last executing test programs: 6.031075127s ago: executing program 2 (id=186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.958531581s ago: executing program 2 (id=188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) wait4(0x0, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r2, &(0x7f0000001440)=""/123, 0x7b, 0x841) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private2}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/73, 0x29, 0x49, 0x1, 0x7, 0x10000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) 5.12628303s ago: executing program 3 (id=195): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {}, {@fat=@sys_immutable}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 4.908532512s ago: executing program 3 (id=197): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) 4.444301339s ago: executing program 2 (id=199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xe0, 0x208, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x986c6000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0xa, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000c80)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303461612c747a3d5554432c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c696f636861727365743d63703836312c757466383d302c756e695f786c6174653d302c757466383d302c757466383d302c005ed4a338bef3e79ebeeb0dea20ed716e2652f036e76f36af1d77148ac9e99ed844e242770e1a7eee5b41b85f7d7993a9158992a042867549bc8e597489cb14cb3e71653312b7094940d35261b0b10d3305a832c47c8d2e864409a82953ca00605e547b67bb69e887b65c987fc112313cf7290594bc4d91e58b09bfa583e4392b695873732e75f02c50d167eb5caf09e888d1f7075337d4dfd52a32d9ba13b879b7aa285cf8eb6801afd8542606c8"], 0x3, 0x350, &(0x7f0000000900)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7c, 0x40}, {0x6, 0x4, 0xff, 0x3}]}) pwrite64(0xffffffffffffffff, &(0x7f0000000100)="c6", 0x1, 0x8000) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x5, 0x0, 0x6}}, 0x28) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.251644741s ago: executing program 3 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) clock_getres(0x8, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.130186138s ago: executing program 1 (id=204): syz_clone3(&(0x7f0000000340)={0x60861400, &(0x7f0000000280), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4015) sendmsg$inet(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="d9002284", 0x4}], 0x1}, 0x8000) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r2) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1841886, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfd, 0x7c6, &(0x7f00000011c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xd, @any, 0x8, 0x1}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f4}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021000cb", @ANYRES32=r6, @ANYBLOB="080004000a010102080001006401010108000200ac14143a08000300e0000001080008002000000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.682612154s ago: executing program 1 (id=207): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {}, {@fat=@sys_immutable}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$eJzs3cFqE0EYB/AvTZqsBbVn8bDgxZOobxCkghAQqrkbaL20Imwv0VMeQ/ANfByPPkZPvUXaXVy7LSIl6WS7vx+E/dj/DjuTQCaHmeyHx5+ODj6ffFz++hZZlscgYhFnEbuxFf0o9arj1kU9jGHUFgEAtM3+/mycug+sUO/qqaIYz7YjYnQlm/64pV4BAAAAAAAAAACwYjdZ//836/8BoH2s/7/7imI826l+v11m/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQztly+XD5j1fq/gEAq2f+B4DuMf8DQPeY/wGge949qIo8zyJOF/PpfFoey9Ov30z2nucXdutWp/P5dLuqJ3svyjxv5jtV+5fX5sN4+qTMz7NXbyeNfBQH6xw4AAAAAAAAAAAAAAAAAAAAbJBn+R+N/f39Mj+/YBTX5FnE90v/D9DYvz+IR4PbHAkAAAAAAAAAAAAAAAAAAAC018mXr0ez4+PDorPFz35EsrtHr/wYUr8JjeJe3KBVtmmjaFHRj4jDUQxivfd6f///L079zQQAAAAAAAAAAAAAAAAAAN1Tb/pN3RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASKd+/v/6itRjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhdwAAAP//UhGHcQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 3.560980661s ago: executing program 1 (id=209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0) 3.533463203s ago: executing program 1 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) wait4(0x0, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r2, &(0x7f0000001440)=""/123, 0x7b, 0x841) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private2}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/73, 0x29, 0x49, 0x1, 0x7, 0x10000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) 3.326691605s ago: executing program 3 (id=211): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) 2.998615794s ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.950665027s ago: executing program 3 (id=213): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.831484754s ago: executing program 4 (id=215): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 2.73733543s ago: executing program 4 (id=217): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 2.598390597s ago: executing program 4 (id=218): syz_clone3(&(0x7f0000000340)={0x60861400, &(0x7f0000000280), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4015) sendmsg$inet(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="d9002284", 0x4}], 0x1}, 0x8000) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r2) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1841886, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfd, 0x7c6, &(0x7f00000011c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xd, @any, 0x8, 0x1}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f4}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021000cb", @ANYRES32=r6, @ANYBLOB="080004000a010102080001006401010108000200ac14143a08000300e0000001080008002000000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 950.998024ms ago: executing program 2 (id=219): futex(&(0x7f0000000000)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000040)=0x88000, 0x3000005) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$TIOCSBRK(r3, 0x5427) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r6, 0xffffffffffffffff, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 935.249425ms ago: executing program 1 (id=220): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {}, {@fat=@sys_immutable}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 900.893017ms ago: executing program 2 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) clock_getres(0x8, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 792.533234ms ago: executing program 0 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000"], 0x18}, 0x40c0) 791.936784ms ago: executing program 0 (id=223): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30}, 0x94) 703.834009ms ago: executing program 4 (id=224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 536.965449ms ago: executing program 1 (id=225): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x9, 0x885, 0x84}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r3, r4, 0x1, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0xffffffffffffff88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'bridge0\x00', &(0x7f0000000a40)=@ethtool_rxfh_indir={0x39}}) 536.307579ms ago: executing program 4 (id=226): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 245.837116ms ago: executing program 0 (id=227): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 210.862938ms ago: executing program 0 (id=228): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 173.21858ms ago: executing program 0 (id=229): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 155.037151ms ago: executing program 0 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xe0, 0x208, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x986c6000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0xa, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000c80)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303461612c747a3d5554432c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c696f636861727365743d63703836312c757466383d302c756e695f786c6174653d302c757466383d302c757466383d302c005ed4a338bef3e79ebeeb0dea20ed716e2652f036e76f36af1d77148ac9e99ed844e242770e1a7eee5b41b85f7d7993a9158992a042867549bc8e597489cb14cb3e71653312b7094940d35261b0b10d3305a832c47c8d2e864409a82953ca00605e547b67bb69e887b65c987fc112313cf7290594bc4d91e58b09bfa583e4392b695873732e75f02c50d167eb5caf09e888d1f7075337d4dfd52a32d9ba13b879b7aa285cf8eb6801afd8542606c8"], 0x3, 0x350, &(0x7f0000000900)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000100)="c6", 0x1, 0x8000) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x5, 0x0, 0x6}}, 0x28) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) 94.644515ms ago: executing program 4 (id=231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) wait4(0x0, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r2, &(0x7f0000001440)=""/123, 0x7b, 0x841) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private2}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/73, 0x29, 