last executing test programs: 6.590947808s ago: executing program 1 (id=288): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='a'], 0x0) 5.797308458s ago: executing program 2 (id=293): symlink(0x0, &(0x7f0000002680)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl$Q_QUOTAOFF(0x2, 0x0, 0x0, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) io_uring_setup(0x7362, &(0x7f0000000180)={0x0, 0x3859, 0x2, 0x1, 0x3d5}) socket$nl_route(0x10, 0x3, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x119) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 5.663307641s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x118000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='lz4', 0x3) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, 0x0, 0x0) read(r4, &(0x7f0000000780)=""/64, 0x40) write(r5, 0x0, 0x0) write(r5, 0x0, 0x0) read(r4, &(0x7f0000000800)=""/64, 0x40) write(r5, &(0x7f0000000840)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3e) read(r4, &(0x7f0000000880)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) mlock(&(0x7f0000000000/0x900000)=nil, 0x900000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x10002, 0x2, 0x1ffc, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x2000, r2}) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 4.786044083s ago: executing program 2 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 4.240673156s ago: executing program 1 (id=304): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000010c0)) 4.207116207s ago: executing program 1 (id=306): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000019ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019b00)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000019b80)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019c80), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000019cc0)=0x80000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000019d00), 0x10106, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019d40), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000019d80)='devices.deny\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000019dc0)) sendmsg(0xffffffffffffffff, &(0x7f0000019e00)={0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioprio_set$uid(0x3, r4, 0x4000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYBLOB="1e34977fb940b621f1027adf57815383e481095721051406ca38cc662b86ba6a3218c1af2501108307056ac650593219beddc8e575ecc1ba409ba2e2ee38d0b4fc1535d143e80f8fac173535c39b4c13b1ea3d7217032f472201d57abc4dd43e31ec8b4a229a5e7dae5e74db003f3f35d89748bdd4c53d5df2e3889c34e80ababf474b4ac2b8e0d67208593f082a6b2007cef12279cc61c8f54c5ff5082c52ca6d64f54c81b11273c29611d9f8b33586a826d81aaae74455b7a924637f39b9169a7de41cfdfcc10305503807c374fc63bf1019604d984d165e029387389bde59d9de895bf11fe476fc0831", @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) 4.205623757s ago: executing program 3 (id=308): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="e1d6bfaf3f3f3ac2fc", 0x9}], 0x1}}], 0x2, 0x4004) 4.095676489s ago: executing program 3 (id=309): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$DM_GET_TARGET_VERSION(r0, 0xc138fd11, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9000, 0x0, 0x0, {0x0, 'verity\x00'}}) 4.095560449s ago: executing program 3 (id=310): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x2, 0xfbea, 'snmp\x00', {0x7f}}}}, {{@ip={@loopback, @private=0xa010100, 0xff, 0x0, 'ip6tnl0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x73, 0x5, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 3.871188275s ago: executing program 2 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x118000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='lz4', 0x3) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, 0x0, 0x0) read(r4, &(0x7f0000000780)=""/64, 0x40) write(r5, 0x0, 0x0) write(r5, 0x0, 0x0) read(r4, &(0x7f0000000800)=""/64, 0x40) write(r5, &(0x7f0000000840)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3e) read(r4, &(0x7f0000000880)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) mlock(&(0x7f0000000000/0x900000)=nil, 0x900000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x10002, 0x2, 0x1ffc, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x2000, r2}) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 3.851036505s ago: executing program 3 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 2.998102096s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) unshare(0x2020600) mount$incfs(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xc002, 0x0) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 2.931730118s ago: executing program 3 (id=317): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000019ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019b00)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000019b80)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019c80), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000019cc0)=0x80000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000019d00), 0x10106, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019d40), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000019d80)='devices.deny\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000019dc0)) sendmsg(0xffffffffffffffff, &(0x7f0000019e00)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000019e40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) ioprio_set$uid(0x3, 0x0, 0x4000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYBLOB="1e34977fb940b621f1027adf57815383e481095721051406ca38cc662b86ba6a3218c1af2501108307056ac650593219beddc8e575ecc1ba409ba2e2ee38d0b4fc1535d143e80f8fac173535c39b4c13b1ea3d7217032f472201d57abc4dd43e31ec8b4a229a5e7dae5e74db003f3f35d89748bdd4c53d5df2e3889c34e80ababf474b4ac2b8e0d67208593f082a6b2007cef12279cc61c8f54c5ff5082c52ca6d64f54c81b11273c29611d9f8b33586a826d81aaae74455b7a924637f39b9169a7de41cfdfcc10305503807c374fc63bf1019604d984d165e029387389bde59d9de895bf11fe476fc0831", @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) 2.908824788s ago: executing program 4 (id=318): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 2.888328418s ago: executing program 0 (id=319): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x40242, 0x0, 0x22}, 0x18) 2.83188902s ago: executing program 0 (id=320): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000280)='./sys\x00', 0x200c000, &(0x7f0000000240)={[{@nodots}, {@fat=@errors_continue}]}, 0x1, 0x28d, &(0x7f0000000b00)="$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") 2.83162214s ago: executing program 4 (id=321): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000005c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000000640), 0x40000000000017d, 0x888) 2.83155536s ago: executing program 0 (id=322): pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, 0x0, 0x0) read(r0, &(0x7f0000000780)=""/64, 0x40) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) read(r0, &(0x7f0000000800)=""/64, 0x40) write(r1, &(0x7f0000000840)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3e) read(r0, &(0x7f0000000880)=""/64, 0x40) 2.145830577s ago: executing program 1 (id=323): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) unshare(0x2020600) mount$incfs(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xc002, 0x0) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 1.962407072s ago: executing program 4 (id=324): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x6, 0x5, 0xc863}) 1.962031712s ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) unshare(0x2020600) mount$incfs(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xc002, 0x0) 1.951673871s ago: executing program 3 (id=326): socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000100), 0x2, 0x790, &(0x7f0000001100)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0xc0342, 0x168) pwrite64(r2, &(0x7f0000001900), 0x0, 0xfecc) creat(&(0x7f0000001940)='./file1\x00', 0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x80342, 0x168) write$UHID_INPUT(r3, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000c50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) 1.933989872s ago: executing program 0 (id=327): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.933453542s ago: executing program 0 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 1.919914553s ago: executing program 2 (id=329): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) unshare(0x2020600) mount$incfs(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xc002, 0x0) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 68.401798ms ago: executing program 2 (id=330): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000005c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000000640), 0x40000000000017d, 0x888) 68.060778ms ago: executing program 4 (id=331): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) 28.226259ms ago: executing program 0 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}}, 0x20000808) 26.041468ms ago: executing program 1 (id=333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000340)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0xfffffffffffffee7, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) 0s ago: executing program 4 (id=334): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000005c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000000640), 0x40000000000017d, 0x888) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.519370][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 14.519384][ T28] audit: type=1400 audit(1792617226.441:59): avc: denied { transition } for pid=226 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.523771][ T28] audit: type=1400 audit(1792617226.441:60): avc: denied { noatsecure } for pid=226 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.526549][ T28] audit: type=1400 audit(1792617226.441:61): avc: denied { write } for pid=226 comm="sh" path="pipe:[13815]" dev="pipefs" ino=13815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.529690][ T28] audit: type=1400 audit(1792617226.441:62): avc: denied { rlimitinh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.532610][ T28] audit: type=1400 audit(1792617226.441:63): avc: denied { siginh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.441465][ T234] scp (234) used greatest stack depth: 22216 bytes left Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 21.738074][ T28] audit: type=1400 audit(1792617233.661:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.739100][ T280] cgroup: Unknown subsys name 'net' [ 21.760801][ T28] audit: type=1400 audit(1792617233.661:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.788068][ T28] audit: type=1400 audit(1792617233.701:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.788225][ T280] cgroup: Unknown subsys name 'devices' [ 21.933017][ T280] cgroup: Unknown subsys name 'hugetlb' [ 21.938615][ T280] cgroup: Unknown subsys name 'rlimit' [ 22.040311][ T28] audit: type=1400 audit(1792617233.961:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.063572][ T28] audit: type=1400 audit(1792617233.961:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.088438][ T28] audit: type=1400 audit(1792617233.961:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.097018][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.120771][ T28] audit: type=1400 