last executing test programs: 3.32154069s ago: executing program 4 (id=651): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, r0, 0xd0fbb000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000c67000/0x4000)=nil, 0x4000}}) unshare(0x40400) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) 2.981593098s ago: executing program 4 (id=654): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000200000000", @ANYRES32=r3, @ANYBLOB="60c000000c02040024001280110001006272696467655f736c617665000000000c000580050020"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@hopopts]}}}}}}}, 0x0) 2.821442842s ago: executing program 3 (id=659): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.817968022s ago: executing program 0 (id=660): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.774965953s ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000deff8500000086000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000100000030006000000000002000000e000000200000000000000000200010000000000000005feffff7f00030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbf9, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) 2.774809943s ago: executing program 0 (id=662): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.772523573s ago: executing program 0 (id=663): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xb, "7556feb9ab8f11d9d7"}]}}}}}}}, 0x0) 2.621104387s ago: executing program 0 (id=664): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r3, r2, 0x0, 0x7ffff000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 2.585936368s ago: executing program 0 (id=665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000002a40)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8844) 1.080515294s ago: executing program 4 (id=668): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x403, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0x1, 0x10, 0x3, 0x255, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x7ffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0xa6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.014532046s ago: executing program 1 (id=672): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="015ee0"], 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) 1.013729946s ago: executing program 3 (id=673): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 968.725857ms ago: executing program 0 (id=674): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioprio_set$pid(0x2, 0x0, 0x2007) read(r1, &(0x7f0000002fc0)=""/52, 0x34) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 813.638831ms ago: executing program 1 (id=676): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000006c0)=0x40049, 0x4) io_uring_setup(0x1978, &(0x7f0000000880)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/21, 0x15}, 0xc7c2}], 0x1, 0x10022, 0x0) r1 = memfd_create(&(0x7f0000000600)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) 709.550133ms ago: executing program 3 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 693.064574ms ago: executing program 3 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 638.292695ms ago: executing program 3 (id=680): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x1f4100ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 526.950568ms ago: executing program 2 (id=685): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0802, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x4) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x800) 502.019598ms ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x100}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000a0001000242ac1100020000050021000000000008000a00", @ANYRES32=r2, @ANYBLOB="cca63b3ed3685e8fade76f5e65cae5664e10ecfe89c81f544b93ccd6f9f6c664865f91bcc85feabbe8facf0000000000000000000000000000c75fb2fa4c1064a3dd37924015b2100be7288f6ab6f613"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x58, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}]}, 0x58}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000242ac110001000742420300000000"], 0x0) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000242ac110001000742420300000000"], 0x0) 459.505819ms ago: executing program 1 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000580)={0x4, 0x6, 0x2, 0x6, 0x12, "26ad85469d8368a136b2eaa5fa603f404af2ce"}) 325.442082ms ago: executing program 2 (id=688): close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) close(0x3) 234.678614ms ago: executing program 2 (id=689): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 176.131186ms ago: executing program 4 (id=690): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 175.050996ms ago: executing program 1 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/225, 0xe1}], 0x1, 0x7be, 0xc9) 118.508887ms ago: executing program 4 (id=692): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffffff, 0x0, 0x80442, 0x67) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file1\x00', 0x12000021) io_submit(r3, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r2, 0x0, 0x0, 0x4000000}]) 96.580578ms ago: executing program 2 (id=693): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fchdir(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x5071, 0xffffffffffffffff, 0xfca33000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x4, 0xfffffffffffffffb, 0x0, 0x84}) 84.652248ms ago: executing program 1 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 47.658289ms ago: executing program 2 (id=695): r0 = syz_io_uring_setup(0x32c, 0x0, 0x0, 0x0, &(0x7f0000001040)) io_uring_enter(r0, 0x0, 0x20, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68814}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) 19.78011ms ago: executing program 1 (id=696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x8000, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e25, @remote}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) accept$packet(r4, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 0s ago: executing program 4 (id=697): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x11) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x18) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x74, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x4}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 18.218974][ T28] audit: type=1400 audit(1791980217.150:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.220219][ T279] cgroup: Unknown subsys name 'net' [ 18.242428][ T28] audit: type=1400 audit(1791980217.150:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.269707][ T28] audit: type=1400 audit(1791980217.190:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.269848][ T279] cgroup: Unknown subsys name 'devices' [ 18.382398][ T279] cgroup: Unknown subsys name 'hugetlb' [ 18.388046][ T279] cgroup: Unknown subsys name 'rlimit' [ 18.489813][ T28] audit: type=1400 audit(1791980217.420:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.512747][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.513105][ T28] audit: type=1400 audit(1791980217.420:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.546443][ T28] audit: type=1400 audit(1791980217.420:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.569375][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.569747][ T28] audit: type=1400 audit(1791980217.460:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.603659][ T28] audit: type=1400 audit(1791980217.460:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.629253][ T28] audit: type=1400 audit(1791980217.490:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.654981][ T28] audit: type=1400 audit(1791980217.490:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.372466][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.379546][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.387166][ T287] device bridge_slave_0 entered promiscuous mode [ 19.395359][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.402523][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.409873][ T287] device bridge_slave_1 entered promiscuous mode [ 19.439626][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.446743][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.454205][ T288] device bridge_slave_0 entered promiscuous mode [ 19.462672][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.469724][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.477155][ T288] device bridge_slave_1 entered promiscuous mode [ 19.599759][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.606869][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.614519][ T291] device bridge_slave_0 entered promiscuous mode [ 19.621559][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.628631][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.636116][ T291] device bridge_slave_1 entered promiscuous mode [ 19.645890][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.652991][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.660360][ T289] device bridge_slave_0 entered promiscuous mode [ 19.688906][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.696087][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.703553][ T289] device bridge_slave_1 entered promiscuous mode [ 19.750611][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.757765][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.765416][ T290] device bridge_slave_0 entered promiscuous mode [ 19.773951][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.781139][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.788470][ T290] device bridge_slave_1 entered promiscuous mode [ 19.853263][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.860358][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.867679][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.874747][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.930342][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.937399][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.944698][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.951737][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.982565][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.989624][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.996919][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.004042][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.027518][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.034591][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.041869][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.048881][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.067920][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.075560][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.083113][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.090811][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.098181][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.105523][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.113115][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.120520][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.127959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.135469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.150365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.158017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.166277][