0x49, 0x1, 0x7, 0x10000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) 0s ago: executing program 2 (id=232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000440)={0xfffa}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000300)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x18d0490, &(0x7f00000003c0)={[{@uuid_off}, {@metacopy_on}, {@redirect_dir_follow}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'net/rfcomm\x00'}}]}) dup3(r7, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 22.605115][ T28] audit: type=1400 audit(1769189644.051:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.608779][ T274] cgroup: Unknown subsys name 'net' [ 22.633142][ T28] audit: type=1400 audit(1769189644.051:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.655905][ T28] audit: type=1400 audit(1769189644.081:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.656286][ T274] cgroup: Unknown subsys name 'devices' [ 22.809606][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.815229][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.920265][ T28] audit: type=1400 audit(1769189644.371:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.943756][ T28] audit: type=1400 audit(1769189644.371:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.968705][ T28] audit: type=1400 audit(1769189644.371:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.993586][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.002655][ T28] audit: type=1400 audit(1769189644.451:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.028065][ T28] audit: type=1400 audit(1769189644.451:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.119203][ T28] audit: type=1400 audit(1769189644.571:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.145241][ T28] audit: type=1400 audit(1769189644.571:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.145355][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.044572][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.051951][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.059790][ T282] device bridge_slave_0 entered promiscuous mode [ 24.066951][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.074062][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.081630][ T282] device bridge_slave_1 entered promiscuous mode [ 24.157140][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.164282][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.171876][ T283] device bridge_slave_0 entered promiscuous mode [ 24.179022][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.186078][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.193730][ T283] device bridge_slave_1 entered promiscuous mode [ 24.209571][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.216647][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.224471][ T285] device bridge_slave_0 entered promiscuous mode [ 24.234485][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.241705][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.249324][ T285] device bridge_slave_1 entered promiscuous mode [ 24.324558][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.331690][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.339251][ T284] device bridge_slave_0 entered promiscuous mode [ 24.346723][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.354113][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.361701][ T284] device bridge_slave_1 entered promiscuous mode [ 24.384691][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.391818][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.399323][ T286] device bridge_slave_0 entered promiscuous mode [ 24.408971][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.416084][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.423637][ T286] device bridge_slave_1 entered promiscuous mode [ 24.536337][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.543428][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.550757][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.557847][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.603202][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.610310][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.617601][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.624978][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.668347][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.675557][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.682919][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.689995][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.701621][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.708733][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.716036][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.723218][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.756957][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.764448][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.771870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.779751][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.786960][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.794722][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.802501][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.809996][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.817370][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.839445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.847988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.855788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.863667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.872373][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879670][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.887504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.895834][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.903146][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.910691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.919091][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.926222][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.933712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.942054][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.949155][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.983572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.992389][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.999486][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.007946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.015962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.024103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.032369][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.039456][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.068044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.076890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.085291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.093726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.102465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.111114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.119298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.127647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.135527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.144090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.152286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.160507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.168082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.175526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.184086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.192446][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.199554][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.207142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.214829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.230811][ T282] device veth0_vlan entered promiscuous mode [ 25.238432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.246872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.255342][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.262501][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.288744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.297686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.306151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.314635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.323085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.331466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.343449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.351797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.368749][ T284] device veth0_vlan entered promiscuous mode [ 