audit(1792617234.041:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.143270][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.146183][ T28] audit: type=1400 audit(1792617234.041:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.180569][ T28] audit: type=1400 audit(1792617234.071:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.206198][ T28] audit: type=1400 audit(1792617234.071:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.059415][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.066501][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.073899][ T288] device bridge_slave_0 entered promiscuous mode [ 23.091866][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.098893][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.106275][ T288] device bridge_slave_1 entered promiscuous mode [ 23.186958][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.194036][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.201443][ T289] device bridge_slave_0 entered promiscuous mode [ 23.208038][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.215156][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.222944][ T290] device bridge_slave_0 entered promiscuous mode [ 23.232602][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.239623][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.246915][ T290] device bridge_slave_1 entered promiscuous mode [ 23.266866][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.273940][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.281373][ T289] device bridge_slave_1 entered promiscuous mode [ 23.312374][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319426][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.326907][ T291] device bridge_slave_0 entered promiscuous mode [ 23.351501][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.358550][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.366025][ T291] device bridge_slave_1 entered promiscuous mode [ 23.426556][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433649][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.441151][ T292] device bridge_slave_0 entered promiscuous mode [ 23.455394][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.462813][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.470101][ T292] device bridge_slave_1 entered promiscuous mode [ 23.518319][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.525388][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.532700][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.539739][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.568404][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.575457][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.582734][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.589758][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.648144][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.655226][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.662496][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.669526][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.679269][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.686506][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.693871][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.701233][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.708393][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.715791][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.724465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.731988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.764261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.772485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.781314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.789420][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.796475][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.805512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.813799][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820835][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.836213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.844193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.852297][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.859294][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.866653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.874758][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.881801][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.899902][ T289] device veth0_vlan entered promiscuous mode [ 23.911434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.919447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.927729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.945069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.953965][ T289] device veth1_macvtap entered promiscuous mode [ 23.970113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.978889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.987548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.995976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.024441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.032126][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 24.042200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.059258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.067625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.076516][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.083665][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.091743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.099257][ T310] loop3: detected capacity change from 0 to 128 [ 24.099272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.113609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.130947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.139347][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.146397][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.154440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.183004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.191732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.199952][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.207009][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.215808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.225054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.233226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.241597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.249573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.257410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.274350][ T288] device veth0_vlan entered promiscuous mode [ 24.292036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.300550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.310237][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.317292][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.326393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.334488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.342632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.351421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.359867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.368103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.376096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.383518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.390846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.398402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.409197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.417325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.503619][ T314] xt_TCPMSS: Only works on TCP SYN packets [ 24.559612][ T290] device veth0_vlan entered promiscuous mode [ 25.337099][ T292] device veth0_vlan entered promiscuous mode [ 25.350316][ T292] device veth1_macvtap entered promiscuous mode [ 25.392703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.401124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.409108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.417188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.425648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.433940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.442187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.591637][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.598804][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.607717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.617186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.625470][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.632538][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.640217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.648419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.656550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.664601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.672639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.680925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.689317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.697214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.705251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.713514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.721885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.730088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.738503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.746256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.753707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.766737][ T291] device veth0_vlan entered promiscuous mode [ 25.773017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.780932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.797938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.805399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.814789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.822993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.836061][ T290] device veth1_macvtap entered promiscuous mode [ 25.856341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.867047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.879371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.895739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.904677][ T322] xt_NFQUEUE: number of total queues is 0 [ 25.908202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.921479][ T322] loop4: detected capacity change from 0 to 512 [ 25.930726][ T291] device veth1_macvtap entered promiscuous mode [ 25.935377][ T322] journal_path: Lookup failure for './file0' [ 25.944210][ T322] EXT4-fs: error: could not find journal device path [ 25.952547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.960738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.969168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.977263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.991363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.005913][ T288] device veth1_macvtap entered promiscuous mode [ 26.022877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.030493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.038848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.047831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.056260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.076309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.087340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.106876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.120464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.229691][ T329] futex_wake_op: syz.1.2 tries to shift op by 144; fix this program [ 26.258637][ T329] loop1: detected capacity change from 0 to 256 [ 26.332969][ T329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 26.804764][ T328] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.820793][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 26.820807][ T28] audit: type=1400 audit(1792617238.741:125): avc: denied { create } for pid=336 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.885752][ T28] audit: type=1400 audit(1792617238.781:126): avc: denied { listen } for pid=336 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 26.899398][ T327] Zero length message leads to an empty skb [ 27.676067][ T28] audit: type=1400 audit(1792617238.811:127): avc: denied { write } for pid=326 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.699880][ T28] audit: type=1400 audit(1792617238.811:128): avc: denied { read } for pid=326 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.731422][ T28] audit: type=1400 audit(1792617239.561:129): avc: denied { mmap_zero } for pid=336 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 27.831869][ T347] loop0: detected capacity change from 0 to 512 [ 28.347334][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 28.357586][ T351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 28.423750][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.431018][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.137230][ T347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.151058][ T347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.169832][ T351] syz.1.8 (351) used greatest stack depth: 22088 bytes left [ 29.189761][ T28] audit: type=1400 audit(1792617239.581:130): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.442721][ T347] EXT4-fs: error -4 creating inode table initialization thread [ 30.449730][ T28] audit: type=1400 audit(1792617239.591:131): avc: denied { read } for pid=332 comm="syz.0.1" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.450382][ T347] EXT4-fs (loop0): mount failed [ 30.500386][ T28] audit: type=1400 audit(1792617239.591:132): avc: denied { open } for pid=332 comm="syz.0.1" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.541958][ T368] loop2: detected capacity change from 0 to 512 [ 30.615882][ T28] audit: type=1400 audit(1792617239.611:133): avc: denied { ioctl } for pid=326 comm="syz.2.3" path="socket:[15671]" dev="sockfs" ino=15671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.624158][ T371] loop1: detected capacity change from 0 to 512 [ 30.641554][ T28] audit: type=1400 audit(1792617239.651:134): avc: denied { write } for pid=344 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.702636][ T374] incfs: Backing dir is not set, filesystem can't be mounted. [ 30.710351][ T374] incfs: mount failed -2 [ 30.781987][ T368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.806776][ T368] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.906556][ T371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 30.977449][ T371] System zones: 1-12 [ 31.021816][ T371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.15: missing EA_INODE flag [ 31.161285][ T383] loop3: detected capacity change from 0 to 512 [ 32.939902][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 32.939950][ T28] audit: type=1400 audit(1792617244.851:156): avc: denied { setattr } for pid=366 comm="syz.2.13" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.979362][ T371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.15: error while reading EA inode 12 err=-117 [ 33.281826][ T383] EXT4-fs: Ignoring removed nobh option [ 33.281828][ T371] EXT4-fs (loop1): 1 orphan inode deleted [ 33.281850][ T371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.344895][ T383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.16: invalid indirect mapped block 256 (level 2) [ 33.362352][ T383] EXT4-fs (loop3): 2 truncates cleaned up [ 33.369002][ T291] EXT4-fs (loop2): unmounting filesystem. [ 33.375064][ T383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.292232][ T28] audit: type=1400 audit(1792617248.191:157): avc: denied { read } for pid=392 comm="syz.0.19" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.174479][ T290] EXT4-fs (loop1): unmounting filesystem. [ 37.184492][ T378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 37.244832][ T403] device gre1 entered promiscuous mode [ 37.465523][ T403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 38.152389][ T403] syz.4.17 (403) used greatest stack depth: 21064 bytes left [ 38.208671][ T28] audit: type=1400 audit(1792617248.191:158): avc: denied { open } for pid=392 comm="syz.0.19" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.216113][ T413] loop1: detected capacity change from 0 to 4096 [ 38.241692][ T28] audit: type=1400 audit(1792617248.191:159): avc: denied { ioctl } for pid=392 comm="syz.0.19" path="/dev/ashmem" dev="devtmpfs" ino=269 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.391280][ T419] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 38.399375][ T419] device gretap1 entered promiscuous mode [ 40.550167][ T414] input: syz0 as /devices/virtual/input/input4 [ 40.559369][ T420] futex_wake_op: syz.4.22 tries to shift op by 144; fix this program [ 41.009893][ T422] netlink: 140 bytes leftover after parsing attributes in process `syz.4.22'. [ 41.027473][ T289] EXT4-fs (loop3): unmounting filesystem. [ 41.073831][ T28] audit: type=1400 audit(1792617248.191:160): avc: denied { map } for pid=392 comm="syz.0.19" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.133418][ T427] loop0: detected capacity change from 0 to 512 [ 41.138935][ T28] audit: type=1400 audit(1792617248.191:161): avc: denied { write } for pid=392 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.158916][ T28] audit: type=1400 audit(1792617249.511:162): avc: denied { create } for pid=380 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.378835][ T435] loop2: detected capacity change from 0 to 512 [ 42.725496][ T28] audit: type=1400 audit(1792617252.471:163): avc: denied { read write } for pid=407 comm="syz.0.21" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.730881][ T311] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.783234][ T6] wacom 0003:056A:0042.0001: Unknown device_type for 'syz0'. Assuming pen. [ 42.792418][ T443] loop2: detected capacity change from 0 to 2048 [ 42.799851][ T6] wacom 0003:056A:0042.0001: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 42.811608][ T28] audit: type=1400 audit(1792617252.471:164): avc: denied { open } for pid=407 comm="syz.0.21" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.812150][ T6] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0001/input/input6 [ 42.836083][ T28] audit: type=1400 audit(1792617252.471:165): avc: denied { ioctl } for pid=407 comm="syz.0.21" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.870179][ T28] audit: type=1400 audit(1792617252.821:166): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.894315][ T28] audit: type=1400 audit(1792617252.961:167): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.959362][ T450] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 43.006500][ T455] netlink: 100 bytes leftover after parsing attributes in process `syz.4.27'. [ 43.028363][ T443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.071173][ T450] netlink: 17 bytes leftover after parsing attributes in process `syz.1.29'. [ 43.095036][ T453] loop0: detected capacity change from 0 to 512 [ 43.133506][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.140743][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.168966][ T460] fido_id[460]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.232979][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.257733][ T463] device veth0_vlan left promiscuous mode [ 43.266838][ T463] device veth0_vlan entered promiscuous mode [ 43.274518][ T463] device veth1_macvtap left promiscuous mode [ 43.281979][ T463] device veth1_macvtap entered promiscuous mode [ 43.288850][ T463] device gretap1 left promiscuous mode [ 43.334763][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 43.343320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.350849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.359436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.369527][ T440] syz.1.29 (440) used greatest stack depth: 20800 bytes left [ 43.372758][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.383963][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.391850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.400205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.408864][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.415930][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.423452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.432322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.440609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.449962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.463033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.475839][ T468] loop1: detected capacity change from 0 to 512 [ 43.500855][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 43.500867][ T28] audit: type=1326 audit(1792617255.421:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.504932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.507563][ T28] audit: type=1326 audit(1792617255.421:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.547170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.572772][ T28] audit: type=1326 audit(1792617255.431:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.573200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.597703][ T28] audit: type=1326 audit(1792617255.431:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.605774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.630896][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 43.644819][ T28] audit: type=1326 audit(1792617255.431:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.673332][ T28] audit: type=1326 audit(1792617255.431:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 43.734339][ T472] loop0: detected capacity change from 0 to 128 [ 43.746394][ T308] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 43.860348][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.893780][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.907493][ T468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.933471][ T468] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.951366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.970573][ T308] usb 4-1: Product: syz [ 43.993138][ T308] usb 4-1: Manufacturer: syz [ 44.005789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.015081][ T28] audit: type=1326 audit(1792617255.431:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 44.054075][ T308] usb 4-1: SerialNumber: syz [ 44.084559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.145706][ T308] usb 4-1: config 0 descriptor?? [ 44.454762][ T28] audit: type=1326 audit(1792617255.461:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 44.466200][ T308] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 