last executing test programs: 7.325739673s ago: executing program 1 (id=343): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x49, 0x800}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xfe}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x81) 5.857695504s ago: executing program 3 (id=361): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="85010000610000005400000000000600000000000080fe000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xcd}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1648", 0x2}], 0x1}, 0x850) 4.931187157s ago: executing program 3 (id=363): socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchown(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.84926966s ago: executing program 3 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) 4.804363691s ago: executing program 1 (id=365): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x6}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x54}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 4.007395699s ago: executing program 3 (id=374): socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchown(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.948325631s ago: executing program 1 (id=375): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) close(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c06, 0x3) 3.899421002s ago: executing program 3 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.853773214s ago: executing program 1 (id=377): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) 3.201111957s ago: executing program 2 (id=385): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="670f08b93e0800000f32c744240000000080c744240200000080c7442406000000000f011424d9f066baa00066b8000066ef430f2b6c5700c463a9207c3ebd0066baf80cb8c8002c87ef66bafc0cedb9ad080000b8d5000000ba000000000f300f35", 0x62}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.188443097s ago: executing program 4 (id=386): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6566f20f11eb670f38028d2faf0000660f35ba4200b84aef0f01df0f8db60068d6440f20c066350c000000440f22c00f083eaa650f01c2", 0x37}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.13782209s ago: executing program 4 (id=387): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x70, 0x3, 0xfffffffe) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 3.13773541s ago: executing program 2 (id=388): ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) 3.13767241s ago: executing program 2 (id=389): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 2.933177096s ago: executing program 3 (id=390): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, &(0x7f0000001940)={0x0, 0x1, 0x3, "a37e59"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x1, '+'}}) 2.589869399s ago: executing program 0 (id=393): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 2.589697428s ago: executing program 0 (id=394): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf25390000000c009900030000007500000098025a8028000080110002000e0b294419424f0e3e2c29221b000000100001000902166c4803183660183016180000801400030002000a999f790f143efee3a947b3fd29f677000b000f00b9000000050001006c00008005000700000000000500040002000000140003006600020002000002ff7f07000500750f1400050004000200010404004909010102004000050007000100000014000300000109000d001c0301004000030008001400030009000101c6f900000000b305960004002c0003802800020051494d14161a184e1b154b33143841413a500f0a060f51252956202f0b42292c1931024c48000280140005000500070009000900090010f010000600050004000000000028000200391217251701061a103e521735571b150431211914284947410a1e4f442f4138284b231c4400008013000100060660060b011b0416480506481b1700050004000000000008000200480837180500070000000000140003005a9008080c0005001000ff0006000900ac00038014000200291a451d065648130812043a3a54311a05000600020000000500060001000000050004000000000005000600000000000500070001000000090002002d4e00411d0000004e0002003d2731473d351a1036120b4740300b2f021f3c401d2e224916014b3d2451394102240425423c38100227083c3d562b553b4d3e1d0b183e53393f47433c3d1c453f2938073246384d1c340000050004000100000005000600010000003c000080050006000100000005000700020000001400030002000600070060270800e500030005001400050001800800010000000800050005000700480002801400050007000100ff070000920c000009007859140005000500020000010800040000000100feff0500040000000000140005000000040001b9050001000500c6310700d8025a80580003801d00010030040b0201180b0c120002041b0c0b300b240c606c7405050400000014000500000405002008080008000800ff030000050004000000000006000100246c0000070002001e2d4c0005000400010000003800018032000200281c0f23243b13532a310f02424d352449562a4f56304e17182045373d561e2b2c201102140c1b50514b4f2337010000a400038005000600010000001600010016480b0204300c091b09123005480401240400000500040002000000140003000700e30009000f00ff0f060008000800140003000200040006000300ff03dee700fc2b0014000500940000000300010000007f00050004000500060001000000340002002631392a4101003d254940470824541f161f3b0926570152474801180d24032141141d2226503d1a422b384c0f120c3018000280140005000400080003000800ff010002000409002000008014000500000008000700faff010008000300090005000400010000008400038043000200300e3738092912412d512b1f4b4d213412481d421a28194050202156431c2b0f37094548332f514b332f0820033129031f3d3a40374c490f01091801344a2300140005008000c1000f00050003000080550b090014000500018008000800040008000600588f06001400050003000500050006000500ff010e005a0648000280130001001b24020202360204006024020b690300160001000541060c36013600161b6c0605060b003006000005000700020000000500060002000000050002000900000074000180050004000200000014000500ce009167060002000004ff03060000000500060001000000050006000200000041000200503b2d0419394929513b130a16015138494b540c084f533310533c470a1a31000f0f1a57404d280c570d4c0b4d0220011f380235491046415734084b1f0000002800028006000200520900000a0001001203024801120000050007000200000005000600010000007c015a8018000080140005009f0f02007f000a00000807000b00420028000180050007000000000005000600000000001400050002000700ef00b70402000900550000003c00008014000300a200050005b60400050006008100010005000700020000000500060001000000130001000482160c2402364806130312000c0000c00003800500040001000000310002003b051f31493208340e0b2601093d01382835535132471b354d49415339134846550544081210492a503935400c00000005000700010000001200010001024802030b186000360b484830000014000500ffff09000b00060000000d0030060300140003000000070001000600ce0501000104040014000500cb5e060006004a0000005b0dff0f020028000200274a544255251f3b44050442470f1b142e533b2b54430101382d1103264e4619312f20193c00008005000700020000000500060002000000140005000004060021fb0900000004000600800014000500ffbfadfd85dd5084844464e7875b1c3dd1ecff3d1cd1b7a2a3110ba009e2d2"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$chown(0x4, r4, 0xee01, 0x0) 2.55825658s ago: executing program 2 (id=395): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xcd}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1648", 0x2}], 0x1}, 0x850) 948.866616ms ago: executing program 4 (id=396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x7, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 948.522546ms ago: executing program 0 (id=397): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6566f20f11eb670f38028d2faf0000660f35ba4200b84aef0f01df0f8db60068d6440f20c066350c000000440f22c00f083eaa650f01c2", 0x37}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 940.980787ms ago: executing program 2 (id=398): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r0, 0x7, 0x70bd28, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) 923.204847ms ago: executing program 0 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="f2b79690b5062c", 0x7, 0x20040090, 0x0, 0x0) 920.825258ms ago: executing program 1 (id=400): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e6114440000000000db430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0066000e0600000034e803e18b7123eb50af618f5bc1d31d54d4ceb28d6424ff8678e53a9d9aa294c1635d6514706667ba3fef", @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000180003801400038010000180050002000000000004000300200001801400020076657468305f746f5f626f6e640000000800030003000000"], 0x4c}}, 0x0) 833.700381ms ago: executing program 0 (id=401): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) 833.581661ms ago: executing program 2 (id=402): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x1) 812.075781ms ago: executing program 4 (id=403): capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 754.184003ms ago: executing program 4 (id=404): r0 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0xfffffffe) 2.89442ms ago: executing program 1 (id=405): syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) 2.671489ms ago: executing program 4 (id=406): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x70, 0x3, 0xfffffffe) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 0s ago: executing program 0 (id=407): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$chown(0x4, r4, 0xee01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 20.558768][ T28] audit: type=1400 audit(1775003481.443:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.559871][ T275] cgroup: Unknown subsys name 'net' [ 20.581521][ T28] audit: type=1400 audit(1775003481.443:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.608846][ T28] audit: type=1400 audit(1775003481.473:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.609003][ T275] cgroup: Unknown subsys name 'devices' [ 20.726173][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.731770][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.833834][ T28] audit: type=1400 audit(1775003481.713:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.857080][ T28] audit: type=1400 audit(1775003481.713:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.866768][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.882251][ T28] audit: type=1400 audit(1775003481.713:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.912870][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.913705][ T28] audit: type=1400 audit(1775003481.783:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.947846][ T28] audit: type=1400 audit(1775003481.783:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.973635][ T28] audit: type=1400 