25.377446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.385791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.394231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.401937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.409683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.417834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.438798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.446414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.454090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.462721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.471167][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.478276][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.486301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.494819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.503144][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.510227][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.517980][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.526056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.534358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.542898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.551447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.559239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.566715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.578736][ T283] device veth0_vlan entered promiscuous mode [ 25.587950][ T282] device veth1_macvtap entered promiscuous mode [ 25.603134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.611143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.619574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.628167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.636255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.644566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.653069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.661415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.669095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.676744][ T286] device veth0_vlan entered promiscuous mode [ 25.689707][ T284] device veth1_macvtap entered promiscuous mode [ 25.703645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.712262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.721010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.730658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.739259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.747879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.756294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.769480][ T285] device veth0_vlan entered promiscuous mode [ 25.781212][ T283] device veth1_macvtap entered promiscuous mode [ 25.788732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.796899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.804601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.812312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.820931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.829402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.837110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.847692][ T286] device veth1_macvtap entered promiscuous mode [ 25.868176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.876670][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.885583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.894167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.902922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.912706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.921185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.929503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.954746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.963421][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.970619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.982764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.998473][ T285] device veth1_macvtap entered promiscuous mode [ 26.010579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.020136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.054782][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.074203][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.092414][ T344] loop2: detected capacity change from 0 to 512 [ 26.099823][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.100241][ T344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.109922][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.142563][ T347] binder: 340:347 ioctl 5427 0 returned -22 [ 26.142937][ T344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 26.158559][ T338] loop0: detected capacity change from 0 to 2048 [ 26.167975][ T344] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 26.196632][ T344] overlayfs: overlapping lowerdir path [ 26.227906][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.234746][ T341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.252618][ T338] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.284365][ T356] loop3: detected capacity change from 0 to 256 [ 26.305659][ T356] ======================================================= [ 26.305659][ T356] WARNING: The mand mount option has been deprecated and [ 26.305659][ T356] and is ignored by this kernel. Remove the mand [ 26.305659][ T356] option from the mount to silence this warning. [ 26.305659][ T356] ======================================================= [ 26.396179][ T358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.451466][ T356] FAT-fs (loop3): Directory bread(block 64) failed [ 26.458281][ T356] FAT-fs (loop3): Directory bread(block 65) failed [ 26.464990][ T356] FAT-fs (loop3): Directory bread(block 66) failed [ 26.473820][ T356] FAT-fs (loop3): Directory bread(block 67) failed [ 26.479619][ T358] netlink: 'syz.0.6': attribute type 9 has an invalid length. [ 26.488657][ T356] FAT-fs (loop3): Directory bread(block 68) failed [ 26.495368][ T356] FAT-fs (loop3): Directory bread(block 69) failed [ 26.497573][ T40] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.510342][ T356] FAT-fs (loop3): Directory bread(block 70) failed [ 26.518365][ T356] FAT-fs (loop3): Directory bread(block 71) failed [ 26.534191][ T356] FAT-fs (loop3): Directory bread(block 72) failed [ 26.556325][ T356] FAT-fs (loop3): Directory bread(block 73) failed [ 26.681590][ T358] process 'syz.0.6' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 26.697307][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 26.886011][ T40] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.08 [ 26.901994][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.916241][ T40] usb 3-1: SerialNumber: syz [ 26.926504][ T40] usb 3-1: config 0 descriptor?? [ 26.937838][ T40] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 26.950117][ T40] usb 3-1: Detected SIO [ 28.293191][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.300431][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 28.600800][ T40] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 29.673729][ T352] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.231667][ T40] usb 3-1: USB disconnect, device number 2 [ 30.241051][ T40] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.252255][ T40] ftdi_sio 3-1:0.0: device disconnected [ 30.285990][ T366] loop1: detected capacity change from 0 to 512 [ 30.292983][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 30.295979][ T28] audit: type=1400 audit(1769189651.731:123): avc: denied { create } for pid=365 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.328021][ T28] audit: type=1400 audit(1769189651.781:124): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.409107][ T28] audit: type=1400 audit(1769189651.861:125): avc: denied { write } for pid=368 comm="syz.3.9" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.444352][ T372] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 30.455064][ T28] audit: type=1400 audit(1769189651.891:126): avc: denied { perfmon } for pid=370 comm="syz.0.11" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.482979][ T28] audit: type=1400 audit(1769189651.891:127): avc: denied { prog_run } for pid=370 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.515514][ T28] audit: type=1400 audit(1769189651.891:128): avc: denied { map_read map_write } for pid=370 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.527688][ T372] syz.4.10 (372) used greatest stack depth: 21088 bytes left [ 30.543667][ T28] audit: type=1400 audit(1769189651.891:129): avc: denied { read write } for pid=367 comm="syz.4.10" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.569879][ T375] loop1: detected capacity change from 0 to 256 [ 30.577585][ T28] audit: type=1400 audit(1769189651.891:130): avc: denied { open } for pid=367 comm="syz.4.10" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.601987][ T375] exfat: Deprecated parameter 'utf8' [ 30.617632][ T28] audit: type=1400 audit(1769189651.961:131): avc: denied { write } for pid=367 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.648114][ T375] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 30.664410][ T28] audit: type=1400 audit(1769189651.961:132): avc: denied { read } for pid=367 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.889095][ T387] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.12'. [ 31.143287][ T388] loop4: detected capacity change from 0 to 2048 [ 31.187612][ T339] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.241332][ T386] netlink: 7 bytes leftover after parsing attributes in process `syz.4.16'. [ 31.277270][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.296822][ T395] IPv6: NLM_F_REPLACE set, but no existing node found! [ 31.324464][ T397] loop4: detected capacity change from 0 to 256 [ 31.357792][ T397] FAT-fs (loop4): Directory bread(block 64) failed [ 31.364441][ T397] FAT-fs (loop4): Directory bread(block 65) failed [ 31.390848][ T397] FAT-fs (loop4): Directory bread(block 66) failed [ 31.405233][ T397] FAT-fs (loop4): Directory bread(block 67) failed [ 31.420182][ T397] FAT-fs (loop4): Directory bread(block 68) failed [ 31.426765][ T397] FAT-fs (loop4): Directory bread(block 69) failed [ 31.457305][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 31.466666][ T19] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 31.479459][ T397] FAT-fs (loop4): Directory bread(block 70) failed [ 31.486230][ T397] FAT-fs (loop4): Directory bread(block 71) failed [ 31.493801][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.504400][ T397] FAT-fs (loop4): Directory bread(block 72) failed [ 31.511313][ T397] FAT-fs (loop4): Directory bread(block 73) failed [ 31.519739][ T19] usb 4-1: config 0 descriptor?? [ 31.589763][ T400] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 31.607509][ T400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 31.737702][ T381] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 31.761937][ T19] usb 4-1: string descriptor 0 read error: -71 [ 31.785854][ T19] usb 4-1: Found UVC 0.00 device (2833:0201) [ 31.793228][ T19] usb 4-1: No valid video chain found. [ 31.800967][ T404] loop1: detected capacity change from 0 to 512 [ 31.809931][ T19] usb 4-1: USB disconnect, device number 2 [ 31.856534][ T404] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.21: invalid indirect mapped block 256 (level 2) [ 31.876939][ T408] loop2: detected capacity change from 0 to 256 [ 31.905152][ T408] exfat: Deprecated parameter 'utf8' [ 31.912894][ T404] EXT4-fs (loop1): 2 truncates cleaned up [ 31.930040][ T408] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 31.947312][ T404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.233061][ T412] IPv6: NLM_F_REPLACE set, but no existing node found! [ 32.402200][ T413] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.22'. [ 32.457073][ T415] IPv6: NLM_F_REPLACE set, but no existing node found! [ 32.553978][ T420] binder: 416:420 ioctl 5427 0 returned -22 [ 32.598899][ T419] loop4: detected capacity change from 0 to 2048 [ 32.655086][ T419] netlink: 7 bytes leftover after parsing attributes in process `syz.4.25'. [ 32.681288][ T393] loop0: detected capacity change from 0 to 131072 [ 32.694728][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.767533][ T393] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 32.777304][ T393] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.795516][ T393] F2FS-fs (loop0): invalid crc value [ 32.802846][ T425] loop1: detected capacity change from 0 to 256 [ 32.812502][ T426] binder: 422:426 ioctl c0306201 200000000240 returned -11 [ 32.827815][ T425] exfat: Deprecated parameter 'utf8' [ 32.835848][ T393] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.843526][ T425] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 32.930029][ T393] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.942638][ T393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 33.085138][ T433] loop2: detected capacity change from 0 to 4096 [ 33.104229][ T434] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.26'. [ 33.266199][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.543545][ T283] EXT4-fs (loop2): unmounting filesystem. [ 33.640217][ T441] loop2: detected capacity change from 0 to 2048 [ 33.651183][ T441] netlink: 7 bytes leftover after parsing attributes in process `syz.2.31'. [ 33.687312][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.818477][ T449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 33.858890][ T6] usb 4-1: device descriptor read/64, error -71 [ 33.875123][ T448] loop2: detected capacity change from 0 to 2048 [ 33.924296][ T454] loop0: detected capacity change from 0 to 512 [ 33.931123][ T339] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.945703][ T448] netlink: 7 bytes leftover after parsing attributes in process `syz.2.34'. [ 33.957560][ T454] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.30: invalid indirect mapped block 256 (level 2) [ 33.987858][ T454] EXT4-fs (loop0): 2 truncates cleaned up [ 33.995561][ T454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.023496][ T459] loop2: detected capacity change from 0 to 512 [ 34.032395][ T459] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.36: invalid indirect mapped block 256 (level 2) [ 34.046675][ T459] EXT4-fs (loop2): 2 truncates cleaned up [ 34.052737][ T459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.260345][ T463] IPv6: NLM_F_REPLACE set, but no existing node found! [ 35.308196][ T465] IPv6: NLM_F_REPLACE set, but no existing node found! [ 35.874931][ T436] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 35.891047][ T6] usb 4-1: device descriptor read/64, error -71 [ 35.912963][ T283] EXT4-fs (loop2): unmounting filesystem. [ 35.922214][ T282] EXT4-fs (loop0): unmounting filesystem. [ 36.004284][ T474] loop0: detected capacity change from 0 to 256 [ 36.019845][ T476] binder: BINDER_SET_CONTEXT_MGR already set [ 36.030244][ T476] binder: 469:476 ioctl 4018620d 200000000040 returned -16 [ 36.038847][ T476] binder: 469:476 ioctl c0306201 200000000240 returned -11 [ 36.058571][ T474] exfat: Deprecated parameter 'utf8' [ 36.075002][ T474] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 36.302608][ T480] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.40'. [ 36.509435][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.509611][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 36.509667][ T28] audit: type=1400 audit(1769189657.871:149): avc: denied { connect } for pid=478 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.612338][ T486] loop3: detected capacity change from 0 to 4096 [ 36.624182][ T486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.782458][ T285] EXT4-fs (loop3): unmounting filesystem. [ 36.868088][ T489] loop2: detected capacity change from 0 to 4096 [ 36.882997][ T484] kernel write not supported for file bpf-prog (pid: 484 comm: kworker/0:5) [ 36.920347][ T489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.930550][ T28] audit: type=1400 audit(1769189658.331:150): avc: denied { mounton } for pid=492 comm="syz.3.43" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.982561][ T489] fs-verity: sha512 using implementation "sha512-avx2" [ 36.999686][ T28] audit: type=1400 audit(1769189658.421:151): avc: denied { read } for pid=488 comm="syz.2.44" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.106167][ T501] loop1: detected capacity change from 0 to 256 [ 37.123687][ T28] audit: type=1400 audit(1769189658.421:152): avc: denied { open } for pid=488 comm="syz.2.44" path="/8/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.152085][ T500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 37.238933][ T489] fs-verity (loop2, inode 15): Unsupported log_blocksize: 13 [ 37.263877][ T501] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 37.408908][ T28] audit: type=1400 audit(1769189658.431:153): avc: denied { ioctl } for pid=488 comm="syz.2.44" path="/8/file1/file1" dev="loop2" ino=15 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.895159][ T283] EXT4-fs (loop2): unmounting filesystem. [ 37.914477][ T508] loop0: detected capacity change from 0 to 512 [ 37.928136][ T28] audit: type=1400 audit(1769189658.431:154): avc: denied { write } for pid=488 comm="syz.2.44" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.981831][ T508] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.49: invalid indirect mapped block 256 (level 2) [ 38.006484][ T505] loop4: detected capacity change from 0 to 2048 [ 38.026007][ T508] EXT4-fs (loop0): 2 truncates cleaned up [ 38.035777][ T28] audit: type=1400 audit(1769189658.541:155): avc: denied { create } for pid=490 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.077334][ T508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.145154][ T28] audit: type=1400 audit(1769189658.551:156): avc: denied { connect } for pid=490 comm="syz.1.45" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.165494][ T28] audit: type=1400 audit(1769189658.561:157): avc: denied { mounton } for pid=490 comm="syz.1.45" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.233646][ T339] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.381428][ T518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 38.851953][ T28] audit: type=1400 audit(1769189660.121:158): avc: denied { name_bind } for pid=513 comm="syz.1.