscuous mode [ 39.389762][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.396656][ T847] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.403951][ T847] device bridge_slave_1 entered promiscuous mode [ 39.419156][ T854] loop4: detected capacity change from 0 to 256 [ 39.471396][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.478956][ T847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.486213][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.493229][ T847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.509466][ T451] usb 2-1: USB disconnect, device number 2 [ 39.525786][ T854] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 39.531086][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.550796][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.559329][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.573788][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.582098][ T667] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.589077][ T667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.596543][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.604814][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.611805][ T667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.630904][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.639214][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.655246][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.668660][ T847] device veth0_vlan entered promiscuous mode [ 39.675963][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.684164][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.691667][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.700313][ T357] device bridge_slave_1 left promiscuous mode [ 39.706800][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.729290][ T357] device bridge_slave_0 left promiscuous mode [ 39.735346][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.743818][ T357] device veth1_macvtap left promiscuous mode [ 39.749963][ T357] device veth0_vlan left promiscuous mode [ 39.928323][ T863] loop2: detected capacity change from 0 to 512 [ 39.936921][ T330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.990480][ T863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.038899][ T863] EXT4-fs (loop2): 1 orphan inode deleted [ 40.044461][ T863] EXT4-fs (loop2): 1 truncate cleaned up [ 40.049365][ T847] device veth1_macvtap entered promiscuous mode [ 40.050165][ T863] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 40.087669][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.096424][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.105132][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.142078][ T872] loop3: detected capacity change from 0 to 256 [ 40.176133][ T880] loop1: detected capacity change from 0 to 256 [ 40.220001][ T880] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 40.237270][ T872] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 40.467289][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.524790][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.536215][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.602381][ T330] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.611617][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.620287][ T330] usb 5-1: config 0 descriptor?? [ 40.685702][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.693154][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.700612][ T889] device bridge_slave_0 entered promiscuous mode [ 40.708216][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.715188][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.723076][ T889] device bridge_slave_1 entered promiscuous mode [ 40.831389][ T905] loop2: detected capacity change from 0 to 256 [ 40.843450][ T907] loop1: detected capacity change from 0 to 512 [ 40.860494][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.867383][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.874455][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.881517][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.898532][ T907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.909679][ T907] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/16/file0 supports timestamps until 2038 (0x7fffffff) [ 40.927271][ T905] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 40.941463][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.949626][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.958024][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.973499][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.997108][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.003994][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.039717][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.055376][ T923] loop0: detected capacity change from 0 to 512 [ 41.057528][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.069698][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.076566][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.086267][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.094316][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.127008][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.127712][ T330] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 41.142235][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.146457][ T330] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 41.157351][ T330] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 41.165968][ T330] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 41.254978][ T928] loop1: detected capacity change from 0 to 512 [ 41.261814][ T923] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.273851][ T923] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/42/file0 supports timestamps until 2038 (0x7fffffff) [ 41.301023][ T928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.335831][ T889] device veth0_vlan entered promiscuous mode [ 41.378655][ T928] EXT4-fs (loop1): 1 orphan inode deleted [ 41.384211][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.384459][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.391326][ T928] EXT4-fs (loop1): 1 truncate cleaned up [ 41.403738][ T928] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 41.411461][ T20] usb 5-1: USB disconnect, device number 3 [ 41.439946][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.450400][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.460143][ T889] device veth1_macvtap entered promiscuous mode [ 41.472906][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.480376][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.493753][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.503801][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.512174][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.549410][ T357] device bridge_slave_1 left promiscuous mode [ 41.565791][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.577445][ T357] device bridge_slave_0 left promiscuous mode [ 41.583413][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.601585][ T357] device veth1_macvtap left promiscuous mode [ 41.617249][ T357] device veth0_vlan left promiscuous mode [ 41.644127][ T943] loop0: detected capacity change from 0 to 512 [ 41.650361][ T339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 41.676709][ T30] audit: type=1400 audit(1718735526.339:176): avc: denied { create } for pid=940 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 41.680614][ T943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.708812][ T943] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/45/file0 supports timestamps until 2038 (0x7fffffff) [ 41.776941][ T30] audit: type=1400 audit(1718735526.419:177): avc: denied { bind } for pid=940 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.966087][ T30] audit: type=1400 audit(1718735526.489:178): avc: denied { create } for pid=940 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.998773][ T30] audit: type=1400 audit(1718735526.499:179): avc: denied { write } for