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.173308][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.203149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.211828][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.218899][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.226558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.235755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.244514][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.251540][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.258864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.267211][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.274256][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.302602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.310520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.318370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.326408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.335425][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.342483][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.350296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.358410][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.365458][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.372864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.380997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.400218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.408629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.417416][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.424677][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.432783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.441164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.449288][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.456351][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.463879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.471492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.488993][ T288] device veth0_vlan entered promiscuous mode [ 20.498321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.506943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.515076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.523442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.532151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.540614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.548871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.556943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.565134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.572706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.586342][ T287] device veth0_vlan entered promiscuous mode [ 20.600666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.609052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.617479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.625581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.633856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.642510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.651050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.659306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.667623][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.674681][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.682064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.690506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.698661][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.705703][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.713345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.721048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.728516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.744820][ T287] device veth1_macvtap entered promiscuous mode [ 20.752997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.761143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.769108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.777556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.785906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.794183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.802260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.810522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.818432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.826717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.834949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.845564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.854110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.865137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.873512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.886770][ T289] device veth0_vlan entered promiscuous mode [ 20.898300][ T290] device veth0_vlan entered promiscuous mode [ 20.905922][ T288] device veth1_macvtap entered promiscuous mode [ 20.914055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.922078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.929930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.938015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.946085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.954346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.961858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.969273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.977421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.996134][ T289] device veth1_macvtap entered promiscuous mode [ 21.002981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.011483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.019931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.028505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.037111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.045524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.053837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.070922][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.078292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.086825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.095403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.103789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.123857][ T290] device veth1_macvtap entered promiscuous mode [ 21.138579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.148165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.158326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.161018][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.167180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.191386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.199808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.214115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.222410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.233246][ T291] device veth0_vlan entered promiscuous mode [ 21.239580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.267225][ T291] device veth1_macvtap entered promiscuous mode [ 21.274995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.284342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.294390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.322426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.332247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.342542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.351669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.360101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.368959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.389234][ T320] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1'. [ 21.449715][ T328] ip_tables: iptables: counters copy to user failed while replacing table [ 21.450627][ T331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 21.542590][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 21.582928][ T340] loop2: detected capacity change from 0 to 512 [ 21.598683][ T340] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 21.625880][ T340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 21.656108][ T340] EXT4-fs (loop2): 1 truncate cleaned up [ 21.662965][ T340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 21.812877][ T290] EXT4-fs (loop2): unmounting filesystem. [ 21.850712][ T350] ip_tables: iptables: counters copy to user failed while replacing table [ 22.510780][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 22.763566][ T392] loop1: detected capacity change from 0 to 512 [ 22.772671][ T392] EXT4-fs: Invalid want_extra_isize 5 [ 22.852148][ T295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.040267][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 23.046649][ T295] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 23.072583][ T295] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 23.097463][ T295] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 23.117671][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 23.140578][ T295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 23.160188][ T295] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.199783][ T295] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 23.217989][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.241909][ T295] usb 1-1: config 0 descriptor?? [ 23.470123][ T295] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 23.497310][ T295] usb 1-1: USB disconnect, device number 2 [ 23.513304][ T295] usblp0: removed [ 23.643493][ T429] loop3: detected capacity change from 0 to 16 [ 23.696361][ T429] erofs: (device loop3): mounted with root inode @ nid 36. [ 23.744964][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 23.744978][ T28] audit: type=1400 audit(1791980222.680:169): avc: denied { watch watch_reads } for pid=428 comm="syz.3.44" path="/7/bus" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.811633][ T28] audit: type=1400 audit(1791980222.750:170): avc: denied { watch watch_reads } for pid=433 comm="syz.1.46" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 23.874980][ T28] audit: type=1400 audit(1791980222.810:171): avc: denied { bind } for pid=437 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 23.881980][ T416] loop2: detected capacity change from 0 to 131072 [ 23.902327][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 23.910595][ T28] audit: type=1400 audit(1791980222.840:172): avc: denied { setopt } for pid=437 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 23.985329][ T416] F2FS-fs (loop2): invalid crc value [ 24.034427][ T416] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.090236][ T295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.100829][ T416] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 24.108359][ T28] audit: type=1400 audit(1791980223.040:173): avc: denied { ioctl } for pid=451 comm="syz.4.53" path="socket:[16715]" dev="sockfs" ino=16715 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.157425][ T28] audit: type=1400 audit(1791980223.090:174): avc: denied { connect } for pid=415 comm="syz.2.40" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.192567][ T28] audit: type=1400 audit(1791980223.120:175): avc: denied { read } for pid=415 comm="syz.2.40" dev="nsfs" ino=4026532564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.243897][ T28] audit: type=1400 audit(1791980223.120:176): avc: denied { open } for pid=415 