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.874334][ T282] EXT4-fs (loop0): unmounting filesystem. [ 38.881825][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.896680][ T504] netlink: 7 bytes leftover after parsing attributes in process `syz.4.48'. [ 38.943558][ T525] binder: BINDER_SET_CONTEXT_MGR already set [ 38.953231][ T526] loop2: detected capacity change from 0 to 256 [ 38.954564][ T527] binder: 521:527 ioctl c0306201 200000000240 returned -11 [ 38.961066][ T525] binder: 524:525 ioctl 4018620d 200000000040 returned -16 [ 38.991496][ T525] binder: 524:525 ioctl c0306201 200000000240 returned -11 [ 39.010259][ T526] FAT-fs (loop2): Directory bread(block 64) failed [ 39.016834][ T526] FAT-fs (loop2): Directory bread(block 65) failed [ 39.033605][ T531] xt_hashlimit: size too large, truncated to 1048576 [ 39.045518][ T533] loop4: detected capacity change from 0 to 256 [ 39.057302][ T526] FAT-fs (loop2): Directory bread(block 66) failed [ 39.064138][ T526] FAT-fs (loop2): Directory bread(block 67) failed [ 39.072831][ T533] exfat: Deprecated parameter 'utf8' [ 39.094219][ T526] FAT-fs (loop2): Directory bread(block 68) failed [ 39.110891][ T533] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 39.127254][ T526] FAT-fs (loop2): Directory bread(block 69) failed [ 39.133885][ T526] FAT-fs (loop2): Directory bread(block 70) failed [ 39.158858][ T526] FAT-fs (loop2): Directory bread(block 71) failed [ 39.165476][ T526] FAT-fs (loop2): Directory bread(block 72) failed [ 39.242627][ T526] FAT-fs (loop2): Directory bread(block 73) failed [ 39.349854][ T537] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.57'. [ 39.938493][ T546] binder: 544:546 ioctl 5427 0 returned -22 [ 39.951539][ T546] binder: 544:546 ioctl c0306201 200000000240 returned -11 [ 40.180284][ T551] loop4: detected capacity change from 0 to 8192 [ 40.200364][ T551] FAT-fs (loop4): Unrecognized mount option ""°0’›ÐtÕägýÔ³ÞR¼hc‡˜þ’}>%Ò–}Ÿ-ûò?×îJ²SÑrwáX—’§¥Ï&-œSŠÀ¢@cpbcuœS‹î] ïhÀ6æ™eãG±ÝšgŸsdj<{l´|И0ˆâ" or missing value [ 40.512467][ T560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 40.676374][ T570] binder: BINDER_SET_CONTEXT_MGR already set [ 40.682643][ T570] binder: 569:570 ioctl 4018620d 200000000040 returned -16 [ 40.690521][ T570] binder: 569:570 ioctl c0306201 200000000240 returned -11 [ 40.702575][ T567] loop0: detected capacity change from 0 to 2048 [ 40.719271][ T573] xt_hashlimit: size too large, truncated to 1048576 [ 40.727323][ T567] netlink: 7 bytes leftover after parsing attributes in process `syz.0.69'. [ 40.765822][ T575] loop0: detected capacity change from 0 to 256 [ 40.774311][ T575] exfat: Deprecated parameter 'utf8' [ 40.804138][ T575] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 40.883427][ T40] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.917302][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 40.923393][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.929790][ T519] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 41.004592][ T578] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.72'. [ 41.047434][ T40] usb 2-1: device descriptor read/64, error -71 [ 41.263432][ T582] binder: 579:582 ioctl c0306201 200000000240 returned -11 [ 41.337332][ T40] usb 2-1: device descriptor read/64, error -71 [ 41.607289][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.767303][ T40] usb 2-1: device descriptor read/64, error -71 [ 41.773887][ T596] loop0: detected capacity change from 0 to 4096 [ 41.789223][ T596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.921630][ T282] EXT4-fs (loop0): unmounting filesystem. [ 42.037280][ T40] usb 2-1: device descriptor read/64, error -71 [ 42.085189][ T605] binder: BINDER_SET_CONTEXT_MGR already set [ 42.091893][ T605] binder: 604:605 ioctl 4018620d 200000000040 returned -16 [ 42.102611][ T605] binder: 604:605 ioctl c0306201 200000000240 returned -11 [ 42.167378][ T40] usb usb2-port1: attempt power cycle [ 42.319340][ T612] loop2: detected capacity change from 0 to 2048 [ 42.348561][ T611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 42.370046][ T614] xt_hashlimit: size too large, truncated to 1048576 [ 42.404985][ T607] netlink: 7 bytes leftover after parsing attributes in process `syz.2.83'. [ 42.481247][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.542612][ T618] loop2: detected capacity change from 0 to 256 [ 42.577338][ T618] FAT-fs (loop2): Directory bread(block 64) failed [ 42.577958][ T40] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.592137][ T618] FAT-fs (loop2): Directory bread(block 65) failed [ 42.599309][ T618] FAT-fs (loop2): Directory bread(block 66) failed [ 42.605944][ T618] FAT-fs (loop2): Directory bread(block 67) failed [ 42.613951][ T618] FAT-fs (loop2): Directory bread(block 68) failed [ 42.624850][ T618] FAT-fs (loop2): Directory bread(block 69) failed [ 42.637584][ T618] FAT-fs (loop2): Directory bread(block 70) failed [ 42.647643][ T618] FAT-fs (loop2): Directory bread(block 71) failed [ 42.648628][ T40] usb 2-1: device descriptor read/8, error -71 [ 42.666983][ T618] FAT-fs (loop2): Directory bread(block 72) failed [ 42.676755][ T618] FAT-fs (loop2): Directory bread(block 73) failed [ 42.710998][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 42.711013][ T28] audit: type=1326 audit(1769189664.161:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=616 comm="syz.2.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a979acb9 code=0x0 [ 42.818305][ T40] usb 2-1: device descriptor read/8, error -71 [ 42.889701][ T621] loop0: detected capacity change from 0 to 256 [ 42.904723][ T621] exfat: Deprecated parameter 'utf8' [ 42.923552][ T621] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 43.087358][ T40] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.118466][ T629] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.87'. [ 43.142204][ T40] usb 2-1: device descriptor read/8, error -71 [ 43.298860][ T40] usb 2-1: device descriptor read/8, error -71 [ 43.359085][ T633] loop4: detected capacity change from 0 to 4096 [ 43.373695][ T633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.423944][ T638] binder: 634:638 ioctl c0306201 200000000240 returned -11 [ 43.427849][ T40] usb usb2-port1: unable to enumerate USB device [ 43.531590][ T284] EXT4-fs (loop4): unmounting filesystem. [ 43.587162][ T644] binder: 643:644 ioctl c0306201 0 returned -14 [ 43.595148][ T644] binder: 643:644 ioctl c0306201 200000000240 returned -11 [ 44.233859][ T654] xt_hashlimit: size too large, truncated to 1048576 [ 44.517258][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 44.524037][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.530843][ T617] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 44.596229][ T660] binder: 659:660 ioctl 4018620d 0 returned -22 [ 44.833437][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 44.854267][ T657] netlink: 7 bytes leftover after parsing attributes in process `syz.1.99'. [ 45.087130][ T677] binder: 676:677 ioctl c0306201 0 returned -14 [ 45.102399][ T677] binder: 676:677 ioctl c0306201 200000000240 returned -11 [ 45.151013][ T680] loop4: detected capacity change from 0 to 256 [ 45.176856][ T680] exfat: Deprecated parameter 'utf8' [ 45.199394][ T680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 45.283245][ T40] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.291518][ T684] binder: 681:684 ioctl 5427 0 returned -22 [ 45.311118][ T684] binder: 681:684 ioctl c0306201 200000000240 returned -11 [ 45.412413][ T688] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.108'. [ 45.447392][ T40] usb 1-1: device descriptor read/64, error -71 [ 45.505719][ T687] binder: 685:687 ioctl c0306201 200000000240 returned -11 [ 45.582977][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.642111][ T693] loop2: detected capacity change from 0 to 256 [ 45.654653][ T693] FAT-fs (loop2): Directory bread(block 64) failed [ 45.661575][ T693] FAT-fs (loop2): Directory bread(block 65) failed [ 45.668394][ T693] FAT-fs (loop2): Directory bread(block 66) failed [ 45.675068][ T693] FAT-fs (loop2): Directory bread(block 67) failed [ 45.681899][ T693] FAT-fs (loop2): Directory bread(block 68) failed [ 45.688729][ T693] FAT-fs (loop2): Directory bread(block 69) failed [ 45.695335][ T693] FAT-fs (loop2): Directory bread(block 70) failed [ 45.701983][ T693] FAT-fs (loop2): Directory bread(block 71) failed [ 45.708621][ T693] FAT-fs (loop2): Directory bread(block 72) failed [ 45.715242][ T693] FAT-fs (loop2): Directory bread(block 73) failed [ 45.721989][ T40] usb 1-1: device descriptor read/64, error -71 [ 45.732211][ T28] audit: type=1326 audit(1769189667.181:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=691 comm="syz.2.