audit(1775003481.793:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.999284][ T28] audit: type=1400 audit(1775003481.793:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.693744][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.701054][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.708728][ T286] device bridge_slave_0 entered promiscuous mode [ 21.720227][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.727350][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.734966][ T285] device bridge_slave_0 entered promiscuous mode [ 21.744282][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.751612][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.759031][ T286] device bridge_slave_1 entered promiscuous mode [ 21.786549][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.793680][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.801267][ T285] device bridge_slave_1 entered promiscuous mode [ 21.830420][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.837516][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.845060][ T283] device bridge_slave_0 entered promiscuous mode [ 21.853085][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.860186][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.867491][ T283] device bridge_slave_1 entered promiscuous mode [ 21.910336][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.917435][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.924914][ T284] device bridge_slave_0 entered promiscuous mode [ 21.934723][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.941760][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.949393][ T284] device bridge_slave_1 entered promiscuous mode [ 22.002256][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.009369][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.016814][ T287] device bridge_slave_0 entered promiscuous mode [ 22.045125][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.052169][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.059548][ T287] device bridge_slave_1 entered promiscuous mode [ 22.133699][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.141073][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.148664][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.156624][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.182004][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.189079][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.196546][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.203760][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.256848][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.263903][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.271274][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.278312][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.292626][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.299778][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.307344][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.314746][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.335886][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.343548][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.351083][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.358655][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.366211][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.373705][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.381181][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.388505][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.396883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.404249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.432765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.440452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.456171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.465283][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.472395][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.479858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.488376][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.495435][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.504108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.512411][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.519457][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.543582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.551342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.559227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.568097][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.575395][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.583125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.591582][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.598788][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.606254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.614419][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.621465][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.628871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.636960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.662227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.670710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.679070][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.686102][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.694135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.702159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.710497][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.717522][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.724857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.733073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.741517][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.749067][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.756513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.764838][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.771938][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.779777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.801035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.809262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.817346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.825596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.833610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.841967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.850077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.858266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.882785][ T286] device veth0_vlan entered promiscuous mode [ 22.890253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.898444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.906680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.915785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.923661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.932105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.940580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.948997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.957318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.965729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.973935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.981874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.989811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.997396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.007949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.016176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.029923][ T284] device veth0_vlan entered promiscuous mode [ 23.037472][ T283] device veth0_vlan entered promiscuous mode [ 23.047442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.055527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.063107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.071632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.079967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.087972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.096114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.104358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.112949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.120444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.137036][ T285] device veth0_vlan entered promiscuous mode [ 23.145312][ T284] device veth1_macvtap entered promiscuous mode [ 23.154325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.163113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.171439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.179509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.187716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.195263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.205593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.213886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.222773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.230857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.241336][ T286] device veth1_macvtap entered promiscuous mode [ 23.249124][ T285] device veth1_macvtap entered promiscuous mode [ 23.256509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.264370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.271882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.279435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.287766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.296090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.303646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.311922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.321140][ T283] device veth1_macvtap entered promiscuous mode [ 23.330065][ T287] device veth0_vlan entered promiscuous mode [ 