44.488284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.489169][ T308] usb 4-1: Detected FT-X [ 44.497695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.500477][ T468] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.32: corrupted xattr block 33 [ 44.508692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.520124][ T28] audit: type=1326 audit(1792617255.461:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 44.528158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.552705][ T468] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 44.569847][ T28] audit: type=1326 audit(1792617255.491:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=465 comm="syz.0.31" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f618299f559 code=0x7ffc0000 [ 44.643024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.664215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.692030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.715002][ T481] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #12: comm syz.1.32: corrupted xattr block 6 [ 44.738308][ T308] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 44.762387][ T308] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 44.781946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.808136][ T308] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 45.084179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.099326][ T308] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.107838][ T481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 45.117353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.125455][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.147541][ T308] usb 4-1: USB disconnect, device number 2 [ 45.157765][ T481] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #12: comm syz.1.32: corrupted xattr block 6 [ 45.174073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.184148][ T308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.194948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.206031][ T308] ftdi_sio 4-1:0.0: device disconnected [ 45.227132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.235410][ T481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 45.245865][ T481] EXT4-fs error (device loop1): ext4_xattr_block_list:713: inode #12: comm syz.1.32: corrupted xattr block 6 [ 45.288039][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 45.318263][ T483] loop0: detected capacity change from 0 to 512 [ 45.340447][ T468] device veth0_vlan left promiscuous mode [ 45.347802][ T468] device veth0_vlan entered promiscuous mode [ 45.355318][ T468] device veth1_macvtap left promiscuous mode [ 45.362522][ T468] device veth1_macvtap entered promiscuous mode [ 45.381050][ T483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 45.389269][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.389464][ T483] System zones: 1-12 [ 45.419936][ T483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.34: missing EA_INODE flag [ 45.432254][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.441650][ T486] overlayfs: missing 'lowerdir' [ 45.446767][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.454934][ T483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.34: error while reading EA inode 12 err=-117 [ 45.466437][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.474051][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.474347][ T483] EXT4-fs (loop0): 1 orphan inode deleted [ 45.482760][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.487933][ T483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.496271][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.512821][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.519871][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.528226][ T290] EXT4-fs (loop1): unmounting filesystem. [ 45.539129][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.550264][ T488] loop1: detected capacity change from 0 to 512 [ 45.557630][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.569511][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.579717][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.588228][ T488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.596272][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.606421][ T488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.616966][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.625237][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.658167][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.661723][ T488] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.36: bad orphan inode 131083 [ 45.666487][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.676345][ T488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.688777][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.701175][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.709610][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.534181][ T463] syz.2.30 (463) used greatest stack depth: 20320 bytes left [ 47.668116][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.725390][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.749738][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.760072][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.775582][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.784010][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.799252][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.808411][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.816933][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.825713][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.834104][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.841863][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.849404][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.903803][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.912125][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.920037][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.930167][ T493] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 48.004712][ T506] overlayfs: failed to clone upperpath [ 48.062917][ T507] overlayfs: failed to clone upperpath [ 48.315364][ T509] loop3: detected capacity change from 0 to 256 [ 48.361828][ T288] EXT4-fs (loop0): unmounting filesystem. [ 48.452225][ T456] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.526489][ T290] EXT4-fs (loop1): unmounting filesystem. [ 50.165606][ T28] kauditd_printk_skb: 226 callbacks suppressed [ 50.165619][ T28] audit: type=1400 audit(1792617262.091:426): avc: denied { read } for pid=512 comm="syz.0.40" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.294129][ T513] loop0: detected capacity change from 0 to 512 [ 50.338759][ T504] loop2: detected capacity change from 0 to 8192 [ 50.790267][ T28] audit: type=1400 audit(1792617262.221:427): avc: denied { open } for pid=512 comm="syz.0.40" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.859885][ T504] ======================================================= [ 50.859885][ T504] WARNING: The mand mount option has been deprecated and [ 50.859885][ T504] and is ignored by this kernel. Remove the mand [ 50.859885][ T504] option from the mount to silence this warning. [ 50.859885][ T504] ======================================================= [ 50.901206][ T513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.921382][ T513] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.931731][ T28] audit: type=1400 audit(1792617262.701:428): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.949741][ T525] loop1: detected capacity change from 0 to 512 [ 50.963020][ T525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.204234][ T525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.304830][ T525] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.333838][ T535] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 51.468471][ T28] audit: type=1400 audit(1792617263.391:429): avc: denied { write } for pid=534 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.598928][ T545] loop2: detected capacity change from 0 to 1024 [ 52.615052][ T545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.661756][ T290] EXT4-fs (loop1): unmounting filesystem. [ 52.681845][ T545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.749816][ T28] audit: type=1400 audit(1792617264.671:430): avc: denied { create } for pid=534 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.769398][ T28] audit: type=1400 audit(1792617264.701:431): avc: denied { setopt } for pid=534 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.272365][ T554] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 53.468931][ T556] loop3: detected capacity change from 0 to 512 [ 55.457803][ T558] input: syz0 as /devices/virtual/input/input9 [ 55.507124][ T558] loop1: detected capacity change from 0 to 512 [ 55.687988][ T291] EXT4-fs (loop2): unmounting filesystem. [ 55.708391][ T554] syz.3.47 (554) used greatest stack depth: 19752 bytes left [ 55.821020][ T28] audit: type=1400 audit(1792617267.671:432): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.859822][ T288] EXT4-fs (loop0): unmounting filesystem. [ 55.873897][ T562] loop3: detected capacity change from 0 to 512 [ 55.950935][ T571] ip_tables: iptables: counters copy to user failed while replacing table [ 56.310714][ T576] incfs: Backing dir is not set, filesystem can't be mounted. [ 56.318717][ T576] incfs: mount failed -2 [ 59.020644][ T573] ip_tables: iptables: counters copy to user failed while replacing table [ 59.076253][ T28] audit: type=1400 audit(1792617268.231:433): avc: denied { mounton } for pid=561 comm="syz.3.50" path="/11/file0/bus" dev="loop3" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 59.099162][ T575] futex_wake_op: syz.1.53 tries to shift op by 144; fix this program [ 59.110242][ T575] loop1: detected capacity change from 0 to 256 [ 59.129143][ T575] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 59.191050][ T575] netlink: 140 bytes leftover after parsing attributes in process `syz.1.53'. [ 59.281662][ T588] loop0: detected capacity change from 0 to 512 [ 59.298082][ T584] loop3: detected capacity change from 0 to 8192 [ 59.374513][ T589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.614140][ T588] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 59.631082][ T588] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 59.704119][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 59.746315][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 60.040831][ T601] overlayfs: unrecognized mount option "measure" or missing value [ 60.273835][ T603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 60.810100][ T588] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.56: iget: bad i_size value: 12154757448730 [ 62.018195][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.025440][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.167950][ T588] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.56: couldn't read orphan inode 13 (err -117) [ 62.189722][ T28] audit: type=1400 audit(1792617274.111:434): avc: denied { create } for pid=607 comm="syz.4.60" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.221055][ T588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.332832][ T612] loop1: detected capacity change from 0 to 512 [ 