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a979acb9 code=0x0 [ 45.997352][ T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.094585][ T699] binder: 698:699 ioctl 4018620d 0 returned -22 [ 46.157316][ T40] usb 1-1: device descriptor read/64, error -71 [ 46.215287][ T703] loop3: detected capacity change from 0 to 2048 [ 46.294607][ T703] netlink: 7 bytes leftover after parsing attributes in process `syz.3.115'. [ 46.457261][ T40] usb 1-1: device descriptor read/64, error -71 [ 46.578945][ T40] usb usb1-port1: attempt power cycle [ 46.683182][ T716] binder: 715:716 ioctl c0306201 0 returned -14 [ 46.693734][ T716] binder: 715:716 ioctl c0306201 200000000240 returned -11 [ 46.742483][ T718] xt_hashlimit: size too large, truncated to 1048576 [ 46.997560][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.093191][ T40] usb 1-1: device descriptor read/8, error -71 [ 47.143444][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 47.248361][ T40] usb 1-1: device descriptor read/8, error -71 [ 47.391903][ T727] loop3: detected capacity change from 0 to 256 [ 47.399929][ T727] exfat: Deprecated parameter 'utf8' [ 47.416916][ T727] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 47.533614][ T731] binder: 728:731 ioctl 5427 0 returned -22 [ 47.540439][ T731] binder: 728:731 ioctl c0306201 200000000240 returned -11 [ 47.567342][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.598825][ T40] usb 1-1: device descriptor read/8, error -71 [ 47.611953][ T732] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.637257][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.749969][ T40] usb 1-1: device descriptor read/8, error -71 [ 47.868249][ T40] usb usb1-port1: unable to enumerate USB device [ 47.894047][ T736] binder: 735:736 ioctl 4018620d 0 returned -22 [ 48.196593][ T744] loop0: detected capacity change from 0 to 2048 [ 48.214473][ T744] netlink: 7 bytes leftover after parsing attributes in process `syz.0.129'. [ 48.301250][ T752] binder: 751:752 ioctl c0306201 200000000240 returned -11 [ 48.360015][ T755] xt_hashlimit: size too large, truncated to 1048576 [ 48.584665][ T692] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 48.708751][ T762] loop2: detected capacity change from 0 to 4096 [ 48.781779][ T762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.478609][ T769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 49.820302][ T283] EXT4-fs (loop2): unmounting filesystem. [ 49.890861][ T777] binder: BINDER_SET_CONTEXT_MGR already set [ 49.897289][ T777] binder: 776:777 ioctl 4018620d 200000000040 returned -16 [ 49.939925][ T779] loop0: detected capacity change from 0 to 256 [ 49.955884][ T779] exfat: Deprecated parameter 'utf8' [ 49.966992][ T785] binder: 784:785 ioctl c0306201 200000000240 returned -11 [ 49.982177][ T779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 50.062441][ T781] loop3: detected capacity change from 0 to 2048 [ 50.071237][ T40] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.120036][ T339] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.128771][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.168705][ T794] binder: 788:794 ioctl 5427 0 returned -22 [ 50.247590][ T794] binder: 788:794 ioctl c0306201 200000000240 returned -11 [ 50.264901][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 50.279902][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.311760][ T786] netlink: 7 bytes leftover after parsing attributes in process `syz.3.141'. [ 50.334652][ T28] audit: type=1326 audit(1769189671.781:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=792 comm="syz.1.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbb59acb9 code=0x0 [ 50.444672][ T40] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.476960][ T40] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 50.482526][ T801] xt_hashlimit: size too large, truncated to 1048576 [ 50.488311][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.501168][ T40] usb 5-1: Product: syz [ 50.505436][ T40] usb 5-1: Manufacturer: syz [ 50.510717][ T40] usb 5-1: SerialNumber: syz [ 50.520910][ T40] usb 5-1: config 0 descriptor?? [ 50.878778][ T812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 51.663790][ T821] loop3: detected capacity change from 0 to 4096 [ 51.676062][ T821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.840302][ T28] audit: type=1400 audit(1769189673.291:166): avc: denied { read } for pid=772 comm="syz.4.138" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.867076][ T28] audit: type=1400 audit(1769189673.321:167): avc: denied { open } for pid=772 comm="syz.4.138" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.982302][ T285] EXT4-fs (loop3): unmounting filesystem. [ 51.995922][ T825] binder: 824:825 ioctl c0306201 200000000240 returned -11 [ 52.061686][ T827] binder: BINDER_SET_CONTEXT_MGR already set [ 52.086666][ T827] binder: 826:827 ioctl 4018620d 200000000040 returned -16 [ 52.197020][ T834] xt_hashlimit: size too large, truncated to 1048576 [ 52.197522][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 52.206627][ T354] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.216580][ T793] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 52.357926][ T837] loop2: detected capacity change from 0 to 2048 [ 52.374708][ T836] netlink: 7 bytes leftover after parsing attributes in process `syz.2.159'. [ 52.681567][ T850] binder: 848:850 ioctl 5427 0 returned -22 [ 52.733155][ T850] binder: 848:850 ioctl c0306201 200000000240 returned -11 [ 52.843418][ T855] loop3: detected capacity change from 0 to 4096 [ 52.853870][ T855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.919856][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 53.162459][ T336] usb 5-1: USB disconnect, device number 2 [ 53.206428][ T859] binder: 858:859 ioctl c0306201 200000000240 returned -11 [ 53.243744][ T863] binder: BINDER_SET_CONTEXT_MGR already set [ 53.249946][ T863] binder: 862:863 ioctl 4018620d 200000000040 returned -16 [ 53.281002][ T285] EXT4-fs (loop3): unmounting filesystem. [ 53.444967][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.504650][ T876] loop2: detected capacity change from 0 to 256 [ 53.533769][ T876] FAT-fs (loop2): Directory bread(block 64) failed [ 53.623688][ T876] FAT-fs (loop2): Directory bread(block 65) failed [ 53.630730][ T876] FAT-fs (loop2): Directory bread(block 66) failed [ 53.637855][ T876] FAT-fs (loop2): Directory bread(block 67) failed [ 53.644538][ T876] FAT-fs (loop2): Directory bread(block 68) failed [ 53.670576][ T876] FAT-fs (loop2): Directory bread(block 69) failed [ 53.710593][ T876] FAT-fs (loop2): Directory bread(block 70) failed [ 53.735280][ T876] FAT-fs (loop2): Directory bread(block 71) failed [ 53.758293][ T876] FAT-fs (loop2): Directory bread(block 72) failed [ 53.797970][ T876] FAT-fs (loop2): Directory bread(block 73) failed [ 53.807100][ T883] xt_hashlimit: size too large, truncated to 1048576 [ 53.852269][ T880] loop0: detected capacity change from 0 to 2048 [ 53.863767][ T28] audit: type=1326 audit(1769189675.311:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=872 comm="syz.2.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a979acb9 code=0x0 [ 54.285068][ T893] loop4: detected capacity change from 0 to 256 [ 54.292371][ T893] exfat: Deprecated parameter 'utf8' [ 54.297800][ T339] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.312269][ T893] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 54.331066][ T880] netlink: 7 bytes leftover after parsing attributes in process `syz.0.174'. [ 54.424482][ T896] binder: BINDER_SET_CONTEXT_MGR already set [ 54.430718][ T896] binder: 894:896 ioctl 4018620d 200000000040 returned -16 [ 54.438626][ T896] binder: 894:896 ioctl c0306201 200000000240 returned -11 [ 54.470464][ T898] binder: 897:898 ioctl c0306201 0 returned -14 [ 54.557373][ T40] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 54.747336][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 54.754764][ T40] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.816458][ T40] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 54.832515][ T901] loop0: detected capacity change from 0 to 4096 [ 54.842421][ T40] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 54.856548][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.874546][ T40] usb 2-1: Product: syz [ 54.880424][ T901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.890302][ T40] usb 2-1: Manufacturer: syz [ 54.899653][ T40] usb 2-1: SerialNumber: syz [ 54.913788][ T40] usb 2-1: config 0 descriptor?? [ 55.014885][ T908] binder: 906:908 ioctl 5427 0 returned -22 [ 55.021803][ T908] binder: 906:908 ioctl c0306201 200000000240 returned -11 [ 