last executing test programs: 1.483336713s ago: executing program 1 (id=182): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ftruncate(r0, 0x84) 1.480620274s ago: executing program 2 (id=183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) 1.380088016s ago: executing program 4 (id=187): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) 1.351686857s ago: executing program 4 (id=188): io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x45c, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) 1.344426917s ago: executing program 2 (id=189): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x4) 1.318448948s ago: executing program 2 (id=190): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000f51000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xf5ad74bd977f4333, 0x0, 0x0) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.301522038s ago: executing program 1 (id=191): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa042, 0x5) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0), 0x802, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$UHID_CREATE(r0, &(0x7f0000001ac0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x103, 0x4, 0x0, 0x5, 0xc04}}, 0x120) 1.150944062s ago: executing program 4 (id=194): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000008000000000000000000000b7080000000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000080ffffbf0200000800000418230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1}, 0x94) 1.150085382s ago: executing program 1 (id=195): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) ptrace$cont(0x7, r0, 0x5, 0x0) 1.110253173s ago: executing program 2 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00420040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.107424653s ago: executing program 4 (id=197): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x200004]}) flistxattr(r0, 0x0, 0x0) 1.011271615s ago: executing program 2 (id=199): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3600, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, &(0x7f0000000280)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 936.425707ms ago: executing program 4 (id=200): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) 925.923697ms ago: executing program 1 (id=201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 912.758138ms ago: executing program 3 (id=203): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 814.757729ms ago: executing program 3 (id=204): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000300025a729"], 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', 0x0, 0x20040ac, &(0x7f0000002880)={[{@xattr}]}) 728.496592ms ago: executing program 1 (id=206): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3fd, 0x6, 0xa513, 0xf, "4ebdaed43bb30000000000d185a200"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 695.582573ms ago: executing program 3 (id=207): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r1, &(0x7f0000001280)=""/200, 0xc8, 0x17a7) 578.784826ms ago: executing program 0 (id=209): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x26000, 0x204000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x60000, 0x2000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001080)={0x30000, 0xb000, 0x1}) 555.471446ms ago: executing program 3 (id=210): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xd7}]}}}}}}}}, 0x0) 503.297728ms ago: executing program 2 (id=211): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) r1 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) fallocate(r1, 0x0, 0x4000bf5, 0x2000402) 422.95839ms ago: executing program 0 (id=212): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) write$selinux_load(0xffffffffffffffff, 0x0, 0x17fc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0xfff3}}}, 0x24}}, 0x800) 307.641122ms ago: executing program 4 (id=213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x41) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x100, 0x66, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x94) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 223.029454ms ago: executing program 32 (id=213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x41) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x100, 0x66, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x94) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 209.042954ms ago: executing program 0 (id=215): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x20008, 0x0, 0xff, 0x0, 0x0) unshare(0x6020400) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unshare(0x6020400) chdir(&(0x7f0000000000)='./file1\x00') 208.769174ms ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 175.026425ms ago: executing program 0 (id=217): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x182400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1120060, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x5, 0x0) 161.012296ms ago: executing program 3 (id=218): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) pivot_root(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) 93.009227ms ago: executing program 0 (id=219): setreuid(0xee00, 0x0) r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='smaps\x00') 18.503679ms ago: executing program 0 (id=220): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x6, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}]) io_getevents(r0, 0x2, 0x2, &(0x7f0000000ac0)=[{}, {}], 0x0) 0s ago: executing program 1 (id=221): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x1200840, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="504cef38083899c8915b824040351cdd13cc5fcd00bc777b3c5a251edb739dab35ec6eaa677c924af489139e4938152ffb9ee1eeebf082d53dba2df7f7291d6f414ae69db4c45c9ab087e02e66187312f1c4fb933fd5a315eba6122a82e85a0bdcbd876f1675dc25c1cda2a94178d5ac1d7281265261ebce9fb6f98f2d95855205f5c5907b2ddad7e514f13aa038d608760f363dd4b78e360c53b01cb579f599ed8b892c1525d2237a0335c8a1a238ca3f5ccd64a196dac5a22f87e1e431605ceb7b6e46d4342b341ea500a26eb40c50b6a820c8162e37ca4350aa26a5c004e9f6dbacf567"], 0x3, 0x398, &(0x7f0000000680)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. [ 22.614265][ T28] audit: type=1400 audit(1785852084.474:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.617747][ T279] cgroup: Unknown subsys name 'net' [ 22.637075][ T28] audit: type=1400 audit(1785852084.474:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.664358][ T28] audit: type=1400 audit(1785852084.514:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.664780][ T279] cgroup: Unknown subsys name 'devices' [ 22.810115][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.815752][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.921008][ T28] audit: type=1400 audit(1785852084.784:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.944247][ T28] audit: type=1400 audit(1785852084.784:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.969086][ T28] audit: type=1400 audit(1785852084.784:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.999675][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.008567][ T28] audit: type=1400 audit(1785852084.874:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.029782][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.034875][ T28] audit: type=1400 audit(1785852084.874:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.069456][ T28] audit: type=1400 audit(1785852084.874:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.095363][ T28] audit: type=1400 audit(1785852084.874:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.884634][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.891840][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.899402][ T287] device bridge_slave_0 entered promiscuous mode [ 23.922326][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.929447][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.936864][ T287] device bridge_slave_1 entered promiscuous mode [ 23.943722][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950828][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.958388][ T288] device bridge_slave_0 entered promiscuous mode [ 23.968633][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.975695][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.983224][ T288] device bridge_slave_1 entered promiscuous mode [ 24.026805][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.033938][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.041466][ T289] device bridge_slave_0 entered promiscuous mode [ 24.048811][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055875][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.063447][ T289] device bridge_slave_1 entered promiscuous mode [ 24.092277][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.099483][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.107005][ T291] device bridge_slave_0 entered promiscuous mode [ 24.117116][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.124244][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.131775][ T291] device bridge_slave_1 entered promiscuous mode [ 24.168112][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.175294][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.183057][ T290] device bridge_slave_0 entered promiscuous mode [ 24.190201][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.197257][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.204787][ T290] device bridge_slave_1 entered promiscuous mode [ 24.383902][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.391023][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.398375][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.405421][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.421637][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.428750][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.436080][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.443181][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.462494][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469613][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.477670][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.484910][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.508964][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.516055][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.523405][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.530486][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.540481][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.547561][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.554909][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.561991][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.585720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.593691][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.601157][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.608854][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.616079][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.624370][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.631819][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.639316][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.646520][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.653969][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.661316][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.692288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.701246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.709780][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.716865][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.724493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.733445][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.740545][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.748108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.756285][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.763417][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.770858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.779248][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.786296][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.820898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.829635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.837841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.846162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.857840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.866186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.874204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.886915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.894555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.903577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.912170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.920546][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.927577][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.952627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.961517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.970114][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.977192][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.985642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.994103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.002589][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.009669][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.017186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.025794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.034062][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041135][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.048598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.056927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.065445][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072549][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.080388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.089547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.098273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.106685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.115074][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.122172][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.145152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.153801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.162576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.171424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.179650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.187780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.196505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.204797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.213077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.221276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.229316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.237275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.245821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.253626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.266617][ T288] device veth0_vlan entered promiscuous mode [ 25.274094][ T289] device veth0_vlan entered promiscuous mode [ 25.282877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.291118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.299663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.307697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.315937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.324162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.334053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.341743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.362979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.372567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.385913][ T289] device veth1_macvtap entered promiscuous mode [ 25.393311][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.401613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.410313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.418909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.434063][ T290] device veth0_vlan entered promiscuous mode [ 25.447473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.456087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.463845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.471590][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.479765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.487784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.496297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.504850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.513396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.521937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.529609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.537728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.546139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.555343][ T287] device veth0_vlan entered promiscuous mode [ 25.564492][ T288] device veth1_macvtap entered promiscuous mode [ 25.578391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.586150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.594805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.609809][ T291] device veth0_vlan entered promiscuous mode [ 25.620243][ T290] device veth1_macvtap entered promiscuous mode [ 