comm="syz.2.40" path="net:[4026532564]" dev="nsfs" ino=4026532564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.270207][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 24.277911][ T295] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 24.308817][ T295] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 24.323203][ T28] audit: type=1400 audit(1791980223.120:177): avc: denied { create } for pid=415 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.337890][ T295] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 24.350728][ T28] audit: type=1400 audit(1791980223.120:178): avc: denied { getopt } for pid=415 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.380298][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.400233][ T295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.409919][ T295] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.438285][ T295] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 24.456700][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.477616][ T295] usb 1-1: config 0 descriptor?? [ 24.692219][ T295] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 24.744245][ T470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 24.780255][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.827355][ T472] loop5: detected capacity change from 0 to 7 [ 24.834191][ T426] loop5: [ 24.838472][ T472] loop5: [ 24.855022][ T474] netlink: 'syz.2.63': attribute type 11 has an invalid length. [ 24.925760][ C1] usblp0: nonzero read bulk status received: -71 [ 24.932437][ T39] usb 1-1: USB disconnect, device number 3 [ 24.960257][ T483] ip_tables: iptables: counters copy to user failed while replacing table [ 24.960426][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 24.985164][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.995529][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.008807][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.018223][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.026442][ T60] usb 4-1: Product: syz [ 25.031645][ T60] usb 4-1: Manufacturer: syz [ 25.036295][ T60] usb 4-1: SerialNumber: syz [ 25.140921][ T387] usblp0: removed [ 25.248435][ T60] usb 4-1: 0:2 : does not exist [ 25.261642][ T60] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 25.291267][ T60] usb 4-1: USB disconnect, device number 2 [ 25.304132][ T516] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 25.500593][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.815993][ T525] loop3: detected capacity change from 0 to 256 [ 25.822672][ T525] ======================================================= [ 25.822672][ T525] WARNING: The mand mount option has been deprecated and [ 25.822672][ T525] and is ignored by this kernel. Remove the mand [ 25.822672][ T525] option from the mount to silence this warning. [ 25.822672][ T525] ======================================================= [ 25.857868][ T525] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.189400][ T528] ip_tables: iptables: counters copy to user failed while replacing table [ 26.225854][ T528] raw_sendmsg: syz.3.82 forgot to set AF_INET. Fix it! [ 26.813707][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 26.864801][ T572] syz.2.102 (572) used greatest stack depth: 21984 bytes left [ 27.021109][ T586] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 27.028898][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 27.049335][ T592] xt_limit: Overflow, try lower: 167772/2147483648 [ 27.065235][ T594] syz.2.112 uses obsolete (PF_INET,SOCK_PACKET) [ 27.191569][ T606] capability: warning: `syz.0.118' uses deprecated v2 capabilities in a way that may be insecure [ 27.205001][ T606] loop0: detected capacity change from 0 to 512 [ 27.222135][ T606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.234649][ T606] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.260380][ T606] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 27.268177][ T613] loop3: detected capacity change from 0 to 512 [ 27.284065][ T606] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 27.296411][ T606] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.296411][ T606] [ 27.300243][ T39] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 27.306260][ T606] EXT4-fs (loop0): Total free blocks count 0 [ 27.319671][ T606] EXT4-fs (loop0): Free/Dirty block details [ 27.325715][ T606] EXT4-fs (loop0): free_blocks=65281 [ 27.331148][ T606] EXT4-fs (loop0): dirty_blocks=6 [ 27.332578][ T613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.336279][ T606] EXT4-fs (loop0): Block reservation details [ 27.351269][ T606] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 27.406670][ T289] EXT4-fs (loop0): unmounting filesystem. [ 27.473702][ T39] usb 2-1: device descriptor read/64, error -71 [ 27.488660][ T288] EXT4-fs (loop3): unmounting filesystem. [ 27.599302][ T638] loop3: detected capacity change from 0 to 512 [ 27.632868][ T638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.657164][ T638] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.750220][ T39] usb 2-1: device descriptor read/64, error -71 [ 27.841747][ T288] EXT4-fs (loop3): unmounting filesystem. [ 27.965005][ T661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 28.020216][ T39] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 28.044236][ T666] ip_tables: iptables: counters copy to user failed while replacing table [ 28.134216][ T669] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.142244][ T672] capability: warning: `syz.2.138' uses 32-bit capabilities (legacy support in use) [ 28.180198][ T39] usb 2-1: device descriptor read/64, error -71 [ 28.450207][ T39] usb 2-1: device descriptor read/64, error -71 [ 28.570289][ T39] usb usb2-port1: attempt power cycle [ 28.975553][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 28.975578][ T28] audit: type=1400 audit(1791980227.910:235): avc: denied { setopt } for pid=709 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.001236][ T39] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.043053][ T39] usb 2-1: device descriptor read/8, error -71 [ 29.085973][ T714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 29.191309][ T39] usb 2-1: device descriptor read/8, error -71 [ 29.304708][ T721] mmap: syz.0.150 (721) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.322123][ T28] audit: type=1400 audit(1791980228.260:236): avc: denied { bind } for pid=724 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.330700][ T723] loop3: detected capacity change from 0 to 512 [ 29.343098][ T28] audit: type=1400 audit(1791980228.280:237): avc: denied { write } for pid=724 comm="syz.2.152" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.385044][ T723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.390771][ T28] audit: type=1400 audit(1791980228.280:238): avc: denied { open } for pid=724 comm="syz.2.152" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.422853][ T723] EXT4-fs (loop3): unmounting filesystem. [ 29.456942][ T28] audit: type=1400 audit(1791980228.280:239): avc: denied { ioctl } for pid=724 comm="syz.2.152" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.482304][ T39] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 29.500856][ T28] audit: type=1400 audit(1791980228.330:240): avc: denied { unmount } for pid=722 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.520849][ T741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 29.529697][ T741] device bridge_slave_1 left promiscuous mode [ 29.538363][ T39] usb 2-1: device descriptor read/8, error -71 [ 29.554300][ T28] audit: type=1400 audit(1791980228.370:241): avc: denied { bind } for pid=727 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.576367][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.587258][ T741] device bridge_slave_0 left promiscuous mode [ 29.593823][ T28] audit: type=1400 audit(1791980228.370:242): avc: denied { getopt } for pid=730 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.614972][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.632890][ T28] audit: type=1400 audit(1791980228.570:243): avc: denied { write } for pid=744 comm="syz.3.160" path="socket:[17376]" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.657912][ T28] audit: type=1400 audit(1791980228.600:244): avc: denied { read } for pid=744 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.711281][ T39] usb 2-1: device descriptor read/8, error -71 [ 29.723626][ T740] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.840366][ T39] usb usb2-port1: unable to enumerate USB device [ 30.097704][ T776] loop2: detected capacity change from 0 to 1024 [ 30.120569][ T776] EXT4-fs: Ignoring removed oldalloc option [ 30.147088][ T776] EXT4-fs: Ignoring removed oldalloc option [ 30.155291][ T785] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 30.176418][ T776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.193172][ T785] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 30.250732][ T776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.255973][ T785] syz.1.177 (785) used greatest stack depth: 20864 bytes left [ 30.330573][ T800] _swap_info_get: Bad swap file entry 7800000000000001 [ 30.384562][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.420430][ T819] loop1: detected capacity change from 0 to 512 [ 30.447090][ T819] EXT4-fs: Ignoring removed bh option [ 30.454268][ T824] tipc: Started in network mode [ 30.460428][ T824] tipc: Node identity 4, cluster identity 4711 [ 30.470547][ T819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.482992][ T824] tipc: Node number set to 4 [ 30.521077][ T819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.561418][ T819] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.685278][ T357] tipc: Subscription rejected, illegal request [ 30.714107][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.791182][ T838] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.853929][ T850] tipc: Failed to remove unknown binding: 66,0,0/0:635517724/635517726 [ 30.862303][ T850] tipc: Failed to remove unknown binding: 66,0,0/0:635517724/635517725 [ 33.840837][ T859] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.848085][ T859] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.013267][ T869] device veth0_vlan left promiscuous mode [ 34.035011][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 34.035026][ T28] audit: type=1400 audit(1791980232.970:254): avc: denied { mounton } for pid=882 comm="syz.0.208" path="/37/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 34.067309][ T869] device veth0_vlan entered promiscuous mode [ 34.074953][ T869] device veth1_macvtap left promiscuous mode [ 34.082230][ T869] device veth1_macvtap entered promiscuous mode [ 