pid=940 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.056679][ T951] loop1: detected capacity change from 0 to 256 [ 42.098903][ T951] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 42.196977][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.207902][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.226964][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.255001][ T339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.264357][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.285334][ T339] usb 3-1: config 0 descriptor?? [ 42.347845][ T977] loop0: detected capacity change from 0 to 512 [ 42.470138][ T977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.482076][ T977] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/51/file0 supports timestamps until 2038 (0x7fffffff) [ 42.507026][ T451] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.746979][ T451] usb 4-1: Using ep0 maxpacket: 32 [ 42.812349][ T339] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 42.822320][ T339] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 42.830534][ T339] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 42.867149][ T339] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 42.927167][ T991] loop0: detected capacity change from 0 to 512 [ 42.979408][ T991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.991098][ T991] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/55/file0 supports timestamps until 2038 (0x7fffffff) [ 43.013862][ T330] usb 3-1: USB disconnect, device number 2 [ 43.027061][ T451] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 43.038057][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.094742][ T451] usb 4-1: Product: syz [ 43.107088][ T451] usb 4-1: Manufacturer: syz [ 43.111605][ T451] usb 4-1: SerialNumber: syz [ 43.121959][ T451] usb 4-1: config 0 descriptor?? [ 44.034706][ T667] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.101810][ T1016] loop0: detected capacity change from 0 to 128 [ 44.137753][ T1016] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.436970][ T667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.456942][ T667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.486865][ T667] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.507431][ T667] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.516988][ T451] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1a:19:bd:a7:b7:2d [ 44.538904][ T451] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 44.547614][ T667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.559494][ T1033] loop0: detected capacity change from 0 to 512 [ 44.561838][ T451] usb 4-1: USB disconnect, device number 2 [ 44.590845][ T667] usb 5-1: config 0 descriptor?? [ 44.691024][ T30] audit: type=1400 audit(1718735529.359:180): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.722739][ T1040] overlayfs: missing 'lowerdir' [ 44.737597][ T1033] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.749412][ T1033] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/61/file0 supports timestamps until 2038 (0x7fffffff) [ 45.070528][ T667] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.086018][ T667] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.109578][ T667] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 45.668121][ T667] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 45.766251][ T1062] loop1: detected capacity change from 0 to 512 [ 45.770750][ T667] usb 5-1: USB disconnect, device number 4 [ 45.887640][ T1062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.907270][ T1062] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/33/file0 supports timestamps until 2038 (0x7fffffff) [ 46.449505][ T1087] overlayfs: missing 'lowerdir' [ 46.503564][ T1095] loop0: detected capacity change from 0 to 256 [ 46.559162][ T1095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 46.696928][ T339] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.853163][ T1109] loop3: detected capacity change from 0 to 256 [ 47.111755][ T1109] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 47.156915][ T339] usb 5-1: Using ep0 maxpacket: 32 [ 47.267206][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.460195][ T339] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 47.472673][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.491070][ T339] usb 5-1: Product: syz [ 47.501640][ T339] usb 5-1: Manufacturer: syz [ 47.529727][ T339] usb 5-1: SerialNumber: syz [ 47.585868][ T339] usb 5-1: config 0 descriptor?? [ 47.661293][ T30] audit: type=1400 audit(1718735532.329:181): avc: denied { read } for pid=1135 comm="syz-executor.0" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.687023][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.700812][ T1137] loop3: detected capacity change from 0 to 256 [ 47.713390][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.723697][ T30] audit: type=1400 audit(1718735532.359:182): avc: denied { open } for pid=1135 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.724022][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.748845][ T30] audit: type=1400 audit(1718735532.359:183): avc: denied { ioctl } for pid=1135 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.748899][ T30] audit: type=1400 audit(1718735532.359:184): avc: denied { set_context_mgr } for pid=1135 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.791403][ T1145] loop1: detected capacity change from 0 to 512 [ 47.815594][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.825587][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.834215][ T331] usb 3-1: config 0 descriptor?? [ 47.845229][ T1137] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 47.871226][ T1145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.882702][ T1145] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/40/file0 supports timestamps until 2038 (0x7fffffff) [ 48.567360][ T339] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:4c:f8:84:3b:46 [ 48.580043][ T331] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 48.588038][ T331] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 48.611308][ T339] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 48.617908][ T331] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 48.628045][ T339] usb 5-1: USB disconnect, device number 5 [ 48.639645][ T331] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.802190][ T507] usb 3-1: USB disconnect, device number 3 [ 48.866890][ T794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 48.983404][ T1209] loop0: detected capacity change from 0 to 512 [ 49.022402][ T1209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.033597][ T1209] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/75/file0 supports timestamps until 2038 (0x7fffffff) [ 49.236915][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.252299][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.264601][ T794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.277672][ T794] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.287507][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.308361][ T794] usb 2-1: config 0 descriptor?? [ 49.907105][ T794] usbhid 2-1:0.0: can't add hid device: -71 [ 49.913172][ T794] usbhid: probe of 2-1:0.0 failed with error -71 [ 49.945298][ T794] usb 2-1: USB disconnect, device number 3 [ 50.090193][ T1258] loop4: detected capacity change from 0 to 512 [ 50.126990][ T507] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.152379][ T1258] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.164388][ T1258] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/22/file0 supports timestamps until 2038 (0x7fffffff) [ 50.341518][ T1267] loop4: detected capacity change from 0 to 256 [ 50.406915][ T507] usb 4-1: Using ep0 maxpacket: 32 [ 50.465417][ T30] audit: type=1400 audit(1718735535.129:185): avc: denied { create } for pid=1269 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.467686][ T1272] loop1: detected capacity change from 0 to 256 [ 50.583551][ T1276] device syzkaller0 