23.340869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.348646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.357037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.378136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.386391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.394791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.403080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.411647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.420421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.428697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.437091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.445491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.461202][ T287] device veth1_macvtap entered promiscuous mode [ 23.473136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.473155][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 23.482019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.496903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.505814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.514137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.522424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.535171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.543436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.572603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.573288][ T308] loop0: detected capacity change from 0 to 512 [ 23.581314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.645957][ T310] loop2: detected capacity change from 0 to 512 [ 23.654044][ T310] EXT4-fs: Ignoring removed bh option [ 23.662692][ T318] loop1: detected capacity change from 0 to 512 [ 23.695451][ T308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 23.713775][ T310] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 23.725944][ T318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 23.737376][ T308] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 23.773015][ T318] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 23.793007][ T310] EXT4-fs (loop2): 1 truncate cleaned up [ 23.814699][ T310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.828247][ T310] EXT4-fs (loop2): shut down requested (2) [ 23.834870][ T310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 23.843690][ T310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 23.860639][ T286] EXT4-fs (loop2): unmounting filesystem. [ 23.860718][ T329] loop3: detected capacity change from 0 to 128 [ 23.883442][ T329] syz.3.7: attempt to access beyond end of device [ 23.883442][ T329] loop3: rw=2049, sector=138, nr_sectors = 68 limit=128 [ 23.905275][ T308] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #18: comm syz.0.1: corrupted inode contents [ 23.925142][ T285] EXT4-fs (loop1): unmounting filesystem. [ 23.941878][ T308] EXT4-fs error (device loop0): ext4_dirty_inode:6139: inode #18: comm syz.0.1: mark_inode_dirty error [ 23.986152][ T308] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #18: comm syz.0.1: corrupted inode contents [ 24.010744][ T308] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2945: inode #18: comm syz.0.1: mark_inode_dirty error [ 24.014466][ T343] loop4: detected capacity change from 0 to 1024 [ 24.023083][ T308] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2948: inode #18: comm syz.0.1: mark inode dirty (error -117) [ 24.034429][ T343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 24.060904][ T308] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 24.075082][ T343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 24.081553][ T343] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.11: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 24.099420][ T343] EXT4-fs (loop4): Remounting filesystem read-only [ 24.106657][ T343] EXT4-fs error (device loop4): ext4_quota_enable:7033: comm syz.4.11: Bad quota inode: 3, type: 0 [ 24.123502][ T283] EXT4-fs (loop0): unmounting filesystem. [ 24.134869][ T343] EXT4-fs (loop4): Remounting filesystem read-only [ 24.141388][ T343] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 24.169166][ T343] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 24.176009][ T343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 24.298904][ T353] hub 9-0:1.0: USB hub found [ 24.304311][ T353] hub 9-0:1.0: 1 port detected [ 24.437458][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 24.443043][ T354] netlink: 39 bytes leftover after parsing attributes in process `syz.1.14'. [ 24.490986][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 24.530033][ T287] EXT4-fs (loop4): unmounting filesystem. [ 24.652848][ T367] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17'. [ 24.666139][ T359] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 24.678256][ T359] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 24.870319][ T379] devpts: called with bogus options [ 24.909366][ T383] xt_hashlimit: size too large, truncated to 1048576 [ 24.925850][ T382] tipc: Started in network mode [ 24.930750][ T382] tipc: Node identity 26efab517787, cluster identity 4711 [ 24.941230][ T387] loop4: detected capacity change from 0 to 512 [ 24.974591][ T382] tipc: Enabled bearer , priority 0 [ 24.974893][ T387] EXT4-fs: Ignoring removed oldalloc option [ 24.989984][ T387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.019746][ T387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 25.033966][ T387] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 25.047273][ T387] EXT4-fs (loop4): 1 truncate cleaned up [ 25.048499][ T391] device syzkaller0 entered promiscuous mode [ 25.052912][ T387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.080302][ T391] tipc: Resetting bearer [ 25.113652][ T287] EXT4-fs (loop4): unmounting filesystem. [ 25.117632][ T398] loop3: detected capacity change from 0 to 256 [ 25.125831][ T380] tipc: Resetting bearer [ 25.142615][ T380] tipc: Disabling bearer [ 25.162816][ T400] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 25.202895][ T402] loop3: detected capacity change from 0 to 1024 [ 25.213899][ T402] ======================================================= [ 25.213899][ T402] WARNING: The mand mount option has been deprecated and [ 25.213899][ T402] and is ignored by this kernel. Remove the mand [ 25.213899][ T402] option from the mount to silence this warning. [ 25.213899][ T402] ======================================================= [ 25.288389][ T402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.297746][ T402] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.315972][ T402] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.31: lblock 3 mapped to illegal pblock 3 (length 3) [ 25.330099][ T402] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 25.343091][ T402] EXT4-fs (loop3): This should not happen!! Data will be lost [ 25.343091][ T402] [ 25.466969][ T402] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.31: bg 0: block 112: padding at end of block bitmap is not set [ 25.483638][ T417] loop0: detected capacity change from 0 to 128 [ 25.598704][ T335] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 2) [ 25.635612][ T335] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 25.648995][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 25.649009][ T28] audit: type=1400 audit(1775003486.533:154): avc: denied { append } for pid=418 comm="syz.2.39" name="001" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.654863][ T335] EXT4-fs (loop3): This should not happen!! Data will be lost [ 25.654863][ T335] [ 25.695664][ T284] EXT4-fs (loop3): unmounting filesystem. [ 25.708353][ T28] audit: type=1400 audit(1775003486.593:155): avc: denied { create } for pid=424 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.793879][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.801425][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.818813][ T28] audit: type=1400 audit(1775003486.593:156): avc: denied { read } for pid=424 comm="syz.2.41" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.824583][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.851358][ T28] audit: type=1400 audit(1775003486.593:157): avc: denied { open } for pid=424 comm="syz.2.41" path="net:[4026532550]" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.858177][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.914233][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.967616][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.986137][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.994483][ T28] audit: type=1400 audit(1775003486.763:158): avc: denied { create } for pid=428 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.039664][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.046712][ T28] audit: type=1400 audit(1775003486.773:159): avc: denied { connect } for pid=428 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.069736][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.077636][ T436] hub 9-0:1.0: USB hub found [ 26.077724][ T436] hub 9-0:1.0: 1 port detected [ 26.131225][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.211205][ T439] tipc: Started in network mode [ 26.257060][ T439] tipc: Node identity 52b88d3d65f3, cluster identity 4711 [ 26.316657][ T439] tipc: Enabled bearer , priority 0 [ 26.348826][ T449] loop4: detected capacity change from 0 to 128 [ 26.380278][ T441] device syzkaller0 entered promiscuous mode [ 26.387174][ T441] tipc: Resetting bearer [ 26.396427][ T335] tipc: Resetting bearer [ 26.638750][ T432] tipc: Resetting bearer [ 26.660523][ T432] tipc: Disabling bearer [ 26.763076][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.770446][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.866005][ T465] hub 9-0:1.0: USB hub found [ 26.983876][ T465] hub 9-0:1.0: 1 port detected [ 27.130904][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.142093][ T28] audit: type=1326 audit(1775003488.023:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=468 comm="syz.3.