34.091511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.099264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.107087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.125466][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.132591][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.140453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.148840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.157910][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.165008][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.172490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.180846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.188956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.197220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.205246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.213582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.221885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.230207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.238575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.247204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.255928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.264406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.272970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.281629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.289730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.298414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.306642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.315167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.323797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.332442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.341603][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.349636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.357435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.365662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.376486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.384826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.400804][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.798885][ T28] audit: type=1326 audit(1791980233.730:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.1.207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9e559 code=0x7fc00000 [ 36.570147][ C0] sched: RT throttling activated [ 36.572303][ T28] audit: type=1400 audit(1791980233.770:256): avc: denied { setopt } for pid=908 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.641912][ T28] audit: type=1400 audit(1791980236.580:257): avc: denied { unlink } for pid=917 comm="syz.4.218" name="#1" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.735884][ T927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 37.807673][ T936] ip_tables: iptables: counters copy to user failed while replacing table [ 37.928798][ T941] Illegal XDP return value 4291248128 on prog (id 45) dev syz_tun, expect packet loss! [ 37.972876][ T943] Disabled LAPIC found during irq injection [ 39.138802][ T28] audit: type=1400 audit(1791980238.070:258): avc: denied { read write } for pid=986 comm="syz.4.242" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.169820][ T28] audit: type=1400 audit(1791980238.070:259): avc: denied { open } for pid=986 comm="syz.4.242" path="/49/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.194631][ T28] audit: type=1400 audit(1791980238.070:260): avc: denied { ioctl } for pid=986 comm="syz.4.242" path="/49/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.222445][ T28] audit: type=1400 audit(1791980238.160:261): avc: denied { ioctl } for pid=988 comm="syz.4.243" path="socket:[18316]" dev="sockfs" ino=18316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.238890][ T984] loop0: detected capacity change from 0 to 40427 [ 39.257426][ T28] audit: type=1400 audit(1791980238.190:262): avc: denied { ioctl } for pid=988 comm="syz.4.243" path="socket:[18317]" dev="sockfs" ino=18317 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.285725][ T984] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 39.298898][ T984] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.324684][ T984] F2FS-fs (loop0): Image doesn't support compression [ 39.341275][ T984] F2FS-fs (loop0): Image doesn't support compression [ 39.359009][ T984] F2FS-fs (loop0): invalid crc value [ 39.373436][ T984] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 39.427580][ T984] F2FS-fs (loop0): Start checkpoint disabled! [ 39.438525][ T984] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 39.451732][ T28] audit: type=1400 audit(1791980238.390:263): avc: denied { create } for pid=1002 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 39.460004][ T984] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.480379][ T984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 39.491116][ T28] audit: type=1326 audit(1791980238.430:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1006 comm="syz.3.250" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef1f9e559 code=0x0 [ 39.520249][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.523700][ T28] audit: type=1400 audit(1791980238.450:265): avc: denied { write } for pid=983 comm="syz.0.241" path="/46/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.556751][ T984] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 39.582430][ T28] audit: type=1400 audit(1791980238.460:266): avc: denied { ioctl } for pid=983 comm="syz.0.241" path="/46/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.654998][ T507] kworker/u4:5: attempt to access beyond end of device [ 39.654998][ T507] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.700240][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 39.706950][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 39.722941][ T309] usb 5-1: config 8 has an invalid interface number: 94 but max is 0 [ 39.738675][ T309] usb 5-1: config 8 has no interface number 0 [ 39.751359][ T309] usb 5-1: config 8 interface 94 has no altsetting 0 [ 39.767043][ T309] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 39.784801][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.794598][ T309] usb 5-1: Product: syz [ 39.799231][ T309] usb 5-1: Manufacturer: syz [ 39.804149][ T309] usb 5-1: SerialNumber: syz [ 39.809236][ T28] audit: type=1400 audit(1791980238.740:267): avc: denied { connect } for pid=1010 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.911634][ T1019] loop1: detected capacity change from 0 to 128 [ 39.921294][ T1017] loop0: detected capacity change from 0 to 4096 [ 39.939099][ T1017] EXT4-fs: Ignoring removed nobh option [ 39.948390][ T1017] EXT4-fs: Ignoring removed bh option [ 39.955474][ T1017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.955822][ T1019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.971860][ T1019] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.977793][ T1017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.008652][ T1017] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 40.024902][ T289] EXT4-fs (loop0): unmounting filesystem. [ 40.026124][ T287] EXT4-fs (loop1): unmounting filesystem. [ 40.039709][ T309] usb 5-1: USB disconnect, device number 2 [ 41.083111][ T1054] tipc: Failed to remove unknown binding: 66,0,0/0:2985284723/2985284725 [ 41.109195][ T1054] tipc: Failed to remove unknown binding: 66,0,0/0:2985284723/2985284724 [ 41.351181][ T1063] loop1: detected capacity change from 0 to 40427 [ 41.367039][ T1063] F2FS-fs (loop1): invalid crc value [ 41.381238][ T1063] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.434641][ T1063] F2FS-fs (loop1): Start checkpoint disabled! [ 41.444821][ T1063] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 41.454072][ T1063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 41.488451][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.488451][ T10] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.517385][ T1063] F2FS-fs (loop1): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 41.550221][ T1063] F2FS-fs (loop1): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 41.560009][ T1063] F2FS-fs (loop1): f2fs_enable_checkpoint() finishes, writeback:33, sync:0 [ 41.573211][ T1063] F2FS-fs (loop1): Start checkpoint disabled! [ 41.579496][ T1063] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:-5 [ 41.710229][ T1082] loop1: detected capacity change from 0 to 256 [ 41.716925][ T1082] exfat: Deprecated parameter 'utf8' [ 41.722307][ T1082] exfat: Deprecated parameter 'utf8' [ 41.727692][ T1082] exfat: Deprecated parameter 'namecase' [ 41.733458][ T1082] exfat: Deprecated parameter 'utf8' [ 41.741179][ T1082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 41.916821][ T1101] overlayfs: failed to clone upperpath [ 41.976587][ T1114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.289'. [ 42.324886][ T1149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.298'. [ 42.600211][ T309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.780221][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 42.786462][ T309] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 42.796753][ T309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.806637][ T309] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 42.815792][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.823910][ T309] usb 1-1: SerialNumber: syz [ 42.840420][ T309] usb 1-1: 0:2 : does not exist [ 43.076408][ T1161] loop4: detected capacity change from 0 to 40427 [ 43.091545][ T1161] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 43.091623][ T309] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 43.099544][ T1161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.115869][ T1161] F2FS-fs (loop4): invalid crc value [ 43.135596][ T1161] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.135808][ T309] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 43.153971][ T309] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.164547][ T309] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.168265][ T1161] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.175311][ T309] usb 1-1: USB disconnect, device number 4 [ 43.186349][ T1161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.327934][ T1161] syz.4.305: attempt to access beyond end of device [ 43.327934][ T1161] loop4: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 43.338710][ T1176] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 43.351905][ T1161] syz.4.305: attempt to access beyond end of device [ 43.351905][ T1161] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 43.377257][ T1176] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 43.391087][ T1162] udevd[1162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.481472][ T1172] syz.4.305: attempt to access beyond end of device [ 43.481472][ T1172] loop4: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 43.501016][ T1161] syz.4.305: attempt to access beyond end of device [ 43.501016][ T1161] loop4: rw=2049, sector=57344, nr_sectors = 20480 limit=40427 [ 43.515497][ T1172] syz.4.305: attempt to access beyond end of device [ 43.515497][ T1172] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 43.540254][ T1172] syz.4.305: attempt to access beyond end of device [ 43.540254][ T1172] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 43.558810][ T1161] syz.4.305: attempt to access beyond end of device [ 43.558810][ T1161] loop4: rw=2049, sector=81920, nr_sectors = 3960 limit=40427 [ 43.572856][ T1160] syz.4.305: attempt to access beyond end of device [ 43.572856][ T1160] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 43.703654][ T1188] xt_hashlimit: max too large, truncated to 1048576 [ 43.735500][ T1190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.314'. [ 43.754131][ T1184] syz.3.312 (1184) used greatest stack depth: 20648 bytes left [ 43.783651][ T1192] loop0: detected capacity change from 0 to 128 [ 43.822103][ T1192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.831970][ T1192] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.892477][ T289] EXT4-fs (loop0): unmounting filesystem. [ 43.973491][ T1205] loop1: detected capacity change from 0 to 1024 [ 44.021964][ T1162] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.116967][ T1216] input: syz0 as /devices/virtual/input/input4 [ 44.243226][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 44.243244][ T28] audit: type=1400 audit(1791980243.180:290): avc: denied { create } for pid=1225 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.341727][ T28] audit: type=1400 audit(1791980243.280:291): avc: denied { read } for pid=1230 comm="syz.1.328" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.442175][ T1234] ip_tables: iptables: counters copy to user failed while replacing table [ 44.650200][ T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.878105][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.898423][ T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.941835][ T60] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.970194][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.988379][ T60] usb 2-1: SerialNumber: syz [ 45.066236][ T1267] loop2: detected capacity change from 0 to 512 [ 45.082956][ T1267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.096345][ T1267] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.109750][ T1267] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.338: corrupted inode contents [ 45.121773][ T1267] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.338: mark_inode_dirty error [ 45.133255][ T1267] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.338: corrupted inode contents [ 45.145378][ T1267] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2947: inode #15: comm syz.2.338: mark_inode_dirty error [ 45.157459][ T1267] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2950: inode #15: comm syz.2.338: mark inode dirty (error -117) [ 45.170985][ T1267] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 45.180607][ T1267] EXT4-fs (loop2): 1 orphan inode deleted [ 45.186407][ T1267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.205883][ T60] usb 2-1: 0:2 : does not exist [ 45.220241][ T60] usb 2-1: unit 5: unexpected type 0x09 [ 45.247378][ T60] usb 2-1: USB disconnect, device number 6 [ 45.297978][ T290] EXT4-fs (loop2): unmounting filesystem. [ 45.489626][ T1290] overlayfs: failed to set xattr on upper [ 45.540472][ T1294] loop0: detected capacity change from 0 to 256 [ 45.562734][ T28] audit: type=1400 audit(1791980500.500:292): avc: denied { mount } for pid=1293 comm="syz.0.348" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.591858][ T28] audit: type=1400 audit(1791980500.530:293): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.627342][ T1296] loop0: detected capacity change from 0 to 128 [ 45.638138][ T1296] FAT-fs (loop0): bogus logical sector size 0 [ 45.644538][ T1296] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 45.654153][ T1296] FAT-fs (loop0): Can't find a valid FAT filesystem [ 45.730623][ T28] audit: type=1400 audit(1791980500.670:294): avc: denied { write } for pid=1297 comm="syz.1.350" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.761607][ T1300] loop0: detected capacity change from 0 to 1024 [ 45.774740][ T28] audit: type=1400 audit(1791980500.670:295): avc: denied { open } for pid=1297 comm="syz.1.350" path="/56/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.800297][ T28] audit: type=1400 audit(1791980500.700:296): avc: denied { ioctl } for pid=1297 comm="syz.1.350" path="/56/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.803029][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.848886][ T1300] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 45.874291][ T1300] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 45.896608][ T1300] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.349: Failed to acquire dquot type 0 [ 45.918929][ T1300] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 45.954425][ T1300] EXT4-fs (loop0): 1 truncate cleaned up [ 45.960119][ T1300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.997904][ T1315] overlayfs: failed to clone upperpath [ 46.059783][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.079679][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.079881][ T1319] input: syz0 as /devices/virtual/input/input5 [ 46.094889][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.122447][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 46.134287][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.150517][ T24] usb 5-1: Product: syz [ 46.158021][ T24] usb 5-1: Manufacturer: syz [ 46.169749][ T24] usb 5-1: SerialNumber: syz [ 46.414568][ T24] usb 5-1: selecting invalid altsetting 1 [ 46.422877][ T24] usb 5-1: unit 3 not found! [ 46.434048][ T24] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 46.448161][ T24] usb 5-1: invalid MIXER UNIT descriptor 6 [ 46.465830][ T24] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 46.465995][ T289] EXT4-fs (loop0): unmounting filesystem. [ 46.477683][ T24] usb 5-1: USB disconnect, device number 3 [ 46.510676][ T28] audit: type=1400 audit(1791980501.450:297): avc: denied { ioctl } for pid=1334 comm="syz.2.366" path="socket:[20663]" dev="sockfs" ino=20663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.711359][ T1162] udevd[1162]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.753857][ T1347] loop1: detected capacity change from 0 to 256 [ 46.765115][ T1347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 46.781287][ T1347] exFAT-fs (loop1): hint_cluster is invalid (1) [ 46.787906][ T1347] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 46.796723][ T1347] exFAT-fs (loop1): Filesystem has been set read-only [ 46.803579][ T1347] exFAT-fs (loop1): error, failed to bmap (inode : ffff888144deba90 iblock : 9, err : -5) [ 46.813749][ T1347] bio_check_eod: 7030 callbacks suppressed [ 46.813764][ T1347] syz.1.370: attempt to access beyond end of device [ 46.813764][ T1347] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 46.848094][ T1349] loop1: detected capacity change from 0 to 256 [ 46.861123][ T1349] FAT-fs (loop1): Directory bread(block 64) failed [ 46.867708][ T1349] FAT-fs (loop1): Directory bread(block 65) failed [ 46.874462][ T1349] FAT-fs (loop1): Directory bread(block 66) failed [ 46.881041][ T1349] FAT-fs (loop1): Directory bread(block 67) failed [ 46.887565][ T1349] FAT-fs (loop1): Directory bread(block 68) failed [ 46.894318][ T1349] FAT-fs (loop1): Directory bread(block 69) failed [ 46.901133][ T1349] FAT-fs (loop1): Directory bread(block 70) failed [ 46.907671][ T1349] FAT-fs (loop1): Directory bread(block 71) failed [ 46.914314][ T1349] FAT-fs (loop1): Directory bread(block 72) failed [ 46.920845][ T1349] FAT-fs (loop1): Directory bread(block 73) failed [ 47.164881][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.164881][ T357] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 47.178817][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.178817][ T357] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 47.195936][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.195936][ T357] loop1: rw=1, sector=1960, nr_sectors = 2048 limit=256 [ 47.221708][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.221708][ T357] loop1: rw=1, sector=4008, nr_sectors = 2048 limit=256 [ 47.242441][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.242441][ T357] loop1: rw=1, sector=6056, nr_sectors = 2048 limit=256 [ 47.262307][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.262307][ T357] loop1: rw=1, sector=8104, nr_sectors = 2048 limit=256 [ 47.279370][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.279370][ T357] loop1: rw=1, sector=10152, nr_sectors = 3968 limit=256 [ 47.297536][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.297536][ T357] loop1: rw=1, sector=14120, nr_sectors = 2520 limit=256 [ 47.313037][ T357] kworker/u4:4: attempt to access beyond end of device [ 47.313037][ T357] loop1: rw=1, sector=16640, nr_sectors = 2048 limit=256 [ 47.429945][ T1379] loop2: detected capacity change from 0 to 1024 [ 47.473680][ T1379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.536795][ T1388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 47.668461][ T1405] loop1: detected capacity change from 0 to 512 [ 47.684867][ T1405] EXT4-fs (loop1): bad s_want_extra_isize: 1414 [ 47.693604][ T290] EXT4-fs (loop2): unmounting filesystem. [ 47.806858][ T1420] ip_tables: iptables: counters copy to user failed while replacing table [ 47.913409][ T1428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.395'. [ 47.994199][ T1434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 48.129251][ T1450] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 48.145807][ T1450] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 48.179647][ T1454] loop2: detected capacity change from 0 to 256 [ 48.188362][ T1454] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 48.630458][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.640851][ T1420] 9pnet_fd: p9_fd_create_tcp (1420): problem connecting socket to 127.0.0.1 [ 48.664333][ T1457] device lo entered promiscuous mode [ 48.674985][ T1457] device tunl0 entered promiscuous mode [ 48.682118][ T1457] device gre0 entered promiscuous mode [ 48.688208][ T1457] device gretap0 entered promiscuous mode [ 48.694641][ T1457] device erspan0 entered promiscuous mode [ 48.700778][ T1457] device ip_vti0 entered promiscuous mode [ 48.706594][ T1457] device ip6_vti0 entered promiscuous mode [ 48.712750][ T1457] device sit0 entered promiscuous mode [ 48.718527][ T1457] device ip6tnl0 entered promiscuous mode [ 48.725756][ T1457] device ip6gre0 entered promiscuous mode [ 48.732567][ T1457] device syz_tun entered promiscuous mode [ 48.738552][ T1457] device ip6gretap0 entered promiscuous mode [ 48.744724][ T1457] device vcan0 entered promiscuous mode [ 48.750747][ T1457] device dummy0 entered promiscuous mode [ 48.756474][ T1457] device veth0 entered promiscuous mode [ 48.762241][ T1457] device veth1 entered promiscuous mode [ 48.767868][ T1457] device wg0 entered promiscuous mode [ 48.773424][ T1457] device wg1 entered promiscuous mode [ 48.778872][ T1457] device wg2 entered promiscuous mode [ 48.784952][ T1457] device veth0_to_bridge entered promiscuous mode [ 48.792068][ T1457] device bridge_slave_0 entered promiscuous mode [ 48.798611][ T1457] device veth1_to_bridge entered promiscuous mode [ 48.805257][ T1457] device bridge_slave_1 entered promiscuous mode [ 48.811860][ T1457] device veth0_to_bond entered promiscuous mode [ 48.818253][ T1457] device bond_slave_0 entered promiscuous mode [ 48.825048][ T1457] device veth1_to_bond entered promiscuous mode [ 48.831689][ T1457] device bond_slave_1 entered promiscuous mode [ 48.838005][ T1457] device veth0_to_team entered promiscuous mode [ 48.845112][ T1457] device team_slave_0 entered promiscuous mode [ 48.851576][ T1457] device veth1_to_team entered promiscuous mode [ 48.859436][ T1457] device team_slave_1 entered promiscuous mode [ 48.865941][ T1457] device veth0_to_batadv entered promiscuous mode [ 48.879405][ T1457] device batadv_slave_0 entered promiscuous mode [ 48.888562][ T1457] device veth1_to_batadv entered promiscuous