55.051682][ T282] EXT4-fs (loop0): unmounting filesystem. [ 55.239030][ T914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 55.477279][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 55.497298][ T354] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.503951][ T873] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 55.973531][ T933] binder: 932:933 ioctl c0306201 200000000240 returned -11 [ 56.075394][ T936] xt_hashlimit: size too large, truncated to 1048576 [ 56.084335][ T930] loop3: detected capacity change from 0 to 2048 [ 56.140745][ T339] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.228898][ T930] netlink: 7 bytes leftover after parsing attributes in process `syz.3.190'. [ 56.333225][ T941] binder: 940:941 ioctl c0306201 0 returned -14 [ 56.481568][ T945] loop3: detected capacity change from 0 to 4096 [ 56.522888][ T945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.560951][ T948] loop4: detected capacity change from 0 to 256 [ 56.585627][ T948] exfat: Deprecated parameter 'utf8' [ 56.613404][ T948] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 56.649854][ T285] EXT4-fs (loop3): unmounting filesystem. [ 56.884026][ T953] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.196'. [ 57.136420][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.190332][ T962] loop2: detected capacity change from 0 to 256 [ 57.203220][ T963] binder: 959:963 ioctl 5427 0 returned -22 [ 57.210454][ T962] FAT-fs (loop2): Directory bread(block 64) failed [ 57.217090][ T962] FAT-fs (loop2): Directory bread(block 65) failed [ 57.224329][ T963] binder: 959:963 ioctl c0306201 200000000240 returned -11 [ 57.236471][ T962] FAT-fs (loop2): Directory bread(block 66) failed [ 57.243872][ T962] FAT-fs (loop2): Directory bread(block 67) failed [ 57.251585][ T962] FAT-fs (loop2): Directory bread(block 68) failed [ 57.258507][ T962] FAT-fs (loop2): Directory bread(block 69) failed [ 57.265278][ T962] FAT-fs (loop2): Directory bread(block 70) failed [ 57.272224][ T962] FAT-fs (loop2): Directory bread(block 71) failed [ 57.279193][ T962] FAT-fs (loop2): Directory bread(block 72) failed [ 57.286180][ T962] FAT-fs (loop2): Directory bread(block 73) failed [ 57.302770][ T484] usb 2-1: USB disconnect, device number 6 [ 57.308753][ T28] audit: type=1326 audit(1769189678.751:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.2.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a979acb9 code=0x0 [ 57.357083][ T967] binder: 966:967 ioctl c0306201 200000000240 returned -11 [ 57.452727][ T974] binder: 973:974 ioctl c0306201 0 returned -14 [ 57.515277][ T976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 57.856023][ T975] netlink: 7 bytes leftover after parsing attributes in process `syz.1.204'. [ 58.002771][ T986] xt_hashlimit: size too large, truncated to 1048576 [ 58.764171][ T1004] loop0: detected capacity change from 0 to 256 [ 58.773905][ T1005] binder: 1003:1005 ioctl c0306201 200000000240 returned -11 [ 58.795074][ T1004] exfat: Deprecated parameter 'utf8' [ 58.835661][ T1004] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 58.956054][ T336] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 60.535447][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 60.544217][ T354] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.560723][ T1007] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.216'. [ 60.573279][ T958] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 60.622695][ T1013] binder: 1012:1013 ioctl 5427 0 returned -22 [ 60.629291][ T1013] binder: 1012:1013 ioctl c0306201 200000000240 returned -11 [ 60.647309][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 60.653981][ T336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.675520][ T1010] loop4: detected capacity change from 0 to 2048 [ 60.718911][ T1010] netlink: 7 bytes leftover after parsing attributes in process `syz.4.218'. [ 60.734041][ T336] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.752290][ T336] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 60.778168][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.796578][ T336] usb 4-1: Product: syz [ 60.822312][ T336] usb 4-1: Manufacturer: syz [ 60.827176][ T336] usb 4-1: SerialNumber: syz [ 60.842403][ T336] usb 4-1: config 0 descriptor?? [ 61.147719][ T1031] xt_hashlimit: size too large, truncated to 1048576 [ 61.365394][ T1037] binder: 1036:1037 ioctl c0306201 200000000240 returned -11 [ 61.408395][ T502] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.461843][ T1045] loop0: detected capacity change from 0 to 256 [ 61.490145][ T1045] FAT-fs (loop0): Directory bread(block 64) failed [ 61.497351][ T1045] FAT-fs (loop0): Directory bread(block 65) failed [ 61.582435][ T1049] loop2: detected capacity change from 0 to 256 [ 61.589333][ T1045] FAT-fs (loop0): Directory bread(block 66) failed [ 61.596081][ T1045] FAT-fs (loop0): Directory bread(block 67) failed [ 61.603652][ T1045] FAT-fs (loop0): Directory bread(block 68) failed [ 61.610651][ T1045] FAT-fs (loop0): Directory bread(block 69) failed [ 61.618188][ T1049] exfat: Deprecated parameter 'utf8' [ 61.631310][ T1045] FAT-fs (loop0): Directory bread(block 70) failed [ 61.642861][ T1045] FAT-fs (loop0): Directory bread(block 71) failed [ 61.655445][ T1049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 61.672080][ T1045] FAT-fs (loop0): Directory bread(block 72) failed [ 61.705921][ T1045] FAT-fs (loop0): Directory bread(block 73) failed [ 61.903537][ T1052] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.232'. [ 62.597237][ C0] ================================================================== [ 62.605370][ C0] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 62.612476][ C0] Write of size 8 at addr ffff88811c79ca00 by task syz.4.231/1047 [ 62.620348][ C0] [ 62.622711][ C0] CPU: 0 PID: 1047 Comm: syz.4.231 Not tainted syzkaller #0 [ 62.630015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.640112][ C0] Call Trace: [ 62.643514][ C0] [ 62.646487][ C0] __dump_stack+0x21/0x24 [ 62.650858][ C0] dump_stack_lvl+0x110/0x170 [ 62.655568][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.660654][ C0] ? __run_timers+0x340/0x9f0 [ 62.665378][ C0] print_address_description+0x71/0x200 [ 62.671135][ C0] print_report+0x4a/0x60 [ 62.675523][ C0] kasan_report+0x122/0x150 [ 62.680206][ C0] ? __run_timers+0x340/0x9f0 [ 62.685021][ C0] __asan_report_store8_noabort+0x17/0x20 [ 62.690765][ C0] __run_timers+0x340/0x9f0 [ 62.695353][ C0] ? sched_clock+0x9/0x10 [ 62.699730][ C0] ? sched_clock_cpu+0x6e/0x260 [ 62.704611][ C0] ? calc_index+0x200/0x200 [ 62.709154][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 62.714391][ C0] run_timer_softirq+0x6a/0xf0 [ 62.719194][ C0] handle_softirqs+0x1d7/0x600 [ 62.723992][ C0] __irq_exit_rcu+0x52/0xf0 [ 62.728529][ C0] irq_exit_rcu+0x9/0x10 [ 62.732809][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 62.738738][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 62.744763][ C0] RIP: 0033:0x7f4dc2fba250 [ 62.749310][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d c2 1f 09 00 e8 e5 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 62.769306][ C0] RSP: 002b:00007f4dc3d82b38 EFLAGS: 00000246 [ 62.775426][ C0] RAX: 0000000000000000 RBX: 00007f4dc3216098 RCX: 00007f4dc2f9acb9 [ 62.783424][ C0] RDX: 00007f4dc3d82b40 RSI: 00007f4dc3d82c70 RDI: 0000000000000021 [ 62.791515][ C0] RBP: 00007f4dc3216090 R08: 0000000000000000 R09: 0000000000000000 [ 62.799602][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.807690][ C0] R13: 00007f4dc3216128 R14: 00007ffe43a8a840 R15: 00007ffe43a8a928 [ 62.815792][ C0] [ 62.818834][ C0] [ 62.821178][ C0] Allocated by task 958: [ 62.825431][ C0] kasan_set_track+0x4b/0x70 [ 62.830055][ C0] kasan_save_alloc_info+0x25/0x30 [ 62.835202][ C0] __kasan_kmalloc+0x95/0xb0 [ 62.839930][ C0] __kmalloc+0xb1/0x1e0 [ 62.844322][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 62.849393][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 62.854462][ C0] tty_ioctl+0x8ef/0xc60 [ 62.858821][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 62.863526][ C0] __x64_sys_ioctl+0x7b/0x90 [ 62.868151][ C0] x64_sys_call+0x58b/0x9a0 [ 62.872778][ C0] do_syscall_64+0x4c/0xa0 [ 62.877319][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.883592][ C0] [ 62.885934][ C0] Freed by task 958: [ 62.889840][ C0] kasan_set_track+0x4b/0x70 [ 62.894474][ C0] kasan_save_free_info+0x31/0x50 [ 62.899563][ C0] ____kasan_slab_free+0x132/0x180 [ 62.904726][ C0] __kasan_slab_free+0x11/0x20 [ 62.909610][ C0] slab_free_freelist_hook+0xc2/0x190 [ 62.915015][ C0] __kmem_cache_free+0xb7/0x1b0 [ 62.919898][ C0] kfree+0x6f/0xf0 [ 62.923644][ C0] hci_release_dev+0x12a3/0x13b0 [ 62.929139][ C0] bt_host_release+0x82/0x90 [ 62.933776][ C0] device_release+0xa4/0x1d0 [ 62.938586][ C0] kobject_put+0x19d/0x280 [ 62.943120][ C0] put_device+0x1f/0x30 [ 62.947303][ C0] hci_dev_cmd+0x279/0x740 [ 