62.496221][ T288] EXT4-fs (loop0): unmounting filesystem. [ 62.532098][ T28] audit: type=1400 audit(1792617274.141:435): avc: denied { read } for pid=607 comm="syz.4.60" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.617402][ T612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.683108][ T612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.59'. [ 63.280063][ T621] input: syz0 as /devices/virtual/input/input10 [ 63.362748][ T621] loop2: detected capacity change from 0 to 512 [ 63.399679][ T290] EXT4-fs (loop1): unmounting filesystem. [ 63.563388][ T28] audit: type=1400 audit(1792617274.141:436): avc: denied { open } for pid=607 comm="syz.4.60" path="/15/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.585882][ T28] audit: type=1400 audit(1792617274.141:437): avc: denied { ioctl } for pid=607 comm="syz.4.60" path="/15/file0" dev="tmpfs" ino=111 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.617897][ T28] audit: type=1400 audit(1792617274.271:438): avc: denied { read write } for pid=583 comm="syz.3.54" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.679618][ T28] audit: type=1400 audit(1792617274.281:439): avc: denied { open } for pid=583 comm="syz.3.54" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.698667][ T630] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.748206][ T28] audit: type=1400 audit(1792617274.511:440): avc: denied { block_suspend } for pid=607 comm="syz.4.60" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.749014][ T632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.778533][ T28] audit: type=1400 audit(1792617274.581:441): avc: denied { create } for pid=606 comm="syz.1.59" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.842362][ T632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 64.434543][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.441756][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.512119][ T28] audit: type=1400 audit(1792617274.611:442): avc: denied { nlmsg_write } for pid=606 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.586708][ T637] loop2: detected capacity change from 0 to 256 [ 64.594708][ T637] FAT-fs (loop2): Unrecognized mount option "noJots" or missing value [ 65.494543][ T642] ip_tables: iptables: counters copy to user failed while replacing table [ 65.683728][ T645] loop3: detected capacity change from 0 to 512 [ 65.690827][ T645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.716928][ T645] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.65: invalid indirect mapped block 32768 (level 2) [ 65.732015][ T645] EXT4-fs (loop3): 1 orphan inode deleted [ 65.737758][ T645] EXT4-fs (loop3): 1 truncate cleaned up [ 65.743426][ T645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.756839][ T645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.65'. [ 65.765690][ T645] tc_dump_action: action bad kind [ 65.774592][ T28] audit: type=1400 audit(1792617277.701:443): avc: denied { ioctl } for pid=635 comm="syz.3.65" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.777481][ T650] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.875759][ T656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 66.082029][ T662] incfs: Backing dir is not set, filesystem can't be mounted. [ 66.089692][ T662] incfs: mount failed -2 [ 66.998940][ T289] EXT4-fs (loop3): unmounting filesystem. [ 67.065050][ T675] Illegal XDP return value 2530636857 on prog (id 8) dev N/A, expect packet loss! [ 67.342286][ T678] ip_tables: iptables: counters copy to user failed while replacing table [ 67.371452][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 67.371475][ T28] audit: type=1400 audit(1792617279.301:448): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.525022][ T685] ip_tables: iptables: counters copy to user failed while replacing table [ 68.358543][ T694] ip_tables: iptables: counters copy to user failed while replacing table [ 69.070104][ T700] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.316381][ T710] binder: 697:710 ioctl 4018620d 0 returned -22 [ 69.336888][ T710] binder: 697:710 ioctl c0306201 0 returned -14 [ 69.455492][ T28] audit: type=1400 audit(1792617281.231:449): avc: denied { map } for pid=697 comm="syz.2.80" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.770000][ T716] incfs: Backing dir is not set, filesystem can't be mounted. [ 69.777649][ T716] incfs: mount failed -2 [ 69.785913][ T28] audit: type=1400 audit(1792617281.681:450): avc: denied { create } for pid=706 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.714009][ T720] loop2: detected capacity change from 0 to 512 [ 70.938890][ T724] incfs: Backing dir is not set, filesystem can't be mounted. [ 70.946533][ T724] incfs: mount failed -2 [ 71.851003][ C0] sched: RT throttling activated [ 71.852660][ T28] audit: type=1400 audit(1792617281.691:451): avc: denied { setopt } for pid=706 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.063078][ T751] ip_tables: iptables: counters copy to user failed while replacing table [ 73.136232][ T754] ip_tables: iptables: counters copy to user failed while replacing table [ 73.254143][ T755] ip_tables: iptables: counters copy to user failed while replacing table [ 73.636434][ T739] mmap: syz.2.88 (739) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.254630][ T757] tipc: Started in network mode [ 74.259651][ T757] tipc: Node identity 7f000001, cluster identity 4711 [ 74.266848][ T757] tipc: New replicast peer: 127.0.0.1 [ 74.272684][ T757] tipc: Enabled bearer , priority 10 [ 74.694389][ T28] audit: type=1400 audit(1792617285.981:452): avc: denied { create } for pid=733 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.719446][ T28] audit: type=1400 audit(1792617286.001:453): avc: denied { ioctl } for pid=733 comm="syz.0.89" path="socket:[17457]" dev="sockfs" ino=17457 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.752599][ T762] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.767313][ T765] loop2: detected capacity change from 0 to 512 [ 74.914004][ T772] ip_tables: iptables: counters copy to user failed while replacing table [ 75.498171][ T774] incfs: Backing dir is not set, filesystem can't be mounted. [ 75.505809][ T774] incfs: mount failed -2 [ 78.255283][ T423] tipc: Node number set to 2130706433 [ 78.363822][ T781] loop2: detected capacity change from 0 to 512 [ 78.521431][ T785] loop3: detected capacity change from 0 to 512 [ 78.729380][ T781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 78.766167][ T781] System zones: 1-12 [ 78.943887][ T798] incfs: Backing dir is not set, filesystem can't be mounted. [ 78.951819][ T798] incfs: mount failed -2 [ 79.857113][ T781] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.100: missing EA_INODE flag [ 80.192422][ T802] loop1: detected capacity change from 0 to 1024 [ 80.211039][ T802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.220311][ T802] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 80.304174][ T802] input: syz0 as /devices/virtual/input/input11 [ 80.310536][ T802] input: failed to attach handler leds to device input11, error: -6 [ 80.785427][ T804] loop3: detected capacity change from 0 to 512 [ 80.819121][ T804] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.832361][ T804] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #11: comm syz.3.105: casefold flag without casefold feature [ 80.846281][ T804] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.105: couldn't read orphan inode 11 (err -117) [ 80.860745][ T781] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.100: error while reading EA inode 12 err=-117 [ 80.869020][ T804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.881825][ T781] EXT4-fs (loop2): 1 orphan inode deleted [ 80.887625][ T781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.969072][ T809] ip_tables: iptables: counters copy to user failed while replacing table [ 83.749278][ T816] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 85.758720][ T813] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 85.831306][ T28] audit: type=1400 audit(1792617292.961:454): avc: denied { ioctl } for pid=810 comm="syz.0.107" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17067 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.861095][ T796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 85.869759][ T28] audit: type=1400 audit(1792617295.591:455): avc: denied { mount } for pid=803 comm="syz.3.105" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.877089][ T291] EXT4-fs (loop2): unmounting filesystem. [ 85.905482][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 85.915709][ T289] EXT4-fs (loop3): unmounting filesystem. [ 86.678568][ T830] loop3: detected capacity change from 0 to 1024 [ 86.705937][ T830] EXT4-fs: Ignoring removed oldalloc option [ 86.712000][ T830] EXT4-fs: Ignoring removed oldalloc option [ 88.584501][ T833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=833 comm=syz.0.112 [ 88.598688][ T833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 92.003973][ T837] ip_tables: iptables: counters copy to user failed while replacing table [ 92.166550][ T836] ip_tables: iptables: counters copy to user failed while replacing table [ 92.239396][ T832] futex_wake_op: syz.4.111 tries to shift op by 144; fix this program [ 92.239862][ T28] audit: type=1400 audit(1792617300.881:456): avc: denied { write } for pid=824 comm="syz.0.112" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.270741][ T830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.282177][ T28] audit: type=1400 audit(1792617302.541:457): avc: denied { setopt } for pid=825 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.302572][ T830] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 92.386615][ T849] loop2: detected capacity change from 0 to 1024 [ 92.415156][ T849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.471338][ T855] ip_tables: iptables: counters copy to user failed while replacing table [ 92.563105][ T847] loop3: detected capacity change from 0 to 512 [ 92.721183][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.843212][ T861] Bluetooth: hci0: command 0x1003 tx timeout [ 94.849282][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.876420][ T291] EXT4-fs (loop2): unmounting filesystem. [ 95.938808][ T872] 9pnet_fd: Insufficient options for proto=fd [ 96.004504][ T876] device lo entered promiscuous mode [ 96.011052][ T28] audit: type=1400 audit(1792617307.851:458): avc: denied { map } for pid=867 comm="syz.3.120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.043805][ T871] ip_tables: iptables: counters copy to user failed while replacing table [ 96.087928][ T876] device tunl0 entered promiscuous mode [ 96.094888][ T28] audit: type=1400 audit(1792617307.851:459): avc: denied { read write } for pid=867 comm="syz.3.120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.162965][ T876] device gre0 entered promiscuous mode [ 96.175879][ T28] audit: type=1400 audit(1792617307.871:460): avc: denied { map } for pid=869 comm="syz.2.119" path="socket:[17160]" dev="sockfs" ino=17160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.236755][ T881] loop1: detected capacity change from 0 to 512 [ 96.243119][ T876] device gretap0 entered promiscuous mode [ 96.264403][ T876] device erspan0 entered promiscuous mode [ 98.458868][ T28] audit: type=1326 