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8046f9c819 code=0x0 [ 27.142610][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.181645][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.194711][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.198458][ T473] hub 9-0:1.0: USB hub found [ 27.207832][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.214904][ T473] hub 9-0:1.0: 1 port detected [ 27.216635][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.241938][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.251819][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.278601][ T481] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 27.304630][ T481] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: comm syz.2.62: inode #4294967295: comm syz.2.62: iget: illegal inode # [ 27.334446][ T481] EXT4-fs (loop2): no journal found [ 27.350123][ T481] EXT4-fs (loop2): can't get journal size [ 27.380561][ T481] EXT4-fs (loop2): failed to initialize system zone (-22) [ 27.398384][ T481] EXT4-fs (loop2): mount failed [ 27.717075][ T495] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 27.750439][ T28] audit: type=1400 audit(1775003488.633:161): avc: denied { write } for pid=497 comm="syz.0.68" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.819992][ T28] audit: type=1400 audit(1775003488.663:162): avc: denied { open } for pid=497 comm="syz.0.68" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.825862][ T495] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 27.844888][ T28] audit: type=1400 audit(1775003488.683:163): avc: denied { bind } for pid=499 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.861739][ T495] FAT-fs (loop1): Filesystem has been set read-only [ 27.881601][ T495] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 28.844628][ T522] hub 9-0:1.0: USB hub found [ 29.136619][ T522] hub 9-0:1.0: 1 port detected [ 29.173429][ T531] set_capacity_and_notify: 2 callbacks suppressed [ 29.173446][ T531] loop1: detected capacity change from 0 to 1024 [ 29.246136][ T531] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 29.255980][ T531] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.79: inode #4294967295: comm syz.1.79: iget: illegal inode # [ 29.269924][ T531] EXT4-fs (loop1): no journal found [ 29.293438][ T538] x_tables: duplicate underflow at hook 3 [ 29.299364][ T531] EXT4-fs (loop1): can't get journal size [ 29.345766][ T531] EXT4-fs (loop1): failed to initialize system zone (-22) [ 29.353116][ T531] EXT4-fs (loop1): mount failed [ 29.359435][ T544] loop3: detected capacity change from 0 to 512 [ 29.366540][ T544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.384174][ T551] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.482981][ T555] SELinux: failed to load policy [ 29.488488][ T544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.499990][ T544] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.060694][ T566] hub 9-0:1.0: USB hub found [ 30.065916][ T566] hub 9-0:1.0: 1 port detected [ 30.326706][ T284] EXT4-fs (loop3): unmounting filesystem. [ 30.336350][ T568] loop1: detected capacity change from 0 to 1024 [ 30.361160][ T568] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 30.397263][ T568] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.92: inode #4294967295: comm syz.1.92: iget: illegal inode # [ 30.413039][ T568] EXT4-fs (loop1): no journal found [ 30.418579][ T568] EXT4-fs (loop1): can't get journal size [ 30.430159][ T568] EXT4-fs (loop1): failed to initialize system zone (-22) [ 30.437466][ T568] EXT4-fs (loop1): mount failed [ 30.470654][ T581] tmpfs: Unknown parameter 'noswap' [ 30.476076][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.738064][ T589] hub 9-0:1.0: USB hub found [ 31.009086][ T589] hub 9-0:1.0: 1 port detected [ 31.979324][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 31.979338][ T28] audit: type=1326 audit(1775003492.863:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.013475][ T28] audit: type=1326 audit(1775003492.863:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.025908][ T585] x_tables: duplicate underflow at hook 3 [ 32.054550][ T28] audit: type=1326 audit(1775003492.863:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.080532][ T601] loop0: detected capacity change from 0 to 1024 [ 32.090102][ T19] usb 3-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 32.117535][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.136410][ T601] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 32.175271][ T19] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.179144][ T28] audit: type=1326 audit(1775003492.873:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.202723][ T601] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.103: inode #4294967295: comm syz.0.103: iget: illegal inode # [ 32.214663][ T28] audit: type=1326 audit(1775003492.873:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.231917][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.290095][ T614] hub 9-0:1.0: USB hub found [ 32.296201][ T614] hub 9-0:1.0: 1 port detected [ 32.361608][ T28] audit: type=1326 audit(1775003492.873:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.388077][ T601] EXT4-fs (loop0): no journal found [ 32.471458][ T601] EXT4-fs (loop0): can't get journal size [ 32.484421][ T19] usb 3-1: SerialNumber: syz [ 32.495896][ T19] usb 3-1: can't set config #1, error -71 [ 32.497931][ T601] EXT4-fs (loop0): failed to initialize system zone (-22) [ 32.506499][ T19] usb 3-1: USB disconnect, device number 2 [ 32.554728][ T601] EXT4-fs (loop0): mount failed [ 32.594599][ T28] audit: type=1326 audit(1775003492.873:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.596690][ T622] support for the xor transformation has been removed. [ 32.618651][ T28] audit: type=1326 audit(1775003492.873:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f843799c819 code=0x7ffc0000 [ 32.637448][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 32.649155][ T28] audit: type=1400 audit(1775003493.063:187): avc: denied { ioctl } for pid=609 comm="syz.3.107" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16900 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.686190][ T28] audit: type=1400 audit(1775003493.133:188): avc: denied { create } for pid=612 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.514621][ T633] loop2: detected capacity change from 0 to 1024 [ 33.529615][ T633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.530922][ T634] loop4: detected capacity change from 0 to 1024 [ 33.543758][ T633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.547666][ T634] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 33.559422][ T633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 33.617730][ T639] loop1: detected capacity change from 0 to 128 [ 33.649268][ T639] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 33.657516][ T639] FAT-fs (loop1): Filesystem has been set read-only [ 33.706379][ T634] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: comm syz.4.117: inode #4294967295: comm syz.4.117: iget: illegal inode # [ 33.805000][ T633] System zones: 0-1, 3-36 [ 33.895953][ T633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.904590][ T634] EXT4-fs (loop4): no journal found [ 33.910385][ T641] x_tables: duplicate underflow at hook 3 [ 33.919022][ T634] EXT4-fs (loop4): can't get journal size [ 33.933718][ T644] loop1: detected capacity change from 0 to 512 [ 33.941720][ T634] EXT4-fs (loop4): failed to initialize system zone (-22) [ 33.949486][ T634] EXT4-fs (loop4): mount failed [ 33.976670][ T644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.983313][ T644] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.012174][ T644] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 34.020920][ T644] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.030309][ T644] EXT4-fs (loop1): 1 truncate cleaned up [ 34.036378][ T644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.258846][ T644] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.120: lblock 0 mapped to illegal pblock 4 (length 1) [ 34.274736][ T644] EXT4-fs (loop1): Remounting filesystem read-only [ 34.314136][ T285] EXT4-fs (loop1): unmounting filesystem. [ 34.375739][ T286] EXT4-fs (loop2): unmounting filesystem. [ 34.637733][ T656] loop1: detected capacity change from 0 to 1024 [ 34.684809][ T656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.695754][ T656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.744280][ T672] loop3: detected capacity change from 0 to 1024 [ 34.763683][ T656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 34.779856][ T672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 34.787756][ T656] System zones: [ 34.790725][ T672] EXT4-fs error (device loop3): ext4_get_journal_inode:5743: comm syz.3.129: inode #4294967295: comm syz.3.129: iget: illegal inode # [ 34.791461][ T656] 0-1 [ 34.794583][ T672] EXT4-fs (loop3): no journal found [ 34.811362][ T656] , 3-36 [ 34.817372][ T672] EXT4-fs (loop3): can't get journal size [ 34.826296][ T656] [ 34.829706][ T656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.829929][ T672] EXT4-fs (loop3): failed to initialize system zone (-22) [ 34.888864][ T678] hub 9-0:1.0: USB hub found [ 34.893965][ T678] hub 9-0:1.0: 1 port detected [ 34.910190][ T672] EXT4-fs (loop3): mount failed [ 35.121018][ T682] overlayfs: upper fs does not support tmpfile. [ 35.927789][ T285] EXT4-fs (loop1): unmounting filesystem. [ 36.099754][ T702] loop4: detected capacity change from 0 to 1024 [ 36.144332][ T702] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 36.195710][ T702] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: comm syz.4.137: inode #4294967295: comm syz.4.137: iget: illegal inode # [ 36.908543][ T717] overlayfs: upper fs does not support tmpfile. [ 36.917730][ T702] EXT4-fs (loop4): no journal found [ 36.934635][ T702] EXT4-fs (loop4): can't get journal size [ 36.941924][ T702] EXT4-fs (loop4): failed to initialize system zone (-22) [ 36.957867][ T702] EXT4-fs (loop4): mount failed [ 36.966156][ T726] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 36.975288][ T726] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 37.073038][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 37.073055][ T28] audit: type=1400 audit(1775003497.913:202): avc: denied { read } for pid=728 comm="syz.0.146" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.102733][ T467] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 37.111058][ T28] audit: type=1400 audit(1775003497.913:203): avc: denied { open } for pid=728 comm="syz.0.146" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.134804][ T28] audit: type=1400 audit(1775003497.913:204): avc: denied { ioctl } for pid=728 comm="syz.0.146" path="/dev/usbmon5" dev="devtmpfs" ino=174 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.376752][ T467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.412666][ T467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 37.442166][ T467] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 37.451726][ T467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.488638][ T467] usb 2-1: Product: syz [ 37.492972][ T467] usb 2-1: Manufacturer: syz [ 37.498956][ T467] usb 2-1: SerialNumber: syz [ 37.507482][ T467] usb 2-1: config 0 descriptor?? [ 37.525432][ T710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 37.697163][ T467] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 37.730514][ T467] usb 2-1: No valid video chain found. [ 37.739768][ T744] loop4: detected capacity change from 0 to 1024 [ 37.753370][ T28] audit: type=1400 audit(1775003498.633:205): avc: denied { ioctl } for pid=745 comm="syz.3.150" path="socket:[17198]" dev="sockfs" ino=17198 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.785029][ T744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.798198][ T744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.832190][ T744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 37.851203][ T744] System zones: 0-1, 3-36 [ 37.883327][ T744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.931224][ T713] usb 2-1: USB disconnect, device number 2 [ 38.264814][ T762] loop3: detected capacity change from 0 to 128 [ 38.444091][ T762] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 38.452122][ T762] FAT-fs (loop3): Filesystem has been set read-only [ 38.532862][ T28] audit: type=1400 audit(1775003499.413:206): avc: denied { ioctl } for pid=765 comm="syz.2.155" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.540518][ T768] hub 9-0:1.0: USB hub found [ 38.589419][ T287] EXT4-fs (loop4): unmounting filesystem. [ 38.594682][ T768] hub 9-0:1.0: 1 port detected [ 38.608139][ T770] loop2: detected capacity change from 0 to 1024 [ 38.629280][ T770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 38.640319][ T770] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: comm syz.2.157: inode #4294967295: comm syz.2.157: iget: illegal inode # [ 38.647902][ T28] audit: type=1400 audit(1775003499.523:207): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.654650][ T770] EXT4-fs (loop2): no journal found [ 38.680512][ T770] EXT4-fs (loop2): can't get journal size [ 38.687677][ T770] EXT4-fs (loop2): failed to initialize system zone (-22) [ 38.695045][ T770] EXT4-fs (loop2): mount failed [ 38.711745][ T28] audit: type=1400 audit(1775003499.593:208): avc: denied { getopt } for pid=778 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.834301][ T28] audit: type=1400 audit(1775003499.713:209): avc: denied { mounton } for pid=793 comm="syz.4.167" path="/37/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.136456][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.620606][ T28] audit: type=1400 audit(1775003500.503:210): avc: denied { mount } for pid=786 comm="syz.1.163" name="/" dev="configfs" ino=13738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.670281][ T813] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xa2 [ 39.741426][ T820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 39.794544][ T817] Bluetooth: hci0: command 0x1003 tx timeout [ 39.794543][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.833447][ T28] audit: type=1400 audit(1775003500.713:211): avc: denied { read } for pid=825 comm="syz.0.178" path="socket:[17838]" dev="sockfs" ino=17838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.913470][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.921126][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.937222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 39.958885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.968196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 39.984306][ T839] loop3: detected capacity change from 0 to 1024 [ 39.988605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.994694][ T839] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 40.008045][ T841] mmap: syz.1.184 (841): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 40.014989][ T839] EXT4-fs error (device loop3): ext4_get_journal_inode:5743: comm syz.3.182: inode #4294967295: comm syz.3.182: iget: illegal inode # [ 40.031224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.034448][ T839] EXT4-fs (loop3): no journal found [ 40.043220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.048209][ T839] EXT4-fs (loop3): can't get journal size [ 40.058482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.073153][ T843] tmpfs: Too small a size for current use [ 40.074404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.079369][ T839] EXT4-fs (loop3): failed to initialize system zone (-22) [ 40.094482][ T839] EXT4-fs (loop3): mount failed [ 40.668385][ T869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.706820][ T871] incfs_lookup_dentry err:-13 [ 40.764554][ T749] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 40.840035][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 41.002909][ T882] hub 9-0:1.0: USB hub found [ 41.008270][ T882] hub 9-0:1.0: 1 port detected [ 41.661058][ T900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'. [ 41.741078][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.779955][ T907] loop3: detected capacity change from 0 to 1024 [ 41.794523][ T747] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 41.795172][ T847] Bluetooth: hci2: command 0x1003 tx timeout [ 41.807718][ T907] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 41.819702][ T907] EXT4-fs error (device loop3): ext4_get_journal_inode:5743: comm syz.3.208: inode #4294967295: comm syz.3.208: iget: illegal inode # [ 41.834948][ T907] EXT4-fs (loop3): no journal found [ 41.840256][ T907] EXT4-fs (loop3): can't get journal size [ 41.846726][ T907] EXT4-fs (loop3): failed to initialize system zone (-22) [ 41.854004][ T907] EXT4-fs (loop3): mount failed [ 41.874645][ T910] Bluetooth: hci0: command 0x1003 tx timeout [ 41.874662][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.146376][ T782] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 42.249315][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.357643][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 42.357656][ T28] audit: type=1400 audit(1775003503.243:229): avc: denied { create } for pid=928 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.383348][ T28] audit: type=1400 audit(1775003503.243:230): avc: denied { map } for pid=928 comm="syz.0.216" path="socket:[18084]" dev="sockfs" ino=18084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.407389][ T28] audit: type=1400 audit(1775003503.243:231): avc: denied { read } for pid=928 comm="syz.0.216" path="socket:[18084]" dev="sockfs" ino=18084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.525805][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.995114][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 43.001471][ T749] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.013861][ T935] hub 9-0:1.0: USB hub found [ 43.018811][ T935] hub 9-0:1.0: 1 port detected [ 43.035888][ T24] usb 2-1: config index 0 descriptor too short (expected 65170, got 92) [ 43.044303][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.056643][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.065927][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.073890][ T24] usb 2-1: Product: syz [ 43.078077][ T24] usb 2-1: Manufacturer: syz [ 43.082654][ T24] usb 2-1: SerialNumber: syz [ 43.234754][ T941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.504041][ T28] audit: type=1400 audit(1775003504.383:232): avc: denied { read } for pid=950 comm="syz.0.224" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.526800][ T28] audit: type=1400 audit(1775003504.383:233): avc: denied { open } for pid=950 comm="syz.0.224" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.550054][ T28] audit: type=1400 audit(1775003504.393:234): avc: denied { ioctl } for pid=950 comm="syz.0.224" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.874532][ T747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 43.874555][ T749] Bluetooth: hci4: command 0x1003 tx timeout [ 43.891337][ T24] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 43.916907][ T24] cdc_ncm 2-1:1.0: bind() failure [ 43.922663][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 43.929673][ T24] cdc_ncm 2-1:1.1: bind() failure [ 43.935969][ T24] usb 2-1: USB disconnect, device number 3 [ 44.015548][ T963] loop2: detected capacity change from 0 to 1024 [ 44.025530][ T963] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 44.036321][ T963] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: comm syz.2.229: inode #4294967295: comm syz.2.229: iget: illegal inode # [ 44.050454][ T963] EXT4-fs (loop2): no journal found [ 44.055715][ T963] EXT4-fs (loop2): can't get journal size [ 44.061780][ T963] EXT4-fs (loop2): failed to initialize system zone (-22) [ 44.069153][ T963] EXT4-fs (loop2): mount failed [ 44.284745][ T782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.314642][ T28] audit: type=1400 audit(1775003505.083:235): avc: denied { write } for pid=967 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.498186][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.549503][ T981] loop3: detected capacity change from 0 to 1024 [ 44.556945][ T981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.569810][ T981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.585172][ T981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 44.593702][ T981] System zones: 0-1, 3-36 [ 44.604749][ T981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.685877][ T28] audit: type=1400 audit(1775003505.573:236): avc: denied { mount } for pid=997 comm="syz.0.243" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.708026][ T28] audit: type=1400 audit(1775003505.573:237): avc: denied { remount } for