last executing test programs: 3.161622265s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) socket$nl_route(0x10, 0x3, 0x0) 3.095787377s ago: executing program 3 (id=40): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000300)={0x0, 0x807e, 0x2, 0x0, 0x42}, &(0x7f00000002c0), &(0x7f0000011000), &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 3.095626907s ago: executing program 3 (id=41): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r1, 0xffffdc47) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 3.068505718s ago: executing program 3 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x0, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x7, 0x5, 0x60, 0x0, 0xd, 0xb, 0x0, 0x7, 0x5, 0x0, '\x00', 0x54, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.022247849s ago: executing program 3 (id=44): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x7071, 0x0, 0x2, 0x156}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000580)={0x0, 0x5da0, 0x0, 0x2, 0x22d, 0x0, r0}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe04b, 0x400, 0x2, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0x0, 0x288, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x1, 0x1, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x52, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x54, 0x0, 0x0}}, 0x0) 2.470064052s ago: executing program 4 (id=49): write(0xffffffffffffffff, &(0x7f0000000180)="a7a96c5a465315c81f0d51131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a557f6680000008003000000510db0c6f5b5fce4847f46eb3ef6ee6345a1aab5618724a9aecc6959182a360060ac10cbd90fb50e638d7f7e1db4f612842e3a51eb1a3a57cc3919180d7481e62200c660b637e2681086b7d880391e9bdd7f12", 0x83) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) write$nbd(r0, &(0x7f0000000200)=ANY=[], 0x8d) 2.469947302s ago: executing program 4 (id=50): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) accept$inet(r0, 0x0, 0x0) 2.400901944s ago: executing program 4 (id=51): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x1, 0x81, 0xfffff024}, {0x6}]}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.374557064s ago: executing program 3 (id=54): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f5"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 2.228351727s ago: executing program 4 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000000c00)="41c7", 0x2}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) 2.152002269s ago: executing program 4 (id=57): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000002c0)={0x7, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0x2f}], 0x20000000000000d6) 2.13345635s ago: executing program 4 (id=59): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) syz_usb_connect(0x5, 0xa4, 0x0, 0x0) 1.557004904s ago: executing program 2 (id=63): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.036022176s ago: executing program 2 (id=66): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 447.81776ms ago: executing program 2 (id=68): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 447.59961ms ago: executing program 2 (id=69): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 334.396052ms ago: executing program 2 (id=72): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 275.493434ms ago: executing program 1 (id=74): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x782, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000080)) 275.382334ms ago: executing program 0 (id=75): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, 0x0, 0x200001, 0x0, 0x1ff, 0x0, 0x0}, {[0x2, 0x0, 0x9, 0x5]}, 0x6, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 271.521924ms ago: executing program 2 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 251.405314ms ago: executing program 0 (id=77): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x68, 0x0, &(0x7f0000000340)) 239.745275ms ago: executing program 0 (id=79): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 226.159975ms ago: executing program 1 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 225.766665ms ago: executing program 0 (id=81): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) 207.177935ms ago: executing program 1 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)=',', 0x1, 0x4018855, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)='<', 0x1, 0x80805, 0x0, 0x0) 197.586676ms ago: executing program 0 (id=83): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001080)={0xa0c8, 0x5, 0x75dd, 0x30a, 0x5}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x200, 0x8, 0x1, 0x8}) 192.594735ms ago: executing program 1 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x22}], 0x2, 0x120, 0x0) shutdown(r0, 0x1) 103.679098ms ago: executing program 0 (id=85): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) r2 = socket(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x0, 0x80000}) 77.945869ms ago: executing program 1 (id=86): creat(&(0x7f00000000c0)='./file0\x00', 0xe4) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 0s ago: executing program 1 (id=87): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000000000), &(0x7f0000001a80)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 23.111361][ T28] audit: type=1400 audit(1786394451.078:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.112389][ T279] cgroup: Unknown subsys name 'net' [ 23.134053][ T28] audit: type=1400 audit(1786394451.078:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.161337][ T28] audit: type=1400 audit(1786394451.118:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.161491][ T279] cgroup: Unknown subsys name 'devices' [ 23.305276][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.310912][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.413420][ T28] audit: type=1400 audit(1786394451.378:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.436643][ T28] audit: type=1400 audit(1786394451.378:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.445760][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.461588][ T28] audit: type=1400 audit(1786394451.388:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.493129][ T28] audit: type=1400 audit(1786394451.448:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.518659][ T28] audit: type=1400 audit(1786394451.448:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.550866][ T28] audit: type=1400 audit(1786394451.518:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.551285][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.576415][ T28] audit: type=1400 