audit(1792617308.041:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.2.119" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c899f559 code=0x7ffc0000 [ 99.648315][ T891] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 99.658362][ T891] FAT-fs (loop1): Filesystem has been set read-only [ 101.101089][ T876] device ip_vti0 entered promiscuous mode [ 101.140195][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.156041][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.163126][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.176858][ T28] audit: type=1326 audit(1792617308.051:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.2.119" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72c899f559 code=0x7ffc0000 [ 101.411654][ T902] ip_tables: iptables: counters copy to user failed while replacing table [ 101.651800][ T28] audit: type=1326 audit(1792617308.051:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.2.119" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c899f559 code=0x7ffc0000 [ 101.670121][ T895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 101.676830][ T28] audit: type=1326 audit(1792617308.051:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.2.119" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c899f559 code=0x7ffc0000 [ 101.709678][ T28] audit: type=1400 audit(1792617308.491:465): avc: denied { create } for pid=878 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.751732][ T28] audit: type=1400 audit(1792617308.531:466): avc: denied { accept } for pid=878 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.782184][ T28] audit: type=1400 audit(1792617308.581:467): avc: denied { create } for pid=878 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 101.801779][ T28] audit: type=1400 audit(1792617313.461:468): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.819573][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.915097][ T930] ip_tables: iptables: counters copy to user failed while replacing table [ 104.025467][ T932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.135'. [ 104.203733][ T932] process 'syz.4.135' launched '/dev/fd/5' with NULL argv: empty string added [ 105.892713][ T933] loop2: detected capacity change from 0 to 512 [ 105.899304][ T933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.251470][ T28] audit: type=1400 audit(1792617316.141:469): avc: denied { execute } for pid=927 comm="syz.4.135" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.360128][ T28] audit: type=1400 audit(1792617316.141:470): avc: denied { execute_no_trans } for pid=927 comm="syz.4.135" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.395301][ T28] audit: type=1400 audit(1792617316.291:471): avc: denied { name_bind } for pid=927 comm="syz.4.135" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 106.423340][ T933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.432329][ T933] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.520641][ T28] audit: type=1400 audit(1792617318.441:472): avc: denied { create } for pid=923 comm="syz.2.133" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 107.920060][ T949] loop1: detected capacity change from 0 to 8192 [ 109.321665][ T950] capability: warning: `syz.4.137' uses deprecated v2 capabilities in a way that may be insecure [ 109.689406][ T951] ip_tables: iptables: counters copy to user failed while replacing table [ 109.780540][ T952] ip_tables: iptables: counters copy to user failed while replacing table [ 109.929517][ T929] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 109.941127][ T929] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 109.950503][ T929] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.133: Failed to acquire dquot type 1 [ 110.045104][ T946] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 110.048780][ T28] audit: type=1400 audit(1792617321.941:473): avc: denied { bind } for pid=935 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.052721][ T946] FAT-fs (loop1): Filesystem has been set read-only [ 110.073636][ T291] EXT4-fs (loop2): unmounting filesystem. [ 110.091726][ T956] ./dev/sda1: Can't open blockdev [ 110.706318][ T959] ./dev/sda1: Can't open blockdev [ 111.025168][ T962] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 111.034508][ T962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 111.266068][ T972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 111.279789][ T975] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.304469][ T977] ip_tables: iptables: counters copy to user failed while replacing table [ 112.653802][ T981] ip_tables: iptables: counters copy to user failed while replacing table [ 112.673561][ T979] futex_wake_op: syz.1.144 tries to shift op by 144; fix this program [ 112.684660][ T979] loop1: detected capacity change from 0 to 256 [ 112.706116][ T979] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 112.816439][ T28] audit: type=1400 audit(1792617324.741:474): avc: denied { mount } for pid=987 comm="syz.4.150" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.912174][ T990] incfs: Backing dir is not set, filesystem can't be mounted. [ 112.920031][ T990] incfs: mount failed -2 [ 113.763734][ T28] audit: type=1400 audit(1792617325.681:475): avc: denied { lock } for pid=993 comm="syz.1.152" path="socket:[17812]" dev="sockfs" ino=17812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 113.972991][ T1002] ip_tables: iptables: counters copy to user failed while replacing table [ 114.491848][ T1006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 116.177800][ T1017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.155'. [ 116.298906][ T1017] loop2: detected capacity change from 0 to 512 [ 117.590020][ T1017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.642530][ T1017] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.155: corrupted in-inode xattr [ 117.655495][ T1017] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 117.667497][ T1017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.717525][ T28] audit: type=1400 audit(1792617329.641:476): avc: denied { override_creds } for pid=1008 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.302566][ T1033] netlink: 52 bytes leftover after parsing attributes in process `syz.0.158'. [ 119.674665][ T291] EXT4-fs (loop2): unmounting filesystem. [ 119.701125][ T28] audit: type=1400 audit(1792617330.521:477): avc: denied { ioctl } for pid=1021 comm="syz.0.158" path="/28/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.906292][ T1045] loop2: detected capacity change from 0 to 512 [ 122.293587][ T1050] incfs: Backing dir is not set, filesystem can't be mounted. [ 122.301153][ T1050] incfs: mount failed -2 [ 124.278500][ T1061] device gre1 entered promiscuous mode [ 124.286947][ T1061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 126.809205][ T1074] fuse: Bad value for 'fd' [ 127.580361][ T28] audit: type=1400 audit(1792617338.211:478): avc: denied { write } for pid=1065 comm="syz.2.170" path="socket:[17965]" dev="sockfs" ino=17965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.642848][ T1075] loop1: detected capacity change from 0 to 256 [ 127.650496][ T1075] FAT-fs (loop1): Unrecognized mount option "noJots" or missing value [ 127.770963][ T28] audit: type=1326 audit(1792617338.711:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 127.833447][ T28] audit: type=1326 audit(1792617338.711:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 127.845683][ T1079] loop2: detected capacity change from 0 to 128 [ 130.255342][ T1085] incfs: Backing dir is not set, filesystem can't be mounted. [ 130.263385][ T1085] incfs: mount failed -2 [ 131.719165][ T28] audit: type=1326 audit(1792617338.711:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 131.835621][ T28] audit: type=1326 audit(1792617338.711:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 131.872383][ T28] audit: type=1326 audit(1792617338.731:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 132.005606][ T1091] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.010236][ T28] audit: type=1326 audit(1792617338.731:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 132.024143][ T789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.101420][ T1094] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.221520][ T28] audit: type=1326 audit(1792617338.731:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 132.282499][ T28] audit: type=1326 audit(1792617338.731:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 132.315833][ T1099] loop1: detected capacity change from 0 to 512 [ 132.316699][ T28] audit: type=1326 audit(1792617338.731:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.4.171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ccf9f559 code=0x7ffc0000 [ 132.449423][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.536574][ T1101] device veth0_vlan left promiscuous mode [ 132.546337][ T1101] device veth0_vlan entered promiscuous mode [ 132.571048][ T1101] device veth1_macvtap left promiscuous mode [ 132.588478][ T1101] device veth1_macvtap entered promiscuous mode [ 132.813566][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.901497][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.906290][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 132.906306][ T28] audit: type=1400 audit(1792617344.821:547): avc: denied { unlink } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.913669][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.951354][ T789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.011261][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.019601][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.026658][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.172010][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.181369][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.201466][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.208530][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.283470][ T1115] incfs: Backing dir is not set, filesystem can't be mounted. [ 133.291107][ T1115] incfs: mount failed -2 [ 134.804898][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.818322][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 134.826686][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.835069][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 134.843361][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.852505][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.864690][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.873058][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.881490][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.889717][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.898431][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.491834][ T28] audit: type=1400 audit(1792617347.411:548): avc: denied { ioctl } for pid=1110 comm="syz.4.182" path="socket:[18457]" dev="sockfs" ino=18457 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.805841][ T1127] incfs: Backing dir is not set, filesystem can't be mounted. [ 135.814592][ T1127] incfs: mount failed -2 [ 