25.629643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.639140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.647197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.655552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.664175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.673281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.680849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.695039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.703582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.712002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.724806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.733633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.743136][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 25.745723][ T287] device veth1_macvtap entered promiscuous mode [ 25.765346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.773922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.806148][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.815189][ T291] device veth1_macvtap entered promiscuous mode [ 25.836928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.859833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.869732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.880431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.889819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.898623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.907300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.917787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.932088][ T316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.950135][ T316] Zero length message leads to an empty skb [ 26.023088][ T323] loop3: detected capacity change from 0 to 256 [ 26.056426][ T323] exfat: Deprecated parameter 'utf8' [ 26.071109][ T323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 26.115554][ T330] fuse: Unknown parameter '000000000000000000000xffffffffffffffff00000000000000000000' [ 26.139464][ T330] ext2: Unexpected value for 'acl' [ 26.196873][ T333] capability: warning: `syz.3.9' uses deprecated v2 capabilities in a way that may be insecure [ 26.229396][ T339] loop0: detected capacity change from 0 to 512 [ 26.245767][ T339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.278283][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.284016][ T339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.336162][ T342] kvm: apic: phys broadcast and lowest prio [ 26.356973][ T339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.367031][ T339] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.403830][ T339] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.11: corrupted inode contents [ 26.429884][ T339] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.11: mark_inode_dirty error [ 26.458156][ T339] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.11: corrupted inode contents [ 26.478504][ T356] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.11: corrupted inode contents [ 26.543761][ T356] EXT4-fs error (device loop0): ext4_setattr:5540: inode #2: comm syz.0.11: mark_inode_dirty error [ 26.564310][ T365] loop3: detected capacity change from 0 to 256 [ 26.588691][ T365] ======================================================= [ 26.588691][ T365] WARNING: The mand mount option has been deprecated and [ 26.588691][ T365] and is ignored by this kernel. Remove the mand [ 26.588691][ T365] option from the mount to silence this warning. [ 26.588691][ T365] ======================================================= [ 26.639514][ T369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 26.639541][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.850732][ T382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 26.863700][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.090570][ T400] netlink: 'syz.3.32': attribute type 4 has an invalid length. [ 27.205871][ T390] loop2: detected capacity change from 0 to 32768 [ 27.248829][ T390] loop2: p1 p3 < > [ 27.319836][ T341] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.368038][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 27.376606][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 27.532834][ T418] loop1: detected capacity change from 0 to 40427 [ 27.558258][ T418] F2FS-fs (loop1): invalid crc value [ 27.572378][ T418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.646043][ T418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.682088][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 27.682102][ T28] audit: type=1400 audit(1785852089.544:210): avc: denied { connect } for pid=449 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.755133][ T28] audit: type=1400 audit(1785852089.574:211): avc: denied { write } for pid=449 comm="syz.0.49" path="socket:[16995]" dev="sockfs" ino=16995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.802212][ T343] kworker/u4:4: attempt to access beyond end of device [ 27.802212][ T343] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.806550][ T28] audit: type=1400 audit(1785852089.664:212): avc: denied { write } for pid=417 comm="syz.1.38" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.848612][ T28] audit: type=1400 audit(1785852089.664:213): avc: denied { add_name } for pid=417 comm="syz.1.38" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.878163][ T28] audit: type=1400 audit(1785852089.664:214): avc: denied { create } for pid=417 comm="syz.1.38" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.940401][ T28] audit: type=1400 audit(1785852089.664:215): avc: denied { remount } for pid=417 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.007956][ T28] audit: type=1400 audit(1785852089.864:216): avc: denied { read write } for pid=466 comm="syz.0.55" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.075513][ T28] audit: type=1400 audit(1785852089.864:217): avc: denied { open } for pid=466 comm="syz.0.55" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.118180][ T28] audit: type=1400 audit(1785852089.904:218): avc: denied { ioctl } for pid=466 comm="syz.0.55" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.203482][ T475] loop2: detected capacity change from 0 to 256 [ 28.239184][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.251218][ T462] loop3: detected capacity change from 0 to 40427 [ 28.262303][ T462] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 28.269222][ T475] FAT-fs (loop2): Filesystem has been set read-only [ 28.276183][ T462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 28.298488][ T462] F2FS-fs (loop3): invalid crc value [ 28.304008][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.314788][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.325754][ T474] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.336202][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.345707][ T462] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.357933][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.367231][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.384301][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.402472][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.414254][ T474] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.424721][ T474] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.435806][ T475] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.446561][ T462] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 28.454120][ T462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.502313][ T28] audit: type=1400 audit(1785852090.364:219): avc: denied { name_bind } for pid=481 comm="syz.1.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 28.528004][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 28.539694][ T58] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 28.549092][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.566637][ T58] usb 1-1: config 2 has no interface number 0 [ 28.572986][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.593195][ T58] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 28.603640][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 28.618494][ T58] usb 1-1: config 2 interface 88 has no altsetting 0 [ 28.625818][ T311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.635317][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.648123][ T58] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 28.667697][ T311] usb 5-1: config 0 descriptor?? [ 28.672793][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 28.687939][ T58] usb 1-1: Product: syz [ 28.698227][ T58] usb 1-1: Manufacturer: syz [ 28.708286][ T58] usb 1-1: SerialNumber: syz [ 28.728551][ T467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.770262][ T490] loop3: detected capacity change from 0 to 128 [ 28.796488][ T490] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.810407][ T490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.819417][ T490] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.842384][ T490] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 28.869561][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.927987][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.940942][ T467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.086378][ T311] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.105269][ T311] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 29.124781][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.137448][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.147544][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.160934][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.170584][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.195309][ T24] usb 2-1: config 0 descriptor?? [ 29.426806][ T515] kvm [514]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 29.435434][ T515] kvm [514]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 29.502451][ T523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 29.513234][ T523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 29.543936][ T527] loop3: detected capacity change from 0 to 256 [ 29.555302][ T527] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.566788][ T527] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 29.582625][ T527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 29.619232][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 29.633676][ T24] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 29.852588][ T541] device veth1_to_bond entered promiscuous mode [ 29.860113][ T541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 29.871055][ T541] device veth1_to_bond left promiscuous mode [ 29.967087][ T58] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.978100][ T58] asix: probe of 1-1:2.88 failed with error -71 [ 29.985695][ T58] usb 1-1: USB disconnect, device number 2 [ 30.134078][ T529] loop2: detected capacity change from 0 to 131072 [ 30.143758][ T529] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 30.151593][ T529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.160420][ T529] F2FS-fs (loop2): invalid crc value [ 30.167500][ T529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.211314][ T529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.218515][ T529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 30.593770][ T309] usb 2-1: USB disconnect, device number 2 [ 30.671890][ T560] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.86: missing EA_INODE flag [ 30.683588][ T560] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.86: error while reading EA inode 2 err=-117 [ 30.695975][ T560] EXT4-fs (loop0): 1 orphan inode deleted [ 30.701983][ T560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.717457][ T560] EXT4-fs (loop0): shut down requested (1) [ 30.724812][ T560] syz.0.86 (pid 560) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 30.741021][ T289] EXT4-fs (loop0): unmounting filesystem. [ 30.761531][ T564] syz.0.87: attempt to access beyond end of device [ 30.761531][ T564] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 30.775045][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.790884][ T564] syz.0.87: attempt to access beyond end of device [ 30.790884][ T564] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 30.833901][ T568] xt_hashlimit: size too large, truncated to 1048576 [ 30.956673][ T571] xt_hashlimit: size too large, truncated to 1048576 [ 30.967941][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 30.974316][ T39] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 30.990309][ T39] usb 3-1: config 0 has no interface number 0 [ 31.005150][ T39] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 31.025988][ T39] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 31.038192][ T39] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 31.057495][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.065621][ T39] usb 3-1: Product: syz [ 31.077935][ T39] usb 3-1: Manufacturer: syz [ 31.082674][ T39] usb 3-1: SerialNumber: syz [ 31.091809][ T39] usb 3-1: config 0 descriptor?? [ 31.107110][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.138077][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.354754][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.365342][ T550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.413140][ T19] usb 5-1: USB disconnect, device number 2 [ 31.537018][ T593] set_capacity_and_notify: 2 callbacks suppressed [ 31.537039][ T593] loop0: detected capacity change from 0 to 512 [ 31.585500][ T593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.600138][ T593] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.613087][ T597] loop3: detected capacity change from 0 to 512 [ 31.638972][ T597] ext4: Unknown parameter 'noacl' [ 31.667222][ T289] EXT4-fs (loop0): unmounting filesystem. [ 31.700677][ T599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'. [ 31.709991][ T599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'. [ 31.727586][ T597] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 31.745831][ T597] netlink: 72 bytes leftover after parsing attributes in process `syz.3.101'. [ 31.898256][ T584] loop4: detected capacity change from 0 to 131072 [ 31.906029][ T584] F2FS-fs (loop4): invalid crc value [ 31.914466][ T584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.956773][ T584] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 31.977305][ T584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 32.037975][ T58] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.084052][ T614] loop1: detected capacity change from 0 to 128 [ 32.093945][ T614] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 32.105005][ T614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.118792][ T614] ext2 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.164852][ T287] EXT4-fs (loop1): unmounting filesystem. [ 32.196786][ T620] loop1: detected capacity change from 0 to 512 [ 32.213338][ T620] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.225960][ T620] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.109: inode has both inline data and extents flags [ 32.240604][ T620] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.109: couldn't read orphan inode 15 (err -117) [ 32.252655][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.252814][ T620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.266335][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 32.296070][ T620] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.304501][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 32.323353][ T287] EXT4-fs (loop1): unmounting filesystem. [ 32.331315][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.343239][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.351648][ T58] usb 1-1: Product: syz [ 32.355859][ T58] usb 1-1: Manufacturer: syz [ 32.360526][ T58] usb 1-1: SerialNumber: syz [ 32.375075][ T625] loop1: detected capacity change from 0 to 512 [ 32.383448][ T601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.395611][ T39] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.405946][ T625] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.111: iget: bad i_size value: 38620345925642 [ 32.421935][ T625] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.111: couldn't read orphan inode 15 (err -117) [ 32.434229][ T39] asix: probe of 3-1:0.34 failed with error -71 [ 32.438000][ T625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.469843][ T39] usb 3-1: USB disconnect, device number 2 [ 32.556375][ T625] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.111: bg 0: block 5: invalid block bitmap [ 32.569001][ T625] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 32.582008][ T625] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.582008][ T625] [ 32.592191][ T625] EXT4-fs (loop1): Total free blocks count 0 [ 32.598845][ T625] EXT4-fs (loop1): Free/Dirty block details [ 32.605014][ T625] EXT4-fs (loop1): free_blocks=0 [ 32.610319][ T625] EXT4-fs (loop1): dirty_blocks=3000 [ 32.615825][ T625] EXT4-fs (loop1): Block reservation details [ 32.624599][ T601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.632239][ T625] EXT4-fs (loop1): i_reserved_data_blocks=3000 [ 32.659748][ T416] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 944 with error 28 [ 32.891665][ T638] loop4: detected capacity change from 0 to 8192 [ 32.945558][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.952879][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.976322][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 32.987929][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.988308][ T644] device bridge_slave_1 left promiscuous mode [ 33.017739][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.032141][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 33.032157][ T28] audit: type=1400 audit(1785852094.894:272): avc: denied { read } for pid=647 comm="syz.3.119" dev="nsfs" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.044617][ T644] device bridge_slave_0 left promiscuous mode [ 33.068619][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.075698][ T28] audit: type=1400 audit(1785852094.894:273): avc: denied { open } for pid=647 comm="syz.3.119" path="net:[4026532472]" dev="nsfs" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.106480][ T28] audit: type=1400 audit(1785852094.974:274): avc: denied { write } for pid=647 comm="syz.3.119" path="socket:[16357]" dev="sockfs" ino=16357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.197934][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 33.204296][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.225583][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.247741][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.266461][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.272214][ T601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.288057][ T19] usb 2-1: config 0 descriptor?? [ 33.299866][ T646] loop4: detected capacity change from 0 to 40427 [ 33.302496][ T19] hub 2-1:0.0: USB hub found [ 33.315148][ T646] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 33.330537][ T646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.355398][ T653] loop2: detected capacity change from 0 to 1024 [ 33.362401][ T646] F2FS-fs (loop4): Unrecognized mount option "ÿ01777777777777777777777ÿ" or missing value [ 33.373070][ T653] EXT4-fs: Ignoring removed nobh option [ 33.388148][ T653] EXT4-fs: Ignoring removed bh option [ 33.415054][ T653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 33.435858][ T653] System zones: 0-1, 3-12 [ 33.462483][ T653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.502532][ T58] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.510553][ T19] hub 2-1:0.0: 1 port detected [ 33.522972][ T58] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 33.531012][ T28] audit: type=1400 audit(1785852095.394:275): avc: denied { setattr } for pid=652 comm="syz.2.121" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.553323][ T653] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.605617][ T664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.123'. [ 33.631871][ T291] EXT4-fs (loop2): unmounting filesystem. [ 33.675624][ T28] audit: type=1400 audit(1785852095.534:276): avc: denied { bind } for pid=665 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.703119][ T58] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 33.720344][ T58] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.744187][ T28] audit: type=1400 audit(1785852095.604:277): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.761194][ T58] usb 1-1: USB disconnect, device number 3 [ 33.783651][ T58] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 33.793165][ T28] audit: type=1400 audit(1785852095.604:278): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.859583][ T28] audit: type=1400 audit(1785852095.604:279): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=1391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.909518][ T28] audit: type=1400 audit(1785852095.604:280): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.955244][ T28] audit: type=1400 audit(1785852095.604:281): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1391 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.108898][ T671] mmap: syz.2.126 (671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.144144][ T19] hub 2-1:0.0: activate --> -90 [ 34.344334][ T713] loop2: detected capacity change from 0 to 512 [ 34.370309][ T713] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.407794][ T713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.436377][ T713] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.131: inode has both inline data and extents flags [ 34.451012][ T713] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.131: couldn't read orphan inode 15 (err -117) [ 34.463667][ T713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.512763][ T291] EXT4-fs (loop2): unmounting filesystem. [ 34.550569][ T19] usb 2-1-port1: config error [ 34.555462][ T305] usb 2-1: USB disconnect, device number 3 [ 34.698826][ T716] F2FS-fs (loop4): invalid crc value [ 34.705247][ T347] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.719213][ T716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.761029][ T716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.048127][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 35.048876][ T716] F2FS-fs (loop4): Start checkpoint disabled! [ 35.076504][ T716] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 35.099162][ T755] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.129477][ T716] syz.4.132: attempt to access beyond end of device [ 35.129477][ T716] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.196106][ T716] syz.4.132: attempt to access beyond end of device [ 35.196106][ T716] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 35.313381][ T43] kworker/u4:2: attempt to access beyond end of device [ 35.313381][ T43] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 35.647974][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.689455][ T792] Illegal XDP return value 1311839193 on prog (id 13) dev syz_tun, expect packet loss! [ 35.782167][ T305] smpboot: CPU 1 is now offline [ 35.799563][ T794] x86: Booting SMP configuration: [ 35.837949][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 35.843185][ T794] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 35.859750][ T39] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 35.890051][ T39] usb 1-1: config 0 has no interface number 0 [ 35.906514][ T39] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 35.918591][ T39] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 35.934640][ T39] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 35.944453][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.953035][ T39] usb 1-1: Product: syz [ 35.957565][ T39] usb 1-1: Manufacturer: syz [ 35.962247][ T39] usb 1-1: SerialNumber: syz [ 35.971079][ T799] wireguard: wireguard0: Could not create IPv4 socket [ 35.977957][ T765] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 35.986694][ T39] usb 1-1: config 0 descriptor?? [ 35.992716][ T765] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.001515][ T776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.008813][ T776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.016163][ T765] F2FS-fs (loop1): invalid crc value [ 36.026360][ T765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.061256][ T765] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.068671][ T765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.133230][ T808] Mass Storage Function, version: 2009/09/11 [ 36.146023][ T808] LUN: removable file: (no medium) [ 36.171516][ T810] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 36.226508][ T776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.234065][ T776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.449568][ T39] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 36.563046][ T815] set_capacity_and_notify: 4 callbacks suppressed [ 36.563063][ T815] loop1: detected capacity change from 0 to 40427 [ 36.582996][ T815] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 36.591112][ T815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.629367][ T815] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.699326][ T815] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.707438][ T815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.715151][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.715219][ T734] Bluetooth: hci0: command 0x1003 tx timeout [ 36.728168][ T733] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 36.942974][ T836] kvm [835]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 36.971896][ T836] kvm [835]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 37.011408][ T836] kvm [835]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 37.042506][ T836] kvm [835]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 37.082893][ T849] loop1: detected capacity change from 0 to 512 [ 37.083438][ T836] kvm [835]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 37.109667][ T849] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.150760][ T849] EXT4-fs (loop1): 1 truncate cleaned up [ 37.156518][ T849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.225419][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.249035][ T860] loop1: detected capacity change from 0 to 512 [ 37.265353][ T39] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.292287][ T39] asix: probe of 1-1:0.34 failed with error -71 [ 37.309177][ T39] usb 1-1: USB disconnect, device number 4 [ 37.328752][ T860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.373733][ T872] loop4: detected capacity change from 0 to 512 [ 37.385821][ T872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.405177][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.421430][ T872] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.188: invalid indirect mapped block 4294967295 (level 0) [ 37.438381][ T872] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.188: invalid indirect mapped block 4294967295 (level 1) [ 37.466426][ T872] EXT4-fs (loop4): 1 orphan inode deleted [ 37.482483][ T872] EXT4-fs (loop4): 1 truncate cleaned up [ 37.496896][ T872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.525235][ T872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 37.549325][ T290] EXT4-fs (loop4): unmounting filesystem. [ 37.609566][ T893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 37.619115][ T893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 37.625715][ T894] loop4: detected capacity change from 0 to 2048 [ 37.650667][ T894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.659272][ T894] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.708550][ T894] loop4: detected capacity change from 2048 to 0 [ 37.715317][ C1] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.735218][ C1] I/O error, dev loop4, sector 704 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 37.762665][ C1] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 37.807017][ C1] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 37.816733][ C1] I/O error, dev loop4, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 37.826492][ T290] EXT4-fs error (device loop4): ext4_get_inode_loc:4660: inode #2: block 4: comm syz-executor: unable to read itable block [ 37.840274][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 37.848492][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 37.858070][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 37.867662][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 37.876206][ T290] EXT4-fs (loop4): I/O error while writing superblock [ 37.889132][ T290] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: IO failure [ 37.898233][ T416] loop: Write error at byte offset 9223372036854775807, length 2048. [ 37.906706][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 37.916292][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 37.925924][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 37.934666][ T290] EXT4-fs (loop4): I/O error while writing superblock [ 37.945505][ T917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.204'. [ 37.958348][ T290] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz-executor: mark_inode_dirty error [ 37.976561][ T917] option changes via remount are deprecated (pid=916 comm=syz.3.204) [ 37.985252][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 37.985257][ T917] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 38.008845][ T921] xt_hashlimit: size too large, truncated to 1048576 [ 38.015870][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 38.025445][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 38.037976][ T290] EXT4-fs (loop4): I/O error while writing superblock [ 38.066073][ T416] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4645: inode #18: block 5: comm kworker/u4:7: unable to read itable block [ 38.073208][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 38.073265][ T28] audit: type=1400 audit(1785852099.934:329): avc: denied { watch watch_reads } for pid=924 comm="syz.3.207" path="/55/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 38.098944][ T347] loop: Write error at byte offset 9223372036854775807, length 2048. [ 38.157569][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 38.165931][ T416] EXT4-fs (loop4): I/O error while writing superblock [ 38.181120][ T416] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4645: inode #2: block 4: comm kworker/u4:7: unable to read itable block [ 38.208034][ T934] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 38.223817][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 38.232309][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 38.240647][ T416] EXT4-fs (loop4): I/O error while writing superblock [ 38.248372][ T290] EXT4-fs (loop4): unmounting filesystem. [ 38.258474][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 38.274320][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 38.287383][ T290] EXT4-fs (loop4): I/O error while writing superblock [ 38.295079][ T43] loop: Write error at byte offset 9223372036854906879, length 2048. [ 38.308761][ C1] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 38.322155][ T936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 38.361508][ T934] syz.3.210 (934) used greatest stack depth: 21992 bytes left [ 38.543958][ T933] loop2: detected capacity change from 0 to 40427 [ 38.581779][ T933] F2FS-fs (loop2): invalid crc value [ 38.605316][ T933] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.715148][ T933] F2FS-fs (loop2): Start checkpoint disabled! [ 38.716890][ T954] loop1: detected capacity change from 0 to 256 [ 38.732184][ T933] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 38.739512][ T28] audit: type=1400 audit(1785852100.594:330): avc: denied { mounton } for pid=955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.761458][ T933] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 38.787919][ C1] ================================================================== [ 38.796042][ C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0 [ 38.803140][ C1] Write of size 8 at addr ffff88810d928a00 by task kworker/u4:2/43 [ 38.811068][ C1] [ 38.813430][ C1] CPU: 1 PID: 43 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 38.820829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.830912][ C1] Workqueue: netns cleanup_net [ 38.835753][ C1] Call Trace: [ 38.839068][ C1] [ 38.841939][ C1] __dump_stack+0x21/0x24 [ 38.846426][ C1] dump_stack_lvl+0x110/0x170 [ 38.848083][ T28] audit: type=1400 audit(1785852100.704:331): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14941]" dev="pipefs" ino=14941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.851135][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.875102][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.879267][ C1] ? __cfi_trigger_load_balance+0x10/0x10 [ 38.879305][ C1] ? __run_timers+0x341/0x9b0 [ 38.879329][ C1] print_address_description+0x71/0x200 [ 38.879350][ C1] print_report+0x4a/0x60 [ 38.879369][ C1] kasan_report+0x122/0x150 [ 38.879394][ C1] ? __run_timers+0x341/0x9b0 [ 38.879421][ C1] __asan_report_store8_noabort+0x17/0x20 [ 38.879443][ C1] __run_timers+0x341/0x9b0 [ 38.879470][ C1] ? sched_clock_cpu+0x6e/0x260 [ 38.879491][ C1] ? calc_index+0x200/0x200 [ 38.879525][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 38.941839][ C1] run_timer_softirq+0x6a/0xf0 [ 38.946668][ C1] handle_softirqs+0x1d7/0x600 [ 38.951497][ C1] __irq_exit_rcu+0x52/0xf0 [ 38.956048][ C1] irq_exit_rcu+0x9/0x10 [ 38.960334][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 38.966027][ C1] [ 38.968994][ C1] [ 38.971975][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 38.978021][ C1] RIP: 0010:update_stack_state+0xc/0x490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 38.983695][ C1] Code: ff ff e8 87 4a 81 00 e9 96 fe ff ff 66 90 55 48 89 e5 48 8b 07 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 81 ec 88 00 00 00 49 89 f6 49 89 fc 49 bd 00 00 00 00 00 fc [ 39.003329][ C1] RSP: 0018:ffffc900002ce978 EFLAGS: 00000246 [ 39.009442][ C1] RAX: 1ffff92000059efd RBX: ffffc900002cea08 RCX: ffffc900002cf830 [ 39.017454][ C1] RDX: dffffc0000000000 RSI: ffffc900002cf830 RDI: ffffc900002cea08 [ 39.025467][ C1] RBP: ffffc900002ce998 R08: ffffc900002cead0 R09: ffffc900002ceac8 [ 39.033500][ C1] R10: 0000000000000010 R11: fffff52000059d4d R12: ffffc900002cf7e8 [ 39.041507][ C1] R13: ffffc900002cea30 R14: dffffc0000000000 R15: 0000000000000000 [ 39.049495][ C1] unwind_next_frame+0x39e/0x660 [ 39.054476][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 39.060706][ C1] arch_stack_walk+0x124/0x150 [ 39.065503][ C1] ? blocking_notifier_call_chain+0xcb/0x150 [ 39.071525][ C1] stack_trace_save+0xa6/0xf0 [ 39.076221][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 39.081610][ C1] ? memset+0x35/0x40 [ 39.085601][ C1] kasan_set_track+0x4b/0x70 [ 39.090204][ C1] ? kasan_set_track+0x4b/0x70 [ 39.094979][ C1] ? kasan_save_free_info+0x2b/0x40 [ 39.100183][ C1] ? ____kasan_slab_free+0x132/0x180 [ 39.105481][ C1] ? __kasan_slab_free+0x11/0x20 [ 39.110423][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 39.115991][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 39.121026][ C1] ? kfree+0x6f/0xf0 [ 39.124940][ C1] ? skb_release_data+0x63d/0x8a0 [ 39.129973][ C1] ? consume_skb+0xab/0x1f0 [ 39.134491][ C1] ? netlink_broadcast+0x107b/0x1170 [ 39.139865][ C1] ? nlmsg_notify+0xdf/0x1a0 [ 39.144799][ C1] ? rtnl_notify+0x9a/0xc0 [ 39.149214][ C1] ? rtmsg_fib+0x7c9/0xe20 [ 39.153628][ C1] ? fib_table_delete+0xef5/0x1190 [ 39.158743][ C1] ? fib_del_ifaddr+0x16fb/0x1c80 [ 39.163774][ C1] ? fib_inetaddr_event+0xc9/0x310 [ 39.168915][ C1] ? blocking_notifier_call_chain+0xcb/0x150 [ 39.174920][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 39.179954][ C1] kasan_save_free_info+0x2b/0x40 [ 39.184978][ C1] ____kasan_slab_free+0x132/0x180 [ 39.190119][ C1] __kasan_slab_free+0x11/0x20 [ 39.194884][ C1] slab_free_freelist_hook+0xc2/0x190 [ 39.200272][ C1] ? skb_release_data+0x63d/0x8a0 [ 39.205481][ C1] __kmem_cache_free+0xb7/0x1b0 [ 39.210357][ C1] kfree+0x6f/0xf0 [ 39.214105][ C1] skb_release_data+0x63d/0x8a0 [ 39.218965][ C1] consume_skb+0xab/0x1f0 [ 39.223299][ C1] netlink_broadcast+0x107b/0x1170 [ 39.228425][ C1] ? __cfi_fib_dump_info+0x10/0x10 [ 39.233542][ C1] nlmsg_notify+0xdf/0x1a0 [ 39.237976][ C1] rtnl_notify+0x9a/0xc0 [ 39.242238][ C1] rtmsg_fib+0x7c9/0xe20 [ 39.246511][ C1] fib_table_delete+0xef5/0x1190 [ 39.251462][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 39.257370][ C1] ? __cfi_fib_table_delete+0x10/0x10 [ 39.262792][ C1] ? kasan_set_track+0x60/0x70 [ 39.267607][ C1] ? kasan_set_track+0x4b/0x70 [ 39.272421][ C1] ? kasan_save_free_info+0x2b/0x40 [ 39.277628][ C1] ? ____kasan_slab_free+0x132/0x180 [ 39.282939][ C1] ? __kasan_slab_free+0x11/0x20 [ 39.287892][ C1] ? fib_new_table+0x10d/0x2b0 [ 39.292866][ C1] fib_del_ifaddr+0x16fb/0x1c80 [ 39.297743][ C1] ? ip_tunnel_delete_nets+0x346/0x390 [ 39.303220][ C1] ? process_one_work+0x717/0xc30 [ 39.308812][ C1] ? __cfi_fib_del_ifaddr+0x10/0x10 [ 39.314012][ C1] ? __kasan_check_write+0x14/0x20 [ 39.319123][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 39.324590][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 39.330422][ C1] ? __kasan_check_write+0x14/0x20 [ 39.335531][ C1] ? rwsem_read_trylock+0x2af/0x640 [ 39.340750][ C1] ? down_read+0xa6/0xf0 [ 39.344987][ C1] fib_inetaddr_event+0xc9/0x310 [ 39.349927][ C1] blocking_notifier_call_chain+0xcb/0x150 [ 39.355739][ C1] __inet_del_ifa+0x81f/0xd90 [ 39.360502][ C1] ? ip_mc_destroy_dev+0x2a3/0x2e0 [ 39.365620][ C1] inetdev_event+0x6a0/0x10a0 [ 39.370300][ C1] ? __cfi_inetdev_event+0x10/0x10 [ 39.375416][ C1] ? arp_netdev_event+0xd4/0x2b0 [ 39.380360][ C1] raw_notifier_call_chain+0xa1/0x110 [ 39.385729][ C1] unregister_netdevice_many+0x104a/0x1910 [ 39.391802][ C1] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 39.398052][ C1] ? unregister_netdevice_queue+0x17c/0x320 [ 39.403944][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 39.410274][ C1] ? unregister_netdevice_queue+0x17c/0x320 [ 39.416172][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 39.422414][ C1] ip_tunnel_delete_nets+0x346/0x390 [ 39.427704][ C1] ? __cfi_ip_tunnel_delete_nets+0x10/0x10 [ 39.433536][ C1] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 39.439270][ C1] ipgre_tap_exit_batch_net+0x22/0x30 [ 39.444682][ C1] ? __cfi_ipgre_tap_exit_batch_net+0x10/0x10 [ 39.450774][ C1] cleanup_net+0x630/0xb10 [ 39.455254][ C1] ? __cfi_cleanup_net+0x10/0x10 [ 39.460214][ C1] ? __schedule+0xbea/0x14b0 [ 39.464841][ C1] process_one_work+0x717/0xc30 [ 39.469715][ C1] worker_thread+0xa4d/0x11d0 [ 39.474408][ C1] kthread+0x281/0x320 [ 39.478489][ C1] ? __cfi_worker_thread+0x10/0x10 [ 39.483601][ C1] ? __cfi_kthread+0x10/0x10 [ 39.488215][ C1] ret_from_fork+0x1f/0x30 [ 39.492661][ C1] [ 39.495697][ C1] [ 39.498016][ C1] Allocated by task 733: [ 39.502260][ C1] kasan_set_track+0x4b/0x70 [ 39.506869][ C1] kasan_save_alloc_info+0x1f/0x30 [ 39.511974][ C1] __kasan_kmalloc+0x95/0xb0 [ 39.516568][ C1] __kmalloc+0xb4/0x1e0 [ 39.520717][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 39.525744][ C1] hci_uart_tty_ioctl+0x3c4/0xa40 [ 39.530773][ C1] tty_ioctl+0x8ef/0xc60 [ 39.535017][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 39.539694][ C1] __x64_sys_ioctl+0x7b/0x90 [ 39.544297][ C1] x64_sys_call+0x58b/0x9a0 [ 39.548801][ C1] do_syscall_64+0x4c/0xa0 [ 39.553219][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.559140][ C1] [ 39.561456][ C1] Freed by task 733: [ 39.565342][ C1] kasan_set_track+0x4b/0x70 [ 39.569931][ C1] kasan_save_free_info+0x2b/0x40 [ 39.574953][ C1] ____kasan_slab_free+0x132/0x180 [ 39.580144][ C1] __kasan_slab_free+0x11/0x20 [ 39.584980][ C1] slab_free_freelist_hook+0xc2/0x190 [ 39.590377][ C1] __kmem_cache_free+0xb7/0x1b0 [ 39.595275][ C1] kfree+0x6f/0xf0 [ 39.598996][ C1] hci_release_dev+0x12a3/0x13b0 [ 39.603935][ C1] bt_host_release+0x82/0x90 [ 39.608546][ C1] device_release+0xa4/0x1d0 [ 39.613139][ C1] kobject_put+0x19d/0x280 [ 39.617555][ C1] put_device+0x1f/0x30 [ 39.621703][ C1] hci_dev_cmd+0x279/0x740 [ 39.626115][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 39.630880][ C1] sock_do_ioctl+0x114/0x330 [ 39.635562][ C1] sock_ioctl+0x475/0x700 [ 39.639901][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 39.644590][ C1] __x64_sys_ioctl+0x7b/0x90 [ 39.649314][ C1] x64_sys_call+0x58b/0x9a0 [ 39.653834][ C1] do_syscall_64+0x4c/0xa0 [ 39.658283][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.664204][ C1] [ 39.666544][ C1] Last potentially related work creation: [ 39.672258][ C1] kasan_save_stack+0x3a/0x60 [ 39.676936][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 39.682302][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.688199][ C1] insert_work+0x51/0x300 [ 39.692532][ C1] __queue_work+0x9d0/0xd50 [ 39.697058][ C1] queue_work_on+0xde/0x150 [ 39.701564][ C1] __hci_cmd_sync_sk+0xaa8/0xd80 [ 39.706502][ C1] hci_cmd_sync_status+0x53/0x120 [ 39.712331][ C1] hci_dev_cmd+0x642/0x740 [ 39.716762][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 39.721459][ C1] sock_do_ioctl+0x114/0x330 [ 39.726060][ C1] sock_ioctl+0x475/0x700 [ 39.730410][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 39.735109][ C1] __x64_sys_ioctl+0x7b/0x90 [ 39.739704][ C1] x64_sys_call+0x58b/0x9a0 [ 39.744210][ C1] do_syscall_64+0x4c/0xa0 [ 39.748635][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.754541][ C1] [ 39.756876][ C1] Second to last potentially related work creation: [ 39.763459][ C1] kasan_save_stack+0x3a/0x60 [ 39.768153][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 39.773531][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.779378][ C1] insert_work+0x51/0x300 [ 39.783715][ C1] __queue_work+0x9d0/0xd50 [ 39.788239][ C1] queue_work_on+0xde/0x150 [ 39.792802][ C1] hci_cmd_timeout+0x191/0x200 [ 39.797570][ C1] process_one_work+0x717/0xc30 [ 39.802421][ C1] worker_thread+0xa4d/0x11d0 [ 39.807090][ C1] kthread+0x281/0x320 [ 39.811329][ C1] ret_from_fork+0x1f/0x30 [ 39.815743][ C1] [ 39.818321][ C1] The buggy address belongs to the object at ffff88810d928000 [ 39.818321][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 39.832633][ C1] The buggy address is located 2560 bytes inside of [ 39.832633][ C1] 8192-byte region [ffff88810d928000, ffff88810d92a000) [ 39.846165][ C1] [ 39.848510][ C1] The buggy address belongs to the physical page: [ 39.854924][ C1] page:ffffea0004364a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d928 [ 39.865180][ C1] head:ffffea0004364a00 order:3 compound_mapcount:0 compound_pincount:0 [ 39.873500][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 39.879583][ C1] raw: 4000000000010200 ffffea0004244800 dead000000000002 ffff888100043500 [ 39.888176][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 39.896752][ C1] page dumped because: kasan: bad access detected [ 39.903156][ C1] page_owner tracks the page as allocated [ 39.908867][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2684063732, free_ts 0 [ 39.927361][ C1] post_alloc_hook+0x1f5/0x210 [ 39.932151][ C1] prep_new_page+0x1c/0x110 [ 39.936673][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 39.942239][ C1] __alloc_pages+0x1fa/0x610 [ 39.946867][ C1] alloc_slab_page+0x6e/0xf0 [ 39.951450][ C1] new_slab+0x98/0x3e0 [ 39.955510][ C1] ___slab_alloc+0x70f/0xb70 [ 39.960097][ C1] __slab_alloc+0x5e/0xa0 [ 39.964433][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 39.969894][ C1] __kmalloc_node+0xa2/0x1e0 [ 39.974484][ C1] kvmalloc_node+0x28a/0x460 [ 39.979070][ C1] sbitmap_init_node+0x443/0x580 [ 39.984010][ C1] scsi_realloc_sdev_budget_map+0x26d/0x3e0 [ 39.989904][ C1] scsi_alloc_sdev+0x7f2/0xac0 [ 39.994670][ C1] scsi_probe_and_add_lun+0x18f/0x3ce0 [ 40.000129][ C1] __scsi_scan_target+0x1ea/0xc20 [ 40.005156][ C1] page_owner free stack trace missing [ 40.011237][ C1] [ 40.013583][ C1] Memory state around the buggy address: [ 40.019227][ C1] ffff88810d928900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.027314][ C1] ffff88810d928980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.035374][ C1] >ffff88810d928a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.043919][ C1] ^ [ 40.047995][ C1] ffff88810d928a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.056046][ C1] ffff88810d928b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.064094][ C1] ================================================================== [ 40.072144][ C1] Disabling lock debugging due to kernel taint [ 40.078383][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 40.090125][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.098570][ C1] CPU: 1 PID: 43 Comm: kworker/u4:2 Tainted: G B syzkaller #0 [ 40.107457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.117641][ C1] Workqueue: netns cleanup_net [ 40.122460][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 40.127794][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03 [ 40.147429][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 40.153529][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888109271440 [ 40.161537][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 40.169544][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 40.177553][ C1] R10: dffffc0000000000 R11: ffffed1021b25139 R12: ffff88810d9289c8 [ 40.178022][ T933] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 40.185557][ C1] R13: ffff888120762400 R14: 0000000000000000 R15: 000000007fffffff [ 40.206302][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.215258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.221872][ C1] CR2: 00007f08ab5e1fd0 CR3: 000000011ba97000 CR4: 00000000003506a0 [ 40.229872][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.237876][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.245965][ C1] Call Trace: [ 40.249268][ C1] [ 40.252141][ C1] delayed_work_timer_fn+0x61/0x80 [ 40.257471][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 40.263325][ C1] call_timer_fn+0x46/0x2a0 [ 40.267883][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 40.273745][ C1] __run_timers+0x672/0x9b0 [ 40.278284][ C1] ? calc_index+0x200/0x200 [ 40.282812][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 40.288046][ C1] run_timer_softirq+0x6a/0xf0 [ 40.292843][ C1] handle_softirqs+0x1d7/0x600 [ 40.297655][ C1] __irq_exit_rcu+0x52/0xf0 [ 40.302196][ C1] irq_exit_rcu+0x9/0x10 [ 40.306485][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 40.312160][ C1] [ 40.315119][ C1] [ 40.318078][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 40.324098][ C1] RIP: 0010:update_stack_state+0xc/0x490 [ 40.329765][ C1] Code: ff ff e8 87 4a 81 00 e9 96 fe ff ff 66 90 55 48 89 e5 48 8b 07 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 81 ec 88 00 00 00 49 89 f6 49 89 fc 49 bd 00 00 00 00 00 fc [ 40.349401][ C1] RSP: 0018:ffffc900002ce978 EFLAGS: 00000246 [ 40.355509][ C1] RAX: 1ffff92000059efd RBX: ffffc900002cea08 RCX: ffffc900002cf830 [ 40.363519][ C1] RDX: dffffc0000000000 RSI: ffffc900002cf830 RDI: ffffc900002cea08 [ 40.371529][ C1] RBP: ffffc900002ce998 R08: ffffc900002cead0 R09: ffffc900002ceac8 [ 40.379542][ C1] R10: 0000000000000010 R11: fffff52000059d4d R12: ffffc900002cf7e8 [ 40.387550][ C1] R13: ffffc900002cea30 R14: dffffc0000000000 R15: 0000000000000000 [ 40.395562][ C1] unwind_next_frame+0x39e/0x660 [ 40.400547][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 40.406732][ C1] arch_stack_walk+0x124/0x150 [ 40.411532][ C1] ? blocking_notifier_call_chain+0xcb/0x150 [ 40.417540][ C1] stack_trace_save+0xa6/0xf0 [ 40.422248][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 40.427996][ C1] ? memset+0x35/0x40 [ 40.432095][ C1] kasan_set_track+0x4b/0x70 [ 40.436719][ C1] ? kasan_set_track+0x4b/0x70 [ 40.441503][ C1] ? kasan_save_free_info+0x2b/0x40 [ 40.446730][ C1] ? ____kasan_slab_free+0x132/0x180 [ 40.452039][ C1] ? __kasan_slab_free+0x11/0x20 [ 40.457105][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 40.462665][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 40.467729][ C1] ? kfree+0x6f/0xf0 [ 40.471648][ C1] ? skb_release_data+0x63d/0x8a0 [ 40.476710][ C1] ? consume_skb+0xab/0x1f0 [ 40.481249][ C1] ? netlink_broadcast+0x107b/0x1170 [ 40.486573][ C1] ? nlmsg_notify+0xdf/0x1a0 [ 40.491208][ C1] ? rtnl_notify+0x9a/0xc0 [ 40.495664][ C1] ? rtmsg_fib+0x7c9/0xe20 [ 40.500153][ C1] ? fib_table_delete+0xef5/0x1190 [ 40.505318][ C1] ? fib_del_ifaddr+0x16fb/0x1c80 [ 40.510390][ C1] ? fib_inetaddr_event+0xc9/0x310 [ 40.515548][ C1] ? blocking_notifier_call_chain+0xcb/0x150 [ 40.521581][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 40.526644][ C1] kasan_save_free_info+0x2b/0x40 [ 40.531702][ C1] ____kasan_slab_free+0x132/0x180 [ 40.536860][ C1] __kasan_slab_free+0x11/0x20 [ 40.541668][ C1] slab_free_freelist_hook+0xc2/0x190 [ 40.547062][ C1] ? skb_release_data+0x63d/0x8a0 [ 40.552111][ C1] __kmem_cache_free+0xb7/0x1b0 [ 40.557014][ C1] kfree+0x6f/0xf0 [ 40.560752][ C1] skb_release_data+0x63d/0x8a0 [ 40.565628][ C1] consume_skb+0xab/0x1f0 [ 40.570069][ C1] netlink_broadcast+0x107b/0x1170 [ 40.575239][ C1] ? __cfi_fib_dump_info+0x10/0x10 [ 40.580384][ C1] nlmsg_notify+0xdf/0x1a0 [ 40.584873][ C1] rtnl_notify+0x9a/0xc0 [ 40.589151][ C1] rtmsg_fib+0x7c9/0xe20 [ 40.593427][ C1] fib_table_delete+0xef5/0x1190 [ 40.598405][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 40.604334][ C1] ? __cfi_fib_table_delete+0x10/0x10 [ 40.609732][ C1] ? kasan_set_track+0x60/0x70 [ 40.614547][ C1] ? kasan_set_track+0x4b/0x70 [ 40.619378][ C1] ? kasan_save_free_info+0x2b/0x40 [ 40.624631][ C1] ? ____kasan_slab_free+0x132/0x180 [ 40.629956][ C1] ? __kasan_slab_free+0x11/0x20 [ 40.634934][ C1] ? fib_new_table+0x10d/0x2b0 [ 40.639714][ C1] fib_del_ifaddr+0x16fb/0x1c80 [ 40.644617][ C1] ? ip_tunnel_delete_nets+0x346/0x390 [ 40.650130][ C1] ? process_one_work+0x717/0xc30 [ 40.655221][ C1] ? __cfi_fib_del_ifaddr+0x10/0x10 [ 40.660456][ C1] ? __kasan_check_write+0x14/0x20 [ 40.665596][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 40.671118][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 40.677024][ C1] ? __kasan_check_write+0x14/0x20 [ 40.682177][ C1] ? rwsem_read_trylock+0x2af/0x640 [ 40.687419][ C1] ? down_read+0xa6/0xf0 [ 40.691695][ C1] fib_inetaddr_event+0xc9/0x310 [ 40.696659][ C1] blocking_notifier_call_chain+0xcb/0x150 [ 40.702496][ C1] __inet_del_ifa+0x81f/0xd90 [ 40.707201][ C1] ? ip_mc_destroy_dev+0x2a3/0x2e0 [ 40.712339][ C1] inetdev_event+0x6a0/0x10a0 [ 40.717044][ C1] ? __cfi_inetdev_event+0x10/0x10 [ 40.722195][ C1] ? arp_netdev_event+0xd4/0x2b0 [ 40.727163][ C1] raw_notifier_call_chain+0xa1/0x110 [ 40.732554][ C1] unregister_netdevice_many+0x104a/0x1910 [ 40.738379][ C1] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 40.744605][ C1] ? unregister_netdevice_queue+0x17c/0x320 [ 40.750548][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 40.756844][ C1] ? unregister_netdevice_queue+0x17c/0x320 [ 40.762775][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 40.769039][ C1] ip_tunnel_delete_nets+0x346/0x390 [ 40.774369][ C1] ? __cfi_ip_tunnel_delete_nets+0x10/0x10 [ 40.780234][ C1] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 40.785990][ C1] ipgre_tap_exit_batch_net+0x22/0x30 [ 40.791425][ C1] ? __cfi_ipgre_tap_exit_batch_net+0x10/0x10 [ 40.797554][ C1] cleanup_net+0x630/0xb10 [ 40.802005][ C1] ? __cfi_cleanup_net+0x10/0x10 [ 40.807161][ C1] ? __schedule+0xbea/0x14b0 [ 40.811806][ C1] process_one_work+0x717/0xc30 [ 40.816697][ C1] worker_thread+0xa4d/0x11d0 [ 40.821397][ C1] kthread+0x281/0x320 [ 40.825480][ C1] ? __cfi_worker_thread+0x10/0x10 [ 40.830640][ C1] ? __cfi_kthread+0x10/0x10 [ 40.835261][ C1] ret_from_fork+0x1f/0x30 [ 40.839796][ C1] [ 40.842847][ C1] Modules linked in: [ 40.846779][ C1] ---[ end trace 0000000000000000 ]--- [ 40.852298][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 40.857623][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03 [ 40.877289][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 40.883407][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888109271440 [ 40.891414][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 40.899406][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 40.907424][ C1] R10: dffffc0000000000 R11: ffffed1021b25139 R12: ffff88810d9289c8 [ 40.915425][ C1] R13: ffff888120762400 R14: 0000000000000000 R15: 000000007fffffff [ 40.923419][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.932829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.939439][ C1] CR2: 00007f08ab5e1fd0 CR3: 000000011ba97000 CR4: 00000000003506a0 [ 40.947453][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.955456][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.963462][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 40.971240][ C1] Kernel Offset: disabled [ 40.975572][ C1] Rebooting in 86400 seconds..