62.951922][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 62.956628][ C0] sock_do_ioctl+0x114/0x330 [ 62.961248][ C0] sock_ioctl+0x4ca/0x720 [ 62.965785][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 62.970523][ C0] __x64_sys_ioctl+0x7b/0x90 [ 62.975191][ C0] x64_sys_call+0x58b/0x9a0 [ 62.980154][ C0] do_syscall_64+0x4c/0xa0 [ 62.984602][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.990533][ C0] [ 62.992883][ C0] Last potentially related work creation: [ 62.998629][ C0] kasan_save_stack+0x3a/0x60 [ 63.003350][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 63.008757][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.014603][ C0] insert_work+0x51/0x300 [ 63.019045][ C0] __queue_work+0x9b1/0xd30 [ 63.023582][ C0] queue_work_on+0xde/0x150 [ 63.028113][ C0] __hci_cmd_sync_sk+0xa7f/0xd30 [ 63.033087][ C0] hci_cmd_sync_status+0x53/0x120 [ 63.038168][ C0] hci_dev_cmd+0x648/0x740 [ 63.042704][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 63.047414][ C0] sock_do_ioctl+0x114/0x330 [ 63.052037][ C0] sock_ioctl+0x4ca/0x720 [ 63.056397][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 63.061100][ C0] __x64_sys_ioctl+0x7b/0x90 [ 63.065723][ C0] x64_sys_call+0x58b/0x9a0 [ 63.070263][ C0] do_syscall_64+0x4c/0xa0 [ 63.074790][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.080716][ C0] [ 63.083083][ C0] Second to last potentially related work creation: [ 63.089768][ C0] kasan_save_stack+0x3a/0x60 [ 63.094497][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 63.099963][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.105809][ C0] insert_work+0x51/0x300 [ 63.110159][ C0] __queue_work+0x9b1/0xd30 [ 63.114690][ C0] queue_work_on+0xde/0x150 [ 63.119224][ C0] hci_cmd_timeout+0x191/0x200 [ 63.124020][ C0] process_one_work+0x71f/0xc40 [ 63.128891][ C0] worker_thread+0xa29/0x11e0 [ 63.133854][ C0] kthread+0x281/0x320 [ 63.137996][ C0] ret_from_fork+0x1f/0x30 [ 63.142528][ C0] [ 63.144867][ C0] The buggy address belongs to the object at ffff88811c79c000 [ 63.144867][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 63.159031][ C0] The buggy address is located 2560 bytes inside of [ 63.159031][ C0] 8192-byte region [ffff88811c79c000, ffff88811c79e000) [ 63.172543][ C0] [ 63.174915][ C0] The buggy address belongs to the physical page: [ 63.181342][ C0] page:ffffea000471e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c798 [ 63.191627][ C0] head:ffffea000471e600 order:3 compound_mapcount:0 compound_pincount:0 [ 63.199981][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 63.206193][ C0] raw: 4000000000010200 ffffea0004702800 dead000000000003 ffff888100043500 [ 63.214810][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 63.223457][ C0] page dumped because: kasan: bad access detected [ 63.229927][ C0] page_owner tracks the page as allocated [ 63.235694][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 534, tgid 530 (syz.3.58), ts 39090552802, free_ts 39072018171 [ 63.258044][ C0] post_alloc_hook+0x1f5/0x210 [ 63.262881][ C0] prep_new_page+0x1c/0x110 [ 63.267414][ C0] get_page_from_freelist+0x2d12/0x2d80 [ 63.272990][ C0] __alloc_pages+0x1d9/0x480 [ 63.277609][ C0] alloc_slab_page+0x6e/0xf0 [ 63.282417][ C0] new_slab+0x98/0x3d0 [ 63.286538][ C0] ___slab_alloc+0x6bd/0xb20 [ 63.291176][ C0] __slab_alloc+0x5e/0xa0 [ 63.295551][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 63.301053][ C0] __kmalloc+0xa1/0x1e0 [ 63.305242][ C0] bpf_test_init+0xce/0x160 [ 63.309781][ C0] bpf_prog_test_run_xdp+0x38c/0xed0 [ 63.315181][ C0] bpf_prog_test_run+0x3e3/0x640 [ 63.320143][ C0] __sys_bpf+0x5ee/0x850 [ 63.324406][ C0] __x64_sys_bpf+0x7c/0x90 [ 63.328868][ C0] x64_sys_call+0x488/0x9a0 [ 63.333411][ C0] page last free stack trace: [ 63.338107][ C0] free_unref_page_prepare+0x742/0x750 [ 63.343601][ C0] free_unref_page+0x95/0x540 [ 63.348503][ C0] __free_pages+0x67/0x100 [ 63.352944][ C0] __free_slab+0xca/0x1a0 [ 63.357422][ C0] __unfreeze_partials+0x160/0x190 [ 63.362653][ C0] put_cpu_partial+0xa9/0x100 [ 63.367540][ C0] __slab_free+0x1c4/0x280 [ 63.371994][ C0] ___cache_free+0xbf/0xd0 [ 63.376475][ C0] qlist_free_all+0xc6/0x140 [ 63.381091][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 63.386751][ C0] __kasan_slab_alloc+0x24/0x80 [ 63.391721][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 63.396947][ C0] kmem_cache_alloc+0x16e/0x330 [ 63.401829][ C0] getname_flags+0xb9/0x500 [ 63.406357][ C0] __se_sys_newfstatat+0x127/0x440 [ 63.411505][ C0] __x64_sys_newfstatat+0x9b/0xb0 [ 63.416646][ C0] [ 63.418986][ C0] Memory state around the buggy address: [ 63.424625][ C0] ffff88811c79c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.432694][ C0] ffff88811c79c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.440773][ C0] >ffff88811c79ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.448940][ C0] ^ [ 63.453037][ C0] ffff88811c79ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.461120][ C0] ffff88811c79cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.469199][ C0] ================================================================== [ 63.477300][ C0] Disabling lock debugging due to kernel taint [ 63.483637][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 63.495374][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.503794][ C0] CPU: 0 PID: 1047 Comm: syz.4.231 Tainted: G B syzkaller #0 [ 63.512694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.522771][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 63.528177][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 63.547805][ C0] RSP: 0000:ffffc90000a37bb0 EFLAGS: 00010046 [ 63.553900][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888137c39440 [ 63.561888][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 63.569875][ C0] RBP: ffffc90000a37c48 R08: 0000000000000007 R09: fffffffffffffffb [ 63.577894][ C0] R10: dffffc0000000000 R11: ffffed10238f3939 R12: dffffc0000000000 [ 63.585884][ C0] R13: 0000000000000000 R14: ffff88811c79c9c8 R15: 0000000000000008 [ 63.593897][ C0] FS: 00007f4dc3d836c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.602858][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.609458][ C0] CR2: 00007f43a9783ec0 CR3: 0000000132da7000 CR4: 00000000003506b0 [ 63.617457][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.625613][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.633689][ C0] Call Trace: [ 63.636989][ C0] [ 63.639936][ C0] delayed_work_timer_fn+0x61/0x80 [ 63.645067][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.650902][ C0] call_timer_fn+0x46/0x2a0 [ 63.655451][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.661280][ C0] __run_timers+0x689/0x9f0 [ 63.665833][ C0] ? calc_index+0x200/0x200 [ 63.670617][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 63.675841][ C0] run_timer_softirq+0x6a/0xf0 [ 63.680622][ C0] handle_softirqs+0x1d7/0x600 [ 63.685436][ C0] __irq_exit_rcu+0x52/0xf0 [ 63.689985][ C0] irq_exit_rcu+0x9/0x10 [ 63.694352][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 63.700111][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 63.706246][ C0] RIP: 0033:0x7f4dc2fba250 [ 63.710817][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d c2 1f 09 00 e8 e5 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 63.730441][ C0] RSP: 002b:00007f4dc3d82b38 EFLAGS: 00000246 [ 63.736546][ C0] RAX: 0000000000000000 RBX: 00007f4dc3216098 RCX: 00007f4dc2f9acb9 [ 63.744614][ C0] RDX: 00007f4dc3d82b40 RSI: 00007f4dc3d82c70 RDI: 0000000000000021 [ 63.752599][ C0] RBP: 00007f4dc3216090 R08: 0000000000000000 R09: 0000000000000000 [ 63.760842][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.768912][ C0] R13: 00007f4dc3216128 R14: 00007ffe43a8a840 R15: 00007ffe43a8a928 [ 63.776989][ C0] [ 63.780034][ C0] Modules linked in: [ 63.784079][ C0] ---[ end trace 0000000000000000 ]--- [ 63.789571][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 63.794894][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 63.814516][ C0] RSP: 0000:ffffc90000a37bb0 EFLAGS: 00010046 [ 63.820718][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888137c39440 [ 63.828963][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 63.837060][ C0] RBP: ffffc90000a37c48 R08: 0000000000000007 R09: fffffffffffffffb [ 63.845041][ C0] R10: dffffc0000000000 R11: ffffed10238f3939 R12: dffffc0000000000 [ 63.853222][ C0] R13: 0000000000000000 R14: ffff88811c79c9c8 R15: 0000000000000008 [ 63.861204][ C0] FS: 00007f4dc3d836c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.870163][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.876852][ C0] CR2: 00007f43a9783ec0 CR3: 0000000132da7000 CR4: 00000000003506b0 [ 63.884925][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.892909][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.900892][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 63.908755][ C0] Kernel Offset: disabled [ 63.913089][ C0] Rebooting in 86400 seconds..