mode [ 48.895383][ T1457] device batadv_slave_1 entered promiscuous mode [ 48.902086][ T1457] device xfrm0 entered promiscuous mode [ 48.907723][ T1457] device veth0_to_hsr entered promiscuous mode [ 48.914156][ T1457] device hsr_slave_0 entered promiscuous mode [ 48.920467][ T1457] device veth1_to_hsr entered promiscuous mode [ 48.926781][ T1457] device hsr_slave_1 entered promiscuous mode [ 48.933013][ T1457] device veth1_virt_wifi entered promiscuous mode [ 48.939577][ T1457] device veth0_virt_wifi entered promiscuous mode [ 48.946129][ T1457] device veth1_vlan entered promiscuous mode [ 48.953380][ T1457] device vlan0 entered promiscuous mode [ 48.959126][ T1457] device vlan1 entered promiscuous mode [ 48.965096][ T1457] device veth0_macvtap entered promiscuous mode [ 48.971770][ T1457] device macsec0 entered promiscuous mode [ 48.977698][ T1457] device bridge0 entered promiscuous mode [ 49.018566][ T1466] device syzkaller0 entered promiscuous mode [ 49.041227][ T1470] bridge0: port 3(syz_tun) entered blocking state [ 49.047760][ T1470] bridge0: port 3(syz_tun) entered disabled state [ 49.088600][ T1470] device syz_tun entered promiscuous mode [ 49.094587][ T1470] bridge0: port 3(syz_tun) entered blocking state [ 49.101075][ T1470] bridge0: port 3(syz_tun) entered forwarding state [ 49.127153][ T1482] overlayfs: failed to get inode (-116) [ 49.132908][ T1482] overlayfs: failed to look up (file0) for ino (-116) [ 49.145734][ T1485] af_packet: packet size is too long (35070 > 2016) [ 49.224926][ T1492] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.813768][ T1527] ip_tables: iptables: counters copy to user failed while replacing table [ 49.928601][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 49.928621][ T28] audit: type=1400 audit(1791980504.860:306): avc: denied { read } for pid=1531 comm="syz.3.436" path="socket:[21563]" dev="sockfs" ino=21563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.302730][ T1545] loop0: detected capacity change from 0 to 4096 [ 50.332290][ T1549] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.339512][ T1549] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.344545][ T1545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.382745][ T1545] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.393214][ T28] audit: type=1400 audit(1791980505.330:307): avc: denied { name_bind } for pid=1553 comm="syz.3.444" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.417278][ T1545] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 50.468693][ T1545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.471302][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.540100][ T1559] device veth0_vlan left promiscuous mode [ 50.559549][ T1558] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 50.579840][ T1559] device veth0_vlan entered promiscuous mode [ 50.587086][ T1559] device veth1_macvtap left promiscuous mode [ 50.593886][ T1559] device veth1_macvtap entered promiscuous mode [ 50.601436][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.608681][ T28] audit: type=1400 audit(1791980505.540:308): avc: denied { relabelto } for pid=1557 comm="syz.4.446" name="90" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 50.646477][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.662739][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.680862][ T28] audit: type=1400 audit(1791980505.540:309): avc: denied { associate } for pid=1557 comm="syz.4.446" name="90" dev="tmpfs" ino=483 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 50.688247][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.715585][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.730219][ T28] audit: type=1400 audit(1791980505.610:310): avc: denied { write } for pid=291 comm="syz-executor" name="90" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 50.781468][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.790020][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.802427][ T28] audit: type=1400 audit(1791980505.610:311): avc: denied { remove_name } for pid=291 comm="syz-executor" name="binderfs" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 50.810787][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.837142][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.856402][ T28] audit: type=1400 audit(1791980505.610:312): avc: denied { rmdir } for pid=291 comm="syz-executor" name="90" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 50.860346][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.884936][ T1585] loop4: detected capacity change from 0 to 128 [ 50.923666][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.932316][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.940789][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.949057][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.957690][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.966162][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.975016][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.983678][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.991960][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.000800][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.009297][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.022109][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.036185][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.049854][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.058776][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.067274][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.075891][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.092069][ T289] EXT4-fs (loop0): unmounting filesystem. [ 51.107679][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.130315][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.138893][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.148608][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.156971][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.165064][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.174323][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.182757][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.191333][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.245033][ T1598] loop4: detected capacity change from 0 to 512 [ 51.264086][ T1598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 51.279083][ T1598] System zones: 1-12 [ 51.284526][ T1598] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.456: missing EA_INODE flag [ 51.296511][ T1598] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.456: error while reading EA inode 12 err=-117 [ 51.309764][ T1598] EXT4-fs (loop4): 1 orphan inode deleted [ 51.315750][ T1598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.331157][ T28] audit: type=1400 audit(1791980506.270:313): avc: denied { create } for pid=1595 comm="syz.4.456" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 51.363425][ T291] EXT4-fs (loop4): unmounting filesystem. [ 51.425377][ T28] audit: type=1400 audit(1791980506.360:314): avc: denied { search } for pid=1623 comm="syz.0.463" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.467162][ T1629] device lo left promiscuous mode [ 51.472766][ T1629] device tunl0 left promiscuous mode [ 51.478393][ T1629] device gre0 left promiscuous mode [ 51.484340][ T1629] device gretap0 left promiscuous mode [ 51.490887][ T1629] device erspan0 left promiscuous mode [ 51.496766][ T1629] device ip_vti0 left promiscuous mode [ 51.502587][ T1629] device ip6_vti0 left promiscuous mode [ 51.508824][ T1629] device sit0 left promiscuous mode [ 51.515010][ T1629] device ip6tnl0 left promiscuous mode [ 51.520557][ T60] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 51.521133][ T1629] device ip6gre0 left promiscuous mode [ 51.534068][ T1629] device syz_tun left promiscuous mode [ 51.539988][ T1629] device ip6gretap0 left promiscuous mode [ 51.546179][ T1629] device vcan0 left promiscuous mode [ 51.551730][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.559047][ T1629] device dummy0 left promiscuous mode [ 51.565138][ T1629] device veth0 left promiscuous mode [ 51.570922][ T1629] device veth1 left promiscuous mode [ 51.576607][ T1629] device wg0 left promiscuous mode [ 51.582336][ T1629] device wg1 left promiscuous mode [ 51.588010][ T1629] device wg2 left promiscuous mode [ 51.593815][ T1629] device veth0_to_bridge left promiscuous mode [ 51.600655][ T1629] device bridge_slave_0 left promiscuous mode [ 51.606925][ T1629] device veth1_to_bridge left promiscuous mode [ 51.613655][ T1629] device bridge_slave_1 left promiscuous mode [ 51.619923][ T1629] device veth0_to_bond left promiscuous mode [ 51.626427][ T1629] device bond_slave_0 left promiscuous mode [ 51.632503][ T1629] device veth1_to_bond left promiscuous mode [ 51.638912][ T1629] device bond_slave_1 left promiscuous mode [ 51.645116][ T1629] device veth0_to_team left promiscuous mode [ 51.651752][ T1629] device team_slave_0 left promiscuous mode [ 51.657914][ T1629] device veth1_to_team left promiscuous mode [ 51.664366][ T1629] device team_slave_1 left promiscuous mode [ 51.670650][ T1629] device veth0_to_batadv left promiscuous mode [ 51.677199][ T1629] device batadv_slave_0 left promiscuous mode [ 51.683663][ T1629] device veth1_to_batadv left promiscuous mode [ 51.690263][ T1629] device batadv_slave_1 left promiscuous mode [ 51.696609][ T1629] device xfrm0 left promiscuous mode [ 51.702683][ T1629] device veth0_to_hsr left promiscuous mode [ 51.703156][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.709298][ T1629] device hsr_slave_0 left promiscuous mode [ 51.719541][ T60] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.726264][ T1629] device veth1_to_hsr left promiscuous mode [ 51.734556][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.741262][ T1629] device hsr_slave_1 left promiscuous mode [ 51.752087][ T60] usb 2-1: config 0 descriptor?? [ 51.754775][ T1629] device veth1_virt_wifi left promiscuous mode [ 51.766097][ T1629] device veth0_virt_wifi left promiscuous mode [ 51.772659][ T1629] device veth1_vlan left promiscuous mode [ 51.779607][ T1629] device vlan0 left promiscuous mode [ 51.785330][ T1629] device vlan1 left promiscuous mode [ 51.791034][ T1629] device veth1_macvtap left promiscuous mode [ 51.797416][ T1629] device veth0_macvtap left promiscuous mode [ 51.803911][ T1629] device veth1_macvtap entered promiscuous mode [ 51.810339][ T1629] device macsec0 left promiscuous mode [ 51.816882][ T1629] device bridge0 left promiscuous mode [ 51.823804][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.832518][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.840115][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.848923][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.857416][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.866046][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.874502][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.882768][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.891021][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.899127][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.907705][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.915981][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.924360][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.932494][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.940762][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.949327][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.957782][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.962928][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 