audit(1786394451.518:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.256275][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.263438][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.271008][ T288] device bridge_slave_0 entered promiscuous mode [ 24.278172][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.285280][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.292681][ T288] device bridge_slave_1 entered promiscuous mode [ 24.308175][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.315397][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.322804][ T287] device bridge_slave_0 entered promiscuous mode [ 24.332332][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.339418][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.346819][ T287] device bridge_slave_1 entered promiscuous mode [ 24.421344][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.428964][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.436493][ T290] device bridge_slave_0 entered promiscuous mode [ 24.446124][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453161][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.460558][ T290] device bridge_slave_1 entered promiscuous mode [ 24.536493][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.543609][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.551008][ T289] device bridge_slave_0 entered promiscuous mode [ 24.558346][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.566011][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.573435][ T289] device bridge_slave_1 entered promiscuous mode [ 24.667918][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.675218][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.682489][ T293] device bridge_slave_0 entered promiscuous mode [ 24.690403][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697472][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.704858][ T293] device bridge_slave_1 entered promiscuous mode [ 24.733525][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.740602][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.747893][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.754918][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.804996][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.812057][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.819428][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.826462][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.852790][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.859980][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.867284][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.874333][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.884783][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.891824][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.899096][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.906147][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.915683][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.922718][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.929995][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.937022][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.971915][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.979729][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.987119][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.994640][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.001821][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.009163][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.016562][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.023785][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.031262][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.039213][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.046639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.054215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.080669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.089743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.098008][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.105038][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.112955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.121192][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.128236][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.135631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.144105][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.151125][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.158501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.166637][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.173670][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.180994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.188979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.197025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.205071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.231884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.239804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.248200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.256409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.264961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.272514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.280872][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.288349][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.296175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.304476][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.311492][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.324827][ T288] device veth0_vlan entered promiscuous mode [ 25.333890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.341327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.349322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.357982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.366365][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.373394][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.380867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.388928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.396961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.405271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.413383][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.420439][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.429897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.438015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.451710][ T288] device veth1_macvtap entered promiscuous mode [ 25.466779][ T287] device veth0_vlan