entered promiscuous mode [ 50.684994][ T1284] loop1: detected capacity change from 0 to 256 [ 50.696601][ T1284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 50.709041][ T507] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 50.718494][ T507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.726479][ T507] usb 4-1: Product: syz [ 50.733637][ T507] usb 4-1: Manufacturer: syz [ 50.738491][ T507] usb 4-1: SerialNumber: syz [ 50.743622][ T507] usb 4-1: config 0 descriptor?? [ 50.857035][ T1286] kvm: emulating exchange as write [ 51.106942][ T339] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.467006][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.479624][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.487121][ T507] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:27:00:8d:83:f2 [ 51.489884][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.508405][ T507] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 51.512403][ T339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.538806][ T507] usb 4-1: USB disconnect, device number 3 [ 51.607460][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.617185][ T339] usb 3-1: config 0 descriptor?? [ 51.639635][ T1299] loop0: detected capacity change from 0 to 256 [ 52.415655][ T1322] device syzkaller0 entered promiscuous mode [ 52.546887][ T339] usbhid 3-1:0.0: can't add hid device: -71 [ 52.554233][ T339] usbhid: probe of 3-1:0.0 failed with error -71 [ 52.562595][ T339] usb 3-1: USB disconnect, device number 4 [ 52.573337][ T1331] loop0: detected capacity change from 0 to 512 [ 52.620399][ T1335] device syzkaller0 entered promiscuous mode [ 52.641776][ T1331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.653501][ T1331] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/85/file0 supports timestamps until 2038 (0x7fffffff) [ 52.935443][ T1345] loop0: detected capacity change from 0 to 256 [ 53.236868][ T1293] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.346866][ T339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.449016][ T1369] loop1: detected capacity change from 0 to 256 [ 53.476908][ T1293] usb 5-1: Using ep0 maxpacket: 32 [ 53.532162][ T30] audit: type=1400 audit(1718735538.199:186): avc: denied { ioctl } for pid=1368 comm="syz-executor.1" path=2F726F6F742F73797A6B616C6C65722D746573746469723930343631303438312F73797A6B616C6C65722E4139613131432F35312FE91F7189591E9233614B2F627573 dev="loop1" ino=1048638 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.603721][ T30] audit: type=1400 audit(1718735538.269:187): avc: denied { create } for pid=1375 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.625601][ T30] audit: type=1400 audit(1718735538.269:188): avc: denied { write } for pid=1375 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.747411][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.756972][ T1293] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 53.758564][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.771194][ T1293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.777086][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.796103][ T1293] usb 5-1: Product: syz [ 53.798088][ T339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.802599][ T1293] usb 5-1: Manufacturer: syz [ 53.810746][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.821037][ T1293] usb 5-1: SerialNumber: syz [ 53.823569][ T30] audit: type=1400 audit(1718735538.489:189): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.850272][ T1293] usb 5-1: config 0 descriptor?? [ 53.855595][ T339] usb 3-1: config 0 descriptor?? [ 53.863987][ T30] audit: type=1400 audit(1718735538.489:190): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.886044][ T936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 53.893464][ T30] audit: type=1400 audit(1718735538.489:191): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.286930][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.297838][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.307918][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.321244][ T936] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.330962][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.339718][ T936] usb 2-1: config 0 descriptor?? [ 54.397726][ T339] usbhid 3-1:0.0: can't add hid device: -71 [ 54.403597][ T339] usbhid: probe of 3-1:0.0 failed with error -71 [ 54.415157][ T339] usb 3-1: USB disconnect, device number 5 [ 54.506332][ T1383] device syzkaller0 entered promiscuous mode [ 54.546948][ T1293] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:59:08:d8:0a:fc [ 54.558699][ T1293] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 54.565815][ T1293] usb 5-1: USB disconnect, device number 6 [ 54.582666][ T30] audit: type=1400 audit(1718735539.249:192): avc: denied { create } for pid=1384 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.603996][ T30] audit: type=1400 audit(1718735539.249:193): avc: denied { write } for pid=1384 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.625624][ T30] audit: type=1400 audit(1718735539.249:194): avc: denied { read } for pid=1384 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.897003][ T936] usbhid 2-1:0.0: can't add hid device: -71 [ 54.903053][ T936] usbhid: probe of 2-1:0.0 failed with error -71 [ 54.910424][ T936] usb 2-1: USB disconnect, device number 4 [ 55.057711][ T30] audit: type=1400 audit(1718735539.729:195): avc: denied { map } for pid=1402 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.099607][ T1406] loop3: detected capacity change from 0 to 256 [ 55.131865][ T1407] device syzkaller0 entered promiscuous mode [ 55.228910][ T1411] device syzkaller0 entered promiscuous mode [ 55.789501][ T1437] device syzkaller0 entered promiscuous mode [ 55.796965][ T936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.876905][ T339] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 56.037001][ T314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.126867][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 56.186978][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.197754][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.207720][ T936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.220526][ T936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.229533][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.238074][ T936] usb 5-1: config 0 descriptor?? [ 56.296953][ T331] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.396941][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.407853][ T339] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 56.416694][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.424720][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.434300][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.447014][ T339] usb 2-1: Product: syz [ 56.450929][ T339] usb 2-1: Manufacturer: syz [ 56.455340][ T339] usb 2-1: SerialNumber: syz [ 56.459819][ T314] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.468888][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.476964][ T339] usb 2-1: config 0 descriptor?? [ 56.482785][ T314] usb 1-1: config 0 descriptor?? [ 56.666964][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.677831][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.687486][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.700208][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.709611][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.718249][ T331] usb 3-1: config 0 descriptor?? [ 56.767009][ T936] usbhid 5-1:0.0: can't add hid device: -71 [ 56.773116][ T936] usbhid: probe of 5-1:0.0 failed with error -71 [ 56.780202][ T936] usb 5-1: USB disconnect, device number 7 [ 57.026931][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 57.032902][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 57.039684][ T314] usb 1-1: USB disconnect, device number 2 [ 57.156926][ T339] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:2b:dc:1d:ec:e9 [ 57.168444][ T339] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 57.174906][ T339] usb 2-1: USB disconnect, device number 5 [ 57.256892][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 57.262710][ T331] usbhid: probe of 3-1:0.0 failed with error -71 [ 57.269628][ T331] usb 3-1: USB disconnect, device number 6 [ 57.480335][ T1465] device syzkaller0 entered promiscuous mode [ 57.562857][ T1467] loop0: detected capacity change from 0 to 512 [ 57.619314][ T1467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.630331][ T1467] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/101/file0 supports timestamps until 2038 (0x7fffffff) [ 57.774993][ T1483] device syzkaller0 entered promiscuous mode [ 57.798182][ T1485] device syzkaller0 entered promiscuous mode [ 58.099138][ T1499] device syzkaller0 entered promiscuous mode [ 58.206888][ T667] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.228973][ T1505] loop4: detected capacity change from 0 to 512 [ 58.308522][ T1505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.319549][ T1505] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/43/file0 supports timestamps until 2038 (0x7fffffff) [ 58.426943][ T794] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 58.507354][ T1521] device syzkaller0 entered promiscuous mode [ 58.577348][ T667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.589007][ T667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.599697][ T667] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.608994][ T1526] device syzkaller0 entered promiscuous mode [ 58.612980][ T667] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.628407][ T667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.641210][ T667] usb 1-1: config 0 descriptor?? [ 58.678355][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 58.725086][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 58.725101][ T30] audit: type=1400 audit(1718735543.389:197): avc: denied { getopt } for pid=1532 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.751394][ T1535] loop3: detected capacity change from 0 to 512 [ 58.767186][ T30] audit: type=1326 audit(1718735543.429:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.791540][ T30] audit: type=1326 audit(1718735543.429:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.815649][ T30] audit: type=1326 audit(1718735543.429:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.841364][ T30] audit: type=1326 audit(1718735543.429:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.872375][ T30] audit: type=1326 audit(1718735543.429:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.896763][ T30] audit: type=1326 audit(1718735543.429:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.923690][ T1542] loop1: detected capacity change from 0 to 512 [ 58.930476][ T30] audit: type=1326 audit(1718735543.429:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 58.955220][ T1535] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.966261][ T1535] ext4 filesystem being mounted at /root/syzkaller-testdir1069752384/syzkaller.ovlTdg/39/file0 supports timestamps until 2038 (0x7fffffff) [ 58.985420][ T30] audit: type=1326 audit(1718735543.429:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 59.016915][ T794] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 59.019638][ T30] audit: type=1326 audit(1718735543.429:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29364bf29 code=0x7ffc0000 [ 59.035974][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.057906][ T794] usb 3-1: Product: syz [ 59.061977][ T794] usb 3-1: Manufacturer: syz [ 59.066479][ T794] usb 3-1: SerialNumber: syz [ 59.082510][ T794] usb 3-1: config 0 descriptor?? [ 59.089896][ T1542] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.111201][ T1542] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/61/file0 supports timestamps until 2038 (0x7fffffff) [ 59.188258][ T667] usbhid 1-1:0.0: can't add hid device: -71 [ 59.194117][ T667] usbhid: probe of 1-1:0.0 failed with error -71 [ 59.213850][ T667] usb 1-1: USB disconnect, device number 3 [ 59.376114][ T1549] loop3: detected capacity change from 0 to 40427 [ 59.435608][ T1549] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.447720][ T1549] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.538926][ T1549] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.550728][ T1537] loop4: detected capacity change from 0 to 131072 [ 59.568318][ T1549] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.575868][ T1549] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.597088][ T1537] ======================================================= [ 59.597088][ T1537] WARNING: The mand mount option has been deprecated and [ 59.597088][ T1537] and is ignored by this kernel. Remove the mand [ 59.597088][ T1537] option from the mount to silence this warning. [ 59.597088][ T1537] ======================================================= [ 59.647868][ T1537] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 59.678754][ T1537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.688008][ T1537] F2FS-fs (loop4): invalid crc value [ 59.713891][ T1537] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.724459][ T1566] device syzkaller0 entered promiscuous mode [ 59.770365][ T1537] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 59.777698][ T1537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 59.800763][ T1537] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=7, ino,nid: [993787911, 7] run fsck to fix. [ 59.847051][ T794] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:e9:95:a7:46:06 [ 59.901133][ T794] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 60.011263][ T794] usb 3-1: USB disconnect, device number 7 [ 60.111370][ T1575] device syzkaller0 entered promiscuous mode [ 60.455127][ T1614] loop2: detected capacity change from 0 to 256 [ 60.604671][ T1614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 61.197131][ T1643] loop4: detected capacity change from 0 to 512 [ 61.453897][ T1643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.506034][ T1643] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/58/file0 supports timestamps until 2038 (0x7fffffff) [ 61.570760][ T1636] loop2: detected capacity change from 0 to 40427 [ 61.787158][ T1636] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 61.794894][ T1636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.815620][ T1667] loop0: detected capacity change from 0 to 256 [ 61.820388][ T1636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.836554][ T1667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 61.867394][ T1636] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.875917][ T1636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.936601][ T1673] loop0: detected capacity change from 0 to 1024 [ 61.960676][ T1664] loop4: detected capacity change from 0 to 512 [ 61.970970][ T1673] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 61.984762][ T1664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.996488][ T1673] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 62.058065][ T1664] EXT4-fs (loop4): 1 orphan inode deleted [ 62.087285][ T1673] syz-executor.0[1673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.087350][ T1673] syz-executor.0[1673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.099489][ T1664] EXT4-fs (loop4): 1 truncate cleaned up [ 62.139385][ T1673] input: syz1 as /devices/virtual/input/input5 [ 62.183213][ T1664] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 62.295434][ T397] Bluetooth: hci0: sending frame failed (-49) [ 62.315966][ T1673] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 62.532069][ T1694] device syzkaller0 entered promiscuous mode [ 62.843785][ T1699] loop3: detected capacity change from 0 to 256 [ 62.854251][ T1701] loop1: detected capacity change from 0 to 512 [ 62.863437][ T1699] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 62.923305][ T1703] device syzkaller0 entered promiscuous mode [ 62.963725][ T1701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.976113][ T1701] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/67/file0 