last executing test programs: 12.274786719s ago: executing program 1 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$unix(r2, 0x0, &(0x7f0000000800)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 9.951988166s ago: executing program 1 (id=169): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x24, 0x9, 0x5}, 0x4e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x1, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0x10, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0x5, 0x3, 0x2, 0x101, 0x2, 0x200, 0x6, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x100, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0xb, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x3, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xfffffe, 0x10, 0xfffffff9, 0xfffffffa, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x80003], [0x401, 0xc584, 0xffff, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x12, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f93, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x3, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0xa0000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x4, 0xffffffff, 0x88, 0x2, 0x6, 0x4, 0x4d, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x6, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x6, 0x2, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000bf6500000900000000000000", @ANYRES32=0x1, @ANYBLOB="00cb00000000000000000e000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000000180)='./bus\x00', 0x149a7e, 0x2) fchown(r2, r4, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r6, &(0x7f0000000140)={0xb, 0x77, 0x2}, 0xb) 8.630240653s ago: executing program 1 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140)=0xffffbfa4, 0x4) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 7.17556153s ago: executing program 4 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$unix(r2, 0x0, &(0x7f0000000800)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 6.3104677s ago: executing program 1 (id=193): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x8, 0x401, 0xffffff7d, 0xb0ff, 0x7, "d74192f386e87fcb366000080800ffee00", 0x804, 0x4}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x0, 0x0, 0x2b85, 0x4, 0xb9, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, @random="8dbacf8e4c2c", @empty}}, 0x3e) pipe2$9p(&(0x7f0000000240), 0x800) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002268258380bc50995e0000a4a3da21"], 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000f8ffffffb702000008000000b703000000000000850000002d0000009500"/88], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.780512723s ago: executing program 2 (id=186): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7b8, &(0x7f0000001740)="$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") socket(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r3, &(0x7f0000000240)={0x0, 0x2c, 0x2c000000, 0x2c, 0x0, 0x2c}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143142, 0x40) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.771696373s ago: executing program 4 (id=187): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000080)={0x1, 0xc000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="00cc000000000000000000004f71fffd2e78ac10f18bf8fffffff631d3400636fe0b37f948182c0894688fa763f98f16fd1ec71e26d861ae2a02f2e1897244dbaa74f642f09c0fbeffbd1688192de6b8516aa278be6040b751960501eb7ee2fbbfaf4247bbc44596f1e22fd37d42e3df7f3cd1d9b96daa0bbc06ed138544a81554d5489b5dd68029", @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 5.275109664s ago: executing program 4 (id=189): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x801}, 0xe) getpeername$packet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, 0x0, 0x4890) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0094479b280cd3a99500edff00000000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, 0x0, 0x0) 4.871966166s ago: executing program 2 (id=190): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x0) 4.100275079s ago: executing program 4 (id=194): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\"#'], 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) personality(0x4100001) 3.356631709s ago: executing program 0 (id=195): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="490000007d010000004200080001040000420300000002000000000000000000044109000000030000000800000000000000040047504c00040047504c0004004750b7050300402a29"], 0x49) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x5d3d, 0x2000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000b0000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad03c22624c9f87f9793f50bb546040677b2d9e31fc79db0c5077da90fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c4089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302003d2036b8a24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3a4d6926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873095cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288c9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffff9c77000000000000ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f3494d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36060000000000000006f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb9973164a714b930b075bdaaedbf17866fb84d4173731efe895ff2e1c5560926e90109b598502c9e959ef939ec71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a45a1c168d832fecb06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a636c3b0e69102d1567f2e4d9dc080466c51bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf790842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc9da71c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e4a4660fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000200000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1b3be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fad05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6000010237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b0842bd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920386f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945eceda26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9f96756ea5cce7daac4be29bcf58ff30159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e3c78b2a78f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397dacafa86966d7ba10413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d452340000d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d2cd1fe21ba8eaab827624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c79217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b29637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000002b77000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae4ffffffffb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a73efb16d4b2db6421fd4e343fa23bad8240e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2d7a510000a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7f090000001551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab0300d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c7a1b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f5faac16441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867810000004faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3adf01a072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a20ffffffff682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c51966504652ff871e0f6dfff9f7d34ecf04be0a58c354fb7388ff7796d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000003bba840af65aff3d8261bc163b57a23d3e3ab2d8bbd314cd5c7699bd08f58b83c07e8c3d36261609e8d5461e2e7633e8377627ccf0613308155aaf7d746c08a685ea9ae0ab702ee4edc393d76a73d00452b1cc6eeadd186f54ea77c416a4b2cbcfe37fc778621a3178baae78ff1b7ded218a3366712b3feb9415141ecb23abfb37f43a1c6dd6354a104b2cb17b90757b6a71459cc758463be2ca2d80aa285ff00fff4381bfcf659dd02147b74f784d06d0c3be24f26405ce09fb31688dbc5430c8a02079d2d128a6b72cc54d6c859d9a2fd8e87f87cd096ec92440c5c6d6905955d0e74a80385011e16f05d3eb815b0333ca5f6d3cf82962a4ed240ef1bcd2ad552c00e10fb9dd9f0ea7987eb6187aa310dfc3d5e63c31118d284b253d8a52d0081eb36e502b6de0ae05836469bf82b5055feaeef92a3e07446d86a971bcfdd7ed1b1cb44ac59faa9fc81d405c65cf0b74709a000000001283bf8f1df0acd0edffa16ed206042809d15ca101afda8a461d1f0f48e28e8a5c8ccccc0d86a9ec1fac367a2b7c6879000000000000000000000000000000000000da408de957a3b509882b212e0169d0a4194b21a144d9c08f5c9460ff45701d0a8db27d34fe973fab987d6ceb2e8524b84f6aedb811c048f5d8e7f8f5879f4a430fa4275f2cb50e0575dacb04b510d19d1a3b21b937f85ec9948cd3efedff8c886ce01119c36e76088b4e452f94b7a45421058132cc74a21b37c587dccdc209ff86840d75e58a806f90a243664cceedfc2d915f6f4f6047390c9ac78bb7bf8f01a08d63c925c9a5718ce721cb4207697ff3d524897436f9696321878639ce34af2c3807fb181b1471eff7470f1254b426e2d2550ab5cd8210664f318f4a0b370d63ebc658b4544b6bc4ac192fe39e554bcaab67caaf6e058e46d0eb71d6ec2137c0487602e2175c87581b7b1aecb6158ac1fe65e37e7eb581873c95f3eb4c6e2ebcc2ae55f3d25bbf3bc3b35bfbb4233db7d998a7b6c494992680380caf577b04d6d44883a547f401ab2df13ba6ef0f96e626ed3a4ea196e99ccad3234f9648cb5d6bc140472c0721660b963d6f5bf70f78f541c7a5e7a91e4741317a0d779b44b52d8c2b200d1e2e8674c427ec2d1c2286118dbb839ada07fa4ee86b9e18b4114b2b4dd8d799aa76d07bbd3a6e350be8591aadefef39e1d4b7cf59b2e9a3b23ed81110beca3190faa027dc7cba6a214a5f2ff011db2e77f51cedd449103b3ef36d04d9fa0f67dc78053640f06364c9c745eadd6ab3052750c54137a18ea3eb7e7caf8542934586fea611b94c1800b7ab4bd371da15027d88ac1cdb52c2f73467ee66f05040e1f780da007e87936c91bf1b145bc64a9a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r9, 0x0, 0x0, 0x0) 3.33535555s ago: executing program 0 (id=196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/54, 0x328000, 0x1000, 0x10, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xb, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x5f, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xc}, {0xffffffffffffffff, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x60000080}, 0x200008c2) r8 = inotify_init() r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r10 = inotify_add_watch(r8, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYRES64=r10], 0x69) close(r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x7c, &(0x7f00000001c0)=""/124, 0x40f00, 0x5, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0x298, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r1, r1, r1, r11, r1], 0x0, 0x10, 0xd46}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x800000000000000}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.263392616s ago: executing program 1 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000002500)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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") r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x0, 0x4, 0x86cc, 0x81, 0xf4, 0x4, 0x4, 0xc0, 0x14, 0x2, 0xa5, 0xa, 0x6, 0x5, 0xcc, [0xf6000000, 0x6]}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0xffeb, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, &(0x7f0000000080)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e44647522663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000240)={{0xdddd0000, 0x4, 0xc, 0xe, 0x5, 0x3, 0x5, 0x3, 0x7f, 0x2, 0x8, 0x7}, {0xf000, 0xeeee8000, 0xb, 0x7, 0x2, 0x4, 0x2, 0x7, 0x4, 0x41, 0x9, 0xff}, {0x80a0000, 0x1, 0x3, 0x4, 0x70, 0x4, 0x58, 0xdc, 0x4, 0x6, 0x2, 0x1}, {0x3000, 0xd000, 0xf, 0x5, 0xf9, 0x9, 0x0, 0x3, 0x7, 0xdb, 0xfe, 0x40}, {0x2000, 0x2, 0x4, 0x9, 0x7, 0x5, 0xb, 0x0, 0xd, 0x2f, 0x68}, {0xdddd1000, 0x4000, 0x0, 0x0, 0x5c, 0xc6, 0x7, 0x7f, 0x4, 0x10, 0xe, 0x9}, {0x6000, 0xeeef0000, 0x4, 0x2, 0x9, 0x2, 0x8, 0x3, 0x2, 0x9f, 0x86, 0x4}, {0x4, 0x8080000, 0x0, 0x1, 0x4, 0x7, 0xa0, 0x5, 0x5, 0x1, 0xff, 0xcf}, {0xdddd1000, 0x491}, {0x1, 0x203}, 0x10002, 0x0, 0x2, 0x20212b, 0x7, 0x2001, 0x4, [0x8, 0x6, 0x200, 0x8000000000004a43]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.230067799s ago: executing program 3 (id=198): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (fail_nth: 1) 3.170422414s ago: executing program 2 (id=199): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7b8, &(0x7f0000001740)="$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") socket(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000240)={0x0, 0x2c, 0x2c000000, 0x2c, 0x0, 0x2c}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143142, 0x40) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.169899834s ago: executing program 3 (id=200): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000080)={0x1, 0xc000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="00cc000000000000000000004f71fffd2e78ac10f18bf8fffffff631d3400636fe0b37f948182c0894688fa763f98f16fd1ec71e26d861ae2a02f2e1897244dbaa74f642f09c0fbeffbd1688192de6b8516aa278be6040b751960501eb7ee2fbbfaf4247bbc44596f1e22fd37d42e3df7f3cd1d9b96daa0bbc06ed138544a81554d5489b5dd68029", @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000860000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='dax\x00', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) 3.106095999s ago: executing program 0 (id=201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x7e) chmod(0x0, 0x151) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000001300)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nombcache, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@jqfmt_vfsold}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, 'permit_directio'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}, {@appraise}, {@fowner_gt}, {@dont_appraise}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0xd}}, {@context={'context', 0x3d, 'root'}}, {@fsmagic}]}, 0xfe, 0x451, &(0x7f0000000a80)="$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") r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) sigaltstack(0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r3, r6, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x90, {0x90, 0x24, "48a9d247f13bdf7282f35c2ec8d484663af42c8eeca26aa64c558a3988bbb59077f49238bc329e006cbeb4a72a5588b56b330a36aa2e83a39d83fca0fbfd6706379af6f576fccb9bf7764825f5fd079a33a0fcf1cbf6fb3ec938d3ad8124d75b79d042ec086117c8a03829fec3a371afa421b86da716a46f7888dd69536865d5ffb917041d23831fae62edc23ca7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0x21, 0xd6, {0xd6, 0x8, "276ecc7083afb42e5956bfeb86d426e40e646fcb3e77489a355000342181224e1ac86e2f9055fda29ea842ed796bb2b6e4354d163edca5572e73c6786bf957ff25d4295f286bddae50d01575c0b6ce24ba5fb03c96715d253840c17b71d6a81ef757885f2f8583414052362f86c91f6a4821bbb22ff0b343c26c28330f97513f3074d3c6a5c62567514d27953c5e7cdab20b5b4be1208c51005a7148561d2e1463ee10e8cdc3ad30ee67151337de56b6cc148c28d37b6c496b9723038522735f145b666fe8d41b5e9b0c7ab426b982445c0d9e31"}}, &(0x7f00000005c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f00000003c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x5, 0x1, 0xfffe}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "99e5a08e67dbfc9eabe307a3f4d5cc6c"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x0, 0xed, 0xa, "0249c7b0", "47cb7b66"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x8, 0x3, 0xf6, 0x6, 0x8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000780)={0x0, 0xe, 0x44, "30c18058c3337101319c266721395bccf0878dba03b526b7d1c1dbe906d54003320552fb417ab24843f76b09041984e431a5fd621370781c0ae089c1735f76968cb31cb4"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1c0, 0x2}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001000)={0x40, 0xb, 0x2, "b390"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="deb621e49d06"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "df81"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0xfff0}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x16}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x2b}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x5}}) accept$inet(r7, &(0x7f0000000800), &(0x7f0000000840)=0x10) 2.563774473s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.515349606s ago: executing program 0 (id=203): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000080)={0x1, 0xc000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200000100000085000000860000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.426481634s ago: executing program 4 (id=204): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x801}, 0xe) getpeername$packet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, 0x0, 0x4890) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0094479b280cd3a99500edff00000000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, 0x0, 0x0) 2.395894316s ago: executing program 0 