137.314825][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.438772][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.447235][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.456095][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.464401][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.472891][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.481672][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.840467][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.880273][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.906119][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.914056][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.922416][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.930761][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.938669][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 137.965323][ T1145] loop1: detected capacity change from 0 to 128 [ 137.973840][ T1145] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.000841][ T1147] loop2: detected capacity change from 0 to 128 [ 138.009055][ T1147] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.021683][ T1147] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.096773][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 138.123074][ T1145] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.138420][ T1145] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 138.147022][ T1145] FAT-fs (loop1): Filesystem has been set read-only [ 138.154849][ T1121] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.238104][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.248830][ T315] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.322865][ T1155] ./dev/sda1: Can't open blockdev [ 138.342965][ T1152] incfs: Backing dir is not set, filesystem can't be mounted. [ 138.350492][ T1152] incfs: mount failed -2 [ 138.394035][ T1161] loop1: detected capacity change from 0 to 512 [ 138.976519][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 139.337859][ T1169] incfs: Backing dir is not set, filesystem can't be mounted. [ 139.345749][ T1169] incfs: mount failed -2 [ 141.274999][ T1165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 141.299248][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.306463][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.316012][ T1183] loop2: detected capacity change from 0 to 512 [ 141.342804][ T1177] tipc: Started in network mode [ 141.347683][ T1177] tipc: Node identity 4, cluster identity 4711 [ 141.353886][ T1177] tipc: Node number set to 4 [ 141.358786][ T1179] tipc: Enabled bearer , priority 0 [ 141.461065][ T28] audit: type=1400 audit(1792617353.321:549): avc: denied { getopt } for pid=1188 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.916773][ T1191] incfs: Backing dir is not set, filesystem can't be mounted. [ 143.924389][ T1191] incfs: mount failed -2 [ 143.934503][ T1194] incfs: Backing dir is not set, filesystem can't be mounted. [ 143.942111][ T1194] incfs: mount failed -2 [ 145.290167][ T1204] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.359648][ T1207] loop2: detected capacity change from 0 to 128 [ 145.368034][ T1207] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.380859][ T1207] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.443853][ T1208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.202'. [ 145.609942][ T1209] incfs: Backing dir is not set, filesystem can't be mounted. [ 145.651424][ T1209] incfs: mount failed -2 [ 146.311102][ T1087] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.328187][ T1216] netlink: 100 bytes leftover after parsing attributes in process `syz.3.206'. [ 146.464560][ T1228] ./dev/sda1: Can't open blockdev [ 146.973413][ T1237] incfs: Backing dir is not set, filesystem can't be mounted. [ 146.981467][ T1237] incfs: mount failed -2 [ 149.314890][ T28] audit: type=1400 audit(1792617361.241:550): avc: denied { search } for pid=1242 comm="syz.0.212" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.345831][ T1244] loop2: detected capacity change from 0 to 512 [ 149.371143][ T28] audit: type=1400 audit(1792617361.241:551): avc: denied { append } for pid=1242 comm="syz.0.212" name="trace_pipe_raw" dev="tracefs" ino=13475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 151.742033][ T1252] incfs: Backing dir is not set, filesystem can't be mounted. [ 151.749633][ T1252] incfs: mount failed -2 [ 151.763354][ T1255] incfs: Backing dir is not set, filesystem can't be mounted. [ 151.770934][ T1255] incfs: mount failed -2 [ 153.246558][ T1260] loop1: detected capacity change from 0 to 512 [ 153.269683][ T1265] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.559580][ T1268] incfs: Backing dir is not set, filesystem can't be mounted. [ 153.567401][ T1268] incfs: mount failed -2 [ 156.641349][ T1287] incfs: Backing dir is not set, filesystem can't be mounted. [ 156.648860][ T1287] incfs: mount failed -2 [ 157.101565][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 157.112053][ T1289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 159.963441][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.970648][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.070822][ T1298] loop1: detected capacity change from 0 to 512 [ 160.146824][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.154252][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.171108][ T28] audit: type=1400 audit(1792617372.071:552): avc: denied { setopt } for pid=1301 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.583621][ T1315] incfs: Backing dir is not set, filesystem can't be mounted. [ 162.591258][ T1315] incfs: mount failed -2 [ 165.296210][ T1312] ./dev/sda1: Can't open blockdev [ 165.339238][ T1320] loop2: detected capacity change from 0 to 512 [ 165.482458][ T28] audit: type=1400 audit(1792617372.071:553): avc: denied { bind } for pid=1301 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.488335][ T1318] ªªªªª: renamed from bond_slave_0 [ 167.938182][ T1330] incfs: Backing dir is not set, filesystem can't be mounted. [ 167.945812][ T1330] incfs: mount failed -2 [ 167.953435][ T1332] incfs: Backing dir is not set, filesystem can't be mounted. [ 167.961045][ T1332] incfs: mount failed -2 [ 169.058003][ T1336] loop1: detected capacity change from 0 to 128 [ 169.066679][ T1336] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.080964][ T1336] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.105996][ T1336] incfs: Can't find or create .incomplete dir in ./file0 [ 169.113658][ T1336] incfs: mount failed -28 [ 169.265871][ T43] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.382405][ T1351] lo: Caught tx_queue_len zero misconfig [ 170.918565][ T1356] loop2: detected capacity change from 0 to 128 [ 170.925819][ T1356] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.938317][ T1356] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.949388][ T1359] ./dev/sda1: Can't open blockdev [ 171.043229][ T1363] loop1: detected capacity change from 0 to 128 [ 171.051603][ T1363] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.157649][ T1365] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 172.521350][ T315] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.531668][ T1363] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.724194][ T1379] loop2: detected capacity change from 0 to 16 [ 173.294792][ T1378] overlayfs: failed to clone upperpath [ 173.459967][ T1380] device team_slave_0 entered promiscuous mode [ 174.097706][ T1379] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.134426][ T1379] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 174.143478][ T1379] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 174.153600][ T1379] syz.2.239: attempt to access beyond end of device [ 174.153600][ T1379] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 174.168719][ T1379] syz.2.239: attempt to access beyond end of device [ 174.168719][ T1379] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 174.191765][ T1382] tipc: Started in network mode [ 174.196671][ T1382] tipc: Node identity 4, cluster identity 4711 [ 174.202868][ T1382] tipc: Node number set to 4 [ 174.217983][ T1382] tipc: Enabled bearer , priority 0 [ 174.248055][ T28] audit: type=1400 audit(1792617386.111:554): avc: denied { mounton } for pid=1372 comm="syz.2.239" path="/46/file0" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.380362][ T353] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.038745][ T28] audit: type=1400 audit(1792617386.141:555): avc: denied { ioctl } for pid=1372 comm="syz.2.239" path="/46/file0/file2" dev="loop2" ino=89 ioctlcmd=0xae9f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.386059][ T1391] ./dev/sda1: Can't open blockdev [ 177.949422][ T1392] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'. [ 177.986211][ T1394] incfs: Backing dir is not set, filesystem can't be mounted. [ 177.993807][ T1394] incfs: mount failed -2 [ 180.245963][ T28] audit: type=1400 audit(1792617392.161:556): avc: denied { setopt } for pid=1403 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.090319][ T1412] incfs: Backing dir is not set, filesystem can't be mounted. [ 181.099433][ T1412] incfs: mount failed -2 [ 182.323846][ T1428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 182.358426][ T1428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 185.208440][ T1420] loop1: detected capacity change from 0 to 128 [ 185.215255][ T1420] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.245239][ T1420] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.305463][ T28] audit: type=1400 audit(1792617397.231:557): avc: denied { ioctl } for pid=1436 comm="syz.0.253" path="socket:[19568]" dev="sockfs" ino=19568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.396723][ T1457] incfs: Backing dir is not set, filesystem can't be mounted. [ 186.404383][ T1457] incfs: mount failed -2 [ 188.208910][ T1468] device gre1 entered promiscuous mode [ 189.024146][ T1467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 189.885803][ T1478] loop1: detected capacity change from 0 to 512 [ 190.214492][ T1479] loop2: detected capacity change from 0 to 16 [ 190.432461][ T1479] erofs: (device loop2): mounted with root inode @ nid 36. [ 190.457716][ T1479] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 190.466953][ T1479] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 190.476308][ T1479] syz.2.264: attempt to access beyond end of device [ 190.476308][ T1479] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 190.490612][ T1479] syz.2.264: attempt to access beyond end of device [ 190.490612][ T1479] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 190.749450][ T1478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.295411][ T1485] ./dev/sda1: Can't open blockdev [ 191.473910][ T1478] EXT4-fs (loop1): 1 truncate cleaned up [ 191.488843][ T1478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.726958][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 192.471381][ T290] EXT4-fs (loop1): unmounting filesystem. [ 192.478497][ T28] audit: type=1400 audit(1792617404.401:558): avc: denied { wake_alarm } for pid=1494 comm="syz.0.277" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.537998][ T1499] loop2: detected capacity change from 0 to 2048 [ 192.618261][ T1505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 192.637456][ T1505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 192.708199][ T1505] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.715417][ T1505] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.880835][ T1499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.927873][ T1499] device lo left promiscuous mode [ 192.933809][ T1499] device tunl0 left promiscuous mode [ 192.939693][ T1499] device gre0 left promiscuous mode [ 192.953871][ T1499] device gretap0 left promiscuous mode [ 192.959844][ T1499] device erspan0 left promiscuous mode [ 192.966058][ T1499] device ip_vti0 left promiscuous mode [ 192.976898][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.996063][ T1499] device veth0_vlan left promiscuous mode [ 193.002424][ T1499] device veth0_vlan entered promiscuous mode [ 193.014595][ T1499] device veth1_macvtap left promiscuous mode [ 193.025879][ T1499] device veth1_macvtap entered promiscuous mode [ 193.157133][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.192496][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.240755][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.251176][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.258253][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.265690][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.274280][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.282529][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.289565][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.296955][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.305928][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 193.314292][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.322527][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 193.330657][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.339247][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.351406][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.359657][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.368108][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.376345][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.385329][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.393820][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.420754][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.435974][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.451516][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.508171][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.516831][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.542072][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.559208][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.577550][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.599348][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.612976][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.621033][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.629079][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.638311][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.646997][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.665609][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.714799][ T1526] loop1: detected capacity change from 0 to 128 [ 193.723262][ T1526] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.865569][ T1311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 193.888199][ T1526] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.908047][ T1525] incfs: Can't find or create .incomplete dir in ./file0 [ 193.915252][ T1525] incfs: mount failed -28 [ 194.051094][ T1311] usb 1-1: Using ep0 maxpacket: 32 [ 194.058651][ T1311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.098921][ T1311] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.141609][ T1311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.181240][ T1311] usb 1-1: Product: syz [ 194.196020][ T1311] usb 1-1: Manufacturer: syz [ 194.200679][ T1311] usb 1-1: SerialNumber: syz [ 194.210105][ T1311] usb 1-1: config 0 descriptor?? [ 194.218531][ T1311] smsc95xx v2.0.0 [ 194.222277][ T1311] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 194.232743][ T1311] smsc95xx: probe of 1-1:0.0 failed with error -22 [ 194.362483][ T388] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.379721][ T1535] loop1: detected capacity change from 0 to 512 [ 194.425531][ T323] usb 1-1: USB disconnect, device number 3 [ 194.554112][ T1539] incfs: Backing dir is not set, filesystem can't be mounted. [ 194.561673][ T1539] incfs: mount failed -2 [ 194.907983][ T1547] ./dev/sda1: Can't open blockdev [ 195.364457][ T323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.387155][ T1556] loop1: detected capacity change from 0 to 128 [ 195.395352][ T1556] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.418780][ T1556] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.450567][ T1556] incfs: Can't find or create .incomplete dir in ./file0 [ 195.458391][ T1556] incfs: mount failed -28 [ 195.533879][ T291] EXT4-fs (loop2): unmounting filesystem. [ 196.424445][ T388] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.528514][ T1563] incfs: Backing dir is not set, filesystem can't be mounted. [ 196.536052][ T1563] incfs: mount failed -2 [ 197.157816][ T323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.285077][ T323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.295273][ T323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.305666][ T323] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 197.311063][ T1311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.314767][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.330363][ T323] usb 1-1: Product: syz [ 197.334583][ T323] usb 1-1: Manufacturer: syz [ 197.339255][ T323] usb 1-1: SerialNumber: syz [ 197.532458][ T1311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.566813][ T1311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 197.580944][ T1311] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.590902][ T1311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.599437][ T1311] usb 2-1: Product: syz [ 197.604533][ T1311] usb 2-1: Manufacturer: syz [ 197.609216][ T1311] usb 2-1: SerialNumber: syz [ 197.677250][ T1311] usb 2-1: config 0 descriptor?? [ 197.708010][ T323] usb 1-1: selecting invalid altsetting 1 [ 197.714078][ T323] usb 1-1: unit 0 not found! [ 197.732265][ T323] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 197.743435][ T323] usb 1-1: USB disconnect, device number 4 [ 197.754988][ T28] audit: type=1400 audit(1792617409.681:559): avc: denied { search } for pid=1580 comm="syz.2.294" name="/" dev="configfs" ino=14686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.843098][ T1600] ./dev/sda1: Can't open blockdev [ 197.964708][ T1311] usb 2-1: USB disconnect, device number 2 [ 198.151589][ T1480] udevd[1480]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.229373][ T1604] incfs: Backing dir is not set, filesystem can't be mounted. [ 198.236947][ T1604] incfs: mount failed -2 [ 198.763418][ T1610] incfs: Backing dir is not set, filesystem can't be mounted. [ 198.770945][ T1610] incfs: mount failed -2 [ 198.882226][ T28] audit: type=1400 audit(1792617410.811:560): avc: denied { write } for pid=1623 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.016197][ T1629] loop1: detected capacity change from 0 to 128 [ 199.024739][ T1629] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.044652][ T1629] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.180374][ T1625] incfs: Can't find or create .incomplete dir in ./file0 [ 199.187662][ T1625] incfs: mount failed -28 [ 199.314904][ T1644] incfs: Backing dir is not set, filesystem can't be mounted. [ 199.322543][ T1644] incfs: mount failed -2 [ 199.842626][ T1642] ./dev/sda1: Can't open blockdev [ 200.033203][ T388] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.198219][ T1661] loop1: detected capacity change from 0 to 512 [ 200.255104][ T1661] incfs: Backing dir is not set, filesystem can't be mounted. [ 200.262631][ T1661] incfs: mount failed -2 [ 201.129446][ T1682] loop2: detected capacity change from 0 to 512 [ 201.139146][ T1680] loop1: detected capacity change from 0 to 512 [ 201.140015][ T1678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.168288][ T1678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.531967][ T1684] incfs: Backing dir is not set, filesystem can't be mounted. [ 201.539860][ T1684] incfs: mount failed -2 [ 201.670577][ T1685] incfs: Backing dir is not set, filesystem can't be mounted. [ 201.678564][ T1685] incfs: mount failed -2 [ 202.800399][ T1687] ./dev/sda1: Can't open blockdev [ 202.869707][ T1678] device team_slave_0 left promiscuous mode [ 202.973511][ T1680] incfs: Backing dir is not set, filesystem can't be mounted. [ 202.981050][ T1680] incfs: mount failed -2 [ 203.024043][ T1678] device veth0_vlan left promiscuous mode [ 203.030033][ T1678] device veth0_vlan entered promiscuous mode [ 203.037128][ T1678] device veth1_macvtap left promiscuous mode [ 203.044238][ T1678] device veth1_macvtap entered promiscuous mode [ 203.053037][ T222] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 203.061533][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.082012][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.091519][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.298134][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.305218][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.314010][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.331897][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.341593][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.348658][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.601539][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.609984][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 204.618294][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.627059][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 204.635220][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.643974][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.652503][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.660649][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.668682][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.676975][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.685262][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.693577][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.701769][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.711252][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.719326][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.727572][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.735712][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.744121][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.752622][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.760914][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.769268][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.777196][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.784809][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.792450][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.800605][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.808790][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.816442][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.824494][ T1705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 204.834433][ T1706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 204.864903][ T222] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.601268][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!