supports timestamps until 2038 (0x7fffffff) [ 63.332238][ T1726] loop2: detected capacity change from 0 to 256 [ 63.427111][ T1293] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 64.166967][ T1293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.193058][ T1293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.205930][ T1293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.265823][ T1740] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.269894][ T1293] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.275672][ T1740] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.281995][ T1293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.289758][ T1740] device bridge_slave_0 entered promiscuous mode [ 64.303893][ T1740] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306697][ T1293] usb 4-1: config 0 descriptor?? [ 64.310935][ T1740] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.322508][ T794] Bluetooth: hci0: command 0x1003 tx timeout [ 64.322850][ T1740] device bridge_slave_1 entered promiscuous mode [ 64.328778][ T397] Bluetooth: hci0: sending frame failed (-49) [ 64.431327][ T1745] loop4: detected capacity change from 0 to 512 [ 64.481392][ T1745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.586153][ T1745] EXT4-fs (loop4): 1 orphan inode deleted [ 64.592044][ T1745] EXT4-fs (loop4): 1 truncate cleaned up [ 64.597700][ T1745] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 64.837237][ T1293] usbhid 4-1:0.0: can't add hid device: -71 [ 64.852473][ T1293] usbhid: probe of 4-1:0.0 failed with error -71 [ 64.877851][ T1293] usb 4-1: USB disconnect, device number 4 [ 64.911326][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.918837][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.931018][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.939734][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.948147][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.955095][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.962885][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.973540][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.982454][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.990760][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.997864][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.010854][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.024873][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.035753][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.053475][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.061919][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.069802][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.082882][ T1740] device veth0_vlan entered promiscuous mode [ 65.093427][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.113100][ T1740] device veth1_macvtap entered promiscuous mode [ 65.126113][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.134612][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.148020][ T1750] loop4: detected capacity change from 0 to 512 [ 65.170767][ T883] device bridge_slave_1 left promiscuous mode [ 65.177580][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.177800][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 65.177812][ T30] audit: type=1326 audit(1718735549.849:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1752 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79849e6f29 code=0x0 [ 65.185264][ T1750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.224946][ T1750] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/68/file0 supports timestamps until 2038 (0x7fffffff) [ 65.225734][ T883] device bridge_slave_0 left promiscuous mode [ 65.245136][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.253512][ T883] device veth1_macvtap left promiscuous mode [ 65.259428][ T883] device veth0_vlan left promiscuous mode [ 65.579672][ T1768] loop3: detected capacity change from 0 to 512 [ 65.653133][ T1768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.665124][ T1768] ext4 filesystem being mounted at /root/syzkaller-testdir1069752384/syzkaller.ovlTdg/57/file0 supports timestamps until 2038 (0x7fffffff) [ 66.040537][ T1785] loop3: detected capacity change from 0 to 256 [ 66.060294][ T1785] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 66.309070][ T1792] loop4: detected capacity change from 0 to 512 [ 66.416245][ T1293] Bluetooth: hci0: command 0x1001 tx timeout [ 66.422512][ T397] Bluetooth: hci0: sending frame failed (-49) [ 66.432742][ T1792] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.527870][ T1792] EXT4-fs (loop4): 1 orphan inode deleted [ 66.533493][ T1792] EXT4-fs (loop4): 1 truncate cleaned up [ 66.538972][ T1792] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 66.678230][ T1795] loop1: detected capacity change from 0 to 256 [ 66.818332][ T1797] loop3: detected capacity change from 0 to 256 [ 66.820345][ T1795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 66.902283][ T1797] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 67.049614][ T1804] loop4: detected capacity change from 0 to 512 [ 67.168808][ T1804] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.180756][ T1804] ext4 filesystem being mounted at /root/syzkaller-testdir940322076/syzkaller.GcONlI/74/file0 supports timestamps until 2038 (0x7fffffff) [ 68.414317][ T1840] loop3: detected capacity change from 0 to 512 [ 68.467204][ T507] Bluetooth: hci0: command 0x1009 tx timeout [ 68.511064][ T1840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.591809][ T1840] EXT4-fs (loop3): 1 orphan inode deleted [ 68.597446][ T1840] EXT4-fs (loop3): 1 truncate cleaned up [ 68.602954][ T1840] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 68.983053][ T1844] loop4: detected capacity change from 0 to 40427 [ 69.141986][ T1844] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 69.149756][ T1844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.160494][ T1844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.197573][ T1844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 69.204752][ T1844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.383223][ T1857] device syzkaller0 entered promiscuous mode [ 70.127259][ T1887] loop4: detected capacity change from 0 to 128 [ 70.387622][ T1892] device syzkaller0 entered promiscuous mode [ 70.634565][ T1905] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.239368][ T1911] loop4: detected capacity change from 0 to 256 [ 71.269682][ T1913] loop1: detected capacity change from 0 to 256 [ 71.306983][ T1911] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 71.341280][ T1913] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 71.495005][ T1922] loop1: detected capacity change from 0 to 128 [ 71.720110][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.727153][ T1923] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.734614][ T1923] device bridge_slave_0 entered promiscuous mode [ 71.741995][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.748953][ T1923] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.753838][ T1925] loop1: detected capacity change from 0 to 40427 [ 71.756154][ T1923] device bridge_slave_1 entered promiscuous mode [ 71.797851][ T1925] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 71.805419][ T1925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.842342][ T1925] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.908769][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.915714][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.922937][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.929868][ T1923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.006680][ T1925] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.017152][ T1925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.047693][ T10] device bridge_slave_1 left promiscuous mode [ 72.053633][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.078916][ T10] device bridge_slave_0 left promiscuous mode [ 72.079134][ T1945] loop3: detected capacity change from 0 to 256 [ 72.084888][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.100031][ T10] device veth1_macvtap left promiscuous mode [ 72.106147][ T10] device veth0_vlan left promiscuous mode [ 72.151712][ T1945] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 72.237060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.244776][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.252001][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.319140][ T1949] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.415964][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.425852][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.432880][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.549770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.559550][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566425][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.630736][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.639561][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.648652][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.656667][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.665238][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.673764][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.684140][ T1923] device veth0_vlan entered promiscuous mode [ 72.691002][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.698898][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.706710][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.714186][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.732176][ T1923] device veth1_macvtap entered promiscuous mode [ 72.741816][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.750213][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.758443][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.786903][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.795018][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.805089][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.813863][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.857513][ T1961] loop4: detected capacity change from 0 to 128 [ 72.885808][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.893233][ T1951] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.901121][ T1951] device bridge_slave_0 entered promiscuous mode [ 72.908258][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.915220][ T1951] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.922979][ T1951] device bridge_slave_1 entered promiscuous mode [ 73.188172][ T1973] loop4: detected capacity change from 0 to 256 [ 73.202336][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.209425][ T1951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.216489][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.223316][ T1951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.381418][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.391463][ T1979] loop0: detected capacity change from 0 to 128 [ 73.429681][ T936] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.437862][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.448714][ T10] device bridge_slave_1 left promiscuous mode [ 73.454732][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.468857][ T10] device bridge_slave_0 left promiscuous mode [ 73.474821][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.483896][ T1981] loop4: detected capacity change from 0 to 512 [ 73.507362][ T10] device veth1_macvtap left promiscuous mode [ 73.513596][ T10] device veth0_vlan left promiscuous mode [ 73.565169][ T1981] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.588335][ T1981] ext4 filesystem being mounted at /root/syzkaller-testdir1788636598/syzkaller.sBOJwd/3/file0 supports timestamps until 2038 (0x7fffffff) [ 73.618938][ T1996] loop0: detected capacity change from 0 to 512 [ 73.663352][ T1996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.674513][ T1996] ext4 filesystem being mounted at /root/syzkaller-testdir2534683943/syzkaller.NrB6sg/120/file0 supports timestamps until 2038 (0x7fffffff) [ 73.738144][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.134639][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.141546][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.148814][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.157018][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.163855][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.171486][ T2014] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.192328][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.205227][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.214608][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.230808][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.424261][ T1951] device veth0_vlan entered promiscuous mode [ 74.430594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.439322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.448277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.456089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.476211][ T1951] device veth1_macvtap entered promiscuous mode [ 74.483537][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.497904][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.507479][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.515850][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.537702][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.564137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.572377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.601295][ T2038] loop1: detected capacity change from 0 to 512 [ 74.604018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.628390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.759916][ T2038] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.800817][ T2043] loop3: detected capacity change from 0 to 128 [ 74.936007][ T2038] ext4 filesystem being mounted at /root/syzkaller-testdir904610481/syzkaller.A9a11C/89/file0 supports timestamps until 2038 (0x7fffffff) [ 75.074703][ T2046] device syzkaller0 entered promiscuous mode [ 75.308483][ T2064] loop4: detected capacity change from 0 to 256 [ 75.553235][ T2071] binder: 2070:2071 ioctl c0306201 0 returned -14 [ 75.568554][ T2073] loop3: detected capacity change from 0 to 128 [ 75.578153][ T2071] binder: BINDER_SET_CONTEXT_MGR already set [ 75.585405][ T2071] binder: 2070:2071 ioctl 4018620d 20000040 returned -16 [ 75.735952][ T2081] loop4: detected capacity change from 0 to 512 [ 75.776444][ T2088] device syzkaller0 entered promiscuous mode [ 75.839636][ T2081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.850933][ T2081] ext4 filesystem being mounted at /root/syzkaller-testdir1788636598/syzkaller.sBOJwd/9/file0 supports timestamps until 2038 (0x7fffffff) [ 76.152909][ T2108] binder: 2107:2108 ioctl c0306201 0 returned -14 [ 76.631552][ T2114] loop3: detected capacity change from 0 to 128 [ 76.721846][ T2126] loop3: detected capacity change from 0 to 512 [ 76.728750][ T2124] device syzkaller0 entered promiscuous mode [ 76.754822][ T2126] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.766254][ T2126] ext4 filesystem being mounted at /root/syzkaller-testdir3794466425/syzkaller.gWQlHs/5/file0 supports timestamps until 2038 (0x7fffffff) [ 76.827005][ T2137] loop0: detected capacity change from 0 to 256 [ 76.926513][ T2142] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.520982][ T2155] loop0: detected capacity change from 0 to 128 [ 77.680261][ T2158] loop0: detected capacity change from 0 to 256 [ 77.718441][ T2158] FAT-fs (loop0): Directory bread(block 64) failed [ 77.730394][ T2158] FAT-fs (loop0): Directory bread(block 65) failed [ 77.737022][ T2158] FAT-fs (loop0): Directory bread(block 66) failed [ 77.738727][ T2160] device syzkaller0 entered promiscuous mode [ 77.743463][ T2158] FAT-fs (loop0): Directory bread(block 67) failed [ 77.755772][ T2158] FAT-fs (loop0): Directory bread(block 68) failed [ 77.771599][ T2158] FAT-fs (loop0): Directory bread(block 