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0xfffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f00000100000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000009a0103fc534d1b5491fcdf7f6dff04bf4c7091a7b508784fc0e7f8da7f9db1a876256f572589a271c9cdec4af827f78e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r9, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r10, r7, 0x4, r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 2.329335302s ago: executing program 2 (id=206): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="490000007d010000004200080001040000420300000002000000000000000000044109000000030000000800000000000000040047504c00040047504c0004004750b7050300402a29"], 0x49) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x5d3d, 0x2000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r9, 0x0, 0x0, 0x0) 1.512274697s ago: executing program 0 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140)=0xffffbfa4, 0x4) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 1.502788668s ago: executing program 3 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2bc4, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) 1.330348772s ago: executing program 4 (id=209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x7e) chmod(0x0, 0x151) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000001300)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nombcache, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@jqfmt_vfsold}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, 'permit_directio'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}, {@appraise}, {@fowner_gt}, {@dont_appraise}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0xd}}, {@context={'context', 0x3d, 'root'}}, {@fsmagic}]}, 0xfe, 0x451, &(0x7f0000000a80)="$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") r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) sigaltstack(0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r3, r6, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x90, {0x90, 0x24, "48a9d247f13bdf7282f35c2ec8d484663af42c8eeca26aa64c558a3988bbb59077f49238bc329e006cbeb4a72a5588b56b330a36aa2e83a39d83fca0fbfd6706379af6f576fccb9bf7764825f5fd079a33a0fcf1cbf6fb3ec938d3ad8124d75b79d042ec086117c8a03829fec3a371afa421b86da716a46f7888dd69536865d5ffb917041d23831fae62edc23ca7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0x21, 0xd6, {0xd6, 0x8, "276ecc7083afb42e5956bfeb86d426e40e646fcb3e77489a355000342181224e1ac86e2f9055fda29ea842ed796bb2b6e4354d163edca5572e73c6786bf957ff25d4295f286bddae50d01575c0b6ce24ba5fb03c96715d253840c17b71d6a81ef757885f2f8583414052362f86c91f6a4821bbb22ff0b343c26c28330f97513f3074d3c6a5c62567514d27953c5e7cdab20b5b4be1208c51005a7148561d2e1463ee10e8cdc3ad30ee67151337de56b6cc148c28d37b6c496b9723038522735f145b666fe8d41b5e9b0c7ab426b982445c0d9e31"}}, &(0x7f00000005c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f00000003c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x5, 0x1, 0xfffe}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "99e5a08e67dbfc9eabe307a3f4d5cc6c"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x0, 0xed, 0xa, "0249c7b0", "47cb7b66"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x8, 0x3, 0xf6, 0x6, 0x8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000780)={0x0, 0xe, 0x44, "30c18058c3337101319c266721395bccf0878dba03b526b7d1c1dbe906d54003320552fb417ab24843f76b09041984e431a5fd621370781c0ae089c1735f76968cb31cb4"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1c0, 0x2}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001000)={0x40, 0xb, 0x2, "b390"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="deb621e49d06"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "df81"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0xfff0}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x16}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x2b}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x5}}) accept$inet(r7, &(0x7f0000000800), &(0x7f0000000840)=0x10) 1.245589779s ago: executing program 2 (id=210): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x0) 1.203534632s ago: executing program 3 (id=211): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x40000, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 1.116414949s ago: executing program 3 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000006355bd3d882e3a6e0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x4eba21525aec507f, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x8000000) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x46, "4b721b782a17a7b6a00d96363f7fdafd95073830fb8cfb34eb7cbd173ef6f0710ef2264f4cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f305010caca7450a7e310aee"}}) creat(&(0x7f0000000240)='./file0\x00', 0x40) 348.827911ms ago: executing program 2 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=214): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, 0x0) syz_io_uring_setup(0x6a45, 0xfffffffffffffffc, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xfffffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x100, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xfffffffc, 0x6, 0x2ee, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) open(&(0x7f0000000000)='./file1\x00', 0x189943, 0x52) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) kernel console output (not intermixed with test programs): , size = 127995904 bytes [ 21.241778][ T28] audit: type=1400 audit(1755967104.421:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.267165][ T28] audit: type=1400 audit(1755967104.421:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.298023][ T28] audit: type=1400 audit(1755967104.471:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.298448][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.323989][ T28] audit: type=1400 audit(1755967104.471:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.624763][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.632101][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.639562][ T284] device bridge_slave_0 entered promiscuous mode [ 22.666513][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.673617][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.680890][ T284] device bridge_slave_1 entered promiscuous mode [ 22.753647][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.760704][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.768324][ T283] device bridge_slave_0 entered promiscuous mode [ 22.776433][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.783578][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.790999][ T283] device bridge_slave_1 entered promiscuous mode [ 22.808033][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.815196][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.822722][ T285] device bridge_slave_0 entered promiscuous mode [ 22.830873][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.838007][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.845558][ T285] device bridge_slave_1 entered promiscuous mode [ 22.935067][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.942143][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.949411][ T287] device bridge_slave_0 entered promiscuous mode [ 22.965058][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.972163][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.980067][ T287] device bridge_slave_1 entered promiscuous mode [ 23.007006][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.014120][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.021394][ T286] device bridge_slave_0 entered promiscuous mode [ 23.036398][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.043505][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.050918][ T286] device bridge_slave_1 entered promiscuous mode [ 23.119319][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.126390][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.182470][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.189535][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.196820][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.203857][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.218309][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.225391][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.232671][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.239686][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.277301][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.284669][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.292707][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.300062][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.307425][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.315996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.323517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.373598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.381231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.388882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.397185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.405412][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.412436][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.419787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.428017][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.435056][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.442490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.450591][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.457630][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.465039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.473252][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.480277][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.487663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.495807][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.502832][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.518897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.526403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.534664][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.541701][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.561323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.568929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.577319][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.584389][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.592077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.600239][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.607286][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.614778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.624363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.632699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.640780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.663677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.672258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.680391][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.687424][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.694893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.703422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.711304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.719703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.728006][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.735057][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.742592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.750578][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.758585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.766655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.774828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.783237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.791478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.799645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.815424][ T283] device veth0_vlan entered promiscuous mode [ 23.827787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.835526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.843759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.852686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.860949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.869319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.877424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.885466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.893621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.901532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.909265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.927810][ T286] device veth0_vlan entered promiscuous mode [ 23.936368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.944864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.952881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.961134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.969612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.977674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.985809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.994036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.002133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.009905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.017921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.025445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.033042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.040433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.049647][ T283] device veth1_macvtap entered promiscuous mode [ 24.057031][ T285] device veth0_vlan entered promiscuous mode [ 24.068980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.076705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.084949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.099536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.107997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.116527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.125123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.140249][ T285] device veth1_macvtap entered promiscuous mode [ 24.147167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.155499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.163868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.174029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.183478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.191881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.207169][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 24.217885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.226839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.235303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.244051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.252824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.260994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.270243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.278358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.287244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.294894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.306774][ T284] device veth0_vlan entered promiscuous mode [ 24.314698][ T286] device veth1_macvtap entered promiscuous mode [ 24.337932][ T284] device veth1_macvtap entered promiscuous mode [ 24.393836][ T287] device veth0_vlan entered promiscuous mode [ 24.400800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.408966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.417268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.425125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.433479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.442633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.452744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.463259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.473137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.519508][ T338] loop0: detected capacity change from 0 to 256 [ 24.527746][ T338] exfat: Unknown parameter 'iochar' [ 24.597358][ T338] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.607668][ T338] device gretap0 entered promiscuous mode [ 24.719883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.817472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.219265][ T287] device veth1_macvtap entered promiscuous mode [ 25.282855][ T338] syz.0.1 (338) used greatest stack depth: 21848 bytes left [ 25.311106][ T349] loop0: detected capacity change from 0 to 2048 [ 25.354913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.359388][ T349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.364952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.380603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.390048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.398952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.839239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.849940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.857809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.870852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.879444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.879483][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 25.879492][ T28] audit: type=1400 audit(1755967109.051:110): avc: denied { read write } for pid=356 comm="syz.2.7" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.888069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.974217][ T377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6: bg 0: block 464: padding at end of block bitmap is not set [ 25.989410][ T377] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 26.001874][ T377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.001874][ T377] [ 26.011551][ T377] EXT4-fs (loop0): Total free blocks count 0 [ 26.017600][ T377] EXT4-fs (loop0): Free/Dirty block details [ 26.023656][ T377] EXT4-fs (loop0): free_blocks=0 [ 26.028615][ T377] EXT4-fs (loop0): dirty_blocks=32 [ 26.033763][ T377] EXT4-fs (loop0): Block reservation details [ 26.039758][ T377] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 26.071562][ T28] audit: type=1400 audit(1755967109.101:111): avc: denied { open } for pid=356 comm="syz.2.7" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 26.143839][ T28] audit: type=1400 audit(1755967109.121:112): avc: denied { write } for pid=348 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.216668][ T28] audit: type=1400 audit(1755967109.121:113): avc: denied { add_name } for pid=348 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.237252][ T28] audit: type=1400 audit(1755967109.131:114): avc: denied { create } for pid=348 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.284716][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 26.327880][ T28] audit: type=1400 audit(1755967109.131:115): avc: denied { read write } for pid=348 comm="syz.0.6" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.373393][ T28] audit: type=1400 audit(1755967109.131:116): avc: denied { open } for pid=348 comm="syz.0.6" path="/1/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.396707][ T28] audit: type=1400 audit(1755967109.301:117): avc: denied { setopt } for pid=356 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.418631][ T28] audit: type=1400 audit(1755967109.371:118): avc: denied { read write } for pid=382 comm="syz.4.5" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.454351][ T28] audit: type=1400 audit(1755967109.371:119): avc: denied { open } for pid=382 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.481117][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 26.511852][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.576957][ T396] loop2: detected capacity change from 0 to 128 [ 26.692765][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.703841][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 26.712899][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.903841][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.926312][ T6] usb 5-1: config 0 descriptor?? [ 27.091388][ T403] loop1: detected capacity change from 0 to 2048 [ 27.113061][ T403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.320597][ T414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11: bg 0: block 464: padding at end of block bitmap is not set [ 27.935744][ T416] loop0: detected capacity change from 0 to 512 [ 28.033024][ T416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.033032][ T414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 28.058840][ T414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.058840][ T414] [ 28.068645][ T414] EXT4-fs (loop1): Total free blocks count 0 [ 28.074715][ T414] EXT4-fs (loop1): Free/Dirty block details [ 28.080697][ T414] EXT4-fs (loop1): free_blocks=0 [ 28.085732][ T414] EXT4-fs (loop1): dirty_blocks=32 [ 28.090920][ T414] EXT4-fs (loop1): Block reservation details [ 28.097061][ T414] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 28.198926][ T416] EXT4-fs (loop0): 1 orphan inode deleted [ 28.204910][ T416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.215301][ T416] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.256954][ T416] tipc: Started in network mode [ 28.261981][ T416] tipc: Node identity ac14140f, cluster identity 4711 [ 28.269078][ T416] tipc: New replicast peer: 255.255.255.255 [ 28.275458][ T416] tipc: Enabled bearer , priority 10 [ 28.290506][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 28.303670][ T340] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.864171][ T6] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 28.870906][ T6] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 28.877804][ T6] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 28.884547][ T6] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 28.891233][ T6] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 28.899328][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 28.902464][ T6] kye 0003:0458:5011.0001: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 28.912232][ T283] EXT4-fs (loop0): unmounting filesystem. [ 28.921667][ T6] kye 0003:0458:5011.0001: tablet-enabling feature report not found [ 28.935655][ T6] kye 0003:0458:5011.0001: tablet enabling failed [ 28.943428][ T19] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.954421][ T6] usb 5-1: USB disconnect, device number 2 [ 28.981671][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 28.987744][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.106189][ T430] fido_id[430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 29.271680][ T435] tipc: Node number set to 2886997007 [ 29.302729][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.313891][ T19] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 29.323206][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.324412][ T437] loop4: detected capacity change from 0 to 128 [ 29.332828][ T19] usb 4-1: config 0 descriptor?? [ 29.651865][ T340] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.865513][ T19] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 29.872911][ T19] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 29.881675][ T19] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 29.891526][ T19] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 29.909352][ T443] loop0: detected capacity change from 0 to 2048 [ 29.912139][ T19] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 29.918189][ T445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20'. [ 29.924383][ T19] kye 0003:0458:5011.0002: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 30.000551][ T447] loop1: detected capacity change from 0 to 256 [ 30.008402][ T447] exfat: Unknown parameter 'iochar' [ 30.137175][ T443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.322603][ T452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 30.478908][ T19] kye 0003:0458:5011.0002: tablet-enabling feature report not found [ 30.580273][ T454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.19: bg 0: block 464: padding at end of block bitmap is not set [ 30.743774][ T454] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 30.756188][ T454] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.756188][ T454] [ 30.765835][ T454] EXT4-fs (loop0): Total free blocks count 0 [ 30.771829][ T454] EXT4-fs (loop0): Free/Dirty block details [ 30.777714][ T454] EXT4-fs (loop0): free_blocks=0 [ 30.782664][ T454] EXT4-fs (loop0): dirty_blocks=32 [ 30.787770][ T454] EXT4-fs (loop0): Block reservation details [ 30.793792][ T454] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 30.935244][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 31.001590][ C0] sched: RT throttling activated [ 31.006781][ T19] kye 0003:0458:5011.0002: tablet enabling failed [ 31.016119][ T19] usb 4-1: USB disconnect, device number 2 [ 31.023537][ T406] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.045430][ T447] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18'. [ 31.055464][ T447] device gretap0 entered promiscuous mode [ 31.271724][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 31.271740][ T28] audit: type=1400 audit(1755967114.441:136): avc: denied { create } for pid=469 comm="syz.0.23" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.286529][ T468] fido_id[468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 31.316596][ T28] audit: type=1400 audit(1755967114.441:137): avc: denied { map } for pid=469 comm="syz.0.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.340867][ T28] audit: type=1400 audit(1755967114.441:138): avc: denied { read write } for pid=469 comm="syz.0.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.758493][ T483] loop1: detected capacity change from 0 to 512 [ 32.344866][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 32.361731][ T400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.149948][ T28] audit: type=1400 audit(1755967114.681:139): avc: denied { read } for pid=473 comm="syz.1.25" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.181658][ T28] audit: type=1400 audit(1755967114.681:140): avc: denied { open } for pid=473 comm="syz.1.25" path="net:[4026532560]" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.209108][ T28] audit: type=1400 audit(1755967116.321:141): avc: denied { accept } for pid=480 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 33.242442][ T28] audit: type=1400 audit(1755967116.321:142): avc: denied { read } for pid=480 comm="syz.0.27" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.275598][ T28] audit: type=1400 audit(1755967116.321:143): avc: denied { open } for pid=480 comm="syz.0.27" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.302867][ T483] EXT4-fs (loop1): 1 orphan inode deleted [ 33.308647][ T483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.317981][ T483] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.363263][ T482] tipc: Started in network mode [ 33.368172][ T482] tipc: Node identity ac14140f, cluster identity 4711 [ 33.375183][ T482] tipc: New replicast peer: 255.255.255.255 [ 33.381276][ T482] tipc: Enabled bearer , priority 10 [ 33.388989][ T482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 33.400050][ T10] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 33.422752][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 33.489832][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.541683][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.554410][ T286] EXT4-fs (loop1): unmounting filesystem. [ 33.731660][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 33.732745][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.738036][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.750837][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.760672][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.760711][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.770105][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.779548][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.788926][ T19] usb 4-1: SerialNumber: syz [ 33.797972][ T60] usb 3-1: config 0 descriptor?? [ 33.815436][ T60] hub 3-1:0.0: USB hub found [ 33.851638][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.981654][ T505] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.017939][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.024633][ T479] Bluetooth: hci0: Frame reassembly failed (-90) [ 34.031785][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 34.034305][ T479] loop2: detected capacity change from 0 to 512 [ 34.038282][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.045233][ T479] ext3: Unknown parameter 'nombcache"init_itable' [ 34.081634][ T28] audit: type=1400 audit(1755967117.251:144): avc: denied { read } for pid=478 comm="syz.2.26" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.090112][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.114654][ T60] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 34.123435][ T309] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.135674][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.147070][ T309] usb 2-1: config 0 descriptor?? [ 34.153471][ T309] hub 2-1:0.0: USB hub found [ 34.183685][ T505] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.193357][ T512] loop0: detected capacity change from 0 to 2048 [ 34.210422][ T505] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.213483][ T512] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.220093][ T505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.236496][ T505] usb 5-1: SerialNumber: syz [ 34.329664][ T60] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 34.338162][ T60] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 34.356627][ T504] Bluetooth: hci1: Frame reassembly failed (-90) [ 34.363166][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 34.369556][ T340] Bluetooth: hci1: Frame reassembly failed (-84) [ 34.369733][ T504] loop1: detected capacity change from 0 to 512 [ 34.382589][ T504] ext3: Unknown parameter 'nombcache"init_itable' [ 34.446520][ T517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.32: bg 0: block 464: padding at end of block bitmap is not set [ 34.462387][ T517] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 34.474808][ T517] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.474808][ T517] [ 34.484490][ T517] EXT4-fs (loop0): Total free blocks count 0 [ 34.490485][ T517] EXT4-fs (loop0): Free/Dirty block details [ 34.496459][ T517] EXT4-fs (loop0): free_blocks=0 [ 34.501420][ T517] EXT4-fs (loop0): dirty_blocks=32 [ 34.506561][ T517] EXT4-fs (loop0): Block reservation details [ 34.512574][ T517] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 34.640811][ T309] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 34.651150][ T19] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 34.654605][ T60] tipc: Node number set to 2886997007 [ 34.663342][ T422] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.070455][ T505] cdc_ether 5-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 35.070499][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.151565][ T536] loop0: detected capacity change from 0 to 2048 [ 35.159992][ T505] usb 4-1: USB disconnect, device number 3 [ 35.167106][ T505] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 35.193305][ T536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.447871][ T566] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.33: bg 0: block 464: padding at end of block bitmap is not set [ 35.463597][ T566] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 35.476140][ T566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.476140][ T566] [ 35.486035][ T566] EXT4-fs (loop0): Total free blocks count 0 [ 35.492252][ T566] EXT4-fs (loop0): Free/Dirty block details [ 35.498292][ T566] EXT4-fs (loop0): free_blocks=0 [ 35.503447][ T566] EXT4-fs (loop0): dirty_blocks=32 [ 35.508619][ T566] EXT4-fs (loop0): Block reservation details [ 35.514658][ T566] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 35.621606][ T505] usb 5-1: USB disconnect, device number 3 [ 35.627988][ T505] cdc_ether 5-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 35.824648][ T600] loop3: detected capacity change from 0 to 2048 [ 35.846809][ T600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.193321][ T515] Bluetooth: hci0: command 0x1003 tx timeout [ 36.199264][ T611] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.34: bg 0: block 464: padding at end of block bitmap is not set [ 36.219748][ T400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.226910][ T611] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 36.239367][ T611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.239367][ T611] [ 36.249129][ T611] EXT4-fs (loop3): Total free blocks count 0 [ 36.255185][ T611] EXT4-fs (loop3): Free/Dirty block details [ 36.261076][ T611] EXT4-fs (loop3): free_blocks=0 [ 36.266111][ T611] EXT4-fs (loop3): dirty_blocks=32 [ 36.271242][ T611] EXT4-fs (loop3): Block reservation details [ 36.277249][ T611] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 36.285605][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.332289][ T615] loop0: detected capacity change from 0 to 2048 [ 36.343873][ T615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.411865][ T400] Bluetooth: hci1: command 0x1003 tx timeout [ 36.417944][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.434751][ T505] usb 3-1: USB disconnect, device number 2 [ 36.437036][ T619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.442937][ T309] usbhid 2-1:0.0: can't add hid device: -71 [ 36.460241][ T309] usbhid: probe of 2-1:0.0 failed with error -71 [ 36.467299][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 36.467312][ T28] audit: type=1400 audit(1755967119.631:157): avc: denied { ioctl } for pid=620 comm="syz.4.37" path="socket:[16476]" dev="sockfs" ino=16476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.540427][ T28] audit: type=1400 audit(1755967119.631:158): avc: denied { create } for pid=620 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.586886][ T28] audit: type=1400 audit(1755967119.631:159): avc: denied { setopt } for pid=620 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.608674][ T28] audit: type=1400 audit(1755967119.631:160): avc: denied { write } for pid=620 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.717440][ T340] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.723492][ T309] usb 2-1: USB disconnect, device number 2 [ 36.918738][ T640] loop4: detected capacity change from 0 to 2048 [ 36.933324][ T640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.031669][ T505] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.130931][ T646] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.40: bg 0: block 464: padding at end of block bitmap is not set [ 37.148299][ T646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 37.160737][ T646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.160737][ T646] [ 37.170477][ T646] EXT4-fs (loop4): Total free blocks count 0 [ 37.176530][ T646] EXT4-fs (loop4): Free/Dirty block details [ 37.182499][ T646] EXT4-fs (loop4): free_blocks=0 [ 37.187466][ T646] EXT4-fs (loop4): dirty_blocks=32 [ 37.192612][ T646] EXT4-fs (loop4): Block reservation details [ 37.198637][ T646] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 37.258319][ T283] EXT4-fs (loop0): unmounting filesystem. [ 37.362672][ T505] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.383428][ T505] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.401631][ T484] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.401750][ T505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.417150][ T505] usb 4-1: SerialNumber: syz [ 37.541658][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.591626][ T484] usb 2-1: Using ep0 maxpacket: 32 [ 37.598235][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.609720][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.620517][ T484] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.631112][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.640069][ T484] usb 2-1: config 0 descriptor?? [ 37.650873][ T484] hub 2-1:0.0: USB hub found [ 37.722913][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.736854][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.746676][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.802556][ T60] usb 1-1: SerialNumber: syz [ 37.807577][ T421] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.850064][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.857012][ T644] Bluetooth: hci0: Frame reassembly failed (-90) [ 37.866131][ T644] loop1: detected capacity change from 0 to 512 [ 37.872990][ T644] ext3: Unknown parameter 'nombcache"init_itable' [ 37.884070][ T484] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 37.961644][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.034643][ T505] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.094765][ T484] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 38.103289][ T484] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 38.111782][ T19] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.142819][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.158286][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.167406][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.175457][ T39] usb 3-1: SerialNumber: syz [ 38.311656][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 38.317989][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.329177][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.339195][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.348323][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.357051][ T19] usb 5-1: config 0 descriptor?? [ 38.363011][ T19] hub 5-1:0.0: USB hub found [ 38.415009][ T60] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.471969][ T309] usb 4-1: USB disconnect, device number 4 [ 38.480035][ T309] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 38.566113][ T340] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.573860][ T678] Bluetooth: hci1: Frame reassembly failed (-90) [ 38.584573][ T678] loop4: detected capacity change from 0 to 512 [ 38.594148][ T678] ext3: Unknown parameter 'nombcache"init_itable' [ 38.634480][ T406] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.646108][ T19] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 38.785321][ T39] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.870640][ T60] usb 1-1: USB disconnect, device number 2 [ 38.876874][ T60] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 39.073346][ T773] loop3: detected capacity change from 0 to 512 [ 39.074960][ T28] audit: type=1400 audit(1755967122.251:161): avc: denied { search } for pid=764 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.080393][ T773] ======================================================= [ 39.080393][ T773] WARNING: The mand mount option has been deprecated and [ 39.080393][ T773] and is ignored by this kernel. Remove the mand [ 39.080393][ T773] option from the mount to silence this warning. [ 39.080393][ T773] ======================================================= [ 39.105727][ T28] audit: type=1400 audit(1755967122.251:162): avc: denied { getattr } for pid=764 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.172984][ T28] audit: type=1400 audit(1755967122.251:163): avc: denied { write } for pid=764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.196019][ T28] audit: type=1400 audit(1755967122.251:164): avc: denied { add_name } for pid=764 comm="dhcpcd-run-hook" name="resolv.conf.usb1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.196359][ T773] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.218598][ T28] audit: type=1400 audit(1755967122.361:165): avc: denied { remove_name } for pid=777 comm="rm" name="resolv.conf.usb1.link" dev="tmpfs" ino=1071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.249004][ T773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.47: bg 0: block 248: padding at end of block bitmap is not set [ 39.265544][ T773] Quota error (device loop3): write_blk: dquota write failed [ 39.273078][ T773] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.47: Failed to acquire dquot type 1 [ 39.284816][ T773] EXT4-fs (loop3): 1 truncate cleaned up [ 39.290926][ T773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.324848][ T60] usb 3-1: USB disconnect, device number 3 [ 39.331224][ T60] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 39.731735][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.855529][ T773] syz.3.47 (773) used greatest stack depth: 21504 bytes left [ 39.863614][ T515] Bluetooth: hci0: command 0x1003 tx timeout [ 39.869404][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.892209][ T287] EXT4-fs (loop3): unmounting filesystem. [ 39.932974][ T813] loop3: detected capacity change from 0 to 2048 [ 39.953808][ T813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.961665][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 39.968601][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.979667][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.418492][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.428801][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.507390][ T820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.50: bg 0: block 464: padding at end of block bitmap is not set [ 40.523127][ T820] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 40.535595][ T820] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.535595][ T820] [ 40.545315][ T820] EXT4-fs (loop3): Total free blocks count 0 [ 40.551326][ T820] EXT4-fs (loop3): Free/Dirty block details [ 40.557284][ T820] EXT4-fs (loop3): free_blocks=0 [ 40.562257][ T820] EXT4-fs (loop3): dirty_blocks=32 [ 40.567388][ T820] EXT4-fs (loop3): Block reservation details [ 40.573488][ T820] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 40.642608][ T505] usb 2-1: USB disconnect, device number 3 [ 40.645117][ T400] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 40.654738][ T811] Bluetooth: hci1: command 0x1003 tx timeout [ 40.662175][ T39] usb 1-1: config 0 descriptor?? [ 40.672532][ T39] hub 1-1:0.0: USB hub found [ 40.690483][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 40.696492][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 40.732039][ T19] usb 5-1: USB disconnect, device number 4 [ 40.831873][ T421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.871477][ T801] Bluetooth: hci0: Frame reassembly failed (-90) [ 40.878851][ T421] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.885463][ T801] loop0: detected capacity change from 0 to 512 [ 40.892250][ T801] ext3: Unknown parameter 'nombcache"init_itable' [ 40.903049][ T39] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 41.031711][ T505] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.113617][ T39] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 41.121664][ T508] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.122052][ T39] hid-generic: probe of 0003:046D:C31C.0005 failed with error -22 [ 41.171687][ T60] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 41.212857][ T505] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.236537][ T505] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.245699][ T505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.253804][ T505] usb 3-1: SerialNumber: syz [ 41.301648][ T508] usb 4-1: Using ep0 maxpacket: 32 [ 41.327446][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.344686][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.355419][ T508] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.364720][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.376823][ T508] usb 4-1: config 0 descriptor?? [ 41.382958][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.387774][ T508] hub 4-1:0.0: USB hub found [ 41.394077][ T60] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 41.407913][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.429637][ T60] usb 2-1: config 0 descriptor?? [ 41.585872][ T421] Bluetooth: hci1: Frame reassembly failed (-84) [ 41.592555][ T827] Bluetooth: hci1: Frame reassembly failed (-90) [ 41.601567][ T827] loop3: detected capacity change from 0 to 512 [ 41.608254][ T827] ext3: Unknown parameter 'nombcache"init_itable' [ 41.618324][ T508] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 41.840333][ T60] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 41.847112][ T60] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 41.854029][ T60] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 41.860754][ T60] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 41.867501][ T60] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 41.869781][ T505] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 41.875251][ T60] kye 0003:0458:5011.0006: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 41.896638][ T60] kye 0003:0458:5011.0006: tablet-enabling feature report not found [ 41.904706][ T60] kye 0003:0458:5011.0006: tablet enabling failed [ 42.073571][ T353] usb 2-1: USB disconnect, device number 4 [ 42.108961][ T851] loop4: detected capacity change from 0 to 2048 [ 42.133242][ T851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.342619][ T856] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.56: bg 0: block 464: padding at end of block bitmap is not set [ 42.372742][ T856] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 42.385247][ T856] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.385247][ T856] [ 42.394991][ T856] EXT4-fs (loop4): Total free blocks count 0 [ 42.401030][ T856] EXT4-fs (loop4): Free/Dirty block details [ 42.407012][ T856] EXT4-fs (loop4): free_blocks=0 [ 42.412010][ T856] EXT4-fs (loop4): dirty_blocks=32 [ 42.417166][ T856] EXT4-fs (loop4): Block reservation details [ 42.423200][ T856] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.488777][ T353] usb 3-1: USB disconnect, device number 4 [ 42.497512][ T353] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 42.666841][ T886] loop1: detected capacity change from 0 to 1024 [ 42.675072][ T886] EXT4-fs: Ignoring removed bh option [ 42.694295][ T886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.891776][ T811] Bluetooth: hci0: command 0x1003 tx timeout [ 42.891804][ T401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.101571][ T340] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.101731][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 43.101742][ T28] audit: type=1400 audit(1755967126.081:172): avc: denied { ioctl } for pid=885 comm="syz.1.57" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16653 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.231775][ T353] usb 1-1: USB disconnect, device number 3 [ 43.461643][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.570038][ T286] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 43.585568][ T286] EXT4-fs (loop1): unmounting filesystem. [ 43.611737][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 43.617820][ T400] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.648020][ T508] usbhid 4-1:0.0: can't add hid device: -71 [ 43.657303][ T508] usbhid: probe of 4-1:0.0 failed with error -71 [ 43.693078][ T508] usb 4-1: USB disconnect, device number 5 [ 43.741654][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 43.747869][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.758909][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.768816][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.769798][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 43.777993][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.796153][ T19] usb 5-1: config 0 descriptor?? [ 43.802074][ T19] hub 5-1:0.0: USB hub found [ 44.007461][ T421] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.014908][ T909] Bluetooth: hci0: Frame reassembly failed (-90) [ 44.030645][ T909] loop4: detected capacity change from 0 to 512 [ 44.039968][ T909] ext3: Unknown parameter 'nombcache"init_itable' [ 44.072629][ T407] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.083082][ T19] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 44.206681][ T924] loop3: detected capacity change from 0 to 512 [ 44.215986][ T924] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.222994][ T924] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.64: bg 0: block 248: padding at end of block bitmap is not set [ 44.237428][ T924] Quota error (device loop3): write_blk: dquota write failed [ 44.245468][ T924] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 44.255756][ T924] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.64: Failed to acquire dquot type 1 [ 44.267486][ T924] EXT4-fs (loop3): 1 truncate cleaned up [ 44.273435][ T924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.331634][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.512670][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.556196][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.565496][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.573512][ T60] usb 1-1: SerialNumber: syz [ 44.771756][ T39] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 44.821988][ T353] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.952695][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.963784][ T39] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 44.972995][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.981982][ T39] usb 2-1: config 0 descriptor?? [ 44.991797][ T287] EXT4-fs (loop3): unmounting filesystem. [ 45.025754][ T353] usb 3-1: Using ep0 maxpacket: 32 [ 45.033641][ T353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.039159][ T28] audit: type=1400 audit(1755967128.211:173): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.044672][ T353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.044720][ T353] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.044741][ T353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.048442][ T353] usb 3-1: config 0 descriptor?? [ 45.101340][ T353] hub 3-1:0.0: USB hub found [ 45.112983][ T945] loop3: detected capacity change from 0 to 2048 [ 45.133032][ T945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.190482][ T60] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 45.343619][ T959] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.69: bg 0: block 464: padding at end of block bitmap is not set [ 45.358915][ T959] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 45.371364][ T959] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.371364][ T959] [ 45.381063][ T959] EXT4-fs (loop3): Total free blocks count 0 [ 45.387097][ T959] EXT4-fs (loop3): Free/Dirty block details [ 45.393039][ T959] EXT4-fs (loop3): free_blocks=0 [ 45.398010][ T959] EXT4-fs (loop3): dirty_blocks=32 [ 45.403157][ T959] EXT4-fs (loop3): Block reservation details [ 45.409164][ T959] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 45.525336][ T930] Bluetooth: hci1: Frame reassembly failed (-90) [ 45.535737][ T930] loop2: detected capacity change from 0 to 512 [ 45.543195][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 45.567711][ T930] ext3: Unknown parameter 'nombcache"init_itable' [ 45.576332][ T39] kye 0003:0458:5011.0007: unknown main item tag 0x0 [ 45.583133][ T39] kye 0003:0458:5011.0007: unknown main item tag 0x0 [ 45.589912][ T39] kye 0003:0458:5011.0007: unknown main item tag 0x0 [ 45.596851][ T39] kye 0003:0458:5011.0007: unknown main item tag 0x0 [ 45.603742][ T39] kye 0003:0458:5011.0007: unknown main item tag 0x0 [ 45.611801][ T39] kye 0003:0458:5011.0007: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 45.626019][ T39] kye 0003:0458:5011.0007: tablet-enabling feature report not found [ 45.635496][ T39] kye 0003:0458:5011.0007: tablet enabling failed [ 45.642956][ T353] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 45.764083][ T39] usb 1-1: USB disconnect, device number 4 [ 45.770329][ T39] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 45.789847][ T505] usb 2-1: USB disconnect, device number 5 [ 45.851942][ T340] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.854332][ T353] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 45.872819][ T353] hid-generic: probe of 0003:046D:C31C.0008 failed with error -22 [ 46.012064][ T400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.013119][ T811] Bluetooth: hci0: command 0x1003 tx timeout [ 46.026052][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 46.032292][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 46.062543][ T19] usb 5-1: USB disconnect, device number 5 [ 46.261709][ T484] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.301466][ T28] audit: type=1400 audit(1755967129.471:174): avc: denied { read write } for pid=994 comm="syz.0.71" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.302221][ T995] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 46.328760][ T28] audit: type=1400 audit(1755967129.471:175): avc: denied { open } for pid=994 comm="syz.0.71" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.367362][ T996] FAULT_INJECTION: forcing a failure. [ 46.367362][ T996] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.368030][ T28] audit: type=1400 audit(1755967129.471:176): avc: denied { ioctl } for pid=994 comm="syz.0.71" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.383433][ T996] CPU: 0 PID: 996 Comm: syz.0.71 Not tainted syzkaller #0 [ 46.405560][ T28] audit: type=1400 audit(1755967129.581:177): avc: denied { bind } for pid=997 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.411685][ T996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.411705][ T996] Call Trace: [ 46.411710][ T996] [ 46.411716][ T996] __dump_stack+0x21/0x24 [ 46.430773][ T28] audit: type=1400 audit(1755967129.581:178): avc: denied { name_bind } for pid=997 comm="syz.1.72" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.440733][ T996] dump_stack_lvl+0xee/0x150 [ 46.440757][ T996] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.444114][ T28] audit: type=1400 audit(1755967129.581:179): avc: denied { node_bind } for pid=997 comm="syz.1.72" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.446929][ T996] dump_stack+0x15/0x24 [ 46.446950][ T996] should_fail_ex+0x3d4/0x520 [ 46.458611][ T998] loop1: detected capacity change from 0 to 2048 [ 46.471702][ T996] should_fail+0xb/0x10 [ 46.471725][ T996] should_fail_usercopy+0x1a/0x20 [ 46.471741][ T996] _copy_to_user+0x1e/0x90 [ 46.471757][ T996] simple_read_from_buffer+0xe9/0x160 [ 46.476380][ T484] usb 4-1: Using ep0 maxpacket: 32 [ 46.481334][ T996] proc_fail_nth_read+0x19a/0x210 [ 46.547707][ T996] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.553253][ T996] ? security_file_permission+0x94/0xb0 [ 46.558782][ T996] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.564311][ T996] vfs_read+0x26e/0x8c0 [ 46.568452][ T996] ? __cfi_vfs_read+0x10/0x10 [ 46.573108][ T996] ? __kasan_check_write+0x14/0x20 [ 46.578203][ T996] ? mutex_lock+0x8d/0x1a0 [ 46.582594][ T996] ? __cfi_mutex_lock+0x10/0x10 [ 46.587423][ T996] ? __fdget_pos+0x2cd/0x380 [ 46.592000][ T996] ? ksys_read+0x71/0x240 [ 46.596337][ T996] ksys_read+0x140/0x240 [ 46.600580][ T996] ? __cfi_ksys_read+0x10/0x10 [ 46.605337][ T996] ? debug_smp_processor_id+0x17/0x20 [ 46.610702][ T996] __x64_sys_read+0x7b/0x90 [ 46.615207][ T996] x64_sys_call+0x2f/0x9a0 [ 46.619617][ T996] do_syscall_64+0x4c/0xa0 [ 46.624029][ T996] ? clear_bhb_loop+0x30/0x80 [ 46.628705][ T996] ? clear_bhb_loop+0x30/0x80 [ 46.633385][ T996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.639265][ T996] RIP: 0033:0x7f1104b8d5fc [ 46.643673][ T996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.663259][ T996] RSP: 002b:00007f11059b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.671656][ T996] RAX: ffffffffffffffda RBX: 00007f1104db6090 RCX: 00007f1104b8d5fc [ 46.679613][ T996] RDX: 000000000000000f RSI: 00007f11059b30a0 RDI: 0000000000000005 [ 46.687567][ T996] RBP: 00007f11059b3090 R08: 0000000000000000 R09: 0000000000000000 [ 46.695522][ T996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.703488][ T996] R13: 00007f1104db6128 R14: 00007f1104db6090 R15: 00007ffd78616098 [ 46.711460][ T996] [ 46.727539][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.738547][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.743063][ T998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.748528][ T484] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.767050][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.776841][ T484] usb 4-1: config 0 descriptor?? [ 46.786449][ T484] hub 4-1:0.0: USB hub found [ 46.794711][ T286] EXT4-fs (loop1): unmounting filesystem. [ 46.822580][ T1005] loop1: detected capacity change from 0 to 2048 [ 46.984767][ T1008] loop4: detected capacity change from 0 to 2048 [ 47.048799][ T1008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.048828][ T1005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.070463][ T993] Bluetooth: hci0: Frame reassembly failed (-90) [ 47.093111][ T993] loop3: detected capacity change from 0 to 512 [ 47.099530][ T340] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.110942][ T993] ext3: Unknown parameter 'nombcache"init_itable' [ 47.193511][ T484] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 47.202145][ T406] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.469752][ T1017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.75: bg 0: block 464: padding at end of block bitmap is not set [ 47.492875][ T484] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 47.503099][ T484] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22 [ 47.569827][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 47.730300][ T1017] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 47.742779][ T1017] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.742779][ T1017] [ 47.743745][ T286] EXT4-fs (loop1): unmounting filesystem. [ 47.758270][ T1017] EXT4-fs (loop4): Total free blocks count 0 [ 47.762249][ T60] usb 3-1: USB disconnect, device number 5 [ 47.764305][ T1017] EXT4-fs (loop4): Free/Dirty block details [ 47.776387][ T1017] EXT4-fs (loop4): free_blocks=0 [ 47.781330][ T1017] EXT4-fs (loop4): dirty_blocks=32 [ 47.786475][ T1017] EXT4-fs (loop4): Block reservation details [ 47.792474][ T1017] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 47.827138][ T340] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.850445][ T1020] loop0: detected capacity change from 0 to 2048 [ 47.873963][ T1032] netlink: 64 bytes leftover after parsing attributes in process `syz.4.79'. [ 47.883725][ T1020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.899214][ T1039] loop4: detected capacity change from 0 to 16 [ 47.906810][ T1039] erofs: (device loop4): mounted with root inode @ nid 36. [ 47.914891][ T1039] FAULT_INJECTION: forcing a failure. [ 47.914891][ T1039] name failslab, interval 1, probability 0, space 0, times 0 [ 47.928281][ T1039] CPU: 1 PID: 1039 Comm: syz.4.80 Not tainted syzkaller #0 [ 47.935489][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.945557][ T1039] Call Trace: [ 47.948831][ T1039] [ 47.951767][ T1039] __dump_stack+0x21/0x24 [ 47.956106][ T1039] dump_stack_lvl+0xee/0x150 [ 47.960705][ T1039] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.965734][ T1039] ? __kasan_check_write+0x14/0x20 [ 47.970846][ T1039] dump_stack+0x15/0x24 [ 47.974994][ T1039] should_fail_ex+0x3d4/0x520 [ 47.979659][ T1039] ? getname_flags+0xb9/0x500 [ 47.984328][ T1039] __should_failslab+0xac/0xf0 [ 47.989076][ T1039] should_failslab+0x9/0x20 [ 47.993567][ T1039] kmem_cache_alloc+0x3b/0x330 [ 47.998314][ T1039] getname_flags+0xb9/0x500 [ 48.002800][ T1039] ? debug_smp_processor_id+0x17/0x20 [ 48.008159][ T1039] __x64_sys_mkdirat+0x7c/0xa0 [ 48.012902][ T1039] x64_sys_call+0x73d/0x9a0 [ 48.017389][ T1039] do_syscall_64+0x4c/0xa0 [ 48.021789][ T1039] ? clear_bhb_loop+0x30/0x80 [ 48.026446][ T1039] ? clear_bhb_loop+0x30/0x80 [ 48.031102][ T1039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.036974][ T1039] RIP: 0033:0x7f2f0e18ebe9 [ 48.041372][ T1039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.060956][ T1039] RSP: 002b:00007f2f0ef3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 48.069354][ T1039] RAX: ffffffffffffffda RBX: 00007f2f0e3b5fa0 RCX: 00007f2f0e18ebe9 [ 48.077306][ T1039] RDX: 000000000000009a RSI: 0000200000000440 RDI: ffffffffffffff9c [ 48.085264][ T1039] RBP: 00007f2f0ef3d090 R08: 0000000000000000 R09: 0000000000000000 [ 48.093220][ T1039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.101172][ T1039] R13: 00007f2f0e3b6038 R14: 00007f2f0e3b5fa0 R15: 00007ffd8681e358 [ 48.109128][ T1039] [ 48.133248][ T1042] loop4: detected capacity change from 0 to 2048 [ 48.150704][ T1042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.312615][ T1048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.81: bg 0: block 464: padding at end of block bitmap is not set [ 48.432500][ T1048] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 48.438336][ T353] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.444946][ T1048] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.444946][ T1048] [ 48.462124][ T1048] EXT4-fs (loop4): Total free blocks count 0 [ 48.468114][ T1048] EXT4-fs (loop4): Free/Dirty block details [ 48.474009][ T1048] EXT4-fs (loop4): free_blocks=0 [ 48.478937][ T1048] EXT4-fs (loop4): dirty_blocks=32 [ 48.484112][ T1048] EXT4-fs (loop4): Block reservation details [ 48.490081][ T1048] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 48.601642][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.631646][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 48.637529][ T283] EXT4-fs (loop0): unmounting filesystem. [ 48.638008][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.654349][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.668267][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.677485][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.684543][ T1056] loop0: detected capacity change from 0 to 256 [ 48.689749][ T353] usb 2-1: config 0 descriptor?? [ 48.698899][ T1056] FAT-fs (loop0): Directory bread(block 64) failed [ 48.706007][ T1056] FAT-fs (loop0): Directory bread(block 65) failed [ 48.706914][ T353] hub 2-1:0.0: USB hub found [ 48.712767][ T1056] FAT-fs (loop0): Directory bread(block 66) failed [ 48.724407][ T1056] FAT-fs (loop0): Directory bread(block 67) failed [ 48.730958][ T1056] FAT-fs (loop0): Directory bread(block 68) failed [ 48.737534][ T1056] FAT-fs (loop0): Directory bread(block 69) failed [ 48.744264][ T1056] FAT-fs (loop0): Directory bread(block 70) failed [ 48.750785][ T1056] FAT-fs (loop0): Directory bread(block 71) failed [ 48.757400][ T1056] FAT-fs (loop0): Directory bread(block 72) failed [ 48.763943][ T1056] FAT-fs (loop0): Directory bread(block 73) failed [ 48.782750][ T19] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.796699][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.805831][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.814836][ T1058] loop0: detected capacity change from 0 to 256 [ 48.818326][ T19] usb 3-1: SerialNumber: syz [ 48.831496][ T1058] FAT-fs (loop0): Directory bread(block 64) failed [ 48.841227][ T1058] FAT-fs (loop0): Directory bread(block 65) failed [ 48.848157][ T1058] FAT-fs (loop0): Directory bread(block 66) failed [ 48.854736][ T1058] FAT-fs (loop0): Directory bread(block 67) failed [ 48.861365][ T1058] FAT-fs (loop0): Directory bread(block 68) failed [ 48.868022][ T1058] FAT-fs (loop0): Directory bread(block 69) failed [ 48.874772][ T1058] FAT-fs (loop0): Directory bread(block 70) failed [ 48.881290][ T1058] FAT-fs (loop0): Directory bread(block 71) failed [ 48.887860][ T1058] FAT-fs (loop0): Directory bread(block 72) failed [ 48.894433][ T1058] FAT-fs (loop0): Directory bread(block 73) failed [ 48.904242][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.914354][ T1026] Bluetooth: hci1: Frame reassembly failed (-90) [ 48.914403][ T1058] FAULT_INJECTION: forcing a failure. [ 48.914403][ T1058] name failslab, interval 1, probability 0, space 0, times 0 [ 48.923702][ T1026] loop1: detected capacity change from 0 to 512 [ 48.939211][ T1058] CPU: 0 PID: 1058 Comm: syz.0.85 Not tainted syzkaller #0 [ 48.946786][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.956830][ T1058] Call Trace: [ 48.960097][ T1058] [ 48.963259][ T1058] __dump_stack+0x21/0x24 [ 48.967580][ T1058] dump_stack_lvl+0xee/0x150 [ 48.972171][ T1058] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.977182][ T1058] ? __kasan_check_write+0x14/0x20 [ 48.982284][ T1058] dump_stack+0x15/0x24 [ 48.986430][ T1058] should_fail_ex+0x3d4/0x520 [ 48.991103][ T1058] ? getname_flags+0xb9/0x500 [ 48.995788][ T1058] __should_failslab+0xac/0xf0 [ 49.000567][ T1058] should_failslab+0x9/0x20 [ 49.005078][ T1058] kmem_cache_alloc+0x3b/0x330 [ 49.009834][ T1058] getname_flags+0xb9/0x500 [ 49.014402][ T1058] getname+0x19/0x20 [ 49.018338][ T1058] do_sys_openat2+0xcb/0x7e0 [ 49.022927][ T1058] ? __kasan_check_write+0x14/0x20 [ 49.028040][ T1058] ? do_sys_open+0xe0/0xe0 [ 49.032445][ T1058] ? ksys_write+0x1eb/0x240 [ 49.036941][ T1058] ? __cfi_ksys_write+0x10/0x10 [ 49.041783][ T1058] __x64_sys_openat+0x136/0x160 [ 49.046618][ T1058] x64_sys_call+0x783/0x9a0 [ 49.051105][ T1058] do_syscall_64+0x4c/0xa0 [ 49.055515][ T1058] ? clear_bhb_loop+0x30/0x80 [ 49.060181][ T1058] ? clear_bhb_loop+0x30/0x80 [ 49.064849][ T1058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.070735][ T1058] RIP: 0033:0x7f1104b8ebe9 [ 49.075141][ T1058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.094729][ T1058] RSP: 002b:00007f11059d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.103127][ T1058] RAX: ffffffffffffffda RBX: 00007f1104db5fa0 RCX: 00007f1104b8ebe9 [ 49.111080][ T1058] RDX: 000000000000275a RSI: 0000200000000300 RDI: ffffffffffffff9c [ 49.119033][ T1058] RBP: 00007f11059d4090 R08: 0000000000000000 R09: 0000000000000000 [ 49.127016][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.134969][ T1058] R13: 00007f1104db6038 R14: 00007f1104db5fa0 R15: 00007ffd78616098 [ 49.142930][ T1058] [ 49.146524][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 49.152737][ T400] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.162514][ T1026] ext3: Unknown parameter 'nombcache"init_itable' [ 49.193481][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.212720][ T1060] loop3: detected capacity change from 0 to 1024 [ 49.219928][ T1060] EXT4-fs: Ignoring removed orlov option [ 49.223090][ T422] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.235218][ T1060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.254099][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 49.254113][ T28] audit: type=1400 audit(1755967132.431:190): avc: denied { mount } for pid=1061 comm="syz.4.87" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.275845][ T1066] loop0: detected capacity change from 0 to 256 [ 49.288435][ T309] usb 4-1: USB disconnect, device number 6 [ 49.300736][ T353] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 49.301057][ T28] audit: type=1400 audit(1755967132.441:191): avc: denied { read write } for pid=1065 comm="syz.0.88" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.342815][ T28] audit: type=1400 audit(1755967132.441:192): avc: denied { open } for pid=1065 comm="syz.0.88" path="/23/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.365869][ T1066] FAT-fs (loop0): Directory bread(block 64) failed [ 49.369071][ T28] audit: type=1400 audit(1755967132.471:193): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.374821][ T1066] FAT-fs (loop0): Directory bread(block 65) failed [ 49.394061][ T1060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.400941][ T1066] FAT-fs (loop0): Directory bread(block 66) failed [ 49.418634][ T1066] FAT-fs (loop0): Directory bread(block 67) failed [ 49.425587][ T1066] FAT-fs (loop0): Directory bread(block 68) failed [ 49.432370][ T1066] FAT-fs (loop0): Directory bread(block 69) failed [ 49.438951][ T1066] FAT-fs (loop0): Directory bread(block 70) failed [ 49.445721][ T1066] FAT-fs (loop0): Directory bread(block 71) failed [ 49.452472][ T1066] FAT-fs (loop0): Directory bread(block 72) failed [ 49.458996][ T1066] FAT-fs (loop0): Directory bread(block 73) failed [ 49.493427][ T1074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.90'. [ 49.517963][ T1076] loop0: detected capacity change from 0 to 2048 [ 49.536069][ T353] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 49.552089][ T353] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 49.563882][ T1076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.572626][ T28] audit: type=1400 audit(1755967132.751:194): avc: denied { mounton } for pid=1059 comm="syz.3.86" path="/13/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.576379][ T19] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 49.603625][ T28] audit: type=1400 audit(1755967132.751:195): avc: denied { create } for pid=1059 comm="syz.3.86" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.621680][ T309] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 49.830636][ T1086] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.91: bg 0: block 464: padding at end of block bitmap is not set [ 50.032158][ T1086] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 50.035717][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 50.044566][ T1086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.044566][ T1086] [ 50.044587][ T1086] EXT4-fs (loop0): Total free blocks count 0 [ 50.044599][ T1086] EXT4-fs (loop0): Free/Dirty block details [ 50.044610][ T1086] EXT4-fs (loop0): free_blocks=0 [ 50.044621][ T1086] EXT4-fs (loop0): dirty_blocks=32 [ 50.051381][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.059397][ T1086] EXT4-fs (loop0): Block reservation details [ 50.065439][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.071256][ T1086] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 50.136680][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.153027][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.170669][ T309] usb 5-1: config 0 descriptor?? [ 50.176939][ T353] usb 3-1: USB disconnect, device number 6 [ 50.183258][ T353] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 50.194020][ T309] hub 5-1:0.0: USB hub found [ 50.248743][ T287] EXT4-fs (loop3): unmounting filesystem. [ 50.273483][ T1105] loop3: detected capacity change from 0 to 1024 [ 50.280256][ T1105] EXT4-fs: Ignoring removed bh option [ 50.303340][ T1105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.410290][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.414857][ T1070] Bluetooth: hci0: Frame reassembly failed (-90) [ 50.431410][ T287] EXT4-fs (loop3): unmounting filesystem. [ 50.431438][ T421] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.452823][ T1070] loop4: detected capacity change from 0 to 512 [ 50.459472][ T1070] ext3: Unknown parameter 'nombcache"init_itable' [ 50.472469][ T421] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.485442][ T28] audit: type=1400 audit(1755967133.661:196): avc: denied { bind } for pid=1117 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.504724][ T28] audit: type=1400 audit(1755967133.661:197): avc: denied { listen } for pid=1117 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.524996][ T28] audit: type=1400 audit(1755967133.661:198): avc: denied { accept } for pid=1117 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.544891][ T407] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.577119][ T309] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 50.788889][ T309] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 50.823356][ T1148] loop2: detected capacity change from 0 to 2048 [ 50.832245][ T309] hid-generic: probe of 0003:046D:C31C.000B failed with error -22 [ 50.853035][ T1148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.871575][ T1152] loop0: detected capacity change from 0 to 128 [ 50.896655][ T1152] netlink: 96 bytes leftover after parsing attributes in process `syz.0.99'. [ 50.908687][ T28] audit: type=1400 audit(1755967134.081:199): avc: denied { unmount } for pid=1151 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.971702][ T400] Bluetooth: hci1: command 0x1003 tx timeout [ 50.981692][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 51.054135][ T1157] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.98: bg 0: block 464: padding at end of block bitmap is not set [ 51.217670][ T484] usb 2-1: USB disconnect, device number 6 [ 51.232013][ T1157] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 51.244403][ T1157] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.244403][ T1157] [ 51.254067][ T1157] EXT4-fs (loop2): Total free blocks count 0 [ 51.260047][ T1157] EXT4-fs (loop2): Free/Dirty block details [ 51.265955][ T1157] EXT4-fs (loop2): free_blocks=0 [ 51.270884][ T1157] EXT4-fs (loop2): dirty_blocks=32 [ 51.276003][ T1157] EXT4-fs (loop2): Block reservation details [ 51.281990][ T1157] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 51.338483][ T1161] loop1: detected capacity change from 0 to 1024 [ 51.375447][ T1161] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.389179][ T1161] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.400458][ T1161] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 51.410894][ T1161] EXT4-fs error (device loop1): ext4_get_journal_inode:5722: inode #17: comm syz.1.101: iget: bad i_size value: 4398046511204 [ 51.441308][ T1161] EXT4-fs (loop1): no journal found [ 51.685732][ T421] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.896677][ T1167] loop3: detected capacity change from 0 to 512 [ 52.070584][ T1167] EXT4-fs (loop3): 1 orphan inode deleted [ 52.076476][ T1167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.087905][ T1167] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.151249][ T1167] tipc: Started in network mode [ 52.156301][ T1167] tipc: Node identity ac14140f, cluster identity 4711 [ 52.163445][ T1167] tipc: New replicast peer: 255.255.255.255 [ 52.169854][ T1167] tipc: Enabled bearer , priority 10 [ 52.189624][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 52.343130][ T1172] loop2: detected capacity change from 0 to 2048 [ 52.442528][ T1172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.923033][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 52.930309][ T811] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.940686][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 53.005547][ T287] EXT4-fs (loop3): unmounting filesystem. [ 53.119977][ T1184] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.103: bg 0: block 464: padding at end of block bitmap is not set [ 53.287482][ T484] tipc: Node number set to 2886997007 [ 53.303275][ T1184] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 53.315760][ T1184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.315760][ T1184] [ 53.325487][ T1184] EXT4-fs (loop2): Total free blocks count 0 [ 53.331627][ T1184] EXT4-fs (loop2): Free/Dirty block details [ 53.337564][ T1184] EXT4-fs (loop2): free_blocks=0 [ 53.342558][ T1184] EXT4-fs (loop2): dirty_blocks=32 [ 53.347683][ T1184] EXT4-fs (loop2): Block reservation details [ 53.353702][ T1184] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 53.426445][ T19] usb 5-1: USB disconnect, device number 6 [ 53.460328][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.461149][ T1189] loop3: detected capacity change from 0 to 1024 [ 53.496972][ T1195] loop2: detected capacity change from 0 to 2048 [ 53.504970][ T1189] EXT4-fs: Ignoring removed orlov option [ 53.510637][ T1189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.537207][ T1195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.597662][ T1189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.751457][ T1216] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.107: bg 0: block 464: padding at end of block bitmap is not set [ 53.792786][ T1216] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 53.805246][ T1216] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.805246][ T1216] [ 53.814938][ T1216] EXT4-fs (loop2): Total free blocks count 0 [ 53.820938][ T1216] EXT4-fs (loop2): Free/Dirty block details [ 53.826929][ T1216] EXT4-fs (loop2): free_blocks=0 [ 53.831902][ T1216] EXT4-fs (loop2): dirty_blocks=32 [ 53.837026][ T1216] EXT4-fs (loop2): Block reservation details [ 53.843164][ T1216] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 54.042561][ T1225] loop1: detected capacity change from 0 to 1024 [ 54.052897][ T1225] EXT4-fs: Ignoring removed orlov option [ 54.059876][ T1225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.154960][ T1225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.204042][ T1234] raw_sendmsg: syz.4.113 forgot to set AF_INET. Fix it! [ 54.287290][ T286] EXT4-fs (loop1): unmounting filesystem. [ 54.378719][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.441001][ T1241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.116'. [ 54.570178][ T287] EXT4-fs (loop3): unmounting filesystem. [ 54.636545][ T1247] loop4: detected capacity change from 0 to 256 [ 54.643170][ T1247] exfat: Unknown parameter 'ÿÿÿÿG' [ 55.042290][ T422] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.053354][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 55.053429][ T28] audit: type=1400 audit(1755967138.231:203): avc: denied { append } for pid=1242 comm="syz.4.117" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.063524][ T1249] loop3: detected capacity change from 0 to 2048 [ 55.090749][ T353] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 55.107219][ T1249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.295850][ T1265] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.118: bg 0: block 464: padding at end of block bitmap is not set [ 55.412175][ T1265] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 55.424628][ T1265] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.424628][ T1265] [ 55.434321][ T1265] EXT4-fs (loop3): Total free blocks count 0 [ 55.440355][ T1265] EXT4-fs (loop3): Free/Dirty block details [ 55.446464][ T1265] EXT4-fs (loop3): free_blocks=0 [ 55.451435][ T1265] EXT4-fs (loop3): dirty_blocks=32 [ 55.456615][ T1265] EXT4-fs (loop3): Block reservation details [ 55.462658][ T1265] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 55.472669][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.484280][ T353] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 55.496305][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.508666][ T353] usb 2-1: config 0 descriptor?? [ 56.664379][ T421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.785702][ T1295] fuse: Bad value for 'fd' [ 56.852660][ T1296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 56.956046][ T1293] loop2: detected capacity change from 0 to 40427 [ 56.965145][ T353] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 56.982647][ T1293] F2FS-fs (loop2): invalid crc value [ 56.989139][ T353] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 56.999845][ T353] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 57.006787][ T353] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 57.013734][ T353] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 57.021100][ T353] kye 0003:0458:5011.000C: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 57.033530][ T353] kye 0003:0458:5011.000C: tablet-enabling feature report not found [ 57.041557][ T353] kye 0003:0458:5011.000C: tablet enabling failed [ 57.049184][ T1293] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.106381][ T1293] F2FS-fs (loop2): Start checkpoint disabled! [ 57.113250][ T1293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 57.138470][ T1301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'. [ 57.161194][ T1303] loop3: detected capacity change from 0 to 2048 [ 57.184607][ T505] usb 2-1: USB disconnect, device number 7 [ 57.218558][ T1306] syz.2.124: attempt to access beyond end of device [ 57.218558][ T1306] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 57.240160][ T1303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.249585][ T1305] syz.0.128[1305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.249673][ T1305] syz.0.128[1305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.687088][ T28] audit: type=1400 audit(1755967140.861:204): avc: denied { bind } for pid=1292 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.751296][ T28] audit: type=1400 audit(1755967140.891:205): avc: denied { listen } for pid=1292 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.772190][ T28] audit: type=1400 audit(1755967140.951:206): avc: denied { accept } for pid=1292 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.891685][ T505] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 58.022988][ T287] EXT4-fs (loop3): unmounting filesystem. [ 58.041326][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.041326][ T43] loop2: rw=1, sector=77824, nr_sectors = 2080 limit=40427 [ 58.062016][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.062016][ T43] loop2: rw=1, sector=79904, nr_sectors = 2016 limit=40427 [ 58.089030][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.089030][ T43] loop2: rw=1, sector=49152, nr_sectors = 3968 limit=40427 [ 58.117130][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.117130][ T43] loop2: rw=1, sector=53120, nr_sectors = 128 limit=40427 [ 58.141894][ T505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.149967][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.149967][ T43] loop2: rw=1, sector=57344, nr_sectors = 6088 limit=40427 [ 58.161958][ T505] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 58.180183][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.180183][ T43] loop2: rw=1, sector=63432, nr_sectors = 6200 limit=40427 [ 58.196634][ T505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.214415][ T505] usb 5-1: config 0 descriptor?? [ 58.227950][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.227950][ T43] loop2: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 58.244963][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.244963][ T43] loop2: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 58.259428][ T43] kworker/u4:2: attempt to access beyond end of device [ 58.259428][ T43] loop2: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 59.525047][ T505] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 59.544169][ T1356] loop1: detected capacity change from 0 to 1024 [ 59.552623][ T505] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 59.562467][ T1356] EXT4-fs: Ignoring removed orlov option [ 59.568265][ T1356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.572974][ T505] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 59.581941][ T505] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 59.588734][ T505] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 59.593229][ T1356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.596631][ T505] kye 0003:0458:5011.000D: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 59.615293][ T505] kye 0003:0458:5011.000D: tablet-enabling feature report not found [ 59.623340][ T505] kye 0003:0458:5011.000D: tablet enabling failed [ 59.700725][ T286] EXT4-fs (loop1): unmounting filesystem. [ 61.019841][ T309] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 61.092902][ T1373] loop3: detected capacity change from 0 to 512 [ 61.157716][ T19] usb 5-1: USB disconnect, device number 7 [ 61.223686][ T309] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.244463][ T1373] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.256134][ T1373] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.140: bg 0: block 248: padding at end of block bitmap is not set [ 61.272273][ T1373] Quota error (device loop3): write_blk: dquota write failed [ 61.279861][ T1373] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 61.289880][ T1373] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.140: Failed to acquire dquot type 1 [ 61.304865][ T1373] EXT4-fs (loop3): 1 truncate cleaned up [ 61.428379][ T1373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.594737][ T309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.653870][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.675270][ T309] usb 2-1: SerialNumber: syz [ 62.012837][ T28] audit: type=1400 audit(1755967145.191:207): avc: denied { read write } for pid=1380 comm="syz.2.143" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.048353][ T28] audit: type=1400 audit(1755967145.191:208): avc: denied { open } for pid=1380 comm="syz.2.143" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.147023][ T28] audit: type=1400 audit(1755967145.321:209): avc: denied { ioctl } for pid=1380 comm="syz.2.143" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.213950][ T1373] syz.3.140 (1373) used greatest stack depth: 20728 bytes left [ 62.221917][ T287] EXT4-fs (loop3): unmounting filesystem. [ 62.290671][ T28] audit: type=1400 audit(1755967145.461:210): avc: denied { read write } for pid=1380 comm="syz.2.143" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.314101][ T28] audit: type=1400 audit(1755967145.461:211): avc: denied { open } for pid=1380 comm="syz.2.143" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.338552][ T28] audit: type=1400 audit(1755967145.461:212): avc: denied { write } for pid=1380 comm="syz.2.143" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.427083][ T309] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 62.451747][ T1384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.586749][ T1410] fuse: Bad value for 'fd' [ 62.652438][ T1411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 62.811706][ T1384] usb 5-1: Using ep0 maxpacket: 16 [ 62.817982][ T1384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 62.837394][ T1384] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.850268][ T1384] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 62.850292][ T1384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.850885][ T1384] usb 5-1: config 0 descriptor?? [ 62.908056][ T1426] FAULT_INJECTION: forcing a failure. [ 62.908056][ T1426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.921229][ T1426] CPU: 1 PID: 1426 Comm: syz.2.149 Not tainted syzkaller #0 [ 62.928519][ T1426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.938585][ T1426] Call Trace: [ 62.941849][ T1426] [ 62.944879][ T1426] __dump_stack+0x21/0x24 [ 62.949203][ T1426] dump_stack_lvl+0xee/0x150 [ 62.953798][ T1426] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.958808][ T1426] dump_stack+0x15/0x24 [ 62.962953][ T1426] should_fail_ex+0x3d4/0x520 [ 62.967633][ T1426] should_fail+0xb/0x10 [ 62.971787][ T1426] should_fail_usercopy+0x1a/0x20 [ 62.976810][ T1426] _copy_from_user+0x1e/0xc0 [ 62.981403][ T1426] __sys_bpf+0x277/0x780 [ 62.985644][ T1426] ? bpf_link_show_fdinfo+0x320/0x320 [ 62.991024][ T1426] ? __cfi_ksys_write+0x10/0x10 [ 62.995871][ T1426] ? debug_smp_processor_id+0x17/0x20 [ 63.001235][ T1426] __x64_sys_bpf+0x7c/0x90 [ 63.005661][ T1426] x64_sys_call+0x488/0x9a0 [ 63.010157][ T1426] do_syscall_64+0x4c/0xa0 [ 63.014578][ T1426] ? clear_bhb_loop+0x30/0x80 [ 63.019248][ T1426] ? clear_bhb_loop+0x30/0x80 [ 63.023909][ T1426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.029799][ T1426] RIP: 0033:0x7f8d8818ebe9 [ 63.034200][ T1426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.053790][ T1426] RSP: 002b:00007f8d890c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.062204][ T1426] RAX: ffffffffffffffda RBX: 00007f8d883b5fa0 RCX: 00007f8d8818ebe9 [ 63.070157][ T1426] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 63.078120][ T1426] RBP: 00007f8d890c2090 R08: 0000000000000000 R09: 0000000000000000 [ 63.086081][ T1426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.094052][ T1426] R13: 00007f8d883b6038 R14: 00007f8d883b5fa0 R15: 00007ffc547d8c38 [ 63.102030][ T1426] [ 63.148184][ T24] usb 2-1: USB disconnect, device number 8 [ 63.154607][ T24] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 63.246376][ T1441] tipc: Enabling of bearer rejected, already enabled [ 63.255039][ T1441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 63.283770][ T1384] wacom 0003:056A:0017.000E: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 63.295299][ T1384] wacom 0003:056A:0017.000E: hidraw0: USB HID v1f.ff Device [HID 056a:0017] on usb-dummy_hcd.4-1/input0 [ 63.307651][ T1384] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0017.000E/input/input5 [ 63.320796][ T28] audit: type=1400 audit(1755967146.491:213): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.418451][ T28] audit: type=1400 audit(1755967146.491:214): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.922762][ T1461] loop3: detected capacity change from 0 to 1024 [ 64.100300][ T1461] EXT4-fs: Ignoring removed orlov option [ 64.169659][ T1384] usb 5-1: USB disconnect, device number 8 [ 64.210939][ T1461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.220939][ T1465] loop1: detected capacity change from 0 to 512 [ 64.258434][ T1465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.269876][ T1461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 64.350639][ T1465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.359820][ T1465] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.371861][ T1465] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 64.382736][ T286] EXT4-fs (loop1): unmounting filesystem. [ 64.391676][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 64.403613][ T1478] capability: warning: `syz.1.158' uses deprecated v2 capabilities in a way that may be insecure [ 64.447474][ T1478] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 64.583267][ T60] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.597665][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.607103][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.615391][ T60] usb 3-1: SerialNumber: syz [ 64.773542][ T287] EXT4-fs (loop3): unmounting filesystem. [ 64.790526][ T1486] loop4: detected capacity change from 0 to 2048 [ 64.812620][ T1486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.484121][ T1492] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.160: bg 0: block 464: padding at end of block bitmap is not set [ 66.060761][ T1492] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 66.073340][ T1492] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.073340][ T1492] [ 66.083020][ T1492] EXT4-fs (loop4): Total free blocks count 0 [ 66.089029][ T1492] EXT4-fs (loop4): Free/Dirty block details [ 66.094958][ T1492] EXT4-fs (loop4): free_blocks=0 [ 66.099916][ T1492] EXT4-fs (loop4): dirty_blocks=32 [ 66.105132][ T1492] EXT4-fs (loop4): Block reservation details [ 66.111153][ T1492] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 66.179129][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.197507][ T1501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 66.347590][ T1511] loop2: detected capacity change from 0 to 512 [ 66.403380][ T1511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.412520][ T1511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.165: bg 0: block 248: padding at end of block bitmap is not set [ 66.427835][ T1511] __quota_error: 8 callbacks suppressed [ 66.427852][ T1511] Quota error (device loop2): write_blk: dquota write failed [ 66.440991][ T1511] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 66.450994][ T1511] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.165: Failed to acquire dquot type 1 [ 66.464228][ T1511] EXT4-fs (loop2): 1 truncate cleaned up [ 66.472212][ T1511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.726589][ T28] audit: type=1400 audit(1755967149.901:223): avc: denied { ioctl } for pid=1514 comm="syz.1.169" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.770657][ T1515] input: syz1 as /devices/virtual/input/input8 [ 66.910229][ T1520] loop1: detected capacity change from 0 to 512 [ 66.996781][ T1520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.001978][ T60] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 67.006364][ T1520] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.014191][ T60] usb 3-1: USB disconnect, device number 7 [ 67.294934][ T1527] overlayfs: failed to clone upperpath [ 68.140497][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 68.162618][ T285] EXT4-fs (loop2): unmounting filesystem. [ 68.168626][ T28] audit: type=1400 audit(1755967150.551:224): avc: denied { remount } for pid=1519 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.223511][ T28] audit: type=1400 audit(1755967151.391:225): avc: denied { append } for pid=1514 comm="syz.1.169" path="/26/file0/net_prio.prioidx" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.324968][ T286] EXT4-fs (loop1): unmounting filesystem. [ 68.330977][ T28] audit: type=1400 audit(1755967151.391:226): avc: denied { setattr } for pid=1514 comm="syz.1.169" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.801400][ T28] audit: type=1400 audit(1755967151.971:227): avc: denied { getopt } for pid=1544 comm="syz.0.176" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.859237][ T1548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 68.878221][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 68.887407][ T28] audit: type=1400 audit(1755967152.051:228): avc: denied { write } for pid=1541 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.974665][ T1536] device veth1_macvtap left promiscuous mode [ 68.980825][ T1536] device macsec0 entered promiscuous mode [ 68.991691][ T1536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 69.698779][ T28] audit: type=1400 audit(1755967152.451:229): avc: denied { create } for pid=1551 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.016181][ T28] audit: type=1400 audit(1755967154.191:230): avc: denied { load_policy } for pid=1573 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.016230][ T1574] SELinux: ebitmap: truncated map [ 71.041878][ T1574] SELinux: failed to load policy [ 71.051759][ T508] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 71.111121][ T1578] loop2: detected capacity change from 0 to 2048 [ 71.189343][ T1580] loop4: detected capacity change from 0 to 1024 [ 71.211959][ T1580] EXT4-fs: Ignoring removed orlov option [ 71.217781][ T1580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.227052][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.238420][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.249424][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.258658][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.267621][ T1578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.284576][ T39] usb 4-1: config 0 descriptor?? [ 71.293563][ T39] hub 4-1:0.0: USB hub found [ 71.337744][ T1580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.401660][ T508] usb 2-1: device descriptor read/64, error -71 [ 71.496325][ T1597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.186: bg 0: block 464: padding at end of block bitmap is not set [ 71.635429][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.651807][ T1556] Bluetooth: hci0: Frame reassembly failed (-90) [ 71.660691][ T1556] loop3: detected capacity change from 0 to 512 [ 71.678368][ T1597] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 71.690805][ T1597] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.690805][ T1597] [ 71.700691][ T1597] EXT4-fs (loop2): Total free blocks count 0 [ 71.704318][ T1556] ext3: Unknown parameter 'nombcache"init_itable' [ 71.706710][ T1597] EXT4-fs (loop2): Free/Dirty block details [ 71.719040][ T1597] EXT4-fs (loop2): free_blocks=0 [ 71.724040][ T1597] EXT4-fs (loop2): dirty_blocks=32 [ 71.729165][ T1597] EXT4-fs (loop2): Block reservation details [ 71.735182][ T1597] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 71.758527][ T284] EXT4-fs (loop4): unmounting filesystem. [ 71.775164][ T39] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 71.791653][ T508] usb 2-1: device descriptor read/64, error -71 [ 71.933537][ T1605] loop4: detected capacity change from 0 to 512 [ 72.068563][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.161294][ T1605] EXT4-fs (loop4): 1 orphan inode deleted [ 72.167158][ T1605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.178121][ T1605] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.204443][ T1605] tipc: Started in network mode [ 72.209491][ T1605] tipc: Node identity ac14140f, cluster identity 4711 [ 72.216658][ T1605] tipc: New replicast peer: 255.255.255.255 [ 72.223102][ T1605] tipc: Enabled bearer , priority 10 [ 72.594158][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 72.843045][ T340] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.852991][ T340] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 72.865187][ T284] EXT4-fs (loop4): unmounting filesystem. [ 72.991633][ T508] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 73.141630][ T508] usb 2-1: device descriptor read/64, error -71 [ 73.151618][ T60] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 73.332731][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.343812][ T60] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 73.352856][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.361346][ T60] usb 5-1: config 0 descriptor?? [ 73.366441][ T435] tipc: Node number set to 2886997007 [ 73.411984][ T508] usb 2-1: device descriptor read/64, error -71 [ 73.531683][ T508] usb usb2-port1: attempt power cycle [ 73.622473][ T28] audit: type=1400 audit(1755967156.801:231): avc: denied { create } for pid=1629 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.641816][ T28] audit: type=1400 audit(1755967156.801:232): avc: denied { setopt } for pid=1629 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.661905][ T28] audit: type=1400 audit(1755967156.811:233): avc: denied { watch watch_reads } for pid=1629 comm="syz.0.196" path="/67/file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.691618][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 73.691641][ T811] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.697781][ T1633] loop1: detected capacity change from 0 to 512 [ 73.710694][ T1633] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 73.711333][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 73.729765][ T1633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 73.738154][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 73.749101][ T1633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.756537][ T1633] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.197: bad orphan inode 267 [ 73.767090][ T1633] EXT4-fs (loop1): Remounting filesystem read-only [ 73.775942][ T60] kye 0003:0458:5011.000F: unknown main item tag 0x0 [ 73.783006][ T39] usb 4-1: USB disconnect, device number 7 [ 73.789841][ T1633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.799008][ T60] kye 0003:0458:5011.000F: unknown main item tag 0x0 [ 73.803285][ T1633] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.197: dx entry: limit 0 != root limit 125 [ 73.806048][ T60] kye 0003:0458:5011.000F: unknown main item tag 0x0 [ 73.833617][ T1640] loop3: detected capacity change from 0 to 1024 [ 73.840081][ T1638] loop2: detected capacity change from 0 to 2048 [ 73.856311][ T60] kye 0003:0458:5011.000F: unknown main item tag 0x0 [ 73.865898][ T1633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.197: Corrupt directory, running e2fsck is recommended [ 73.866724][ T1640] EXT4-fs: Ignoring removed orlov option [ 73.884894][ T60] kye 0003:0458:5011.000F: unknown main item tag 0x0 [ 73.892664][ T60] kye 0003:0458:5011.000F: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 73.903988][ T60] kye 0003:0458:5011.000F: tablet-enabling feature report not found [ 73.912029][ T60] kye 0003:0458:5011.000F: tablet enabling failed [ 73.915659][ T1643] device syzkaller0 entered promiscuous mode [ 73.923762][ T1640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.926437][ T1638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.960871][ T1633] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.197: dx entry: limit 0 != root limit 125 [ 73.972660][ T1633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.197: Corrupt directory, running e2fsck is recommended [ 73.997652][ T1633] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.197: dx entry: limit 0 != root limit 125 [ 74.009662][ T1633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.197: Corrupt directory, running e2fsck is recommended [ 74.011324][ T60] usb 5-1: USB disconnect, device number 9 [ 74.023775][ T1633] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.197: dx entry: limit 0 != root limit 125 [ 74.034348][ T1640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.040825][ T1633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.197: Corrupt directory, running e2fsck is recommended [ 74.124604][ T1651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.199: bg 0: block 464: padding at end of block bitmap is not set [ 74.139721][ T1651] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 74.152162][ T1651] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.152162][ T1651] [ 74.161856][ T1651] EXT4-fs (loop2): Total free blocks count 0 [ 74.167866][ T1651] EXT4-fs (loop2): Free/Dirty block details [ 74.173885][ T1651] EXT4-fs (loop2): free_blocks=0 [ 74.178846][ T1651] EXT4-fs (loop2): dirty_blocks=32 [ 74.184000][ T1651] EXT4-fs (loop2): Block reservation details [ 74.189995][ T1651] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 74.220083][ T1633] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.197: dx entry: limit 0 != root limit 125 [ 74.232299][ T1633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.197: Corrupt directory, running e2fsck is recommended [ 74.263506][ T1633] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.392063][ T286] EXT4-fs (loop1): unmounting filesystem. [ 74.666473][ T1664] loop4: detected capacity change from 0 to 512 [ 74.952988][ T340] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.021800][ T1664] EXT4-fs (loop4): 1 orphan inode deleted [ 75.027638][ T1664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.038111][ T1664] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.061718][ T1664] tipc: Enabling of bearer rejected, already enabled [ 75.212047][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.236256][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 75.333068][ T508] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 75.451878][ T287] EXT4-fs (loop3): unmounting filesystem. [ 75.624326][ T284] EXT4-fs (loop4): unmounting filesystem. [ 75.641738][ T508] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.662327][ T508] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.671396][ T508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.679932][ T508] usb 2-1: SerialNumber: syz [ 75.693549][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 75.990806][ T1698] loop3: detected capacity change from 0 to 256 [ 75.998655][ T1698] exfat: Unknown parameter 'iochar' [ 76.004772][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 76.076305][ T1698] netlink: 9 bytes leftover after parsing attributes in process `syz.3.212'. [ 76.086279][ T1698] device gretap0 entered promiscuous mode [ 76.241799][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 76.249241][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.355515][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.441561][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 76.520650][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.913030][ T39] usb 5-1: config 0 descriptor?? [ 76.918993][ T39] hub 5-1:0.0: USB hub found [ 76.964040][ T28] audit: type=1400 audit(1755967160.141:234): avc: denied { unlink } for pid=1702 comm="syz.3.214" name="#1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.987108][ T508] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 76.994920][ T1701] FAULT_INJECTION: forcing a failure. [ 76.994920][ T1701] name failslab, interval 1, probability 0, space 0, times 0 [ 77.006267][ T28] audit: type=1400 audit(1755967160.161:235): avc: denied { append } for pid=1702 comm="syz.3.214" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.008477][ T1701] CPU: 1 PID: 1701 Comm: syz.2.213 Not tainted syzkaller #0 [ 77.032232][ T508] usb 2-1: USB disconnect, device number 11 [ 77.037436][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.053356][ T1701] Call Trace: [ 77.056633][ T1701] [ 77.059558][ T1701] __dump_stack+0x21/0x24 [ 77.063891][ T1701] dump_stack_lvl+0xee/0x150 [ 77.068481][ T1701] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.073511][ T1701] ? ____fput+0x15/0x20 [ 77.077663][ T1701] ? exit_to_user_mode_loop+0x9b/0xb0 [ 77.083039][ T1701] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 77.088680][ T1701] ? syscall_exit_to_user_mode+0x1a/0x30 [ 77.094324][ T1701] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.100407][ T1701] dump_stack+0x15/0x24 [ 77.104560][ T1701] should_fail_ex+0x3d4/0x520 [ 77.109225][ T1701] __should_failslab+0xac/0xf0 [ 77.113989][ T1701] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 77.119976][ T1701] should_failslab+0x9/0x20 [ 77.124483][ T1701] __kmem_cache_alloc_node+0x3d/0x2c0 [ 77.129840][ T1701] ? __cfi_mutex_lock+0x10/0x10 [ 77.134672][ T1701] ? delete_node+0x2f4/0xa60 [ 77.139243][ T1701] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 77.145205][ T1701] __kmalloc+0xa1/0x1e0 [ 77.149351][ T1701] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 77.155404][ T1701] tracepoint_probe_unregister+0x1e6/0x8b0 [ 77.161197][ T1701] bpf_probe_unregister+0x61/0x70 [ 77.166209][ T1701] bpf_raw_tp_link_release+0x63/0x90 [ 77.171476][ T1701] bpf_link_free+0x13a/0x390 [ 77.176053][ T1701] ? bpf_link_put_deferred+0x20/0x20 [ 77.181328][ T1701] ? security_file_free+0xd8/0xf0 [ 77.186343][ T1701] bpf_link_release+0x15f/0x170 [ 77.191178][ T1701] ? __cfi_bpf_link_release+0x10/0x10 [ 77.196529][ T1701] __fput+0x1fc/0x8f0 [ 77.200497][ T1701] ____fput+0x15/0x20 [ 77.204459][ T1701] task_work_run+0x1db/0x240 [ 77.209032][ T1701] ? __cfi_task_work_run+0x10/0x10 [ 77.214124][ T1701] ? __cfi___close_range+0x10/0x10 [ 77.219222][ T1701] exit_to_user_mode_loop+0x9b/0xb0 [ 77.224401][ T1701] exit_to_user_mode_prepare+0x5a/0xa0 [ 77.229838][ T1701] syscall_exit_to_user_mode+0x1a/0x30 [ 77.235279][ T1701] do_syscall_64+0x58/0xa0 [ 77.239682][ T1701] ? clear_bhb_loop+0x30/0x80 [ 77.244344][ T1701] ? clear_bhb_loop+0x30/0x80 [ 77.249000][ T1701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.254873][ T1701] RIP: 0033:0x7f8d8818ebe9 [ 77.259268][ T1701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.278857][ T1701] RSP: 002b:00007f8d890c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 77.287256][ T1701] RAX: 0000000000000000 RBX: 00007f8d883b5fa0 RCX: 00007f8d8818ebe9 [ 77.295210][ T1701] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 77.303166][ T1701] RBP: 00007f8d890c2090 R08: 0000000000000000 R09: 0000000000000000 [ 77.311129][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.319082][ T1701] R13: 00007f8d883b6038 R14: 00007f8d883b5fa0 R15: 00007ffc547d8c38 [ 77.327043][ T1701] [ 77.335576][ T1701] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 77.335576][ T1706] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 77.335645][ T1706] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 77.365099][ T1706] CPU: 1 PID: 1706 Comm: syz.3.214 Not tainted syzkaller #0 [ 77.372358][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.382387][ T1706] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 77.388523][ T1706] Code: 80 3c 30 00 74 05 e8 24 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 77.408124][ T1706] RSP: 0018:ffffc9000076f830 EFLAGS: 00010096 [ 77.414166][ T1706] RAX: 1ffff11022553c29 RBX: ffff888112a9e140 RCX: ffff88810d250000 [ 77.422114][ T1706] RDX: ffff8881119ce540 RSI: 0000000000000001 RDI: ffffc9000dfd9000 [ 77.430069][ T1706] RBP: ffffc9000076f870 R08: 0000000000000000 R09: fffffbfff0ee4986 [ 77.438289][ T1706] R10: 00000000b720eca3 R11: 1ffffffff0ee4985 R12: 0000000000000001 [ 77.446257][ T1706] R13: ffff888112a9e140 R14: dffffc0000000000 R15: ffffffff817123b0 [ 77.454203][ T1706] FS: 00007fa8995106c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 77.463104][ T1706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.469661][ T1706] CR2: ffffffffff600008 CR3: 0000000120213000 CR4: 00000000003526a0 [ 77.477609][ T1706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.485552][ T1706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.493497][ T1706] Call Trace: [ 77.496750][ T1706] [ 77.499656][ T1706] __schedule+0x1263/0x14e0 [ 77.504139][ T1706] ? release_firmware_map_entry+0x194/0x194 [ 77.510006][ T1706] ? check_preempt_wakeup+0x5be/0xbc0 [ 77.515349][ T1706] ? preempt_schedule+0xa7/0xb0 [ 77.520173][ T1706] preempt_schedule_common+0x9b/0xf0 [ 77.525435][ T1706] preempt_schedule+0xa7/0xb0 [ 77.530086][ T1706] ? __cfi_preempt_schedule+0x10/0x10 [ 77.535432][ T1706] ? probe_sched_wakeup+0x71/0x90 [ 77.540436][ T1706] ? ttwu_do_wakeup+0x468/0x490 [ 77.545278][ T1706] preempt_schedule_thunk+0x16/0x18 [ 77.550474][ T1706] try_to_wake_up+0x6b8/0x1220 [ 77.555215][ T1706] wake_up_q+0xdc/0x1b0 [ 77.559342][ T1706] futex_wake+0x5b0/0x890 [ 77.563647][ T1706] ? __cfi_futex_wake+0x10/0x10 [ 77.568471][ T1706] ? up_write+0x7b/0x290 [ 77.572691][ T1706] do_futex+0x2b9/0x420 [ 77.576823][ T1706] ? __cfi_do_futex+0x10/0x10 [ 77.581478][ T1706] ? do_fcntl+0x58f/0x1040 [ 77.585874][ T1706] __se_sys_futex+0x273/0x2e0 [ 77.590529][ T1706] ? __x64_sys_futex+0x100/0x100 [ 77.595442][ T1706] ? xfd_validate_state+0x70/0x150 [ 77.600533][ T1706] __x64_sys_futex+0xe5/0x100 [ 77.605185][ T1706] x64_sys_call+0x7ec/0x9a0 [ 77.609661][ T1706] do_syscall_64+0x4c/0xa0 [ 77.614055][ T1706] ? clear_bhb_loop+0x30/0x80 [ 77.618707][ T1706] ? clear_bhb_loop+0x30/0x80 [ 77.623358][ T1706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.629229][ T1706] RIP: 0033:0x7fa89878ebe9 [ 77.633621][ T1706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.653214][ T1706] RSP: 002b:00007fa8995100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.661602][ T1706] RAX: ffffffffffffffda RBX: 00007fa8989b6098 RCX: 00007fa89878ebe9 [ 77.669570][ T1706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8989b609c [ 77.677518][ T1706] RBP: 00007fa8989b6090 R08: 001247bb60a4feda R09: 0000000000000000 [ 77.685466][ T1706] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000000 [ 77.693410][ T1706] R13: 00007fa8989b6128 R14: 00007fffbbe5af00 R15: 00007fffbbe5afe8 [ 77.701361][ T1706] [ 77.704356][ T1706] Modules linked in: [ 77.708243][ T1706] ---[ end trace 0000000000000000 ]--- [ 77.708268][ T1701] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 77.713682][ T1706] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 77.719735][ T1701] CPU: 0 PID: 1701 Comm: syz.2.213 Tainted: G D syzkaller #0 [ 77.725859][ T1706] Code: 80 3c 30 00 74 05 e8 24 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 77.734587][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.754164][ T1706] RSP: 0018:ffffc9000076f830 EFLAGS: 00010096 [ 77.764211][ T1701] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 77.770252][ T1706] RAX: 1ffff11022553c29 RBX: ffff888112a9e140 RCX: ffff88810d250000 [ 77.776379][ T1701] Code: 80 3c 30 00 74 05 e8 24 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 77.784323][ T1706] RDX: ffff8881119ce540 RSI: 0000000000000001 RDI: ffffc9000dfd9000 [ 77.803901][ T1701] RSP: 0018:ffffc900009b7b90 EFLAGS: 00010096 [ 77.811852][ T1706] RBP: ffffc9000076f870 R08: 0000000000000000 R09: fffffbfff0ee4986 [ 77.811867][ T1706] R10: 00000000b720eca3 R11: 1ffffffff0ee4985 R12: 0000000000000001 [ 77.817894][ T1701] RAX: 1ffff11022553c29 RBX: ffff888112a9e140 RCX: ffff8881003b6540 [ 77.825837][ T1706] R13: ffff888112a9e140 R14: dffffc0000000000 R15: ffffffff817123b0 [ 77.833782][ T1701] RDX: ffff88811ed4a880 RSI: 0000000000000000 RDI: ffffc9000dfd9000 [ 77.841745][ T1706] FS: 00007fa8995106c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 77.849689][ T1701] RBP: ffffc900009b7bd0 R08: 0000000000000080 R09: fffffbfff0ee4986 [ 77.857634][ T1706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.866534][ T1701] R10: 00000000b720eca3 R11: 1ffffffff0ee4985 R12: 0000000000000000 [ 77.874479][ T1706] CR2: ffffffffff600008 CR3: 0000000120213000 CR4: 00000000003526a0 [ 77.881041][ T1701] R13: ffff888112a9e140 R14: dffffc0000000000 R15: ffffffff817123b0 [ 77.888989][ T1706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.896932][ T1701] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 77.904879][ T1706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.912828][ T1701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.921730][ T1706] Kernel panic - not syncing: Fatal exception [ 77.929676][ T1701] CR2: 00007f8d881eeca8 CR3: 000000011ac26000 CR4: 00000000003526b0 [ 77.929693][ T1701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.929703][ T1701] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.929714][ T1701] Call Trace: [ 77.929719][ T1701] [ 77.929729][ T1701] __schedule+0x1263/0x14e0 [ 77.929755][ T1701] ? release_firmware_map_entry+0x194/0x194 [ 77.929776][ T1701] ? memcpy+0x56/0x70 [ 77.929797][ T1701] ? __kasan_check_write+0x14/0x20 [ 77.929818][ T1701] do_task_dead+0x9c/0xa0 [ 77.929837][ T1701] do_exit+0x1baa/0x2650 [ 77.929857][ T1701] ? __fget_files+0x2d5/0x330 [ 77.929879][ T1701] ? __cfi_do_exit+0x10/0x10 [ 77.929898][ T1701] ? kick_process+0xee/0x160 [ 77.929915][ T1701] ? zap_other_threads+0x2b7/0x2f0 [ 77.929934][ T1701] do_group_exit+0x210/0x2d0 [ 77.929955][ T1701] __x64_sys_exit_group+0x3f/0x40 [ 77.929975][ T1701] x64_sys_call+0x7b4/0x9a0 [ 77.929992][ T1701] do_syscall_64+0x4c/0xa0 [ 77.930011][ T1701] ? clear_bhb_loop+0x30/0x80 [ 77.930043][ T1701] ? clear_bhb_loop+0x30/0x80 [ 77.930059][ T1701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.930075][ T1701] RIP: 0033:0x7f8d8818ebe9 [ 77.930088][ T1701] Code: Unable to access opcode bytes at 0x7f8d8818ebbf. [ 77.930095][ T1701] RSP: 002b:00007f8d890c1f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.930112][ T1701] RAX: ffffffffffffffda RBX: 00007f8d881eeca8 RCX: 00007f8d8818ebe9 [ 77.930125][ T1701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 77.930135][ T1701] RBP: 0000000000000009 R08: 00007f8d890bfce7 R09: 0000000000000001 [ 77.930146][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.930156][ T1701] R13: 00007f8d883b6038 R14: 00007f8d883b5fa0 R15: 00007ffc547d8c38 [ 77.930171][ T1701] [ 77.930176][ T1701] Modules linked in: [ 77.936741][ T1701] ---[ end trace 0000000000000000 ]--- [ 77.936750][ T1701] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 77.936769][ T1701] Code: 80 3c 30 00 74 05 e8 24 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 77.936782][ T1701] RSP: 0018:ffffc9000076f830 EFLAGS: 00010096 [ 77.936795][ T1701] RAX: 1ffff11022553c29 RBX: ffff888112a9e140 RCX: ffff88810d250000 [ 77.936808][ T1701] RDX: ffff8881119ce540 RSI: 0000000000000001 RDI: ffffc9000dfd9000 [ 77.936819][ T1701] RBP: ffffc9000076f870 R08: 0000000000000000 R09: fffffbfff0ee4986 [ 77.936830][ T1701] R10: 00000000b720eca3 R11: 1ffffffff0ee4985 R12: 0000000000000001 [ 77.936841][ T1701] R13: ffff888112a9e140 R14: dffffc0000000000 R15: ffffffff817123b0 [ 77.936853][ T1701] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 77.936868][ T1701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.936880][ T1701] CR2: 00007f8d881eeca8 CR3: 000000011ac26000 CR4: 00000000003526b0 [ 77.936894][ T1701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.936904][ T1701] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.054574][ T1706] Shutting down cpus with NMI [ 79.358083][ T1706] Kernel Offset: disabled [ 79.362391][ T1706] Rebooting in 86400 seconds..