51.966170][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.972028][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 51.980135][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.992005][ T60] usb 2-1: USB disconnect, device number 7 [ 51.994503][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.007883][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.016133][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.024362][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.032789][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.041205][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.049174][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.057303][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.064884][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.072482][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.080805][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.088982][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.511163][ T1652] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (263401) [ 52.550250][ T60] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 52.733074][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.741720][ T1660] tipc: Enabled bearer , priority 0 [ 52.744328][ T60] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 52.754777][ T1660] tipc: Enabled bearer , priority 10 [ 52.759848][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.773355][ T1660] tipc: New replicast peer: 255.255.255.255 [ 52.777185][ T60] usb 2-1: config 0 descriptor?? [ 52.779801][ T1660] tipc: Enabled bearer , priority 10 [ 52.909770][ T1671] bridge0: port 3(syz_tun) entered blocking state [ 52.916470][ T1671] bridge0: port 3(syz_tun) entered disabled state [ 52.923749][ T1671] device syz_tun entered promiscuous mode [ 52.929713][ T1671] bridge0: port 3(syz_tun) entered blocking state [ 52.936179][ T1671] bridge0: port 3(syz_tun) entered forwarding state [ 52.947193][ T1671] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 52.959765][ T1675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 52.969021][ T1675] Zero length message leads to an empty skb [ 53.088901][ T28] audit: type=1400 audit(1791980508.020:315): avc: denied { read } for pid=1683 comm="syz.0.486" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.118125][ T1686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 53.601603][ T60] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 53.615163][ T60] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 53.919465][ T24] usb 2-1: USB disconnect, device number 8 [ 53.919504][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 54.003479][ T1727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 54.027522][ T1727] HTB: quantum of class 80050002 is big. Consider r2q change. [ 54.408454][ T1754] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 54.939812][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 54.939837][ T28] audit: type=1400 audit(1791980509.870:332): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.022355][ T1792] pit: kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 55.039646][ T1792] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 55.050966][ T1792] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 55.075516][ T1792] pit: kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 55.090537][ T1792] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 55.103426][ T1792] pit: kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 55.120794][ T1792] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 55.138941][ T1792] pit: kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 55.156168][ T1792] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 55.172839][ T1792] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 55.285799][ T1800] netlink: 8952 bytes leftover after parsing attributes in process `syz.0.532'. [ 55.304902][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 55.377069][ T1804] loop2: detected capacity change from 0 to 512 [ 55.440327][ T1804] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.534: iget: bad i_size value: 38620345925642 [ 55.515316][ T1804] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.534: couldn't read orphan inode 15 (err -117) [ 55.681722][ T1804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.844002][ T1830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.534: bg 0: block 5: invalid block bitmap [ 55.910779][ T1830] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1096 with error 28 [ 55.979344][ T1830] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.979344][ T1830] [ 56.006306][ T1834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 56.016454][ T1830] EXT4-fs (loop2): Total free blocks count 0 [ 56.031989][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.032207][ T1830] EXT4-fs (loop2): Free/Dirty block details [ 56.060199][ T1830] EXT4-fs (loop2): free_blocks=0 [ 56.070551][ T1836] loop1: detected capacity change from 0 to 128 [ 56.079494][ T1830] EXT4-fs (loop2): dirty_blocks=1096 [ 56.092970][ T1836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.104657][ T1830] EXT4-fs (loop2): Block reservation details [ 56.113703][ T1836] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.130230][ T1830] EXT4-fs (loop2): i_reserved_data_blocks=1096 [ 56.136454][ T28] audit: type=1400 audit(1791980511.070:333): avc: denied { create } for pid=1835 comm="syz.1.546" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.169873][ T1836] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 56.179459][ T28] audit: type=1400 audit(1791980511.110:334): avc: denied { write } for pid=1835 comm="syz.1.546" name="encrypted_dir" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.180979][ T1836] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 56.201825][ T28] audit: type=1400 audit(1791980511.110:335): avc: denied { add_name } for pid=1835 comm="syz.1.546" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.255928][ T287] EXT4-fs (loop1): unmounting filesystem. [ 56.286585][ T290] EXT4-fs (loop2): unmounting filesystem. [ 56.339039][ T1852] ip_tables: iptables: counters copy to user failed while replacing table [ 56.427041][ T1858] FAULT_INJECTION: forcing a failure. [ 56.427041][ T1858] name failslab, interval 1, probability 0, space 0, times 0 [ 56.456280][ T1858] CPU: 1 PID: 1858 Comm: syz.0.555 Not tainted syzkaller #0 [ 56.463615][ T1858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.473702][ T1858] Call Trace: [ 56.476993][ T1858] [ 56.481256][ T1858] __dump_stack+0x21/0x24 [ 56.485749][ T1858] dump_stack_lvl+0x110/0x170 [ 56.490454][ T1858] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.495503][ T1858] ? __kasan_check_write+0x14/0x20 [ 56.500634][ T1858] ? mutex_unlock+0x8f/0x230 [ 56.505233][ T1858] ? __cfi_mutex_unlock+0x10/0x10 [ 56.510268][ T1858] ? io_req_task_cancel+0x1d3/0x2d0 [ 56.515550][ T1858] dump_stack+0x15/0x24 [ 56.519834][ T1858] should_fail_ex+0x3bf/0x510 [ 56.524526][ T1858] __should_failslab+0xac/0xf0 [ 56.529296][ T1858] should_failslab+0x9/0x20 [ 56.533787][ T1858] __kmem_cache_alloc_node+0x3d/0x2d0 [ 56.539156][ T1858] ? io_req_prep_async+0x28c/0x6c0 [ 56.544263][ T1858] ? __cfi_tctx_task_work+0x10/0x10 [ 56.549454][ T1858] ? io_req_prep_async+0x28c/0x6c0 [ 56.554580][ T1858] __kmalloc+0xa4/0x1e0 [ 56.558725][ T1858] ? io_file_get_normal+0x71/0x250 [ 56.563836][ T1858] ? __cfi_io_uring_cmd_prep_async+0x10/0x10 [ 56.569814][ T1858] io_req_prep_async+0x28c/0x6c0 [ 56.574748][ T1858] io_queue_sqe_fallback+0x60/0x1b0 [ 56.579938][ T1858] io_submit_sqes+0x18e0/0x1b80 [ 56.584789][ T1858] __se_sys_io_uring_enter+0x32c/0x1f50 [ 56.590333][ T1858] ? arch_do_signal_or_restart+0xd1/0x11c0 [ 56.596134][ T1858] ? __x64_sys_io_uring_enter+0x100/0x100 [ 56.601845][ T1858] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.607119][ T1858] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 56.612305][ T1858] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.618479][ T1858] ? __kasan_check_write+0x14/0x20 [ 56.624288][ T1858] __x64_sys_io_uring_enter+0xe5/0x100 [ 56.629804][ T1858] x64_sys_call+0x4b2/0x9a0 [ 56.634310][ T1858] do_syscall_64+0x4c/0xa0 [ 56.638727][ T1858] ? clear_bhb_loop+0x30/0x80 [ 56.643398][ T1858] ? clear_bhb_loop+0x30/0x80 [ 56.648067][ T1858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.653964][ T1858] RIP: 0033:0x7fd20b99e559 [ 56.658372][ T1858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.677971][ T1858] RSP: 002b:00007fd20c861f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 56.686575][ T1858] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fd20b99e559 [ 56.694550][ T1858] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 56.702543][ T1858] RBP: 000000000000088b R08: 0000000000000000 R09: 0000000000000008 [ 56.710545][ T1858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 56.718510][ T1858] R13: 0000200000000808 R14: 0000000000000fbb R15: 0000000000000000 [ 56.726480][ T1858] [ 56.731865][ T1880] fuse: Bad value for 'fd' [ 56.759428][ T1885] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 4294967286. macoff=82 [ 56.795769][ T1891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'. [ 56.810374][ T1891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 56.824108][ T1893] FAULT_INJECTION: forcing a failure. [ 56.824108][ T1893] name failslab, interval 1, probability 0, space 0, times 0 [ 56.837181][ T1893] CPU: 0 PID: 1893 Comm: syz.1.566 Not tainted syzkaller #0 [ 56.844485][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.854552][ T1893] Call Trace: [ 56.857841][ T1893] [ 56.860776][ T1893] __dump_stack+0x21/0x24 [ 56.865124][ T1893] dump_stack_lvl+0x110/0x170 [ 56.869818][ T1893] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.874861][ T1893] dump_stack+0x15/0x24 [ 56.879037][ T1893] should_fail_ex+0x3bf/0x510 [ 56.883728][ T1893] __should_failslab+0xac/0xf0 [ 56.888507][ T1893] should_failslab+0x9/0x20 [ 56.893024][ T1893] __kmem_cache_alloc_node+0x3d/0x2d0 [ 56.898405][ T1893] ? assoc_array_insert+0x40f/0x3340 [ 56.903711][ T1893] ? assoc_array_walk+0x362/0x500 [ 56.908755][ T1893] ? assoc_array_insert+0x40f/0x3340 [ 56.914084][ T1893] kmalloc_trace+0x29/0xb0 [ 56.918512][ T1893] assoc_array_insert+0x40f/0x3340 [ 56.923646][ T1893] ? __cfi_key_default_cmp+0x10/0x10 [ 56.928942][ T1893] ? __cfi_keyring_search_iterator+0x10/0x10 [ 56.934927][ T1893] __key_link_begin+0xe1/0x210 [ 56.939704][ T1893] request_key_and_link+0x6c2/0x1180 [ 56.945006][ T1893] ? key_task_permission+0x36d/0x4a0 [ 56.950312][ T1893] ? __cfi_request_key_and_link+0x10/0x10 [ 56.956043][ T1893] ? downgrade_write+0x370/0x370 [ 56.961042][ T1893] ? __cfi_key_default_cmp+0x10/0x10 [ 56.966339][ T1893] ? __cfi_keyring_search_iterator+0x10/0x10 [ 56.972335][ T1893] ? __kasan_check_write+0x14/0x20 [ 56.977483][ T1893] __se_sys_request_key+0x293/0x350 [ 56.982739][ T1893] ? __x64_sys_request_key+0xb0/0xb0 [ 56.988042][ T1893] ? fpregs_restore_userregs+0x128/0x260 [ 56.993686][ T1893] __x64_sys_request_key+0x9b/0xb0 [ 56.999245][ T1893] x64_sys_call+0x69c/0x9a0 [ 57.003758][ T1893] do_syscall_64+0x4c/0xa0 [ 57.008190][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.012878][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.017565][ T1893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.023470][ T1893] RIP: 0033:0x7f829fb9e559 [ 57.027886][ T1893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.047583][ T1893] RSP: 002b:00007f82a0a32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 57.056015][ T1893] RAX: ffffffffffffffda RBX: 00007f829fe25fa0 RCX: 00007f829fb9e559 [ 57.064006][ T1893] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 57.071989][ T1893] RBP: 00007f829fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 57.079975][ T1893] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 57.087963][ T1893] R13: 00007f829fe26038 R14: 00007f829fe25fa0 R15: 00007ffce7d4ef38 [ 57.095956][ T1893] [ 57.169793][ T1900] loop2: detected capacity change from 0 to 4096 [ 57.202562][ T1900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.211435][ T28] audit: type=1400 audit(1791980512.140:336): avc: denied { create } for pid=1907 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.242728][ T1900] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.261043][ T1913] bridge0: port 3(syz_tun) entered disabled state [ 57.267739][ T1900] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 57.293048][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.302797][ T1900] System zones: 0-5 [ 57.312402][ T1900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.322351][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.383407][ T1896] loop4: detected capacity change from 0 to 40427 [ 57.400035][ T1896] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 57.412796][ T1896] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.421731][ T1896] F2FS-fs (loop4): Image doesn't support compression [ 57.428566][ T1896] F2FS-fs (loop4): Image doesn't support compression [ 57.445551][ T1896] F2FS-fs (loop4): invalid crc value [ 57.460088][ T1896] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 57.498708][ T28] audit: type=1400 audit(1791980512.430:337): avc: denied { create } for pid=1931 comm="syz.0.579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.532177][ T28] audit: type=1400 audit(1791980512.430:338): avc: denied { write } for pid=1931 comm="syz.0.579" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.560243][ T1896] F2FS-fs (loop4): Start checkpoint disabled! [ 57.570617][ T1896] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 57.580666][ T28] audit: type=1400 audit(1791980512.430:339): avc: denied { open } for pid=1931 comm="syz.0.579" path="/112/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.603543][ T1896] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 57.611775][ T1896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 57.638668][ T28] audit: type=1400 audit(1791980512.460:340): avc: denied { ioctl } for pid=1931 comm="syz.0.579" path="/112/file0" dev="tmpfs" ino=622 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.668154][ T28] audit: type=1400 audit(1791980512.460:341): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.772500][ T290] EXT4-fs (loop2): unmounting filesystem. [ 57.784777][ T1956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 57.815649][ T1956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 57.887493][ T1968] netlink: 'syz.2.589': attribute type 30 has an invalid length. [ 57.925932][ T1971] FAULT_INJECTION: forcing a failure. [ 57.925932][ T1971] name failslab, interval 1, probability 0, space 0, times 0 [ 57.970619][ T1971] CPU: 1 PID: 1971 Comm: syz.1.590 Not tainted syzkaller #0 [ 57.977974][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.988061][ T1971] Call Trace: [ 57.991353][ T1971] [ 57.994294][ T1971] __dump_stack+0x21/0x24 [ 57.998823][ T1971] dump_stack_lvl+0x110/0x170 [ 58.003520][ T1971] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.008569][ T1971] dump_stack+0x15/0x24 [ 58.012750][ T1971] should_fail_ex+0x3bf/0x510 [ 58.017447][ T1971] __should_failslab+0xac/0xf0 [ 58.022249][ T1971] should_failslab+0x9/0x20 [ 58.026772][ T1971] __kmem_cache_alloc_node+0x3d/0x2d0 [ 58.032172][ T1971] ? legacy_init_fs_context+0x51/0xb0 [ 58.037573][ T1971] ? legacy_init_fs_context+0x51/0xb0 [ 58.042973][ T1971] kmalloc_trace+0x29/0xb0 [ 58.047422][ T1971] legacy_init_fs_context+0x51/0xb0 [ 58.052651][ T1971] alloc_fs_context+0x653/0x7d0 [ 58.057539][ T1971] fs_context_for_mount+0x22/0x30 [ 58.062605][ T1971] do_new_mount+0x116/0xb40 [ 58.067131][ T1971] ? security_capable+0x99/0xc0 [ 58.072011][ T1971] path_mount+0x640/0xfd0 [ 58.076383][ T1971] __se_sys_mount+0x320/0x390 [ 58.081078][ T1971] ? __x64_sys_mount+0xd0/0xd0 [ 58.085864][ T1971] ? __kasan_check_write+0x14/0x20 [ 58.090994][ T1971] ? fpregs_restore_userregs+0x128/0x260 [ 58.096651][ T1971] __x64_sys_mount+0xbf/0xd0 [ 58.101303][ T1971] x64_sys_call+0x65d/0x9a0 [ 58.105831][ T1971] do_syscall_64+0x4c/0xa0 [ 58.110277][ T1971] ? clear_bhb_loop+0x30/0x80 [ 58.114979][ T1971] ? clear_bhb_loop+0x30/0x80 [ 58.119776][ T1971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.125699][ T1971] RIP: 0033:0x7f829fb9e559 [ 58.130133][ T1971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.149840][ T1971] RSP: 002b:00007f82a0a32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.158291][ T1971] RAX: ffffffffffffffda RBX: 00007f829fe25fa0 RCX: 00007f829fb9e559 [ 58.166281][ T1971] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 58.174269][ T1971] RBP: 00007f829fc358b0 R08: 00002000000000c0 R09: 0000000000000000 [ 58.182258][ T1971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.190249][ T1971] R13: 00007f829fe26038 R14: 00007f829fe25fa0 R15: 00007ffce7d4ef38 [ 58.198246][ T1971] [ 58.255037][ T1980] overlayfs: statfs failed on './file0' [ 58.275802][ T1981] kvm: pic: non byte read [ 58.281648][ T1981] kvm: pic: single mode not supported [ 58.281663][ T1981] kvm: pic: level sensitive irq not supported [ 58.289685][ T1981] kvm: pic: non byte read [ 58.304871][ T1981] kvm: pic: single mode not supported [ 58.304887][ T1981] kvm: pic: level sensitive irq not supported [ 58.310753][ T1981] kvm: pic: non byte read [ 58.321915][ T1981] kvm: pic: single mode not supported [ 58.321971][ T1981] kvm: pic: non byte read [ 58.332814][ T1981] kvm: pic: single mode not supported [ 58.339490][ T1981] kvm: pic: non byte read [ 58.356713][ T1981] kvm: pic: non byte read [ 58.362482][ T1981] kvm: pic: non byte read [ 58.371092][ T1986] loop2: detected capacity change from 0 to 8192 [ 58.378161][ T1981] kvm: pic: non byte read [ 58.387473][ T1993] netlink: 'syz.0.599': attribute type 4 has an invalid length. [ 58.397364][ T1981] kvm: pic: non byte read [ 58.406970][ T1986] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 58.413801][ T1986] loop2: p1 start 4294967295 is beyond EOD, truncated [ 58.432171][ T1993] netlink: 'syz.0.599': attribute type 4 has an invalid length. [ 58.451021][ T1986] loop2: p5 start 4294967295 is beyond EOD, truncated [ 58.457459][ T1995] ip_tables: iptables: counters copy to user failed while replacing table [ 58.521384][ T24] kernel write not supported for file /newroot/145/file0 (pid: 24 comm: kworker/1:0) [ 58.547195][ T1024] udevd[1024]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 58.548427][ T1162] udevd[1162]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 58.558077][ T914] udevd[914]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 58.578039][ T990] udevd[990]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 58.738162][ T2014] overlayfs: failed to clone upperpath [ 58.889754][ T2020] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.611'. [ 59.187772][ T2035] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 59.236502][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 59.383911][ T2047] bridge0: port 3(syz_tun) entered disabled state [ 59.755119][ T2087] loop2: detected capacity change from 0 to 2048 [ 59.761986][ T19] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 59.800956][ T2087] loop2: p1 < > [ 59.962832][ T19] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.977501][ T19] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.988344][ T19] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.001510][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.009660][ T19] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 60.019013][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.030967][ T19] usb 2-1: config 0 descriptor?? [ 60.092948][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 60.092962][ T28] audit: type=1400 audit(1791980515.030:350): avc: denied { connect } for pid=2102 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.440913][ T19] input: HID 17ef:6047 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6047.0001/input/input7 [ 60.540810][ T19] lenovo 0003:17EF:6047.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 60.654641][ T2126] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.661697][ T2124] loop2: detected capacity change from 0 to 8192 [ 60.693768][ T2124] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.609823][ T28] audit: type=1400 audit(1791980517.540:351): avc: denied { ioctl } for pid=2157 comm="syz.2.670" path="socket:[24624]" dev="sockfs" ino=24624 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.655013][ T2163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 62.662588][ T28] audit: type=1400 audit(1791980517.600:352): avc: denied { write } for pid=2166 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.667649][ T2171] overlayfs: failed to clone upperpath [ 62.720568][ T2175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.672'. [ 62.868109][ T28] audit: type=1400 audit(1791980517.800:353): avc: denied { create } for pid=2181 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.185272][ T2203] bridge0: port 3(syz_tun) entered blocking state [ 63.210441][ T2203] bridge0: port 3(syz_tun) entered disabled state [ 63.225137][ T2203] device syz_tun entered promiscuous mode [ 63.248122][ T2203] bridge0: port 3(syz_tun) entered blocking state [ 63.254620][ T2203] bridge0: port 3(syz_tun) entered forwarding state [ 63.340564][ T309] usb 2-1: USB disconnect, device number 9 [ 63.475396][ T2214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 63.581290][ T28] audit: type=1400 audit(1791980518.520:354): avc: denied { watch watch_reads } for pid=2221 comm="syz.4.692" path="/file1" dev="ramfs" ino=24092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 63.629190][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 63.671397][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 63.690798][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.709788][ T19] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 63.718401][ T2230] netlink: 'syz.1.696': attribute type 11 has an invalid length. [ 63.727831][ T2230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.696'. [ 63.739083][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 63.746947][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 63.754849][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 64.190508][ T1904] bridge0: port 3(syz_tun) entered disabled state