69) failed [ 77.778856][ T2158] FAT-fs (loop0): Directory bread(block 70) failed [ 77.785486][ T2158] FAT-fs (loop0): Directory bread(block 71) failed [ 77.793102][ T2158] FAT-fs (loop0): Directory bread(block 72) failed [ 77.800783][ T2158] FAT-fs (loop0): Directory bread(block 73) failed [ 77.885288][ T357] attempt to access beyond end of device [ 77.885288][ T357] loop0: rw=1, want=1236, limit=256 [ 77.945850][ T2174] loop0: detected capacity change from 0 to 256 [ 78.344602][ T2192] loop3: detected capacity change from 0 to 128 [ 78.469306][ T2181] loop1: detected capacity change from 0 to 40427 [ 78.498153][ T2181] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.505840][ T2181] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.518594][ T2181] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.557575][ T2181] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.564672][ T2181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.676038][ T2206] loop3: detected capacity change from 0 to 128 [ 78.727609][ T2208] loop1: detected capacity change from 0 to 256 [ 78.767389][ T2214] loop3: detected capacity change from 0 to 256 [ 78.801507][ T2214] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 78.833198][ T2208] FAT-fs (loop1): Directory bread(block 64) failed [ 78.839932][ T2208] FAT-fs (loop1): Directory bread(block 65) failed [ 78.883294][ T2208] FAT-fs (loop1): Directory bread(block 66) failed [ 78.890100][ T2208] FAT-fs (loop1): Directory bread(block 67) failed [ 78.901177][ T2208] FAT-fs (loop1): Directory bread(block 68) failed [ 78.911112][ T2208] FAT-fs (loop1): Directory bread(block 69) failed [ 78.927210][ T2208] FAT-fs (loop1): Directory bread(block 70) failed [ 78.933908][ T2208] FAT-fs (loop1): Directory bread(block 71) failed [ 78.940408][ T2208] FAT-fs (loop1): Directory bread(block 72) failed [ 78.947058][ T2208] FAT-fs (loop1): Directory bread(block 73) failed [ 79.031466][ T357] attempt to access beyond end of device [ 79.031466][ T357] loop1: rw=1, want=1236, limit=256 [ 79.528646][ T2232] loop0: detected capacity change from 0 to 256 [ 79.697701][ T2232] FAT-fs (loop0): Directory bread(block 64) failed [ 79.704066][ T2232] FAT-fs (loop0): Directory bread(block 65) failed [ 79.720907][ T2232] FAT-fs (loop0): Directory bread(block 66) failed [ 79.741091][ T2232] FAT-fs (loop0): Directory bread(block 67) failed [ 79.757458][ T2232] FAT-fs (loop0): Directory bread(block 68) failed [ 79.794444][ T2232] FAT-fs (loop0): Directory bread(block 69) failed [ 79.801079][ T2232] FAT-fs (loop0): Directory bread(block 70) failed [ 79.807472][ T2232] FAT-fs (loop0): Directory bread(block 71) failed [ 79.813748][ T2232] FAT-fs (loop0): Directory bread(block 72) failed [ 79.820286][ T2232] FAT-fs (loop0): Directory bread(block 73) failed [ 79.917329][ T2234] loop1: detected capacity change from 0 to 40427 [ 80.027846][ T2234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.098105][ T2234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.165548][ T2234] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.181835][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.188765][ T2243] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.196044][ T2243] device bridge_slave_0 entered promiscuous mode [ 80.202764][ T2234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.204165][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.210831][ T2234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.216529][ T2243] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.231141][ T2243] device bridge_slave_1 entered promiscuous mode [ 80.302082][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.309028][ T2243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.316116][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.322927][ T2243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.358469][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.366339][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.382468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.395785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.414805][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.422956][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.429828][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.448665][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.456741][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.463728][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.472462][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.480683][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.499480][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.512490][ T2243] device veth0_vlan entered promiscuous mode [ 80.519234][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.527534][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.535118][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.550729][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.561165][ T2243] device veth1_macvtap entered promiscuous mode [ 80.574965][ T1293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.588492][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.663200][ T2269] loop4: detected capacity change from 0 to 256 [ 80.687257][ T2269] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 80.771433][ T2272] device syzkaller0 entered promiscuous mode [ 80.832904][ T10] device bridge_slave_1 left promiscuous mode [ 80.840666][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.869053][ T10] device bridge_slave_0 left promiscuous mode [ 80.885083][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.906049][ T10] device veth1_macvtap left promiscuous mode [ 80.916553][ T10] device veth0_vlan left promiscuous mode [ 81.055566][ T2286] loop4: detected capacity change from 0 to 256 [ 81.118665][ T2286] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 81.187349][ T2296] loop3: detected capacity change from 0 to 256 [ 81.747710][ T30] audit: type=1400 audit(1718735566.419:252): avc: denied { create } for pid=2309 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.942873][ T2314] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.981895][ T30] audit: type=1400 audit(1718735566.639:253): avc: denied { write } for pid=2309 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.487149][ T507] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.583027][ T2314] syz-executor.3 (2314) used greatest stack depth: 19184 bytes left [ 285.426986][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 202s! [ 285.435830][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 200s! [ 285.444790][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 202s! [ 285.453529][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 198s! [ 285.462434][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 202s! [ 285.470709][ C0] Showing busy workqueues and worker pools: [ 285.476396][ C0] workqueue events: flags=0x0 [ 285.481141][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.481200][ C0] pending: kfree_rcu_monitor, rht_deferred_worker [ 285.481267][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.481304][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor [ 285.481355][ C0] workqueue events_long: flags=0x0 [ 285.515445][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.515499][ C0] pending: br_multicast_gc_work [ 285.515527][ C0] workqueue events_unbound: flags=0x2 [ 285.533223][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.533264][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 285.533311][ C0] workqueue events_power_efficient: flags=0x80 [ 285.553628][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.553670][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, gc_worker [ 285.553737][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.553774][ C0] pending: check_lifetime [ 285.553796][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.588411][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.588465][ C0] pending: vmstat_update [ 