last executing test programs: 12.003828875s ago: executing program 3 (id=589): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 10.17805268s ago: executing program 3 (id=595): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000000000000", @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x70, 0x3, 0xfffffffe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x11, 0x0, 0x1fd, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x1, 0xca1, 0x2000008, 0x4, 0x6, 0xff, 0x4000009, 0x6, 0x7, 0xff7, 0xb, 0x64, 0x2001000, 0xc}}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 9.071063509s ago: executing program 3 (id=600): socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc3, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 9.067903079s ago: executing program 2 (id=601): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) 9.057899219s ago: executing program 0 (id=602): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 8.962710483s ago: executing program 2 (id=603): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) sendfile(r0, 0xffffffffffffffff, 0x0, 0xbc44) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) chmod(&(0x7f0000000380)='./file1\x00', 0x122) sendfile(r0, 0xffffffffffffffff, 0x0, 0xe3aa6e6) 7.719299537s ago: executing program 0 (id=605): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 7.648481059s ago: executing program 4 (id=606): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r0, &(0x7f0000000480), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 7.424492088s ago: executing program 3 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 7.370654839s ago: executing program 2 (id=608): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$chown(0x4, r5, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 6.969911993s ago: executing program 1 (id=609): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="85010000610000005400000000000600000000000080fe000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xcd}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1648", 0x2}], 0x1}, 0x850) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6.845622858s ago: executing program 0 (id=610): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000000000000", @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x70, 0x3, 0xfffffffe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x11, 0x0, 0x1fd, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x1, 0xca1, 0x2000008, 0x4, 0x6, 0xff, 0x4000009, 0x6, 0x7, 0xff7, 0xb, 0x64, 0x2001000, 0xc}}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 6.532082079s ago: executing program 4 (id=611): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) open(&(0x7f0000000240)='./file1\x00', 0x26142, 0xc) clock_gettime(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 6.427153642s ago: executing program 2 (id=612): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2b, 0x5, 0x2, 0x0, 0x8, 0x3, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x89ff]}}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400"], 0x48) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="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", 0xfd) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.257661804s ago: executing program 1 (id=613): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) 5.205841186s ago: executing program 0 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 5.202548586s ago: executing program 1 (id=615): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast2, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r2 = timerfd_create(0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7f, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r7 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[], 0x1, 0x314, &(0x7f0000000600)="$eJzs3M9rE1sUwPGTNEnTlHayeLzHE6QX3ehmaONeDNKCNGCpjfgDxGkz0ZAxKZlQiYhtV25ciH+Ei9JldwXtP9CNO1du3HUjuLALcSQzkx9tE1vTpLH2+4Eyh7n3zNybacK5AzM7d14/yWdtPWuUJRhVEhAR2RWJS1BqAv426MYRabYil4e/fjx/6+696WQqNTmr1FRy7kpCKTU69u7p8yG/2+agbMcf7HxJfN7+d/v/nR9zj3O2ytmqUCwrQ80XP5WNectUmZyd15WasUzDNlWuYJslr91ZFrFMlbWKi4sVZRQyI7HFkmnbyihUVN6sqHJRlUsVZTwycgWl67oaiQkOk16bnTWSHSYvdHkw6JFSKWkMiMjQgZb0Wl8GBAAA+sqv/+vVfrBa0ndS/4emk6mQv7NR/69f2CoP394Y9ev/zUi1/hdpqv8fNo5lqkywXv9HRaRR/xe99UG36/+DFdHp9mrvxRHHqYeRVv2PVf/jlKjW/zH/++tavb8+7gbU/wAAAAAAAAAAAAAAAAAAAAAAnAa7jqM5jqN52wF/r6MNikjUfYLEa+/zMNEje69/44/rfzY0XtwRGhWxXi6ll9Le1u+wJSKWmDIumnx3/x981TiyotxOqiou761lP395Ke39liSzknPzJ0ST+P58x5m6kZqcUJ69+WGJNecnRJN/Wucn9ueHq9uIXLrYlK+LJh8WpCiWZPwn42r5LyaUun4zte/8Q24/AAAAAAD+Brqqq6/fB5vb9YPt3vrYa/fW1yFpfX/AW1+Pt1zfh+RcqF+zBgAAAADgbLErz/KGZZmlHgWrItLjU7QJajM8albtBblt+gQk0K6pC0Ht5J2lV8fWtfGEj/SJBTsa6ljkNy9Ky6B226hdH5np5MiOJnLcz/C/N2+//bqPd2dM5CgHvLoRPWSmnQaRw2YaPrEfIAAAAAAnplH01/Zc6++AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4g07iVXz9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp/gZAAD//8mG/kg=") 5.036890912s ago: executing program 4 (id=616): getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000180)) 5.021008672s ago: executing program 4 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x6007}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "2d7d1d", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x86dd, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x9, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0xb, 0x2, 0x4, 0x1, 0x0, 0x2, 0x5, 0xe}, 0x2, {0x1, 0x7fff, 0x1, 0x1b, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0x7e) 3.523903076s ago: executing program 2 (id=618): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) 3.522684385s ago: executing program 0 (id=619): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000000000000", @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x70, 0x3, 0xfffffffe) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_readv(r0, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x11, 0x0, 0x1fd, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x1, 0xca1, 0x2000008, 0x4, 0x6, 0xff, 0x4000009, 0x6, 0x7, 0xff7, 0xb, 0x64, 0x2001000, 0xc}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 3.496328946s ago: executing program 4 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 3.423269799s ago: executing program 1 (id=621): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f00000029c0)=""/185, 0x41000, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x2805, &(0x7f0000000340)={0x0, 0x80fd, 0x2, 0x3, 0x28c}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xc, 0x4, 0x2b0, 0xffffffff, 0x180, 0x98, 0x98, 0x98, 0xffffffff, 0x218, 0x218, 0x218, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x1, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.340319252s ago: executing program 3 (id=622): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$chown(0x4, r5, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0066000e0600000034e803e18b7123eb50af618f5bc1d31d54d4ceb28d6424ff8678e53a9d9aa294c1635d6514706667ba3fef", @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000180003801400038010000180050002000000000004000300200001801400020076657468305f746f5f626f6e640000000800030003000000"], 0x4c}}, 0x0) 3.050900212s ago: executing program 1 (id=623): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf25390000000c009900030000007500000098025a8028000080110002000e0b294419424f0e3e2c29221b000000100001000902166c4803183660183016180000801400030002000a999f790f143efee3a947b3fd29f677000b000f00b9000000050001006c00008005000700000000000500040002000000140003006600020002000002ff7f07000500750f1400050004000200010404004909010102004000050007000100000014000300000109000d001c0301004000030008001400030009000101c6f900000000b305960004002c0003802800020051494d14161a184e1b154b33143841413a500f0a060f51252956202f0b42292c1931024c48000280140005000500070009000900090010f010000600050004000000000028000200391217251701061a103e521735571b150431211914284947410a1e4f442f4138284b231c4400008013000100060660060b011b0416480506481b1700050004000000000008000200480837180500070000000000140003005a9008080c0005001000ff0006000900ac00038014000200291a451d065648130812043a3a54311a05000600020000000500060001000000050004000000000005000600000000000500070001000000090002002d4e00411d0000004e0002003d2731473d351a1036120b4740300b2f021f3c401d2e224916014b3d2451394102240425423c38100227083c3d562b553b4d3e1d0b183e53393f47433c3d1c453f2938073246384d1c340000050004000100000005000600010000003c000080050006000100000005000700020000001400030002000600070060270800e500030005001400050001800800010000000800050005000700480002801400050007000100ff070000920c000009007859140005000500020000010800040000000100feff0500040000000000140005000000040001b9050001000500c6310700d8025a80580003801d00010030040b0201180b0c120002041b0c0b300b240c606c7405050400000014000500000405002008080008000800ff030000050004000000000006000100246c0000070002001e2d4c0005000400010000003800018032000200281c0f23243b13532a310f02424d352449562a4f56304e17182045373d561e2b2c201102140c1b50514b4f2337010000a400038005000600010000001600010016480b0204300c091b09123005480401240400000500040002000000140003000700e30009000f00ff0f060008000800140003000200040006000300ff03dee700fc2b0014000500940000000300010000007f00050004000500060001000000340002002631392a4101003d254940470824541f161f3b0926570152474801180d24032141141d2226503d1a422b384c0f120c3018000280140005000400080003000800ff010002000409002000008014000500000008000700faff010008000300090005000400010000008400038043000200300e3738092912412d512b1f4b4d213412481d421a28194050202156431c2b0f37094548332f514b332f0820033129031f3d3a40374c490f01091801344a2300140005008000c1000f00050003000080550b090014000500018008000800040008000600588f06001400050003000500050006000500ff010e005a0648000280130001001b24020202360204006024020b690300160001000541060c36013600161b6c0605060b003006000005000700020000000500060002000000050002000900000074000180050004000200000014000500ce009167060002000004ff03060000000500060001000000050006000200000041000200503b2d0419394929513b130a16015138494b540c084f533310533c470a1a31000f0f1a57404d280c570d4c0b4d0220011f380235491046415734084b1f0000002800028006000200520900000a0001001203024801120000050007000200000005000600010000007c015a8018000080140005009f0f02007f000a00000807000b00420028000180050007000000000005000600000000001400050002000700ef00b70402000900550000003c00008014000300a200050005b60400050006008100010005000700020000000500060001000000130001000482160c2402364806130312000c0000c00003800500040001000000310002003b051f31493208340e0b2601093d01382835535132471b354d49415339134846550544081210492a503935400c00000005000700010000001200010001024802030b186000360b484830000014000500ffff09000b00060000000d0030060300140003000000070001000600ce0501000104040014000500cb5e060006004a0000005b0dff0f020028000200274a544255251f3b44050442470f1b142e533b2b54430101382d1103264e4619312f20193c00008005000700020000000500060002000000140005000004060021fb0900000004000600800014000500ffbfadfd85dd5084844464e7875b1c3dd1ecff3d1cd1b7a2a3110ba009e2d2"], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$chown(0x4, r5, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e6114440000000000db430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) 112.031296ms ago: executing program 0 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 78.280927ms ago: executing program 1 (id=625): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r1, 0x0, 0xe3aa6e6) 77.742668ms ago: executing program 3 (id=626): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) open(&(0x7f0000000240)='./file1\x00', 0x26142, 0xc) clock_gettime(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 76.474228ms ago: executing program 4 (id=627): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) 0s ago: executing program 2 (id=628): socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f00000029c0)=""/185, 0x41000, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x2805, &(0x7f0000000340)={0x0, 0x80fd, 0x2, 0x3, 0x28c}) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): evice bridge_slave_1 entered promiscuous mode [ 25.033946][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041108][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.048617][ T285] device bridge_slave_0 entered promiscuous mode [ 25.074591][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.081633][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.089062][ T285] device bridge_slave_1 entered promiscuous mode [ 25.154254][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.161434][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.168738][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.175778][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.232974][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.240042][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.247325][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.254463][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.276622][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.283681][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.290969][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.298010][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.328260][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.335333][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.342596][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.349646][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.358474][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.365539][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.372806][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.379851][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.390345][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.397656][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.405583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.413123][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.420548][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.427918][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.435779][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.443153][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.450442][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.457633][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.464844][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.499378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.507691][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.514759][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.522114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.530480][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.537555][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.568336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.576139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.583942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.592072][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.600257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.608952][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.616017][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.623377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.631596][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.638625][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.646073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.654221][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.661366][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.668719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.676238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.683616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.691945][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.699000][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.718772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.727193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.735960][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.743032][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.750820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.759406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.767618][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.774647][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.782076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.790332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.813584][ T287] device veth0_vlan entered promiscuous mode [ 25.826070][ T283] device veth0_vlan entered promiscuous mode [ 25.835062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.842576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.850068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.858330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.866627][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.873650][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.881094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.889118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.897289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.905615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.913713][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.920768][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.928116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.936187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.944087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.952294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.960303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.968776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.977129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.985146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.993127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.001549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.009863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.017860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.026047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.033509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.041113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.048622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.067016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.075126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.083064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.091428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.099895][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.108228][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.118546][ T287] device veth1_macvtap entered promiscuous mode [ 26.132507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.140576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.151547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.159926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.172484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.193730][ T285] device veth0_vlan entered promiscuous mode [ 26.206131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.214418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.222506][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.223398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.238108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.246705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.254992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.263383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.271935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.280443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.292439][ T283] device veth1_macvtap entered promiscuous mode [ 26.311032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.325412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.334128][ T307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.334979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.359078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.370034][ T286] device veth0_vlan entered promiscuous mode [ 26.377435][ T284] device veth0_vlan entered promiscuous mode [ 26.392686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.400951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.408553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.416953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.424917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.433011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.441726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.443969][ T307] kvm: pic: non byte write [ 26.453286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.464720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.473399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.481109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.490432][ T285] device veth1_macvtap entered promiscuous mode [ 26.502626][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.511056][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.541056][ T284] device veth1_macvtap entered promiscuous mode [ 26.552392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.560944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.622034][ T286] device veth1_macvtap entered promiscuous mode [ 26.629223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.641362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.649942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.658243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.433661][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 28.433680][ T28] audit: type=1400 audit(1775009683.466:108): avc: denied { open } for pid=310 comm="syz.4.6" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.483416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.492157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.501185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.509713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.583167][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.590938][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.618653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.955198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.128991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 29.137190][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.145659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.153812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.170382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.186834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.276015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.284294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.297674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.306468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.337084][ T338] loop3: detected capacity change from 0 to 1024 [ 29.399765][ T338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.606213][ T338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.635882][ T28] audit: type=1400 audit(1775009686.156:109): avc: denied { mount } for pid=337 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.669823][ T339] netlink: 'syz.4.8': attribute type 4 has an invalid length. [ 29.693841][ T347] random: crng reseeded on system resumption [ 29.714369][ T28] audit: type=1400 audit(1775009686.206:110): avc: denied { append } for pid=346 comm="syz.1.2" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 29.764277][ T28] audit: type=1400 audit(1775009686.206:111): avc: denied { open } for pid=346 comm="syz.1.2" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 29.819111][ T339] syz.4.8 (339) used greatest stack depth: 21952 bytes left [ 29.846983][ T28] audit: type=1400 audit(1775009686.276:112): avc: denied { write } for pid=337 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.869859][ T28] audit: type=1400 audit(1775009686.276:113): avc: denied { add_name } for pid=337 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.891904][ T28] audit: type=1400 audit(1775009686.276:114): avc: denied { create } for pid=337 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.892682][ T284] EXT4-fs (loop3): unmounting filesystem. [ 29.912350][ T28] audit: type=1400 audit(1775009686.276:115): avc: denied { read write } for pid=337 comm="syz.3.4" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.653981][ T28] audit: type=1400 audit(1775009686.276:116): avc: denied { open } for pid=337 comm="syz.3.4" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.606930][ T28] audit: type=1400 audit(1775009687.546:117): avc: denied { perfmon } for pid=353 comm="syz.4.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.683478][ T372] loop0: detected capacity change from 0 to 128 [ 33.094550][ T373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=373 comm=syz.3.10 [ 33.823168][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 33.823257][ T28] audit: type=1400 audit(1775009689.186:119): avc: denied { name_bind } for pid=370 comm="syz.0.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.476789][ T28] audit: type=1400 audit(1775009689.186:120): avc: denied { node_bind } for pid=370 comm="syz.0.14" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.504800][ T28] audit: type=1400 audit(1775009691.926:121): avc: denied { bind } for pid=378 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.523866][ T28] audit: type=1400 audit(1775009691.926:122): avc: denied { setopt } for pid=378 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.577334][ T28] audit: type=1400 audit(1775009692.076:123): avc: denied { create } for pid=380 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.597426][ T28] audit: type=1400 audit(1775009692.076:124): avc: denied { read write } for pid=380 comm="syz.2.18" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.620427][ T28] audit: type=1400 audit(1775009692.076:125): avc: denied { open } for pid=380 comm="syz.2.18" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.778135][ T28] audit: type=1400 audit(1775009692.266:126): avc: denied { sqpoll } for pid=378 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.042111][ T28] audit: type=1400 audit(1775009692.266:127): avc: denied { create } for pid=378 comm="syz.4.16" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.063298][ T28] audit: type=1400 audit(1775009693.016:128): avc: denied { unlink } for pid=380 comm="syz.2.18" name="#1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.165609][ T407] ±ÿ: renamed from team_slave_1 [ 40.110574][ T28] audit: type=1400 audit(1775009696.516:129): avc: denied { create } for pid=397 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.360658][ T28] audit: type=1400 audit(1775009696.566:130): avc: denied { setopt } for pid=397 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.396179][ T28] audit: type=1400 audit(1775009696.596:131): avc: denied { ioctl } for pid=397 comm="syz.1.21" path="socket:[15295]" dev="sockfs" ino=15295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.456458][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.474920][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.482241][ T28] audit: type=1400 audit(1775009696.656:132): avc: denied { write } for pid=402 comm="syz.4.24" name="igmp6" dev="proc" ino=4026532688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.548659][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.575143][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.737245][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.902264][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.910731][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.919008][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.945059][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.974919][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.414716][ T440] random: crng reseeded on system resumption [ 42.064095][ T452] loop2: detected capacity change from 0 to 128 [ 42.083019][ T455] loop0: detected capacity change from 0 to 256 [ 42.097362][ T455] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.108603][ T455] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 42.117570][ T314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.129738][ T455] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 42.163874][ T28] audit: type=1400 audit(1775009698.676:133): avc: denied { write } for pid=454 comm="syz.0.37" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.201090][ T28] audit: type=1400 audit(1775009698.676:134): avc: denied { add_name } for pid=454 comm="syz.0.37" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.323411][ T28] audit: type=1400 audit(1775009698.676:135): avc: denied { associate } for pid=454 comm="syz.0.37" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.345906][ T28] audit: type=1400 audit(1775009698.686:136): avc: denied { read write } for pid=454 comm="syz.0.37" name="file1" dev="loop0" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.391129][ T28] audit: type=1400 audit(1775009698.686:137): avc: denied { open } for pid=454 comm="syz.0.37" path="/7/bus/file1" dev="loop0" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.500608][ T28] audit: type=1400 audit(1775009699.016:138): avc: denied { append } for pid=469 comm="syz.3.41" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.849985][ T470] loop3: detected capacity change from 0 to 512 [ 42.858902][ T470] EXT4-fs (loop3): 1 truncate cleaned up [ 42.864632][ T470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.877824][ T470] overlayfs: upper fs needs to support d_type. [ 44.861845][ T284] EXT4-fs (loop3): unmounting filesystem. [ 45.036922][ T505] loop2: detected capacity change from 0 to 512 [ 45.069484][ T505] EXT4-fs (loop2): 1 truncate cleaned up [ 45.075212][ T505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.087317][ T505] overlayfs: missing 'workdir' [ 45.165149][ T507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=507 comm=syz.4.49 [ 45.198456][ T508] loop3: detected capacity change from 0 to 512 [ 46.144424][ C0] sched: RT throttling activated [ 46.287798][ T508] EXT4-fs (loop3): 1 truncate cleaned up [ 46.293497][ T508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.306160][ T508] overlayfs: upper fs needs to support d_type. [ 46.496179][ T514] x_tables: duplicate underflow at hook 3 [ 46.721100][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 46.721115][ T28] audit: type=1400 audit(1775009703.236:154): avc: denied { read } for pid=521 comm="syz.0.53" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.779958][ T28] audit: type=1400 audit(1775009703.236:155): avc: denied { open } for pid=521 comm="syz.0.53" path="net:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.805391][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 46.819649][ T28] audit: type=1400 audit(1775009703.326:156): avc: denied { remove_name } for pid=284 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.844369][ T28] audit: type=1400 audit(1775009703.326:157): avc: denied { rmdir } for pid=284 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.854731][ T285] EXT4-fs (loop2): unmounting filesystem. [ 46.873380][ T28] audit: type=1400 audit(1775009703.326:158): avc: denied { unlink } for pid=284 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.887565][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 46.896825][ T28] audit: type=1400 audit(1775009703.326:159): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.911364][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 46.968186][ T284] EXT4-fs (loop3): unmounting filesystem. [ 46.974396][ T28] audit: type=1400 audit(1775009703.486:160): avc: denied { rmdir } for pid=284 comm="syz-executor" name="volatile" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.080486][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.113278][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.125718][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 47.807367][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.814907][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.545298][ T527] syz.0.53 (527) used greatest stack depth: 20344 bytes left [ 48.638967][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 48.655885][ T530] random: crng reseeded on system resumption [ 48.682313][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.731931][ T539] loop0: detected capacity change from 0 to 512 [ 48.739144][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 48.749646][ T536] loop3: detected capacity change from 0 to 256 [ 48.759006][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.800774][ T536] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.813146][ T539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.824802][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.838147][ T539] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.891453][ T536] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 48.900930][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.236134][ T536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 49.261412][ T539] EXT4-fs (loop0): shut down requested (1) [ 49.277381][ T28] audit: type=1400 audit(1775009705.796:161): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.282336][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.354656][ T539] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.363823][ T28] audit: type=1400 audit(1775009705.796:162): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.396411][ T539] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.450549][ T28] audit: type=1400 audit(1775009705.796:163): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.460233][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.545441][ T539] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 49.554568][ T539] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 49.571144][ T539] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 49.600740][ T283] EXT4-fs (loop0): unmounting filesystem. [ 49.657867][ T547] netlink: 'syz.1.58': attribute type 4 has an invalid length. [ 49.680856][ T553] loop0: detected capacity change from 0 to 128 [ 49.698602][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.729340][ T553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.760158][ T553] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.877275][ T283] EXT4-fs (loop0): unmounting filesystem. [ 49.886256][ T559] loop1: detected capacity change from 0 to 256 [ 49.965135][ T559] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.995308][ T559] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 50.046778][ T559] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 50.335831][ T569] loop3: detected capacity change from 0 to 128 [ 50.429144][ T314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.057840][ T577] netlink: 'syz.3.68': attribute type 4 has an invalid length. [ 51.487991][ T586] loop3: detected capacity change from 0 to 1024 [ 51.519897][ T586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.558227][ T586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.644628][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.840568][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.910837][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 52.995229][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 53.004816][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 53.028024][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.035478][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.061310][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.091168][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 53.091183][ T28] audit: type=1400 audit(1775009709.606:175): avc: denied { mount } for pid=585 comm="syz.3.72" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.128195][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.146942][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.165070][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.210495][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.226821][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.254859][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): 26±ÿ: link becomes ready [ 53.319343][ T607] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 53.853458][ T28] audit: type=1400 audit(1775009709.846:176): avc: denied { setattr } for pid=585 comm="syz.3.72" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.882311][ T284] EXT4-fs (loop3): unmounting filesystem. [ 53.905809][ T611] loop2: detected capacity change from 0 to 1024 [ 53.912679][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.934262][ T611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.992427][ T590] loop4: detected capacity change from 0 to 40427 [ 54.002476][ T590] F2FS-fs (loop4): fault_injection options not supported [ 54.009745][ T590] F2FS-fs (loop4): fault_type options not supported [ 54.028660][ T590] F2FS-fs (loop4): invalid crc value [ 54.053102][ T611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.389051][ T590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.408728][ T285] EXT4-fs (loop2): unmounting filesystem. [ 54.482815][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.497400][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.505624][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 54.595788][ T620] loop3: detected capacity change from 0 to 512 [ 54.604034][ T627] x_tables: duplicate underflow at hook 3 [ 54.630778][ T620] EXT4-fs (loop3): 1 truncate cleaned up [ 54.638420][ T620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.718668][ T620] overlayfs: upper fs needs to support d_type. [ 54.780255][ T28] audit: type=1400 audit(1775009711.296:177): avc: denied { unlink } for pid=615 comm="syz.3.77" name="#9" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.945405][ T637] loop4: detected capacity change from 0 to 512 [ 55.085810][ T637] EXT4-fs (loop4): 1 truncate cleaned up [ 55.091553][ T637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.152507][ T637] overlayfs: missing 'lowerdir' [ 55.393157][ T645] random: crng reseeded on system resumption [ 55.443282][ T645] loop2: detected capacity change from 0 to 256 [ 55.460631][ T645] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.534545][ T648] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 55.574925][ T645] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 55.797307][ T645] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 55.896074][ T287] EXT4-fs (loop4): unmounting filesystem. [ 55.999882][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 56.015984][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 56.041087][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.933200][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 56.947628][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 56.984005][ T284] EXT4-fs (loop3): unmounting filesystem. [ 57.004085][ T664] loop3: detected capacity change from 0 to 1024 [ 57.011935][ T664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.073746][ T664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.207247][ T678] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 58.763093][ T284] EXT4-fs (loop3): unmounting filesystem. [ 58.851487][ T669] loop4: detected capacity change from 0 to 512 [ 58.891640][ T669] EXT4-fs (loop4): 1 truncate cleaned up [ 58.898026][ T669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.910540][ T669] overlayfs: upper fs needs to support d_type. [ 65.153773][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 65.206203][ T717] loop1: detected capacity change from 0 to 1024 [ 65.214714][ T717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.227446][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 65.266317][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 66.217687][ T723] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 66.242740][ T717] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.260967][ T287] EXT4-fs (loop4): unmounting filesystem. [ 66.868651][ T730] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 67.398672][ T286] EXT4-fs (loop1): unmounting filesystem. [ 67.449629][ T28] audit: type=1400 audit(1775009723.966:178): avc: denied { map_read map_write } for pid=736 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.649381][ T761] x_tables: duplicate underflow at hook 3 [ 70.720283][ T765] loop1: detected capacity change from 0 to 512 [ 71.021250][ T765] EXT4-fs (loop1): 1 truncate cleaned up [ 71.027095][ T765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.072891][ T762] overlayfs: upper fs needs to support d_type. [ 72.979064][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 73.067581][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 73.184866][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 73.288124][ T286] EXT4-fs (loop1): unmounting filesystem. [ 73.491123][ T797] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 73.797379][ T28] audit: type=1400 audit(1775009730.316:179): avc: denied { read write } for pid=800 comm="syz.4.122" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.828578][ T28] audit: type=1400 audit(1775009730.346:180): avc: denied { open } for pid=800 comm="syz.4.122" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.851947][ T28] audit: type=1400 audit(1775009730.346:181): avc: denied { ioctl } for pid=800 comm="syz.4.122" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.882020][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.895107][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.903629][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 74.532532][ T808] loop3: detected capacity change from 0 to 512 [ 74.554499][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.598441][ T808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.633412][ T808] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.728117][ T284] EXT4-fs (loop3): unmounting filesystem. [ 74.745600][ T19] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 75.140875][ T19] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 75.196400][ T19] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 75.207804][ T19] usb 5-1: config 220 has no interface number 2 [ 75.215407][ T19] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 75.334213][ T19] usb 5-1: config 220 interface 0 has no altsetting 0 [ 75.715217][ T19] usb 5-1: config 220 interface 76 has no altsetting 0 [ 75.722188][ T19] usb 5-1: config 220 interface 1 has no altsetting 0 [ 75.735537][ T831] random: crng reseeded on system resumption [ 75.743952][ T19] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 75.755906][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.764105][ T19] usb 5-1: Product: syz [ 75.768593][ T19] usb 5-1: Manufacturer: syz [ 75.773211][ T19] usb 5-1: SerialNumber: syz [ 75.879776][ T834] loop1: detected capacity change from 0 to 512 [ 75.938838][ T834] EXT4-fs (loop1): 1 truncate cleaned up [ 75.944660][ T834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.970826][ T834] overlayfs: upper fs needs to support d_type. [ 76.124748][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 76.134983][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 76.145105][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 76.319283][ T19] usb 5-1: selecting invalid altsetting 0 [ 76.325172][ T19] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 76.331733][ T19] usb 5-1: No valid video chain found. [ 76.357998][ T19] usb 5-1: USB disconnect, device number 2 [ 76.371197][ T837] overlayfs: missing 'lowerdir' [ 76.664387][ T845] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 78.055671][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 78.144950][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 78.179651][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 78.252498][ T856] netlink: 'syz.2.136': attribute type 4 has an invalid length. [ 78.431699][ T286] EXT4-fs (loop1): unmounting filesystem. [ 78.569015][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 78.615092][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 78.924547][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 78.934377][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 79.077874][ T868] loop0: detected capacity change from 0 to 512 [ 79.244467][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 79.254259][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 79.287937][ T868] EXT4-fs (loop0): 1 truncate cleaned up [ 79.293687][ T868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.322560][ T868] overlayfs: upper fs needs to support d_type. [ 79.631066][ T879] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 80.583522][ T881] x_tables: duplicate underflow at hook 3 [ 80.751553][ T887] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 81.786750][ T889] overlayfs: missing 'lowerdir' [ 81.852578][ T283] EXT4-fs (loop0): unmounting filesystem. [ 83.191682][ T377] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.661997][ T910] loop4: detected capacity change from 0 to 512 [ 83.736058][ T377] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 83.745252][ T377] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 83.754182][ T377] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 83.764745][ T910] EXT4-fs (loop4): 1 truncate cleaned up [ 83.770434][ T910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.779189][ T377] usb 4-1: config 220 has no interface number 2 [ 83.788927][ T910] overlayfs: upper fs needs to support d_type. [ 83.805166][ T377] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 83.819200][ T377] usb 4-1: config 220 interface 0 has no altsetting 0 [ 83.829984][ T377] usb 4-1: config 220 interface 76 has no altsetting 0 [ 83.837982][ T377] usb 4-1: config 220 interface 1 has no altsetting 0 [ 83.859648][ T377] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.133308][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 84.143267][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 84.153849][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.162380][ T377] usb 4-1: Product: syz [ 84.166857][ T377] usb 4-1: Manufacturer: syz [ 84.171488][ T377] usb 4-1: SerialNumber: syz [ 84.302477][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 84.316989][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 84.332247][ T287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 84.680470][ T377] usb 4-1: selecting invalid altsetting 0 [ 84.739942][ T377] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 84.821940][ T287] EXT4-fs (loop4): unmounting filesystem. [ 84.930739][ T377] usb 4-1: No valid video chain found. [ 84.946957][ T377] usb 4-1: USB disconnect, device number 2 [ 84.969810][ T933] overlayfs: missing 'lowerdir' [ 85.044488][ T936] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 85.780580][ T942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.793466][ T942] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.801888][ T942] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 85.874602][ T945] random: crng reseeded on system resumption [ 86.035390][ T950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.074191][ T957] kvm: pic: non byte write [ 86.172274][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.653014][ T973] loop1: detected capacity change from 0 to 128 [ 86.778901][ T980] loop3: detected capacity change from 0 to 512 [ 88.242197][ T993] netlink: 'syz.1.171': attribute type 4 has an invalid length. [ 88.597168][ T980] EXT4-fs (loop3): 1 truncate cleaned up [ 88.602969][ T980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.877896][ T977] overlayfs: upper fs needs to support d_type. [ 88.979603][ T997] kvm: pic: non byte write [ 89.999986][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 90.024368][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 90.042228][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 90.071333][ T284] EXT4-fs (loop3): unmounting filesystem. [ 90.080070][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.087869][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.100314][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.107682][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.127018][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.134859][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.143375][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 90.150911][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 90.162648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 90.174729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.191518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 90.213362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.221783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.230093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.238517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.247028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.470838][ T1020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 92.305179][ T1035] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 93.493174][ T1051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1051 comm=syz.4.185 [ 94.728683][ T1054] loop0: detected capacity change from 0 to 512 [ 94.764465][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 94.774251][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 94.784033][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 94.866807][ T1054] EXT4-fs (loop0): 1 truncate cleaned up [ 94.872643][ T1054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.915041][ T1049] overlayfs: upper fs needs to support d_type. [ 95.223328][ T1061] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 96.232059][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.364518][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 97.268886][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.277718][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 97.286381][ T1070] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 97.503500][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 97.634825][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 97.650558][ T1082] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 97.669089][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 97.688214][ T1081] x_tables: duplicate underflow at hook 3 [ 97.690307][ T283] EXT4-fs (loop0): unmounting filesystem. [ 98.893701][ T28] audit: type=1400 audit(1775009755.406:182): avc: denied { unlink } for pid=1103 comm="syz.0.202" name="#19" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.933316][ T28] audit: type=1400 audit(1775009755.436:183): avc: denied { rename } for pid=1103 comm="syz.0.202" name="file1" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.955895][ T1106] random: crng reseeded on system resumption [ 99.007272][ T1106] loop0: detected capacity change from 0 to 256 [ 99.038284][ T1106] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.053743][ T1106] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 99.092251][ T28] audit: type=1400 audit(1775009755.606:184): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.106207][ T1106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.967547][ T1118] loop1: detected capacity change from 0 to 256 [ 101.044536][ T1118] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.074521][ T1118] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 101.121153][ T1118] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.257359][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.270291][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.278692][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 101.454799][ T1125] x_tables: duplicate underflow at hook 3 [ 101.864472][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.964513][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 101.974417][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 102.339710][ T1150] random: crng reseeded on system resumption [ 102.383774][ T1150] loop4: detected capacity change from 0 to 256 [ 102.391090][ T1150] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.396223][ T6] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 102.402870][ T1150] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 102.425160][ T6] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 102.432876][ T1150] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.436438][ T6] usb 4-1: config 220 has no interface number 2 [ 102.454509][ T6] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 102.468552][ T6] usb 4-1: config 220 interface 0 has no altsetting 0 [ 102.489251][ T6] usb 4-1: config 220 interface 76 has no altsetting 0 [ 102.496384][ T6] usb 4-1: config 220 interface 1 has no altsetting 0 [ 102.511134][ T6] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 102.521518][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.530583][ T6] usb 4-1: Product: syz [ 102.534949][ T6] usb 4-1: Manufacturer: syz [ 102.539620][ T6] usb 4-1: SerialNumber: syz [ 102.731118][ T1158] loop1: detected capacity change from 0 to 512 [ 102.748014][ T6] usb 4-1: selecting invalid altsetting 0 [ 102.763476][ T6] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 102.781295][ T1158] EXT4-fs (loop1): 1 truncate cleaned up [ 102.787687][ T1158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.800134][ T1158] overlayfs: upper fs needs to support d_type. [ 102.813723][ T6] usb 4-1: No valid video chain found. [ 102.850847][ T6] usb 4-1: USB disconnect, device number 3 [ 102.927179][ T1165] loop0: detected capacity change from 0 to 1024 [ 102.953166][ T1165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.013994][ T1165] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.229606][ T1174] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 103.785138][ T286] EXT4-fs (loop1): unmounting filesystem. [ 103.792358][ T283] EXT4-fs (loop0): unmounting filesystem. [ 104.193081][ T1187] loop0: detected capacity change from 0 to 512 [ 104.250386][ T1187] EXT4-fs (loop0): 1 truncate cleaned up [ 104.256149][ T1187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.286989][ T1187] overlayfs: upper fs needs to support d_type. [ 104.769776][ T1196] loop1: detected capacity change from 0 to 16 [ 105.425707][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.433692][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.443734][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.456876][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.464892][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 105.760795][ T1196] erofs: (device loop1): mounted with root inode @ nid 36. [ 105.786513][ T1179] x_tables: duplicate underflow at hook 3 [ 105.803539][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 105.821813][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 105.844505][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 105.874910][ T283] EXT4-fs (loop0): unmounting filesystem. [ 105.940008][ T1209] loop4: detected capacity change from 0 to 512 [ 105.968611][ T1209] EXT4-fs (loop4): 1 truncate cleaned up [ 105.974434][ T1209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.974479][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 105.996668][ T1209] overlayfs: upper fs needs to support d_type. [ 106.034274][ T1215] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.164520][ T1215] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.567764][ T1222] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 107.084529][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 107.402480][ T1225] random: crng reseeded on system resumption [ 107.410942][ T287] EXT4-fs (loop4): unmounting filesystem. [ 107.735505][ T1235] loop4: detected capacity change from 0 to 512 [ 107.866349][ T1235] EXT4-fs (loop4): 1 truncate cleaned up [ 107.872135][ T1235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.901081][ T1235] overlayfs: upper fs needs to support d_type. [ 108.077133][ T1238] loop3: detected capacity change from 0 to 256 [ 108.110402][ T1238] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.143809][ T1238] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 108.160510][ T1238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 108.248590][ T1242] loop2: detected capacity change from 0 to 512 [ 108.269985][ T1242] EXT4-fs (loop2): 1 truncate cleaned up [ 108.275746][ T1242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.288616][ T1242] overlayfs: upper fs needs to support d_type. [ 108.346830][ T1246] loop0: detected capacity change from 0 to 1024 [ 108.383478][ T287] EXT4-fs (loop4): unmounting filesystem. [ 108.394681][ T1246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.421332][ T1246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.584953][ T1254] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.654574][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 108.896551][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.381559][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.389628][ T1255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 109.533647][ T283] EXT4-fs (loop0): unmounting filesystem. [ 109.563492][ T1259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.616844][ T1259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.731651][ T285] EXT4-fs (loop2): unmounting filesystem. [ 109.894157][ T1280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1280 comm=syz.0.239 [ 109.964468][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 109.974197][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 110.400344][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.609065][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.651011][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 110.991502][ T1297] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 111.591831][ T1311] loop4: detected capacity change from 0 to 128 [ 111.763432][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.771305][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.781250][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.794342][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.802581][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 113.360467][ T1326] loop0: detected capacity change from 0 to 512 [ 113.382599][ T1327] loop3: detected capacity change from 0 to 512 [ 113.564432][ T1327] EXT4-fs (loop3): 1 truncate cleaned up [ 113.570289][ T1327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.595784][ T1326] EXT4-fs (loop0): 1 truncate cleaned up [ 113.601501][ T1326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.633450][ T1327] overlayfs: upper fs needs to support d_type. [ 113.683429][ T1326] overlayfs: upper fs needs to support d_type. [ 113.693839][ T1332] random: crng reseeded on system resumption [ 113.963903][ T284] EXT4-fs (loop3): unmounting filesystem. [ 113.970064][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 113.993222][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 114.046440][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 114.066844][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 114.099843][ T283] EXT4-fs (loop0): unmounting filesystem. [ 114.108526][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.123614][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.134666][ T1336] x_tables: duplicate underflow at hook 3 [ 114.220454][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.238518][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.256923][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 114.342519][ T1343] x_tables: duplicate underflow at hook 3 [ 114.632705][ T1358] loop1: detected capacity change from 0 to 512 [ 114.778130][ T1358] EXT4-fs (loop1): 1 truncate cleaned up [ 114.783880][ T1358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.819801][ T1358] overlayfs: upper fs needs to support d_type. [ 115.378932][ T286] EXT4-fs (loop1): unmounting filesystem. [ 115.495601][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.519366][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.535548][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 115.706245][ T1382] loop0: detected capacity change from 0 to 512 [ 115.905001][ T1382] EXT4-fs (loop0): 1 truncate cleaned up [ 115.910761][ T1382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.942950][ T1382] overlayfs: upper fs needs to support d_type. [ 116.453323][ T1393] loop4: detected capacity change from 0 to 512 [ 116.864180][ T1393] EXT4-fs (loop4): 1 truncate cleaned up [ 116.870040][ T1393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.898713][ T294] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.899864][ T1393] overlayfs: upper fs needs to support d_type. [ 116.953647][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 116.974643][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 116.993621][ T283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 117.011652][ T283] EXT4-fs (loop0): unmounting filesystem. [ 117.100452][ T294] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.130993][ T294] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.145096][ T294] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.162636][ T294] usb 4-1: config 220 has no interface number 2 [ 117.169203][ T294] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.227805][ T1400] x_tables: duplicate underflow at hook 3 [ 117.254468][ T294] usb 4-1: config 220 interface 0 has no altsetting 0 [ 117.263631][ T294] usb 4-1: config 220 interface 76 has no altsetting 0 [ 117.271322][ T294] usb 4-1: config 220 interface 1 has no altsetting 0 [ 117.289109][ T294] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.308381][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.323408][ T287] EXT4-fs (loop4): unmounting filesystem. [ 117.334429][ T294] usb 4-1: Product: syz [ 117.338631][ T294] usb 4-1: Manufacturer: syz [ 117.360187][ T294] usb 4-1: SerialNumber: syz [ 117.645035][ T1413] loop1: detected capacity change from 0 to 512 [ 118.044609][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 118.054626][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 118.064606][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 118.866007][ T1419] loop0: detected capacity change from 0 to 512 [ 118.972960][ T1419] EXT4-fs (loop0): 1 truncate cleaned up [ 118.978778][ T1419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.012453][ T1413] EXT4-fs (loop1): 1 truncate cleaned up [ 119.017500][ T294] usb 4-1: selecting invalid altsetting 0 [ 119.018566][ T1413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.024023][ T294] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 119.042777][ T1419] overlayfs: upper fs needs to support d_type. [ 119.079305][ T1412] overlayfs: upper fs needs to support d_type. [ 119.097007][ T294] usb 4-1: No valid video chain found. [ 119.109603][ T294] usb 4-1: USB disconnect, device number 4 [ 119.186982][ T1425] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 119.279450][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 119.294679][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 119.359298][ T283] EXT4-fs (loop0): unmounting filesystem. [ 119.367235][ T286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 119.425350][ T286] EXT4-fs (loop1): unmounting filesystem. [ 119.586719][ T1440] loop0: detected capacity change from 0 to 512 [ 119.601748][ T1440] EXT4-fs (loop0): 1 truncate cleaned up [ 119.607501][ T1440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.656281][ T1440] overlayfs: upper fs needs to support d_type. [ 120.741559][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.749476][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.759559][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.772815][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.780920][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 120.796345][ T283] EXT4-fs (loop0): unmounting filesystem. [ 120.925250][ T1459] random: crng reseeded on system resumption [ 120.969098][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.984346][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.994055][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 121.018511][ T1460] loop0: detected capacity change from 0 to 512 [ 121.054411][ T1460] EXT4-fs (loop0): 1 truncate cleaned up [ 121.060147][ T1460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.073441][ T1460] overlayfs: upper fs needs to support d_type. [ 121.224176][ T1464] overlayfs: missing 'workdir' [ 122.124508][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 122.305942][ T1481] overlayfs: missing 'lowerdir' [ 122.693381][ T283] EXT4-fs (loop0): unmounting filesystem. [ 122.700974][ T1492] overlayfs: missing 'workdir' [ 122.743228][ T1496] random: crng reseeded on system resumption [ 122.777217][ T1497] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 123.003382][ T1494] x_tables: duplicate underflow at hook 3 [ 123.080803][ T1508] loop0: detected capacity change from 0 to 1024 [ 123.089102][ T1508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.236537][ T1508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.398540][ T1513] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.477894][ T1518] loop2: detected capacity change from 0 to 512 [ 123.493773][ T1518] EXT4-fs (loop2): 1 truncate cleaned up [ 123.499587][ T1518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.529842][ T1518] overlayfs: upper fs needs to support d_type. [ 123.936754][ T283] EXT4-fs (loop0): unmounting filesystem. [ 124.499671][ T285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 124.530430][ T285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 124.554821][ T285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 124.586494][ T285] EXT4-fs (loop2): unmounting filesystem. [ 124.767645][ T1539] x_tables: duplicate underflow at hook 3 [ 125.059144][ T1557] loop0: detected capacity change from 0 to 512 [ 125.324454][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 125.334174][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 125.498654][ T1557] EXT4-fs (loop0): 1 truncate cleaned up [ 125.504487][ T1557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.533014][ T1557] overlayfs: upper fs needs to support d_type. [ 125.763691][ T1562] random: crng reseeded on system resumption [ 125.878360][ T283] EXT4-fs (loop0): unmounting filesystem. [ 126.491701][ T1576] loop3: detected capacity change from 0 to 128 [ 126.547537][ T314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.300468][ T1591] loop3: detected capacity change from 0 to 512 [ 127.318773][ T1591] EXT4-fs (loop3): 1 truncate cleaned up [ 127.324522][ T1591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.336756][ T1591] overlayfs: upper fs needs to support d_type. [ 127.365267][ T1596] overlayfs: conflicting lowerdir path [ 127.636357][ T1603] random: crng reseeded on system resumption [ 127.752632][ T1603] loop2: detected capacity change from 0 to 256 [ 127.770410][ T1603] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.788043][ T1603] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 127.801197][ T1603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 128.524463][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 129.902597][ T1605] x_tables: duplicate underflow at hook 3 [ 130.003935][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 130.019435][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 130.035000][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 130.114101][ T1621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1621 comm=syz.4.336 [ 130.997824][ T1629] random: crng reseeded on system resumption [ 131.021017][ T284] EXT4-fs (loop3): unmounting filesystem. [ 131.140067][ T1636] loop2: detected capacity change from 0 to 512 [ 131.155497][ T1636] EXT4-fs (loop2): 1 truncate cleaned up [ 131.161196][ T1636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.173519][ T1636] overlayfs: upper fs needs to support d_type. [ 131.655559][ T285] EXT4-fs (loop2): unmounting filesystem. [ 131.887097][ T1653] loop0: detected capacity change from 0 to 512 [ 132.062826][ T1653] EXT4-fs (loop0): 1 truncate cleaned up [ 132.068614][ T1653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.099764][ T1653] overlayfs: upper fs needs to support d_type. [ 132.531432][ T1660] tmpfs: Bad value for 'huge' [ 132.604490][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 132.614236][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 132.671605][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.681599][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.694555][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.702895][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 132.741118][ T283] EXT4-fs (loop0): unmounting filesystem. [ 132.761318][ T1667] random: crng reseeded on system resumption [ 132.822535][ T1672] loop4: detected capacity change from 0 to 256 [ 132.885822][ T1672] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.896475][ T1672] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 133.435144][ T1674] netlink: 'syz.1.350': attribute type 4 has an invalid length. [ 133.447584][ T1672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.603838][ T1671] x_tables: duplicate underflow at hook 3 [ 134.076528][ T1687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1687 comm=syz.3.351 [ 134.467438][ T1696] loop0: detected capacity change from 0 to 512 [ 134.612329][ T1696] EXT4-fs (loop0): 1 truncate cleaned up [ 134.618156][ T1696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.643346][ T1696] overlayfs: upper fs needs to support d_type. [ 134.884953][ T1681] x_tables: duplicate underflow at hook 3 [ 135.338734][ T1710] loop4: detected capacity change from 0 to 512 [ 135.464823][ T1710] EXT4-fs (loop4): 1 truncate cleaned up [ 135.470637][ T1710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.490045][ T1710] overlayfs: upper fs needs to support d_type. [ 135.567770][ T1714] loop2: detected capacity change from 0 to 512 [ 135.601864][ T1714] EXT4-fs (loop2): 1 truncate cleaned up [ 135.686203][ T1714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.804461][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 135.814236][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 135.817645][ T1714] overlayfs: upper fs needs to support d_type. [ 135.918724][ T283] EXT4-fs (loop0): unmounting filesystem. [ 135.990942][ T28] audit: type=1400 audit(1775009792.506:185): avc: denied { read } for pid=1720 comm="syz.0.360" path="socket:[22862]" dev="sockfs" ino=22862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.082796][ T1729] random: crng reseeded on system resumption [ 136.110856][ T1729] loop1: detected capacity change from 0 to 256 [ 136.125452][ T1729] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.136328][ T1729] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 136.147376][ T1729] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 136.167056][ T287] EXT4-fs (loop4): unmounting filesystem. [ 136.214441][ T309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.240572][ T1732] loop4: detected capacity change from 0 to 1024 [ 136.250641][ T1732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.259725][ T285] EXT4-fs (loop2): unmounting filesystem. [ 136.276560][ T1732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.337153][ T1736] x_tables: duplicate underflow at hook 3 [ 137.355929][ T309] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 137.364355][ T309] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 137.374938][ T309] usb 4-1: config 220 has no interface number 2 [ 137.381728][ T309] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 137.396183][ T309] usb 4-1: config 220 interface 0 has no altsetting 0 [ 137.527857][ T309] usb 4-1: config 220 interface 76 has no altsetting 0 [ 137.538679][ T309] usb 4-1: config 220 interface 1 has no altsetting 0 [ 137.956228][ T1746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1746 comm=syz.1.366 [ 137.981272][ T287] EXT4-fs (loop4): unmounting filesystem. [ 138.046040][ T1722] Bluetooth: hci0: command 0x1003 tx timeout [ 138.116187][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.370028][ T28] audit: type=1400 audit(1775009794.886:186): avc: denied { write } for pid=1750 comm="syz.0.369" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.924454][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 139.220782][ T309] usb 4-1: string descriptor 0 read error: -71 [ 139.235015][ T309] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.244167][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.130495][ T309] usb 4-1: can't set config #220, error -71 [ 140.146147][ T309] usb 4-1: USB disconnect, device number 5 [ 142.201650][ T1778] loop3: detected capacity change from 0 to 512 [ 142.214673][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.220844][ T1722] Bluetooth: hci0: command 0x1003 tx timeout [ 142.271877][ T1783] random: crng reseeded on system resumption [ 142.333935][ T1783] loop2: detected capacity change from 0 to 256 [ 142.357045][ T1778] EXT4-fs (loop3): 1 truncate cleaned up [ 142.362743][ T1778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.364723][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 142.390073][ T1777] overlayfs: upper fs needs to support d_type. [ 142.408187][ T1787] netlink: 'syz.1.375': attribute type 4 has an invalid length. [ 142.417376][ T1783] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.444456][ T1783] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 142.466632][ T1783] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.791008][ T1792] netlink: 'syz.4.377': attribute type 4 has an invalid length. [ 143.919513][ T284] EXT4-fs (loop3): unmounting filesystem. [ 144.196972][ T28] audit: type=1400 audit(1775009800.716:187): avc: denied { read write } for pid=1797 comm="syz.1.379" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.226151][ T1801] loop3: detected capacity change from 0 to 512 [ 144.235871][ T28] audit: type=1400 audit(1775009800.716:188): avc: denied { open } for pid=1797 comm="syz.1.379" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.282955][ T1801] EXT4-fs (loop3): 1 truncate cleaned up [ 144.305564][ T1801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.424273][ T1801] overlayfs: upper fs needs to support d_type. [ 144.584484][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.601248][ T1421] Bluetooth: hci1: Frame reassembly failed (-84) [ 144.795568][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 144.803952][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 144.814358][ T24] usb 3-1: config 220 has no interface number 2 [ 144.820740][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 144.834116][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 144.845985][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 144.853201][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 144.861167][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 144.875861][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 144.877014][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 144.893556][ T284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 144.899706][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.922760][ T284] EXT4-fs (loop3): unmounting filesystem. [ 144.952586][ T24] usb 3-1: Product: syz [ 144.982197][ T24] usb 3-1: Manufacturer: syz [ 144.987065][ T24] usb 3-1: SerialNumber: syz [ 145.342587][ T1823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1823 comm=syz.3.384 [ 145.381148][ T24] usb 3-1: selecting invalid altsetting 0 [ 145.387441][ T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 145.395116][ T24] usb 3-1: No valid video chain found. [ 145.484574][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 145.613612][ T24] usb 3-1: USB disconnect, device number 2 [ 146.227753][ T1722] Bluetooth: hci0: command 0x1003 tx timeout [ 146.254432][ T1779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.597393][ T1839] loop3: detected capacity change from 0 to 1024 [ 146.606637][ T1724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 146.612928][ T1839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.622346][ T1839] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.660560][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.670046][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.738520][ T1843] loop2: detected capacity change from 0 to 512 [ 146.756635][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.782474][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.794878][ T1840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 147.014663][ T1839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 147.027743][ T1839] System zones: 0-1, 3-36 [ 147.037578][ T1843] EXT4-fs (loop2): 1 truncate cleaned up [ 147.040185][ T1849] random: crng reseeded on system resumption [ 147.043311][ T1843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.067880][ T1842] overlayfs: upper fs needs to support d_type. [ 147.077082][ T1839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.116822][ T1850] loop0: detected capacity change from 0 to 256 [ 147.131846][ T1850] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.152204][ T1850] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 147.169306][ T1850] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.296692][ T1852] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 148.440713][ T28] audit: type=1400 audit(1775009804.956:189): avc: denied { create } for pid=1838 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.684475][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 148.694282][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 149.034600][ T285] EXT4-fs (loop2): unmounting filesystem. [ 149.071787][ T1859] x_tables: duplicate underflow at hook 3 [ 149.084796][ T284] EXT4-fs (loop3): unmounting filesystem. [ 149.097361][ T28] audit: type=1400 audit(1775009805.616:190): avc: denied { create } for pid=1853 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.155862][ T1867] loop0: detected capacity change from 0 to 1024 [ 149.163272][ T1869] random: crng reseeded on system resumption [ 149.169367][ T28] audit: type=1400 audit(1775009805.616:191): avc: denied { write } for pid=1853 comm="syz.1.393" path="socket:[23136]" dev="sockfs" ino=23136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.211183][ T1867] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 149.223495][ T1870] loop3: detected capacity change from 0 to 256 [ 149.241256][ T1867] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.396: inode #4294967295: comm syz.0.396: iget: illegal inode # [ 149.258138][ T28] audit: type=1400 audit(1775009805.636:192): avc: denied { ioctl } for pid=1853 comm="syz.1.393" path="socket:[23133]" dev="sockfs" ino=23133 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.284922][ T1870] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.292177][ T1867] EXT4-fs (loop0): no journal found [ 149.304731][ T1867] EXT4-fs (loop0): can't get journal size [ 149.316443][ T1870] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 149.316613][ T1867] EXT4-fs (loop0): failed to initialize system zone (-22) [ 149.333501][ T1867] EXT4-fs (loop0): mount failed [ 149.339735][ T1870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 149.425144][ T1864] x_tables: duplicate underflow at hook 3 [ 150.528897][ T1724] Bluetooth: hci0: command 0x1003 tx timeout [ 150.537394][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.554534][ T1779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.566593][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.641512][ T1881] hub 9-0:1.0: USB hub found [ 150.646769][ T1881] hub 9-0:1.0: 1 port detected [ 150.715907][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 151.088085][ T1883] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 151.098049][ T1883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.110927][ T1883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.119299][ T1883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 151.308460][ T1897] netlink: 'syz.2.405': attribute type 4 has an invalid length. [ 151.444516][ T1900] random: crng reseeded on system resumption [ 151.487808][ T1900] loop2: detected capacity change from 0 to 256 [ 151.513552][ T1900] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.524482][ T1900] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 151.535357][ T1900] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 151.825171][ T1907] x_tables: duplicate underflow at hook 3 [ 152.496727][ T1916] hub 9-0:1.0: USB hub found [ 152.501526][ T1916] hub 9-0:1.0: 1 port detected [ 152.547147][ T1918] loop4: detected capacity change from 0 to 1024 [ 152.599632][ T1920] hub 9-0:1.0: USB hub found [ 152.608809][ T1920] hub 9-0:1.0: 1 port detected [ 152.614062][ T1918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.148623][ T1918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.384346][ T1933] random: crng reseeded on system resumption [ 153.413872][ T1933] loop0: detected capacity change from 0 to 256 [ 153.430748][ T1924] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.438579][ T1924] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.440108][ T1933] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.453490][ T1924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.469240][ T1924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.477610][ T1924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 153.514681][ T1933] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 153.529012][ T1933] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.794370][ T1939] x_tables: duplicate underflow at hook 3 [ 154.003228][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.142791][ T1950] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 154.602989][ T1954] loop1: detected capacity change from 0 to 256 [ 154.612433][ T1954] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.632446][ T1954] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 154.651564][ T1954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.769052][ T1944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.789466][ T1944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.801401][ T287] EXT4-fs (loop4): unmounting filesystem. [ 154.810966][ T1944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.820527][ T1944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 154.875512][ T342] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.881919][ T1958] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.890872][ T1960] hub 9-0:1.0: USB hub found [ 154.905247][ T1960] hub 9-0:1.0: 1 port detected [ 154.922518][ T1958] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.658382][ T1978] netlink: 'syz.0.428': attribute type 4 has an invalid length. [ 156.154761][ T1986] x_tables: duplicate underflow at hook 3 [ 156.850925][ T1995] hub 9-0:1.0: USB hub found [ 157.130276][ T1995] hub 9-0:1.0: 1 port detected [ 157.136495][ T28] audit: type=1400 audit(1775009813.446:193): avc: denied { write } for pid=1992 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.266921][ T1779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.296840][ T28] audit: type=1400 audit(1775009813.456:194): avc: denied { read } for pid=1992 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.374850][ T1724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 157.476810][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 157.612122][ T2008] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 157.991291][ T2010] loop1: detected capacity change from 0 to 1024 [ 158.096534][ T2012] hub 9-0:1.0: USB hub found [ 158.349536][ T2010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.375996][ T2010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.409684][ T2010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 158.418288][ T2010] System zones: 0-1, 3-36 [ 158.423968][ T2010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.647409][ T2012] hub 9-0:1.0: 1 port detected [ 158.657876][ T2017] random: crng reseeded on system resumption [ 158.690617][ T2019] loop4: detected capacity change from 0 to 256 [ 158.699544][ T2019] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.741616][ T2017] loop2: detected capacity change from 0 to 256 [ 158.748170][ T2019] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 158.758676][ T2019] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.782473][ T2017] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.565971][ T28] audit: type=1400 audit(1775009815.416:195): avc: denied { connect } for pid=2002 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.616813][ T2026] loop0: detected capacity change from 0 to 512 [ 159.633413][ T2017] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 159.654675][ T2026] EXT4-fs (loop0): 1 truncate cleaned up [ 159.660381][ T2026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.671999][ T2026] overlayfs: upper fs needs to support d_type. [ 159.683696][ T286] EXT4-fs (loop1): unmounting filesystem. [ 159.718804][ T2017] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 159.761219][ T2030] loop1: detected capacity change from 0 to 1024 [ 159.784862][ T2030] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 159.811464][ T2030] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.442: inode #4294967295: comm syz.1.442: iget: illegal inode # [ 159.836360][ T2030] EXT4-fs (loop1): no journal found [ 159.849202][ T2030] EXT4-fs (loop1): can't get journal size [ 159.864572][ T2030] EXT4-fs (loop1): failed to initialize system zone (-22) [ 159.878287][ T2030] EXT4-fs (loop1): mount failed [ 159.914076][ T283] EXT4-fs (loop0): unmounting filesystem. [ 160.545014][ T2049] hub 9-0:1.0: USB hub found [ 160.549807][ T2049] hub 9-0:1.0: 1 port detected [ 161.354219][ T2057] hub 9-0:1.0: USB hub found [ 161.361234][ T2057] hub 9-0:1.0: 1 port detected [ 162.008130][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.044481][ T1722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.059683][ T2059] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.071391][ T2059] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.141037][ T2069] x_tables: duplicate underflow at hook 3 [ 162.322010][ T2073] netlink: 'syz.2.450': attribute type 4 has an invalid length. [ 162.824308][ T2076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 163.110003][ T2079] random: crng reseeded on system resumption [ 163.176296][ T2082] loop2: detected capacity change from 0 to 256 [ 163.214207][ T2082] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.250708][ T2082] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 163.276238][ T2082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.603407][ T2094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.681501][ T2094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.000585][ T2094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.045460][ T1724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.045521][ T1779] Bluetooth: hci1: command 0x1003 tx timeout [ 164.103696][ T2094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 164.122690][ T2100] random: crng reseeded on system resumption [ 164.156951][ T2100] loop4: detected capacity change from 0 to 256 [ 164.170027][ T2100] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.211463][ T2100] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 164.248837][ T2100] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 164.745110][ T28] audit: type=1400 audit(1775009821.266:196): avc: denied { write } for pid=2110 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.868981][ T2117] hub 9-0:1.0: USB hub found [ 164.960117][ T2117] hub 9-0:1.0: 1 port detected [ 165.502620][ T2129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 165.510926][ T2129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 165.521257][ T2129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.534342][ T2129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.542575][ T2129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 165.693552][ T2131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 166.930580][ T2144] hub 9-0:1.0: USB hub found [ 166.935831][ T2144] hub 9-0:1.0: 1 port detected [ 167.358279][ T2150] random: crng reseeded on system resumption [ 167.381301][ T28] audit: type=1400 audit(1775009823.896:197): avc: denied { create } for pid=2151 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.396303][ T2152] loop3: detected capacity change from 0 to 512 [ 167.412763][ T2153] loop0: detected capacity change from 0 to 256 [ 167.420162][ T2152] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.432125][ T2153] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.443077][ T2152] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 167.452093][ T2153] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 167.463184][ T2153] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.577877][ T28] audit: type=1400 audit(1775009824.096:198): avc: denied { bind } for pid=2151 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.613659][ T28] audit: type=1400 audit(1775009824.116:199): avc: denied { setopt } for pid=2151 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.783484][ T2155] loop3: detected capacity change from 0 to 40427 [ 167.799672][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 167.809145][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 167.819180][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.832322][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.840581][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 167.847978][ T2155] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 167.848000][ T2155] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.868495][ T2155] F2FS-fs (loop3): invalid crc value [ 167.917211][ T2160] loop2: detected capacity change from 0 to 1024 [ 167.923927][ T2160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.026923][ T2155] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.045217][ T2166] loop4: detected capacity change from 0 to 1024 [ 168.054774][ T2166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.061637][ T2166] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.141446][ T2170] hub 9-0:1.0: USB hub found [ 168.146570][ T2170] hub 9-0:1.0: 1 port detected [ 168.337825][ T2166] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 168.348603][ T2160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.357487][ T2155] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.364834][ T2155] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.388330][ T2166] System zones: 0-1, 3-36 [ 168.417845][ T2166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.537957][ T2172] hub 9-0:1.0: USB hub found [ 168.541691][ T285] EXT4-fs (loop2): unmounting filesystem. [ 168.563298][ T2172] hub 9-0:1.0: 1 port detected [ 168.625125][ T2183] hub 9-0:1.0: USB hub found [ 168.635098][ T2183] hub 9-0:1.0: 1 port detected [ 169.424433][ T2186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 170.040834][ T287] EXT4-fs (loop4): unmounting filesystem. [ 170.317896][ T2190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 170.328009][ T2190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.341263][ T2190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.349850][ T2190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 170.431177][ T2194] loop4: detected capacity change from 0 to 1024 [ 170.510632][ T2194] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 170.618611][ T2194] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: comm syz.4.484: inode #4294967295: comm syz.4.484: iget: illegal inode # [ 170.665140][ T2194] EXT4-fs (loop4): no journal found [ 170.679403][ T2194] EXT4-fs (loop4): can't get journal size [ 170.722828][ T2194] EXT4-fs (loop4): failed to initialize system zone (-22) [ 170.749157][ T2194] EXT4-fs (loop4): mount failed [ 171.913592][ T2210] loop1: detected capacity change from 0 to 1024 [ 171.992128][ T2210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.016053][ T2214] loop4: detected capacity change from 0 to 512 [ 172.054921][ T2214] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.068630][ T2214] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 172.092006][ T2210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.323657][ T2210] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.357210][ T2214] loop4: detected capacity change from 0 to 40427 [ 172.364787][ T2214] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 172.372571][ T2214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.381280][ T2214] F2FS-fs (loop4): invalid crc value [ 172.388978][ T2223] loop0: detected capacity change from 0 to 512 [ 172.410559][ T2214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.454748][ T2214] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 172.461843][ T2214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.470542][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.480553][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.490153][ T2223] EXT4-fs (loop0): 1 truncate cleaned up [ 172.500146][ T2223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.510187][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.520486][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 172.533114][ T2223] overlayfs: upper fs needs to support d_type. [ 172.822591][ T286] EXT4-fs (loop1): unmounting filesystem. [ 173.577309][ T2234] hub 9-0:1.0: USB hub found [ 173.582956][ T2243] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 173.649020][ T2240] loop3: detected capacity change from 0 to 1024 [ 173.862410][ T2234] hub 9-0:1.0: 1 port detected [ 173.871544][ T2240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.888903][ T2240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.912012][ T2240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 173.923427][ T2240] System zones: 0-1, 3-36 [ 173.928880][ T2240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.005274][ T2249] loop4: detected capacity change from 0 to 1024 [ 174.015189][ T2249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.043284][ T2249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.751906][ T284] EXT4-fs (loop3): unmounting filesystem. [ 174.766091][ T2256] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.801053][ T2256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.882351][ T2256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.892989][ T2256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 174.969419][ T283] EXT4-fs (loop0): unmounting filesystem. [ 175.003001][ T287] EXT4-fs (loop4): unmounting filesystem. [ 175.297224][ T2266] loop4: detected capacity change from 0 to 1024 [ 175.306247][ T2269] loop1: detected capacity change from 0 to 1024 [ 175.314753][ T2266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.325634][ T2269] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 175.335654][ T2266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.350037][ T2271] loop2: detected capacity change from 0 to 512 [ 175.368303][ T2269] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.504: inode #4294967295: comm syz.1.504: iget: illegal inode # [ 175.382920][ T2271] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.394450][ T2271] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 175.403197][ T2266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 175.411387][ T2266] System zones: 0-1, 3-36 [ 175.412656][ T2269] EXT4-fs (loop1): no journal found [ 175.429702][ T2269] EXT4-fs (loop1): can't get journal size [ 175.441746][ T2269] EXT4-fs (loop1): failed to initialize system zone (-22) [ 175.449247][ T2269] EXT4-fs (loop1): mount failed [ 175.460414][ T2266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.557936][ T2271] loop2: detected capacity change from 0 to 40427 [ 175.566508][ T2271] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 175.574285][ T2271] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 175.583580][ T2271] F2FS-fs (loop2): invalid crc value [ 175.623805][ T2271] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.951538][ T2271] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 176.958843][ T2271] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.012938][ T287] EXT4-fs (loop4): unmounting filesystem. [ 177.038567][ T2290] loop1: detected capacity change from 0 to 1024 [ 177.097210][ T2290] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 177.144569][ T2290] EXT4-fs error (device loop1): ext4_get_journal_inode:5743: comm syz.1.508: inode #4294967295: comm syz.1.508: iget: illegal inode # [ 177.172643][ T2290] EXT4-fs (loop1): no journal found [ 177.184113][ T2290] EXT4-fs (loop1): can't get journal size [ 177.275225][ T2292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.284725][ T2290] EXT4-fs (loop1): failed to initialize system zone (-22) [ 177.285782][ T2292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.321201][ T2292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.333806][ T2292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 178.355928][ T2302] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 178.378947][ T2290] EXT4-fs (loop1): mount failed [ 178.413164][ T2306] loop4: detected capacity change from 0 to 1024 [ 178.454839][ T2306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.472045][ T2302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.485702][ T2302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.494055][ T2302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 178.785344][ T2306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.466868][ T287] EXT4-fs (loop4): unmounting filesystem. [ 179.802364][ T2330] loop3: detected capacity change from 0 to 512 [ 179.812221][ T2330] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.821435][ T2330] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 180.048033][ T2340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.077605][ T2340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.104787][ T2340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.113040][ T2340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 181.291119][ T2348] hub 9-0:1.0: USB hub found [ 181.377833][ T2348] hub 9-0:1.0: 1 port detected [ 181.465593][ T2354] netlink: 'syz.3.523': attribute type 4 has an invalid length. [ 181.655800][ T2358] loop4: detected capacity change from 0 to 1024 [ 181.662572][ T2358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.676435][ T2358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.733110][ T40] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 181.985579][ T40] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 181.993963][ T40] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 182.002925][ T40] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 182.013255][ T40] usb 3-1: config 220 has no interface number 2 [ 182.019584][ T40] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 182.032795][ T40] usb 3-1: config 220 interface 0 has no altsetting 0 [ 182.039648][ T40] usb 3-1: config 220 interface 76 has no altsetting 0 [ 182.046581][ T40] usb 3-1: config 220 interface 1 has no altsetting 0 [ 182.054944][ T40] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 182.064019][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.072139][ T40] usb 3-1: Product: syz [ 182.076385][ T40] usb 3-1: Manufacturer: syz [ 182.081012][ T40] usb 3-1: SerialNumber: syz [ 182.289634][ T40] usb 3-1: selecting invalid altsetting 0 [ 182.295513][ T40] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 182.302092][ T40] usb 3-1: No valid video chain found. [ 182.317853][ T40] usb 3-1: USB disconnect, device number 3 [ 183.192440][ T287] EXT4-fs (loop4): unmounting filesystem. [ 183.250654][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.468855][ T2391] loop0: detected capacity change from 0 to 1024 [ 184.475566][ T2391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.482450][ T2391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.555839][ T2391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 184.564015][ T2391] System zones: 0-1, 3-36 [ 184.584225][ T2391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.860445][ T2401] netlink: 'syz.2.537': attribute type 4 has an invalid length. [ 185.581247][ T1724] Bluetooth: hci0: command 0x1003 tx timeout [ 185.587444][ T1722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.050682][ T283] EXT4-fs (loop0): unmounting filesystem. [ 186.132503][ T2409] loop0: detected capacity change from 0 to 1024 [ 186.174738][ T2409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.211196][ T2409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.530259][ T2425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.566691][ T2426] loop4: detected capacity change from 0 to 512 [ 186.584314][ T2425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.616449][ T2425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.689452][ T2425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.708692][ T2425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 187.321911][ T283] EXT4-fs (loop0): unmounting filesystem. [ 187.348818][ T2426] EXT4-fs (loop4): 1 truncate cleaned up [ 187.354545][ T2426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.373149][ T2424] overlayfs: upper fs needs to support d_type. [ 187.536334][ T287] EXT4-fs (loop4): unmounting filesystem. [ 187.667800][ T2440] hub 9-0:1.0: USB hub found [ 189.445966][ T2440] hub 9-0:1.0: 1 port detected [ 189.494548][ T2441] tty tty22: ldisc open failed (-12), clearing slot 21 [ 189.634720][ T2447] loop4: detected capacity change from 0 to 1024 [ 189.674461][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.728318][ T2457] loop2: detected capacity change from 0 to 1024 [ 189.735252][ T2447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.754908][ T2447] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.777349][ T2457] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 189.783889][ T2447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 189.788230][ T2457] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: comm syz.2.553: inode #4294967295: comm syz.2.553: iget: illegal inode # [ 189.808956][ T2447] System zones: 0-1, 3-36 [ 189.813535][ T2457] EXT4-fs (loop2): no journal found [ 189.819944][ T2447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.833240][ T2457] EXT4-fs (loop2): can't get journal size [ 189.878903][ T2457] EXT4-fs (loop2): failed to initialize system zone (-22) [ 189.886283][ T2457] EXT4-fs (loop2): mount failed [ 190.644559][ T287] EXT4-fs (loop4): unmounting filesystem. [ 190.683129][ T2469] loop4: detected capacity change from 0 to 1024 [ 190.702410][ T2469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.867700][ T2469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.093952][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.111465][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.153815][ T2488] loop0: detected capacity change from 0 to 512 [ 191.172057][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.184104][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 191.361469][ T2488] EXT4-fs (loop0): 1 truncate cleaned up [ 191.367293][ T2488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.399481][ T2488] overlayfs: upper fs needs to support d_type. [ 191.609585][ T287] EXT4-fs (loop4): unmounting filesystem. [ 191.726351][ T1779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.727263][ T1722] Bluetooth: hci0: command 0x1003 tx timeout [ 192.184715][ T2492] device syzkaller0 entered promiscuous mode [ 192.377536][ T2499] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 192.645380][ T283] EXT4-fs (loop0): unmounting filesystem. [ 192.911667][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.921647][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.934832][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.942381][ T2506] loop4: detected capacity change from 0 to 1024 [ 192.944869][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 192.957182][ T2506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.050283][ T2506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.990029][ T28] audit: type=1400 audit(1775009850.496:200): avc: denied { write } for pid=2530 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 194.334061][ T287] EXT4-fs (loop4): unmounting filesystem. [ 194.463830][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.510036][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.558949][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.575098][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 194.897304][ T2546] random: crng reseeded on system resumption [ 194.928622][ T2546] loop1: detected capacity change from 0 to 256 [ 194.935575][ T2546] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.946516][ T2546] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 194.957485][ T2546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.065586][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.073334][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.082361][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.093750][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.103058][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 196.185462][ T2569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.226329][ T2571] loop1: detected capacity change from 0 to 1024 [ 196.257238][ T2569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.274852][ T2571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.296036][ T2569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.322128][ T2569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 196.330145][ T2571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.631171][ T2580] loop2: detected capacity change from 0 to 1024 [ 196.673792][ T2580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.760987][ T2580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.046300][ T28] audit: type=1400 audit(1775009853.566:201): avc: denied { write } for pid=2585 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.088676][ T986] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 197.207859][ T286] EXT4-fs (loop1): unmounting filesystem. [ 197.352744][ T2596] loop4: detected capacity change from 0 to 1024 [ 197.374499][ T2596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.401768][ T2596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.452751][ T2597] hub 9-0:1.0: USB hub found [ 197.457886][ T2597] hub 9-0:1.0: 1 port detected [ 197.725078][ T2596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 197.747952][ T2596] System zones: 0-1, 3-36 [ 197.753363][ T2596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.289515][ T2607] random: crng reseeded on system resumption [ 198.350308][ T287] EXT4-fs (loop4): unmounting filesystem. [ 198.351158][ T2608] loop0: detected capacity change from 0 to 256 [ 198.372563][ T285] EXT4-fs (loop2): unmounting filesystem. [ 198.387814][ T2608] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.410547][ T2610] Zero length message leads to an empty skb [ 198.411018][ T2608] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 198.443797][ T2608] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.022603][ T2634] netlink: 'syz.2.598': attribute type 4 has an invalid length. [ 200.651007][ T2628] loop4: detected capacity change from 0 to 1024 [ 200.674732][ T2628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.752239][ T2628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.854076][ T2645] loop0: detected capacity change from 0 to 1024 [ 200.861199][ T2645] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 200.879078][ T2645] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.602: inode #4294967295: comm syz.0.602: iget: illegal inode # [ 200.898123][ T2649] hub 9-0:1.0: USB hub found [ 200.902832][ T2649] hub 9-0:1.0: 1 port detected [ 200.920429][ T2645] EXT4-fs (loop0): no journal found [ 200.926716][ T2645] EXT4-fs (loop0): can't get journal size [ 200.935655][ T2645] EXT4-fs (loop0): failed to initialize system zone (-22) [ 200.943846][ T2645] EXT4-fs (loop0): mount failed [ 200.952129][ T2652] loop2: detected capacity change from 0 to 1024 [ 200.966636][ T2652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.030375][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.077811][ T2652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.270594][ T287] EXT4-fs (loop4): unmounting filesystem. [ 201.282500][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.131183][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.292777][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready [ 202.503109][ T285] EXT4-fs (loop2): unmounting filesystem. [ 202.713327][ T2678] hub 9-0:1.0: USB hub found [ 202.718603][ T2678] hub 9-0:1.0: 1 port detected [ 202.764390][ T1722] Bluetooth: hci0: command 0x1003 tx timeout [ 202.770653][ T1779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.702142][ T2688] loop2: detected capacity change from 0 to 1024 [ 203.715268][ T2688] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 203.729015][ T2688] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: comm syz.2.612: inode #4294967295: comm syz.2.612: iget: illegal inode # [ 203.743067][ T2688] EXT4-fs (loop2): no journal found [ 203.751536][ T2688] EXT4-fs (loop2): can't get journal size [ 204.648191][ T2688] EXT4-fs (loop2): failed to initialize system zone (-22) [ 204.664461][ T2688] EXT4-fs (loop2): mount failed [ 204.675624][ T2698] loop0: detected capacity change from 0 to 1024 [ 204.682369][ T2698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.707184][ T2698] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.851323][ T2698] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 204.859880][ T2698] System zones: 0-1, 3-36 [ 204.898773][ T2698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 205.740279][ T2710] loop1: detected capacity change from 0 to 128 [ 205.747781][ T2710] ======================================================= [ 205.747781][ T2710] WARNING: The mand mount option has been deprecated and [ 205.747781][ T2710] and is ignored by this kernel. Remove the mand [ 205.747781][ T2710] option from the mount to silence this warning. [ 205.747781][ T2710] ======================================================= [ 206.323417][ T28] audit: type=1400 audit(1775009862.306:202): avc: denied { mount } for pid=2699 comm="syz.1.615" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 206.371250][ T283] EXT4-fs (loop0): unmounting filesystem. [ 206.414842][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.421279][ T2713] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.450954][ T2717] loop4: detected capacity change from 0 to 1024 [ 206.471778][ T28] audit: type=1400 audit(1775009862.986:203): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 206.491989][ T2717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.503611][ T2717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.516382][ T2717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 206.524833][ T2717] System zones: 0-1, 3-36 [ 206.843563][ T2717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.671605][ T2729] hub 9-0:1.0: USB hub found [ 207.690141][ T2729] hub 9-0:1.0: 1 port detected [ 207.934745][ T2737] hub 9-0:1.0: USB hub found [ 209.743529][ T1724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.743601][ T1779] Bluetooth: hci0: command 0x1003 tx timeout [ 209.755982][ T2737] hub 9-0:1.0: 1 port detected [ 209.793166][ T2740] loop0: detected capacity change from 0 to 1024 [ 209.800484][ T2740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.807269][ T2715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.817532][ T287] EXT4-fs (loop4): unmounting filesystem. [ 209.827834][ T2742] loop1: detected capacity change from 0 to 1024 [ 209.829228][ T2740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.860957][ T2742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.885408][ T2740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 209.900483][ T2740] System zones: 0-1, 3-36 [ 209.905874][ T2740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.946723][ T2742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.258913][ T2754] netlink: 'syz.3.626': attribute type 4 has an invalid length. [ 210.844378][ C0] ================================================================== [ 210.852507][ C0] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 210.859595][ C0] Write of size 8 at addr ffff888113bd4a00 by task syz.1.625/2755 [ 210.867422][ C0] [ 210.869776][ C0] CPU: 0 PID: 2755 Comm: syz.1.625 Not tainted syzkaller #0 [ 210.877079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.887169][ C0] Call Trace: [ 210.890466][ C0] [ 210.893313][ C0] __dump_stack+0x21/0x24 [ 210.897653][ C0] dump_stack_lvl+0x110/0x170 [ 210.902336][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 210.907363][ C0] ? is_bpf_text_address+0x177/0x190 [ 210.912646][ C0] ? enqueue_timer+0xae/0x480 [ 210.917325][ C0] print_address_description+0x71/0x200 [ 210.922870][ C0] print_report+0x4a/0x60 [ 210.927198][ C0] kasan_report+0x122/0x150 [ 210.931698][ C0] ? enqueue_timer+0xae/0x480 [ 210.936372][ C0] __asan_report_store8_noabort+0x17/0x20 [ 210.942083][ C0] enqueue_timer+0xae/0x480 [ 210.946614][ C0] __mod_timer+0x84c/0xc00 [ 210.951039][ C0] mod_timer+0x1f/0x30 [ 210.955103][ C0] neigh_timer_handler+0x937/0xf00 [ 210.960210][ C0] ? __cfi_neigh_timer_handler+0x10/0x10 [ 210.965861][ C0] call_timer_fn+0x46/0x2a0 [ 210.970375][ C0] ? __cfi_neigh_timer_handler+0x10/0x10 [ 210.976002][ C0] __run_timers+0x65b/0x9f0 [ 210.980505][ C0] ? calc_index+0x200/0x200 [ 210.985017][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 210.990239][ C0] run_timer_softirq+0x6a/0xf0 [ 210.995003][ C0] handle_softirqs+0x1d7/0x600 [ 210.999759][ C0] ? irqtime_account_irq+0xc4/0x240 [ 211.004960][ C0] __irq_exit_rcu+0x52/0xf0 [ 211.009475][ C0] irq_exit_rcu+0x9/0x10 [ 211.013711][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 211.019342][ C0] [ 211.022272][ C0] [ 211.025199][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 211.031173][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 211.037585][ C0] Code: 00 d5 0d 87 e8 2c ba b5 fc 4c 89 f7 48 83 3d 21 cd 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 86 9e 4b fc 65 8b 05 c7 65 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 211.057206][ C0] RSP: 0000:ffffc90010df75e0 EFLAGS: 00000206 [ 211.063271][ C0] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 211.071241][ C0] RDX: ffffc90001b1b000 RSI: 0000000000000a02 RDI: 0000000000000001 [ 211.079202][ C0] RBP: ffffc90010df75f0 R08: ffff88810faf2377 R09: 1ffff11021f5e46e [ 211.087164][ C0] R10: dffffc0000000000 R11: ffffed1021f5e46f R12: ffff88810faf2280 [ 211.095129][ C0] R13: ffff8881325600ec R14: ffffc90010df77c0 R15: dffffc0000000000 [ 211.103103][ C0] __skb_try_recv_datagram+0x17b/0x4d0 [ 211.108562][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 211.113926][ C0] __unix_dgram_recvmsg+0x2ff/0xdc0 [ 211.119127][ C0] ? __kasan_check_read+0x11/0x20 [ 211.124178][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 211.129901][ C0] ? irqentry_exit+0x37/0x40 [ 211.134488][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 211.139336][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 211.144883][ C0] ____sys_recvmsg+0x2d9/0x5f0 [ 211.149641][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 211.154658][ C0] ? import_iovec+0x7c/0xb0 [ 211.159170][ C0] ___sys_recvmsg+0x212/0x590 [ 211.163839][ C0] ? __sys_recvmsg+0x280/0x280 [ 211.168609][ C0] ? __switch_to+0x517/0xe60 [ 211.173192][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 211.179341][ C0] ? do_recvmmsg+0x3ab/0x840 [ 211.183928][ C0] do_recvmmsg+0x393/0x840 [ 211.188345][ C0] ? __sys_recvmmsg+0x290/0x290 [ 211.193190][ C0] ? release_firmware_map_entry+0x190/0x190 [ 211.199080][ C0] ? __kasan_check_read+0x11/0x20 [ 211.204095][ C0] ? preempt_schedule_irq+0xca/0x120 [ 211.209375][ C0] ? plist_check_list+0x255/0x270 [ 211.214394][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 211.219439][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 211.224993][ C0] x64_sys_call+0x3e7/0x9a0 [ 211.229500][ C0] do_syscall_64+0x4c/0xa0 [ 211.233914][ C0] ? clear_bhb_loop+0x30/0x80 [ 211.238586][ C0] ? clear_bhb_loop+0x30/0x80 [ 211.243259][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.249151][ C0] RIP: 0033:0x7fe3ae59c819 [ 211.253563][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.273188][ C0] RSP: 002b:00007fe3af3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.281591][ C0] RAX: ffffffffffffffda RBX: 00007fe3ae816090 RCX: 00007fe3ae59c819 [ 211.289554][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 211.297521][ C0] RBP: 00007fe3ae632c91 R08: 0000000000000000 R09: 0000000000000000 [ 211.305483][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 211.313447][ C0] R13: 00007fe3ae816128 R14: 00007fe3ae816090 R15: 00007ffca4d088a8 [ 211.321428][ C0] [ 211.324439][ C0] [ 211.326753][ C0] Allocated by task 2715: [ 211.331065][ C0] kasan_set_track+0x4b/0x70 [ 211.335659][ C0] kasan_save_alloc_info+0x25/0x30 [ 211.340774][ C0] __kasan_kmalloc+0x95/0xb0 [ 211.345355][ C0] __kmalloc+0xb1/0x1e0 [ 211.349502][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 211.354514][ C0] hci_uart_tty_ioctl+0x3c8/0xa20 [ 211.359534][ C0] tty_ioctl+0x8ef/0xc60 [ 211.363772][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 211.368442][ C0] __x64_sys_ioctl+0x7b/0x90 [ 211.373027][ C0] x64_sys_call+0x58b/0x9a0 [ 211.377527][ C0] do_syscall_64+0x4c/0xa0 [ 211.381946][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.387833][ C0] [ 211.390191][ C0] Freed by task 2715: [ 211.394163][ C0] kasan_set_track+0x4b/0x70 [ 211.398744][ C0] kasan_save_free_info+0x31/0x50 [ 211.403767][ C0] ____kasan_slab_free+0x132/0x180 [ 211.408873][ C0] __kasan_slab_free+0x11/0x20 [ 211.413632][ C0] slab_free_freelist_hook+0xc2/0x190 [ 211.419005][ C0] __kmem_cache_free+0xb7/0x1b0 [ 211.423853][ C0] kfree+0x6f/0xf0 [ 211.427567][ C0] hci_release_dev+0x12a3/0x13b0 [ 211.432494][ C0] bt_host_release+0x82/0x90 [ 211.437081][ C0] device_release+0xa4/0x1d0 [ 211.441667][ C0] kobject_put+0x19d/0x280 [ 211.446095][ C0] put_device+0x1f/0x30 [ 211.450278][ C0] hci_dev_cmd+0x279/0x740 [ 211.454688][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 211.459359][ C0] sock_do_ioctl+0x114/0x330 [ 211.463951][ C0] sock_ioctl+0x4bd/0x710 [ 211.468288][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 211.472962][ C0] __x64_sys_ioctl+0x7b/0x90 [ 211.477556][ C0] x64_sys_call+0x58b/0x9a0 [ 211.482076][ C0] do_syscall_64+0x4c/0xa0 [ 211.486497][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.492388][ C0] [ 211.494717][ C0] Last potentially related work creation: [ 211.500453][ C0] kasan_save_stack+0x3a/0x60 [ 211.505129][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 211.510499][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 211.516319][ C0] insert_work+0x51/0x300 [ 211.520644][ C0] __queue_work+0x9b1/0xd30 [ 211.525147][ C0] queue_work_on+0xde/0x150 [ 211.529829][ C0] __hci_cmd_sync_sk+0xa7f/0xd30 [ 211.534772][ C0] hci_cmd_sync_status+0x53/0x120 [ 211.539790][ C0] hci_dev_cmd+0x35b/0x740 [ 211.544203][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 211.548868][ C0] sock_do_ioctl+0x114/0x330 [ 211.553450][ C0] sock_ioctl+0x4bd/0x710 [ 211.557773][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 211.562443][ C0] __x64_sys_ioctl+0x7b/0x90 [ 211.567029][ C0] x64_sys_call+0x58b/0x9a0 [ 211.571528][ C0] do_syscall_64+0x4c/0xa0 [ 211.575947][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.581836][ C0] [ 211.584150][ C0] Second to last potentially related work creation: [ 211.590728][ C0] kasan_save_stack+0x3a/0x60 [ 211.595399][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 211.600771][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 211.606576][ C0] insert_work+0x51/0x300 [ 211.610896][ C0] __queue_work+0x9b1/0xd30 [ 211.615397][ C0] queue_work_on+0xde/0x150 [ 211.619892][ C0] hci_cmd_timeout+0x191/0x200 [ 211.624646][ C0] process_one_work+0x71f/0xc40 [ 211.629514][ C0] worker_thread+0xa29/0x11e0 [ 211.634179][ C0] kthread+0x281/0x320 [ 211.638245][ C0] ret_from_fork+0x1f/0x30 [ 211.642655][ C0] [ 211.644969][ C0] The buggy address belongs to the object at ffff888113bd4000 [ 211.644969][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 211.659026][ C0] The buggy address is located 2560 bytes inside of [ 211.659026][ C0] 8192-byte region [ffff888113bd4000, ffff888113bd6000) [ 211.672487][ C0] [ 211.674820][ C0] The buggy address belongs to the physical page: [ 211.681218][ C0] page:ffffea00044ef400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113bd0 [ 211.691451][ C0] head:ffffea00044ef400 order:3 compound_mapcount:0 compound_pincount:0 [ 211.699761][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 211.705832][ C0] raw: 4000000000010200 ffffea0004747200 dead000000000004 ffff888100043500 [ 211.714425][ C0] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 211.723008][ C0] page dumped because: kasan: bad access detected [ 211.729415][ C0] page_owner tracks the page as allocated [ 211.735138][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 907, tgid 906 (syz.0.149), ts 84179683935, free_ts 83655753393 [ 211.757449][ C0] post_alloc_hook+0x1f5/0x210 [ 211.762243][ C0] prep_new_page+0x1c/0x110 [ 211.766746][ C0] get_page_from_freelist+0x2d12/0x2d80 [ 211.772291][ C0] __alloc_pages+0x1fa/0x610 [ 211.776883][ C0] alloc_slab_page+0x6e/0xf0 [ 211.781472][ C0] new_slab+0x98/0x3d0 [ 211.785540][ C0] ___slab_alloc+0x6bd/0xb20 [ 211.790127][ C0] __slab_alloc+0x5e/0xa0 [ 211.794476][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 211.799934][ C0] kmalloc_trace+0x29/0xb0 [ 211.804348][ C0] ipv4_sysctl_init_net+0x25e/0x310 [ 211.809541][ C0] ops_init+0x1c8/0x4a0 [ 211.813688][ C0] setup_net+0x4b4/0xcc0 [ 211.817917][ C0] copy_net_ns+0x355/0x5c0 [ 211.822324][ C0] create_new_namespaces+0x3a2/0x660 [ 211.827608][ C0] copy_namespaces+0x1d1/0x220 [ 211.832385][ C0] page last free stack trace: [ 211.837044][ C0] free_unref_page_prepare+0x742/0x750 [ 211.842497][ C0] free_unref_page+0x95/0x540 [ 211.847174][ C0] __free_pages+0x67/0x100 [ 211.851580][ C0] __free_slab+0xca/0x1a0 [ 211.855908][ C0] __unfreeze_partials+0x160/0x190 [ 211.861022][ C0] put_cpu_partial+0xa9/0x100 [ 211.865702][ C0] __slab_free+0x1c4/0x280 [ 211.870137][ C0] ___cache_free+0xbf/0xd0 [ 211.874547][ C0] qlist_free_all+0xc6/0x140 [ 211.879152][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 211.884598][ C0] __kasan_slab_alloc+0x24/0x80 [ 211.889444][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 211.894547][ C0] kmem_cache_alloc+0x16e/0x330 [ 211.899416][ C0] copy_sighand+0x54/0x230 [ 211.903823][ C0] copy_process+0x127a/0x3510 [ 211.908494][ C0] kernel_clone+0x22f/0x820 [ 211.912993][ C0] [ 211.915309][ C0] Memory state around the buggy address: [ 211.920928][ C0] ffff888113bd4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.929059][ C0] ffff888113bd4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.937112][ C0] >ffff888113bd4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.945159][ C0] ^ [ 211.949216][ C0] ffff888113bd4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.957265][ C0] ffff888113bd4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.965311][ C0] ================================================================== [ 211.973357][ C0] Disabling lock debugging due to kernel taint [ 211.979860][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 211.991605][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 212.000035][ C0] CPU: 0 PID: 2755 Comm: syz.1.625 Tainted: G B syzkaller #0 [ 212.008812][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.018872][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 212.024180][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 60 dd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 f3 d8 [ 212.043796][ C0] RSP: 0000:ffffc90000007c70 EFLAGS: 00010046 [ 212.049875][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881155b0000 [ 212.057884][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 212.065866][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 212.073854][ C0] R10: dffffc0000000000 R11: ffffed102277a939 R12: dffffc0000000000 [ 212.081828][ C0] R13: 0000000000000000 R14: ffff888113bd49c8 R15: 0000000000000008 [ 212.089809][ C0] FS: 00007fe3af3a66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 212.098751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.105340][ C0] CR2: 00007fe3ae5e9f00 CR3: 0000000112390000 CR4: 00000000003506b0 [ 212.113323][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.121305][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.129283][ C0] Call Trace: [ 212.132567][ C0] [ 212.135441][ C0] delayed_work_timer_fn+0x61/0x80 [ 212.140560][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 212.146373][ C0] call_timer_fn+0x46/0x2a0 [ 212.150884][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 212.156710][ C0] __run_timers+0x689/0x9f0 [ 212.161225][ C0] ? calc_index+0x200/0x200 [ 212.165750][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 212.170964][ C0] run_timer_softirq+0x6a/0xf0 [ 212.175734][ C0] handle_softirqs+0x1d7/0x600 [ 212.180507][ C0] ? irqtime_account_irq+0xc4/0x240 [ 212.185720][ C0] __irq_exit_rcu+0x52/0xf0 [ 212.190231][ C0] irq_exit_rcu+0x9/0x10 [ 212.194475][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 212.200112][ C0] [ 212.203053][ C0] [ 212.205995][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 212.212004][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 212.218434][ C0] Code: 00 d5 0d 87 e8 2c ba b5 fc 4c 89 f7 48 83 3d 21 cd 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 86 9e 4b fc 65 8b 05 c7 65 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 212.238057][ C0] RSP: 0000:ffffc90010df75e0 EFLAGS: 00000206 [ 212.244164][ C0] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 212.252231][ C0] RDX: ffffc90001b1b000 RSI: 0000000000000a02 RDI: 0000000000000001 [ 212.260213][ C0] RBP: ffffc90010df75f0 R08: ffff88810faf2377 R09: 1ffff11021f5e46e [ 212.268194][ C0] R10: dffffc0000000000 R11: ffffed1021f5e46f R12: ffff88810faf2280 [ 212.276177][ C0] R13: ffff8881325600ec R14: ffffc90010df77c0 R15: dffffc0000000000 [ 212.284162][ C0] __skb_try_recv_datagram+0x17b/0x4d0 [ 212.289634][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 212.295040][ C0] __unix_dgram_recvmsg+0x2ff/0xdc0 [ 212.300275][ C0] ? __kasan_check_read+0x11/0x20 [ 212.305324][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 212.311075][ C0] ? irqentry_exit+0x37/0x40 [ 212.315696][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 212.320568][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 212.326128][ C0] ____sys_recvmsg+0x2d9/0x5f0 [ 212.330914][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 212.335962][ C0] ? import_iovec+0x7c/0xb0 [ 212.340490][ C0] ___sys_recvmsg+0x212/0x590 [ 212.345169][ C0] ? __sys_recvmsg+0x280/0x280 [ 212.349940][ C0] ? __switch_to+0x517/0xe60 [ 212.354539][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 212.360704][ C0] ? do_recvmmsg+0x3ab/0x840 [ 212.365296][ C0] do_recvmmsg+0x393/0x840 [ 212.369723][ C0] ? __sys_recvmmsg+0x290/0x290 [ 212.374587][ C0] ? release_firmware_map_entry+0x190/0x190 [ 212.380505][ C0] ? __kasan_check_read+0x11/0x20 [ 212.385534][ C0] ? preempt_schedule_irq+0xca/0x120 [ 212.390826][ C0] ? plist_check_list+0x255/0x270 [ 212.395856][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 212.400904][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 212.406459][ C0] x64_sys_call+0x3e7/0x9a0 [ 212.410979][ C0] do_syscall_64+0x4c/0xa0 [ 212.415419][ C0] ? clear_bhb_loop+0x30/0x80 [ 212.420105][ C0] ? clear_bhb_loop+0x30/0x80 [ 212.424796][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.430707][ C0] RIP: 0033:0x7fe3ae59c819 [ 212.435132][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.454744][ C0] RSP: 002b:00007fe3af3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.463174][ C0] RAX: ffffffffffffffda RBX: 00007fe3ae816090 RCX: 00007fe3ae59c819 [ 212.471165][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 212.479138][ C0] RBP: 00007fe3ae632c91 R08: 0000000000000000 R09: 0000000000000000 [ 212.487124][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 212.495140][ C0] R13: 00007fe3ae816128 R14: 00007fe3ae816090 R15: 00007ffca4d088a8 [ 212.503232][ C0] [ 212.506286][ C0] Modules linked in: [ 212.510191][ C0] ---[ end trace 0000000000000000 ]--- [ 212.515653][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 212.521049][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 60 dd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 98 6e 00 49 8b 7d 00 e8 f3 d8 [ 212.540671][ C0] RSP: 0000:ffffc90000007c70 EFLAGS: 00010046 [ 212.546753][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881155b0000 [ 212.554739][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 212.562717][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 212.570700][ C0] R10: dffffc0000000000 R11: ffffed102277a939 R12: dffffc0000000000 [ 212.578680][ C0] R13: 0000000000000000 R14: ffff888113bd49c8 R15: 0000000000000008 [ 212.586659][ C0] FS: 00007fe3af3a66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 212.595609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.602209][ C0] CR2: 00007fe3ae5e9f00 CR3: 0000000112390000 CR4: 00000000003506b0 [ 212.610210][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.618215][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.626212][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 212.633967][ C0] Kernel Offset: disabled [ 212.638289][ C0] Rebooting in 86400 seconds..