entered promiscuous mode [ 25.475323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.484793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.493191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.501644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.510037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.517750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.525930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.534096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.541939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.550115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.557598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.565084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.573295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.581587][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.588625][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.596044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.604485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.612898][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.619945][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.627553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.635164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.661736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.670021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.678080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.686583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.695339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.703485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.711900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.720104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.728745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.737086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.752300][ T287] device veth1_macvtap entered promiscuous mode [ 25.759176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.766873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.775430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.784474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.792787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.805443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.818816][ T289] device veth0_vlan entered promiscuous mode [ 25.825676][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.839027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.847847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.855503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.862897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.871045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.879195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.887602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.895946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.904360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.912697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.920404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.930631][ T293] device veth0_vlan entered promiscuous mode [ 25.944111][ T289] device veth1_macvtap entered promiscuous mode [ 25.957709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.975507][ T290] device veth0_vlan entered promiscuous mode [ 25.989244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.002466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.013445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.032099][ T317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.032299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.056800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.069423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.078655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.089193][ T293] device veth1_macvtap entered promiscuous mode [ 26.100434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.110952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.132068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.140459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.149048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.161539][ T290] device veth1_macvtap entered promiscuous mode [ 26.183856][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 26.205921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.214463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.248237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.258305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.286447][ T336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 26.369488][ T355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19'. [ 26.465768][ T380] loop3: detected capacity change from 0 to 128 [ 26.477822][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 26.595813][ T399] Mass Storage Function, version: 2009/09/11 [ 26.601918][ T399] LUN: removable file: (no medium) [ 26.619641][ T401] loop1: detected capacity change from 0 to 4096 [ 26.633175][ T401] EXT4-fs (loop1): Test dummy encryption mode enabled [ 26.651112][ T401] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 26.666405][ T401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.692884][ T413] SELinux: failed to load policy [ 26.705043][ T401] ======================================================= [ 26.705043][ T401] WARNING: The mand mount option has been deprecated and [ 26.705043][ T401] and is ignored by this kernel. Remove the mand [ 26.705043][ T401] option from the mount to silence this warning. [ 26.705043][ T401] ======================================================= [ 26.751678][ T401] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 26.869681][ T431] loop0: detected capacity change from 0 to 512 [ 26.881411][ T431] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.46: iget: bad i_size value: 38620345925642 [ 26.894296][ T431] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.46: couldn't read orphan inode 15 (err -117) [ 26.906384][ T431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.918971][ T431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.46: bg 0: block 5: invalid block bitmap [ 26.931470][ T431] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 37 with error 28 [ 26.944075][ T431] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.944075][ T431] [ 26.953839][ T431] EXT4-fs (loop0): Total free blocks count 0 [ 26.959868][ T431] EXT4-fs (loop0): Free/Dirty block details [ 26.966828][ T431] EXT4-fs (loop0): free_blocks=0 [ 26.971841][ T431] EXT4-fs (loop0): dirty_blocks=38 [ 