285.588496][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.588532][ C0] pending: vmstat_update [ 285.588557][ C0] workqueue writeback: flags=0x4a [ 285.617448][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/256 refcnt=7 [ 285.617490][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 285.617568][ C0] workqueue kblockd: flags=0x18 [ 285.637243][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.637286][ C0] pending: blk_mq_timeout_work [ 285.637309][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 285.637342][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 285.637372][ C0] workqueue usb_hub_wq: flags=0x4 [ 285.669461][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.669503][ C0] in-flight: 507:hub_event hub_event [ 285.669549][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.669582][ C0] in-flight: 314:hub_event hub_event [ 285.669626][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.700850][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.700903][ C0] pending: work_fn [ 285.700928][ C0] workqueue mld: flags=0x40008 [ 285.717161][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=9 [ 285.717201][ C0] pending: mld_dad_work [ 285.717223][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 285.717302][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 285.717335][ C0] pending: mld_dad_work [ 285.717353][ C0] inactive: mld_dad_work, mld_dad_work [ 285.717380][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.763522][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 285.763564][ C0] pending: addrconf_dad_work [ 285.763591][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work [ 285.763673][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.792541][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.792581][ C0] pending: wg_packet_handshake_send_worker [ 285.792611][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.810699][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.810743][ C0] pending: wg_packet_encrypt_worker [ 285.810772][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.810806][ C0] pending: wg_packet_encrypt_worker [ 285.810833][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.841801][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.841847][ C0] pending: wg_packet_encrypt_worker [ 285.841881][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.841918][ C0] pending: wg_packet_encrypt_worker [ 285.841942][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.872806][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.872847][ C0] pending: wg_packet_handshake_send_worker [ 285.872880][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.890955][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.890998][ C0] pending: wg_packet_encrypt_worker [ 285.891025][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.891059][ C0] pending: wg_packet_encrypt_worker [ 285.891086][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.922048][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.922091][ C0] pending: wg_packet_encrypt_worker [ 285.922117][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.922151][ C0] pending: wg_packet_encrypt_worker [ 285.922177][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.953330][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.953376][ C0] pending: wg_packet_handshake_send_worker [ 285.953409][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.971475][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.971523][ C0] pending: wg_packet_encrypt_worker [ 285.971552][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.971589][ C0] pending: wg_packet_encrypt_worker [ 285.971615][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.002480][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.002528][ C0] pending: wg_packet_encrypt_worker [ 286.002557][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.002593][ C0] pending: wg_packet_encrypt_worker [ 286.002619][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.033831][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.033876][ C0] pending: wg_packet_handshake_send_worker [ 286.033907][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.052145][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.052196][ C0] pending: wg_packet_encrypt_worker [ 286.052229][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.052264][ C0] pending: wg_packet_encrypt_worker [ 286.052290][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.082805][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.082846][ C0] pending: wg_packet_handshake_send_worker [ 286.082881][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.101342][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.101389][ C0] pending: wg_packet_encrypt_worker [ 286.101417][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.101453][ C0] pending: wg_packet_encrypt_worker [ 286.101478][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.132249][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.132295][ C0] pending: wg_packet_encrypt_worker [ 286.132322][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.132357][ C0] pending: wg_packet_encrypt_worker [ 286.132383][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.163248][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.163300][ C0] pending: wg_packet_handshake_send_worker [ 286.163332][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.181400][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.181451][ C0] pending: wg_packet_encrypt_worker [ 286.181482][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.181519][ C0] pending: wg_packet_encrypt_worker [ 286.181546][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.212708][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.212755][ C0] pending: wg_packet_encrypt_worker [ 286.212786][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.212829][ C0] pending: wg_packet_encrypt_worker [ 286.212855][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.243542][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.243599][ C0] pending: wg_packet_handshake_send_worker [ 286.243629][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.261695][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.261739][ C0] pending: wg_packet_encrypt_worker [ 286.261767][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.261811][ C0] pending: wg_packet_encrypt_worker [ 286.261837][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.292354][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.292401][ C0] pending: wg_packet_handshake_send_worker [ 286.292433][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.310503][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.310545][ C0] pending: wg_packet_encrypt_worker [ 286.310576][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.310612][ C0] pending: wg_packet_encrypt_worker [ 286.310637][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.341163][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.341207][ C0] pending: wg_packet_handshake_send_worker [ 286.341236][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.359563][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.359607][ C0] pending: wg_packet_encrypt_worker [ 286.359634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.359669][ C0] pending: wg_packet_encrypt_worker [ 286.359693][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.390197][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.390242][ C0] pending: wg_packet_handshake_send_worker [ 286.390270][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.408443][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.408495][ C0] pending: wg_packet_encrypt_worker [ 286.408528][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.408565][ C0] pending: wg_packet_encrypt_worker [ 286.408591][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=203s workers=6 idle: 936 331 339 6 20 [ 286.408651][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=203s workers=9 idle: 39 1293 330 794 667 60 26 451