pid=997 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.056306][ T28] audit: type=1400 audit(1775003505.593:238): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.148714][ T1010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 45.234094][ T1027] loop1: detected capacity change from 0 to 1024 [ 45.262076][ T1027] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 45.271842][ T1027] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.255: inode #4294967295: comm syz.1.255: iget: illegal inode # [ 45.286414][ T1027] EXT4-fs (loop1): no journal found [ 45.291659][ T1027] EXT4-fs (loop1): can't get journal size [ 45.297881][ T1027] EXT4-fs (loop1): failed to initialize system zone (-22) [ 45.305136][ T1027] EXT4-fs (loop1): mount failed [ 45.369950][ T1030] loop2: detected capacity change from 0 to 128 [ 45.432302][ T284] EXT4-fs (loop3): unmounting filesystem. [ 45.924544][ T467] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 46.115928][ T467] usb 4-1: Using ep0 maxpacket: 16 [ 46.123851][ T467] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.136980][ T467] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.153749][ T467] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.162204][ T467] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 46.166775][ T1063] UHID_CREATE from different security context by process 138 (syz.2.270), this is not allowed. [ 46.171382][ T467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.193709][ T467] usb 4-1: config 0 descriptor?? [ 46.388902][ T1074] hub 9-0:1.0: USB hub found [ 46.394050][ T1074] hub 9-0:1.0: 1 port detected [ 46.524551][ T782] Bluetooth: hci0: command 0x1003 tx timeout [ 46.524591][ T747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.536963][ T978] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 46.554566][ T696] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.581792][ T1080] loop4: detected capacity change from 0 to 1024 [ 46.589140][ T1080] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 46.599751][ T1080] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: comm syz.4.277: inode #4294967295: comm syz.4.277: iget: illegal inode # [ 46.613730][ T1080] EXT4-fs (loop4): no journal found [ 46.619003][ T1080] EXT4-fs (loop4): can't get journal size [ 46.625229][ T1080] EXT4-fs (loop4): failed to initialize system zone (-22) [ 46.632515][ T1080] EXT4-fs (loop4): mount failed [ 46.716034][ T467] hid (null): unknown global tag 0xd [ 46.722293][ T467] hid (null): report_id 0 is invalid [ 46.744552][ T696] usb 2-1: Using ep0 maxpacket: 32 [ 46.750779][ T696] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 46.759198][ T696] usb 2-1: config 0 has no interface number 0 [ 46.765431][ T696] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 46.777368][ T696] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 46.786561][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.794624][ T696] usb 2-1: Product: syz [ 46.798796][ T696] usb 2-1: Manufacturer: syz [ 46.803398][ T696] usb 2-1: SerialNumber: syz [ 46.808642][ T696] usb 2-1: config 0 descriptor?? [ 46.813886][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 46.900227][ T467] usb 4-1: USB disconnect, device number 2 [ 47.023024][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 47.185242][ T1091] loop2: detected capacity change from 0 to 128 [ 47.345749][ T1098] device syzkaller0 entered promiscuous mode [ 47.458535][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.684334][ T1116] hub 9-0:1.0: USB hub found [ 47.689309][ T1116] hub 9-0:1.0: 1 port detected [ 47.807821][ T696] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.894556][ T713] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.965633][ T696] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.976390][ T696] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 47.987031][ T696] asix: probe of 2-1:0.188 failed with error -71 [ 47.995413][ T696] usb 2-1: USB disconnect, device number 4 [ 48.075518][ T713] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 48.083980][ T713] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 48.093075][ T713] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 48.103399][ T713] usb 5-1: config 220 has no interface number 2 [ 48.109727][ T713] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 48.122932][ T713] usb 5-1: config 220 interface 0 has no altsetting 0 [ 48.129942][ T713] usb 5-1: config 220 interface 76 has no altsetting 0 [ 48.136948][ T713] usb 5-1: config 220 interface 1 has no altsetting 0 [ 48.145456][ T713] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 48.154829][ T713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.162855][ T713] usb 5-1: Product: syz [ 48.167083][ T713] usb 5-1: Manufacturer: syz [ 48.171698][ T713] usb 5-1: SerialNumber: syz [ 48.334570][ T595] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 48.385100][ T713] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 48.391566][ T713] usb 5-1: No valid video chain found. [ 48.397276][ T713] usb 5-1: selecting invalid altsetting 0 [ 48.405755][ T713] usb 5-1: USB disconnect, device number 2 [ 48.515601][ T595] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 48.527439][ T595] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 48.537448][ T595] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.575550][ T595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.784526][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.933169][ T1148] loop4: detected capacity change from 0 to 1024 [ 48.940299][ T1148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 48.950024][ T1148] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: comm syz.4.306: inode #4294967295: comm syz.4.306: iget: illegal inode # [ 48.965212][ T1148] EXT4-fs (loop4): no journal found [ 48.970489][ T1148] EXT4-fs (loop4): can't get journal size [ 48.974523][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 48.981551][ T1148] EXT4-fs (loop4): failed to initialize system zone (-22) [ 48.982388][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.988953][ T1148] EXT4-fs (loop4): mount failed [ 48.997029][ T24] usb 2-1: config 0 has no interface number 0 [ 49.008409][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 49.016856][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.026019][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.033984][ T24] usb 2-1: Product: syz [ 49.038284][ T24] usb 2-1: Manufacturer: syz [ 49.042878][ T24] usb 2-1: SerialNumber: syz [ 49.084867][ T24] usb 2-1: config 0 descriptor?? [ 49.090982][ T24] smsc75xx v1.0.0 [ 49.424966][ T595] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 49.432568][ T595] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4 [ 49.442301][ T595] input: failed to attach handler kbd to device input4, error: -5 [ 49.450840][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 49.450861][ T28] audit: type=1400 audit(1775003510.343:242): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.479122][ T782] Bluetooth: hci0: command 0x1003 tx timeout [ 49.485186][ T747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.485177][ T28] audit: type=1400 audit(1775003510.343:243): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.515061][ T1106] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 49.537318][ T1159] tipc: Started in network mode [ 49.542957][ T1159] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 49.550302][ T1159] tipc: Enabled bearer , priority 10 [ 49.572470][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.716437][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 49.729259][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 49.739137][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 49.761990][ T24] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 49.872550][ T24] usb 2-1: USB disconnect, device number 5 [ 49.989171][ T1178] raw_sendmsg: syz.4.317 forgot to set AF_INET. Fix it! [ 50.064569][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 50.277107][ T1191] loop1: detected capacity change from 0 to 1024 [ 50.284086][ T1191] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 50.294417][ T1191] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.323: inode #4294967295: comm syz.1.323: iget: illegal inode # [ 50.308510][ T1191] EXT4-fs (loop1): no journal found [ 50.313737][ T1191] EXT4-fs (loop1): can't get journal size [ 50.319768][ T1191] EXT4-fs (loop1): failed to initialize system zone (-22) [ 50.326930][ T1191] EXT4-fs (loop1): mount failed [ 50.664556][ T1152] tipc: Node number set to 8956586 [ 51.062257][ T1152] usb 3-1: USB disconnect, device number 3 [ 51.634555][ T747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.634801][ T817] Bluetooth: hci0: command 0x1003 tx timeout [ 51.659856][ T28] audit: type=1400 audit(1775003512.543:244): avc: denied { create } for pid=1233 comm="syz.3.338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.682009][ T28] audit: type=1400 audit(1775003512.573:245): avc: denied { write } for pid=1233 comm="syz.3.338" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.704579][ T28] audit: type=1400 audit(1775003512.573:246): avc: denied { open } for pid=1233 comm="syz.3.338" path="/63/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.729193][ T28] audit: type=1400 audit(1775003512.573:247): avc: denied { ioctl } for pid=1233 comm="syz.3.338" path="/63/file0" dev="tmpfs" ino=351 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.756103][ T28] audit: type=1400 audit(1775003512.593:248): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.875104][ T713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.064556][ T713] usb 3-1: Using ep0 maxpacket: 16 [ 52.072053][ T713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.092667][ T713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.102904][ T713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 52.110581][ T713] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 52.122477][ T817] Bluetooth: hci1: command 0x1003 tx timeout [ 52.128630][ T782] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 52.134779][ T713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.162723][ T713] usb 3-1: config 0 descriptor?? [ 52.444576][ T1152] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 52.576611][ T713] hid (null): invalid report_size 1684763247 [ 52.616827][ T1262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 52.636401][ T1152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.703459][ T1152] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 52.722253][ T1152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.731474][ T1152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.739715][ T1152] usb 2-1: Product: syz [ 52.743918][ T1152] usb 2-1: Manufacturer: syz [ 52.748841][ T1152] usb 2-1: SerialNumber: syz [ 52.954399][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 52.959097][ T595] usb 3-1: USB disconnect, device number 4 [ 52.963033][ T1246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 53.115265][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [ 53.578982][ T1246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 53.787416][ T1152] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 53.793967][ T1152] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 53.802234][ T1152] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 53.996975][ T1152] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 54.002154][ T1291] loop2: detected capacity change from 0 to 1024 [ 54.004330][ T1152] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 54.011747][ T1291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.022967][ T1152] usb 2-1: USB disconnect, device number 6 [ 54.034365][ T28] audit: type=1400 audit(1775003514.913:249): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 54.042647][ T1152] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 54.057684][ T28] audit: type=1400 audit(1775003514.923:250): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.091997][ T1291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.105027][ T1291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 54.113337][ T1291] System zones: 0-1, 3-36 [ 54.118007][ T747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.123046][ T28] audit: type=1400 audit(1775003514.923:251): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.147548][ T1291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.646521][ T1323] Zero length message leads to an empty skb [ 54.899349][ T286] EXT4-fs (loop2): unmounting filesystem. [ 54.994577][ T747] Bluetooth: hci1: command 0x1003 tx timeout [ 55.024282][ T782] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 55.164599][ T817] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 55.589937][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 55.589951][ T28] audit: type=1400 audit(1775003516.473:264): avc: denied { read } for pid=1353 comm="syz.1.375" name="file2" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.626785][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.631042][ T1356] loop3: detected capacity change from 0 to 1024 [ 55.646670][ T1356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.653662][ T1356] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.665811][ T1356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 55.673925][ T1356] System zones: 0-1, 3-36 [ 55.679162][ T1356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.081163][ T28] audit: type=1400 audit(1775003516.963:265): avc: denied { block_suspend } for pid=1362 comm="syz.2.378" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.224407][ T1371] incfs: Can't find or create .index dir in ./file0 [ 56.231149][ T1371] incfs: mount failed -5 [ 56.314433][ T1378] netlink: 72 bytes leftover after parsing attributes in process `syz.4.384'. [ 56.513124][ T284] EXT4-fs (loop3): unmounting filesystem. [ 56.854668][ T28] audit: type=1400 audit(1775003517.743:266): avc: denied { unlink } for pid=1393 comm="syz.0.391" name="#3" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.934570][ T595] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.459625][ T817] Bluetooth: hci0: command 0x1003 tx timeout [ 58.562054][ T782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.569085][ T1358] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 58.597850][ T595] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 58.608296][ T595] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 58.618320][ T595] usb 4-1: config 1 interface 0 has no altsetting 0 [ 58.636358][ T595] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 58.645620][ T595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.653767][ T595] usb 4-1: Product: syz [ 58.657185][ T1421] loop0: detected capacity change from 0 to 1024 [ 58.658432][ T595] usb 4-1: Manufacturer: syz [ 58.695231][ T1421] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 58.718750][ T595] usb 4-1: SerialNumber: syz [ 58.726845][ T1421] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.401: inode #4294967295: comm syz.0.401: iget: illegal inode # [ 58.726948][ T1392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.748548][ T1421] EXT4-fs (loop0): no journal found [ 58.748832][ T1392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.755148][ T1421] EXT4-fs (loop0): can't get journal size [ 58.768032][ T1421] EXT4-fs (loop0): failed to initialize system zone (-22) [ 58.775658][ T1421] EXT4-fs (loop0): mount failed [ 58.836964][ T1430] hub 9-0:1.0: USB hub found [ 58.842119][ T1430] hub 9-0:1.0: 1 port detected [ 59.518041][ T39] ================================================================== [ 59.526133][ T39] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 59.533265][ T39] Write of size 8 at addr ffff888114b18a00 by task kworker/1:1/39 [ 59.541133][ T39] [ 59.543443][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted syzkaller #0 [ 59.550698][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.560812][ T39] Workqueue: pm hcd_resume_work [ 59.565665][ T39] Call Trace: [ 59.568925][ T39] [ 59.571831][ T39] __dump_stack+0x21/0x24 [ 59.576137][ T39] dump_stack_lvl+0x110/0x170 [ 59.580785][ T39] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.585784][ T39] ? enqueue_timer+0xae/0x480 [ 59.590435][ T39] print_address_description+0x71/0x200 [ 59.596131][ T39] print_report+0x4a/0x60 [ 59.600437][ T39] kasan_report+0x122/0x150 [ 59.605014][ T39] ? enqueue_timer+0xae/0x480 [ 59.609669][ T39] __asan_report_store8_noabort+0x17/0x20 [ 59.615456][ T39] enqueue_timer+0xae/0x480 [ 59.619932][ T39] __mod_timer+0x84c/0xc00 [ 59.624330][ T39] ? ttwu_do_activate+0x174/0x280 [ 59.629328][ T39] schedule_timeout+0x154/0x340 [ 59.634250][ T39] ? __cfi_schedule_timeout+0x10/0x10 [ 59.639620][ T39] ? __cfi_process_timeout+0x10/0x10 [ 59.644879][ T39] ? _raw_spin_lock+0x94/0xf0 [ 59.649706][ T39] wait_for_common+0x365/0x640 [ 59.654465][ T39] ? usb_hcd_giveback_urb+0x351/0x410 [ 59.659812][ T39] ? wait_for_completion+0x20/0x20 [ 59.664911][ T39] ? usb_submit_urb+0x1150/0x1820 [ 59.669923][ T39] wait_for_completion_timeout+0xe/0x10 [ 59.675441][ T39] usb_start_wait_urb+0x173/0x300 [ 59.680534][ T39] ? usb_api_blocking_completion+0xb0/0xb0 [ 59.686319][ T39] ? __kasan_check_write+0x14/0x20 [ 59.691408][ T39] usb_control_msg+0x241/0x3f0 [ 59.696680][ T39] hub_ext_port_status+0x100/0x6b0 [ 59.701767][ T39] hub_activate+0x88d/0x1ab0 [ 59.706334][ T39] hub_resume+0x97/0x390 [ 59.710547][ T39] ? __cfi_hub_resume+0x10/0x10 [ 59.715368][ T39] ? usbfs_notify_resume+0xd0/0xe0 [ 59.720449][ T39] usb_resume_both+0x753/0xd80 [ 59.725184][ T39] ? usb_resume+0xa0/0xa0 [ 59.729587][ T39] ? update_load_avg+0x4bf/0x13f0 [ 59.734588][ T39] usb_runtime_resume+0x21/0x30 [ 59.739415][ T39] ? __cfi_usb_runtime_resume+0x10/0x10 [ 59.744937][ T39] __rpm_callback+0x315/0x7a0 [ 59.749606][ T39] ? __cfi_usb_runtime_resume+0x10/0x10 [ 59.755128][ T39] ? dev_pm_disable_wake_irq_check+0xbc/0x160 [ 59.761168][ T39] ? rpm_resume+0xd79/0x15a0 [ 59.765730][ T39] ? __cfi_usb_runtime_resume+0x10/0x10 [ 59.771256][ T39] rpm_resume+0xf63/0x15a0 [ 59.775654][ T39] ? __pm_runtime_resume+0x90/0x90 [ 59.780741][ T39] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 59.786173][ T39] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 59.792046][ T39] ? __kasan_check_write+0x14/0x20 [ 59.797133][ T39] ? mutex_lock+0x93/0x1b0 [ 59.801518][ T39] __pm_runtime_resume+0x69/0x90 [ 59.806429][ T39] usb_autoresume_device+0x23/0x60 [ 59.811597][ T39] usb_remote_wakeup+0x5d/0xc0 [ 59.816336][ T39] hcd_resume_work+0x3b/0x40 [ 59.820910][ T39] process_one_work+0x71f/0xc40 [ 59.825753][ T39] worker_thread+0xa29/0x11e0 [ 59.830424][ T39] kthread+0x281/0x320 [ 59.834492][ T39] ? __cfi_worker_thread+0x10/0x10 [ 59.839582][ T39] ? __cfi_kthread+0x10/0x10 [ 59.844155][ T39] ret_from_fork+0x1f/0x30 [ 59.848649][ T39] [ 59.851646][ T39] [ 59.853951][ T39] Allocated by task 1358: [ 59.858334][ T39] kasan_set_track+0x4b/0x70 [ 59.862903][ T39] kasan_save_alloc_info+0x25/0x30 [ 59.867997][ T39] __kasan_kmalloc+0x95/0xb0 [ 59.872615][ T39] __kmalloc+0xb1/0x1e0 [ 59.876765][ T39] hci_alloc_dev_priv+0x27/0x1bd0 [ 59.881776][ T39] hci_uart_tty_ioctl+0x3c8/0xa20 [ 59.886871][ T39] tty_ioctl+0x8ef/0xc60 [ 59.891183][ T39] __se_sys_ioctl+0x12f/0x1b0 [ 59.895842][ T39] __x64_sys_ioctl+0x7b/0x90 [ 59.900405][ T39] x64_sys_call+0x58b/0x9a0 [ 59.904879][ T39] do_syscall_64+0x4c/0xa0 [ 59.909279][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.915233][ T39] [ 59.917530][ T39] Freed by task 1358: [ 59.921589][ T39] kasan_set_track+0x4b/0x70 [ 59.926254][ T39] kasan_save_free_info+0x31/0x50 [ 59.931261][ T39] ____kasan_slab_free+0x132/0x180 [ 59.936379][ T39] __kasan_slab_free+0x11/0x20 [ 59.941118][ T39] slab_free_freelist_hook+0xc2/0x190 [ 59.946471][ T39] __kmem_cache_free+0xb7/0x1b0 [ 59.951411][ T39] kfree+0x6f/0xf0 [ 59.955128][ T39] hci_release_dev+0x12a3/0x13b0 [ 59.960046][ T39] bt_host_release+0x82/0x90 [ 59.964616][ T39] device_release+0xa4/0x1d0 [ 59.969205][ T39] kobject_put+0x19d/0x280 [ 59.973621][ T39] put_device+0x1f/0x30 [ 59.977761][ T39] hci_dev_cmd+0x279/0x740 [ 59.982237][ T39] hci_sock_ioctl+0x41e/0x7f0 [ 59.986885][ T39] sock_do_ioctl+0x114/0x330 [ 59.991454][ T39] sock_ioctl+0x4bd/0x710 [ 59.995765][ T39] __se_sys_ioctl+0x12f/0x1b0 [ 60.000451][ T39] __x64_sys_ioctl+0x7b/0x90 [ 60.005007][ T39] x64_sys_call+0x58b/0x9a0 [ 60.009480][ T39] do_syscall_64+0x4c/0xa0 [ 60.013877][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.019742][ T39] [ 60.022038][ T39] Last potentially related work creation: [ 60.027725][ T39] kasan_save_stack+0x3a/0x60 [ 60.032377][ T39] __kasan_record_aux_stack+0xb6/0xc0 [ 60.037722][ T39] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.043499][ T39] insert_work+0x51/0x300 [ 60.047800][ T39] __queue_work+0x9b1/0xd30 [ 60.052274][ T39] queue_work_on+0xde/0x150 [ 60.056750][ T39] __hci_cmd_sync_sk+0xa7f/0xd30 [ 60.061662][ T39] hci_cmd_sync_status+0x53/0x120 [ 60.066655][ T39] hci_dev_cmd+0x35b/0x740 [ 60.071040][ T39] hci_sock_ioctl+0x41e/0x7f0 [ 60.075688][ T39] sock_do_ioctl+0x114/0x330 [ 60.080423][ T39] sock_ioctl+0x4bd/0x710 [ 60.084721][ T39] __se_sys_ioctl+0x12f/0x1b0 [ 60.089387][ T39] __x64_sys_ioctl+0x7b/0x90 [ 60.093944][ T39] x64_sys_call+0x58b/0x9a0 [ 60.098507][ T39] do_syscall_64+0x4c/0xa0 [ 60.102983][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.108934][ T39] [ 60.111315][ T39] Second to last potentially related work creation: [ 60.117866][ T39] kasan_save_stack+0x3a/0x60 [ 60.122513][ T39] __kasan_record_aux_stack+0xb6/0xc0 [ 60.127942][ T39] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.133720][ T39] insert_work+0x51/0x300 [ 60.138018][ T39] __queue_work+0x9b1/0xd30 [ 60.142500][ T39] queue_work_on+0xde/0x150 [ 60.147093][ T39] hci_cmd_timeout+0x191/0x200 [ 60.151826][ T39] process_one_work+0x71f/0xc40 [ 60.156732][ T39] worker_thread+0xa29/0x11e0 [ 60.161380][ T39] kthread+0x281/0x320 [ 60.165597][ T39] ret_from_fork+0x1f/0x30 [ 60.170074][ T39] [ 60.172370][ T39] The buggy address belongs to the object at ffff888114b18000 [ 60.172370][ T39] which belongs to the cache kmalloc-8k of size 8192 [ 60.186486][ T39] The buggy address is located 2560 bytes inside of [ 60.186486][ T39] 8192-byte region [ffff888114b18000, ffff888114b1a000) [ 60.199946][ T39] [ 60.202367][ T39] The buggy address belongs to the physical page: [ 60.208840][ T39] page:ffffea000452c600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114b18 [ 60.219162][ T39] head:ffffea000452c600 order:3 compound_mapcount:0 compound_pincount:0 [ 60.227455][ T39] flags: 0x4000000000010200(slab|head|zone=1) [ 60.233519][ T39] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500 [ 60.242081][ T39] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 60.250630][ T39] page dumped because: kasan: bad access detected [ 60.257019][ T39] page_owner tracks the page as allocated [ 60.262704][ T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 352, tgid 347 (syz.3.13), ts 24506616148, free_ts 24494551796 [ 60.284995][ T39] post_alloc_hook+0x1f5/0x210 [ 60.289752][ T39] prep_new_page+0x1c/0x110 [ 60.294321][ T39] get_page_from_freelist+0x2d12/0x2d80 [ 60.299848][ T39] __alloc_pages+0x1fa/0x610 [ 60.304447][ T39] alloc_slab_page+0x6e/0xf0 [ 60.309103][ T39] new_slab+0x98/0x3d0 [ 60.313160][ T39] ___slab_alloc+0x6bd/0xb20 [ 60.317751][ T39] __slab_alloc+0x5e/0xa0 [ 60.322147][ T39] __kmem_cache_alloc_node+0x203/0x2c0 [ 60.327581][ T39] kmalloc_trace+0x29/0xb0 [ 60.331971][ T39] uhid_queue_event+0x5a/0x280 [ 60.336706][ T39] uhid_hid_open+0x40/0x50 [ 60.341097][ T39] hid_hw_open+0xfa/0x190 [ 60.345404][ T39] hidraw_open+0x2a2/0x8f0 [ 60.349790][ T39] chrdev_open+0x5d3/0x6b0 [ 60.354176][ T39] do_dentry_open+0x88e/0x1260 [ 60.358913][ T39] page last free stack trace: [ 60.363563][ T39] free_unref_page_prepare+0x742/0x750 [ 60.368994][ T39] free_unref_page+0x95/0x540 [ 60.373644][ T39] __free_pages+0x67/0x100 [ 60.378035][ T39] __free_slab+0xca/0x1a0 [ 60.382341][ T39] __unfreeze_partials+0x160/0x190 [ 60.387516][ T39] put_cpu_partial+0xa9/0x100 [ 60.392188][ T39] __slab_free+0x1c4/0x280 [ 60.396594][ T39] ___cache_free+0xbf/0xd0 [ 60.400987][ T39] qlist_free_all+0xc6/0x140 [ 60.405553][ T39] kasan_quarantine_reduce+0x14a/0x170 [ 60.411006][ T39] __kasan_slab_alloc+0x24/0x80 [ 60.415835][ T39] slab_post_alloc_hook+0x4f/0x2d0 [ 60.420919][ T39] kmem_cache_alloc+0x16e/0x330 [ 60.425829][ T39] getname_flags+0xb9/0x500 [ 60.430330][ T39] getname+0x19/0x20 [ 60.434294][ T39] do_sys_openat2+0xeb/0x810 [ 60.438890][ T39] [ 60.441231][ T39] Memory state around the buggy address: [ 60.446829][ T39] ffff888114b18900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.454865][ T39] ffff888114b18980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.462987][ T39] >ffff888114b18a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.471105][ T39] ^ [ 60.475156][ T39] ffff888114b18a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.483184][ T39] ffff888114b18b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.491214][ T39] ================================================================== [ 60.499287][ T39] Disabling lock debugging due to kernel taint [ 60.544680][ T595] rtl8150 4-1:1.0: couldn't reset the device [ 60.551453][ T595] rtl8150: probe of 4-1:1.0 failed with error -5 [ 60.594559][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 60.606311][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 60.614728][ C1] CPU: 1 PID: 103 Comm: udevd Tainted: G B syzkaller #0 [ 60.623057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.633204][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 60.638507][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 60 dd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 f3 d8 [ 60.658122][ C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046 [ 60.664288][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810ff1e540 [ 60.672257][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 60.680337][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 60.688306][ C1] R10: dffffc0000000000 R11: ffffed1022963139 R12: dffffc0000000000 [ 60.696373][ C1] R13: 0000000000000000 R14: ffff888114b189c8 R15: 0000000000000008 [ 60.704350][ C1] FS: 00007ff67fa47880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.713538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.720199][ C1] CR2: 00007f4dec1456b8 CR3: 00000001105fd000 CR4: 00000000003506a0 [ 60.728170][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.736125][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.744167][ C1] Call Trace: [ 60.747430][ C1] [ 60.750262][ C1] delayed_work_timer_fn+0x61/0x80 [ 60.755384][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 60.761213][ C1] call_timer_fn+0x46/0x2a0 [ 60.765741][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 60.771563][ C1] __run_timers+0x689/0x9f0 [ 60.776094][ C1] ? calc_index+0x200/0x200 [ 60.780616][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 60.785850][ C1] run_timer_softirq+0x6a/0xf0 [ 60.790632][ C1] handle_softirqs+0x1d7/0x600 [ 60.795413][ C1] __irq_exit_rcu+0x52/0xf0 [ 60.799923][ C1] irq_exit_rcu+0x9/0x10 [ 60.804171][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 60.809920][ C1] [ 60.812862][ C1] [ 60.815901][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 60.821983][ C1] RIP: 0010:exit_to_user_mode_loop+0x4a/0xb0 [ 60.827970][ C1] Code: 00 e8 8a 81 5a 00 e8 a5 d0 f7 00 fa e8 2f 43 9a 03 65 48 8b 05 77 58 a2 7e 4c 8b 30 41 f7 c6 0e 30 02 00 74 5b fb 41 f6 c6 08 <74> 05 e8 0f 87 9f 03 41 f7 c6 00 10 00 00 74 08 48 89 df e8 6e 95 [ 60.847665][ C1] RSP: 0000:ffffc90000a07ed0 EFLAGS: 00000202 [ 60.853774][ C1] RAX: 0000000000000001 RBX: ffffc90000a07f58 RCX: 10949b43997a6500 [ 60.861836][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc90000a07f58 [ 60.869823][ C1] RBP: ffffc90000a07ee0 R08: ffff88810ff1e547 R09: 1ffff11021fe3ca8 [ 60.877889][ C1] R10: dffffc0000000000 R11: ffffed1021fe3ca9 R12: 0000000000000000 [ 60.885862][ C1] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88810ff1e540 [ 60.893926][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 60.899396][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 60.904856][ C1] irqentry_exit+0x12/0x40 [ 60.909273][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 60.914387][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 60.919868][ C1] RIP: 0033:0x557796d277a0 [ 60.924378][ C1] Code: 0f 11 07 48 89 38 c3 0f 1f 00 48 8b 47 08 48 8b 17 66 0f ef c0 48 89 42 08 48 89 10 0f 11 07 c3 66 2e 0f 1f 84 00 00 00 00 00 <48> 89 f8 66 0f ef c0 48 8d 7e 08 0f 11 46 08 48 c7 47 20 00 00 00 [ 60.944071][ C1] RSP: 002b:00007ffe357c0248 EFLAGS: 00000202 [ 60.950152][ C1] RAX: 000055779a3712c0 RBX: 000055779a5b3d40 RCX: 00000000000001c8 [ 60.958132][ C1] RDX: 0000000000000001 RSI: 000055779a5b3e30 RDI: 000055779a3712c0 [ 60.966115][ C1] RBP: 000055779a3712c0 R08: 000055779a5c5930 R09: 0000000000000020 [ 60.974332][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 60.982280][ C1] R13: 0000557796d46100 R14: 000055779a5e3fc0 R15: 0000000000000000 [ 60.990406][ C1] [ 60.993416][ C1] Modules linked in: [ 60.997293][ C1] ---[ end trace 0000000000000000 ]--- [ 61.002731][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 61.008001][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 60 dd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 f3 d8 [ 61.027583][ C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046 [ 61.033630][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810ff1e540 [ 61.041596][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 61.049593][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 61.057541][ C1] R10: dffffc0000000000 R11: ffffed1022963139 R12: dffffc0000000000 [ 61.065493][ C1] R13: 0000000000000000 R14: ffff888114b189c8 R15: 0000000000000008 [ 61.073453][ C1] FS: 00007ff67fa47880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.082370][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.088937][ C1] CR2: 00007f4dec1456b8 CR3: 00000001105fd000 CR4: 00000000003506a0 [ 61.096909][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.105222][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.113264][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 61.120846][ C1] Kernel Offset: disabled [ 61.125150][ C1] Rebooting in 86400 seconds..