26.977052][ T431] EXT4-fs (loop0): Block reservation details [ 26.983050][ T431] EXT4-fs (loop0): i_reserved_data_blocks=38 [ 27.322649][ T289] EXT4-fs (loop1): unmounting filesystem. [ 27.354096][ T440] loop1: detected capacity change from 0 to 512 [ 27.361117][ T440] EXT4-fs (loop1): Test dummy encryption mode enabled [ 27.374382][ T440] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.48: inode has both inline data and extents flags [ 27.392476][ T440] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.48: couldn't read orphan inode 15 (err -117) [ 27.481495][ T440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.513321][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [ 27.526994][ T440] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 27.534366][ T431] syz.0.46 (431) used greatest stack depth: 21760 bytes left [ 27.629936][ T465] SELinux: Context AÇ is not valid (left unmapped). [ 27.660808][ T289] EXT4-fs (loop1): unmounting filesystem. [ 27.723610][ T327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.904630][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.921280][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.941188][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.967341][ T327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.976630][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.986233][ T327] usb 4-1: config 0 descriptor?? [ 27.999103][ T448] loop2: detected capacity change from 0 to 131072 [ 28.007814][ T448] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 28.016412][ T448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 28.056328][ T448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.093862][ T448] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 28.101044][ T448] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 28.157067][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 28.157081][ T28] audit: type=1400 audit(1786394456.128:203): avc: denied { create } for pid=447 comm="syz.2.53" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.184773][ T477] loop0: detected capacity change from 0 to 131072 [ 28.186733][ T28] audit: type=1400 audit(1786394456.158:204): avc: denied { write } for pid=447 comm="syz.2.53" name="encrypted_dir" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.194883][ T477] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 28.216624][ T28] audit: type=1400 audit(1786394456.158:205): avc: denied { add_name } for pid=447 comm="syz.2.53" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.223212][ T477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 28.253168][ T477] F2FS-fs (loop0): invalid crc value [ 28.274345][ T477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.308425][ T477] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 28.315606][ T477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 28.351149][ T28] audit: type=1400 audit(1786394456.318:206): avc: denied { mounton } for pid=475 comm="syz.0.62" path="/10/bus/file0" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.375089][ T28] audit: type=1400 audit(1786394456.358:207): avc: denied { read write } for pid=475 comm="syz.0.62" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.410332][ T28] audit: type=1400 audit(1786394456.358:208): avc: denied { open } for pid=475 comm="syz.0.62" path="/10/bus/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.441557][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.452395][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.468492][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.470553][ T28] audit: type=1400 audit(1786394456.378:209): avc: denied { ioctl } for pid=475 comm="syz.0.62" path="/10/bus/file1" dev="loop0" ino=7 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.483671][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.519183][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.528759][ T489] loop2: detected capacity change from 0 to 512 [ 28.535139][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.558663][ T327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.567918][ T327] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.568320][ T489] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.63: iget: bad i_size value: 38620345925642 [ 28.577021][ T327] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 28.603867][ T489] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 28.623663][ T489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.678495][ T488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.63: bg 0: block 5: invalid block bitmap [ 28.692291][ T28] audit: type=1400 audit(1786394456.658:210): avc: denied { ioctl } for pid=488 comm="syz.2.63" path="/11/file0/cpuset.effective_mems" dev="loop2" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.695013][ T489] EXT4-fs (loop2): shut down requested (0) [ 28.718647][ T496] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 28.737468][ T28] audit: type=1400 audit(1786394456.718:211): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.773598][ T28] audit: type=1400 audit(1786394456.718:212): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.795574][ T288] EXT4-fs (loop2): unmounting filesystem. [ 29.348202][ T632] loop2: detected capacity change from 0 to 512 [ 29.351711][ T607] syz.1.67 (607) used greatest stack depth: 20800 bytes left [ 29.361242][ T632] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.370237][ T632] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.69: inode has both inline data and extents flags [ 29.383415][ T632] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.69: couldn't read orphan inode 15 (err -117) [ 29.395240][ T632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.433840][ T639] loop1: detected capacity change from 0 to 1024 [ 29.442744][ T639] EXT4-fs (loop1): Test dummy encryption mode enabled [ 29.456628][ T639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.475123][ T288] EXT4-fs (loop2): unmounting filesystem. [ 29.476746][ T639] EXT4-fs (loop1): shut down requested (0) [ 29.504432][ T642] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 29.515520][ T289] EXT4-fs (loop1): unmounting filesystem. [ 29.630072][ T667] loop0: detected capacity change from 0 to 512 [ 29.637900][ T667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.651065][ T667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.662235][ T667] EXT4-fs (loop0): 1 truncate cleaned up [ 29.668083][ T667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.707077][ T290] EXT4-fs (loop0): unmounting filesystem. [ 29.749214][ T677] Illegal XDP return value 4291248128 on prog (id 17) dev N/A, expect packet loss! [ 29.813954][ C0] ================================================================== [ 29.822088][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 29.829506][ C0] Read of size 8 at addr ffff88811b1a8990 by task ksoftirqd/0/13 [ 29.837227][ C0] [ 29.839583][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 29.846872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.857211][ C0] Call Trace: [ 29.860483][ C0] [ 29.863415][ C0] __dump_stack+0x21/0x24 [ 29.867740][ C0] dump_stack_lvl+0x110/0x170 [ 29.872408][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.877421][ C0] ? debug_smp_processor_id+0x17/0x20 [ 29.882779][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 29.887787][ C0] print_address_description+0x71/0x200 [ 29.893321][ C0] print_report+0x4a/0x60 [ 29.897634][ C0] kasan_report+0x122/0x150 [ 29.902128][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 29.907146][ C0] __asan_report_load8_noabort+0x14/0x20 [ 29.912774][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 29.917617][ C0] rcu_do_batch+0x4bc/0xc30 [ 29.922194][ C0] ? rcu_core+0xf00/0xf00 [ 29.926503][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 29.932297][ C0] ? rcu_report_qs_rnp+0x2b9/0x390 [ 29.937404][ C0] rcu_core+0x486/0xf00 [ 29.941548][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 29.946907][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 29.952447][ C0] ? rcu_softirq_qs+0xd5/0x340 [ 29.957195][ C0] ? __cfi_rcu_softirq_qs+0x10/0x10 [ 29.962809][ C0] ? irqtime_account_irq+0x75/0x240 [ 29.967994][ C0] rcu_core_si+0x9/0x10 [ 29.972139][ C0] handle_softirqs+0x1d7/0x600 [ 29.976887][ C0] ? __cfi_run_ksoftirqd+0x10/0x10 [ 29.981989][ C0] run_ksoftirqd+0x28/0x30 [ 29.986392][ C0] smpboot_thread_fn+0x48c/0x8e0 [ 29.991415][ C0] kthread+0x281/0x320 [ 29.995484][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 30.000940][ C0] ? __cfi_kthread+0x10/0x10 [ 30.005526][ C0] ret_from_fork+0x1f/0x30 [ 30.009942][ C0] [ 30.012944][ C0] [ 30.015248][ C0] Allocated by task 659: [ 30.019468][ C0] kasan_set_track+0x4b/0x70 [ 30.024044][ C0] kasan_save_alloc_info+0x1f/0x30 [ 30.029145][ C0] __kasan_kmalloc+0x95/0xb0 [ 30.033719][ C0] __kmalloc+0xb4/0x1e0 [ 30.037853][ C0] l2tp_session_create+0x38/0xbd0 [ 30.042891][ C0] pppol2tp_connect+0xbf5/0x1640 [ 30.047812][ C0] __sys_connect+0x3da/0x460 [ 30.052393][ C0] __x64_sys_connect+0x7a/0x90 [ 30.057257][ C0] x64_sys_call+0x88d/0x9a0 [ 30.061772][ C0] do_syscall_64+0x4c/0xa0 [ 30.066381][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.072322][ C0] [ 30.074642][ C0] Freed by task 501: [ 30.078516][ C0] kasan_set_track+0x4b/0x70 [ 30.083100][ C0] kasan_save_free_info+0x2b/0x40 [ 30.088112][ C0] ____kasan_slab_free+0x132/0x180 [ 30.093223][ C0] __kasan_slab_free+0x11/0x20 [ 30.097993][ C0] slab_free_freelist_hook+0xc2/0x190 [ 30.103395][ C0] __kmem_cache_free+0xb7/0x1b0 [ 30.108251][ C0] kfree+0x6f/0xf0 [ 30.112003][ C0] l2tp_session_put+0xaf/0x1a0 [ 30.116851][ C0] l2tp_session_delete+0x3df/0x4d0 [ 30.121952][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 30.127575][ C0] process_one_work+0x717/0xc30 [ 30.132606][ C0] worker_thread+0xa4d/0x11d0 [ 30.137269][ C0] kthread+0x281/0x320 [ 30.141322][ C0] ret_from_fork+0x1f/0x30 [ 30.145722][ C0] [ 30.148035][ C0] Last potentially related work creation: [ 30.153907][ C0] kasan_save_stack+0x3a/0x60 [ 30.158594][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 30.163972][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 30.169779][ C0] call_rcu+0xcf/0xf50 [ 30.173851][ C0] pppol2tp_release+0x1e3/0x2b0 [ 30.178702][ C0] sock_close+0xc9/0x220 [ 30.182951][ C0] __fput+0x1fd/0x8f0 [ 30.186933][ C0] ____fput+0x15/0x20 [ 30.190906][ C0] task_work_run+0x1e1/0x250 [ 30.195506][ C0] do_exit+0xaf2/0x2850 [ 30.199647][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 30.204662][ C0] x64_sys_call+0x67/0x9a0 [ 30.209068][ C0] do_syscall_64+0x4c/0xa0 [ 30.213471][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.219367][ C0] [ 30.221696][ C0] The buggy address belongs to the object at ffff88811b1a8800 [ 30.221696][ C0] which belongs to the cache kmalloc-512 of size 512 [ 30.235827][ C0] The buggy address is located 400 bytes inside of [ 30.235827][ C0] 512-byte region [ffff88811b1a8800, ffff88811b1a8a00) [ 30.249088][ C0] [ 30.251398][ C0] The buggy address belongs to the physical page: [ 30.257883][ C0] page:ffffea00046c6a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b1a8 [ 30.268199][ C0] head:ffffea00046c6a00 order:2 compound_mapcount:0 compound_pincount:0 [ 30.276500][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 30.282922][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 30.291508][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 30.300086][ C0] page dumped because: kasan: bad access detected [ 30.306506][ C0] page_owner tracks the page as allocated [ 30.312237][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 116, tgid 116 (udevd), ts 5071628500, free_ts 0 [ 30.331967][ C0] post_alloc_hook+0x1f5/0x210 [ 30.336735][ C0] prep_new_page+0x1c/0x110 [ 30.341230][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 30.346762][ C0] __alloc_pages+0x1fa/0x610 [ 30.351344][ C0] alloc_slab_page+0x6e/0xf0 [ 30.355921][ C0] new_slab+0x98/0x3e0 [ 30.359970][ C0] ___slab_alloc+0x70f/0xb70 [ 30.364545][ C0] __slab_alloc+0x5e/0xa0 [ 30.368863][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 30.374315][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 30.380014][ C0] __alloc_skb+0x226/0x4a0 [ 30.384411][ C0] alloc_skb_with_frags+0xa8/0x620 [ 30.389500][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 30.394680][ C0] unix_dgram_sendmsg+0x5c1/0x1710 [ 30.399784][ C0] sock_write_iter+0x2ea/0x3f0 [ 30.404537][ C0] vfs_write+0x5ef/0xd00 [ 30.408767][ C0] page_owner free stack trace missing [ 30.414115][ C0] [ 30.416507][ C0] Memory state around the buggy address: [ 30.422116][ C0] ffff88811b1a8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.430159][ C0] ffff88811b1a8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.438209][ C0] >ffff88811b1a8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.446244][ C0] ^ [ 30.450811][ C0] ffff88811b1a8a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.458849][ C0] ffff88811b1a8a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.466902][ C0] ================================================================== [ 30.475011][ C0] Disabling lock debugging due to kernel taint [ 31.213879][ T327] usb 4-1: USB disconnect, device number 2