last executing test programs: 37.394729358s ago: executing program 2 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 37.377494278s ago: executing program 2 (id=30): r0 = syz_create_resource$futex(&(0x7f0000000380)=0x1) r1 = syz_create_resource$futex(&(0x7f00000003c0)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r1, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, &(0x7f0000000440)={0x0, 0x3938700}, r1, 0x1) 36.50217833s ago: executing program 2 (id=44): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 36.433262902s ago: executing program 2 (id=47): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x4000, &(0x7f0000000640)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000740)="$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") mkdir(&(0x7f000000c400)='./bus\x00', 0x0) mount$incfs(&(0x7f000000c440)='.\x00', &(0x7f000000c480)='./bus\x00', &(0x7f000000c4c0), 0xc002, 0x0) chdir(&(0x7f000000c500)='./bus\x00') open(&(0x7f000000c680)='./file1\x00', 0x4827e, 0xdc) openat(0xffffffffffffff9c, &(0x7f0000006700)='./file1\x00', 0x42, 0x0) 36.281626445s ago: executing program 2 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='res', 0x3) 36.09520308s ago: executing program 2 (id=51): r0 = memfd_create(&(0x7f0000001e40)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000002000), 0xfdef) tee(r2, r1, 0x1003, 0x5) splice(r2, 0x0, r0, 0x0, 0x4010d00, 0x0) 35.966516133s ago: executing program 32 (id=51): r0 = memfd_create(&(0x7f0000001e40)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000002000), 0xfdef) tee(r2, r1, 0x1003, 0x5) splice(r2, 0x0, r0, 0x0, 0x4010d00, 0x0) 24.993320901s ago: executing program 3 (id=311): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x3398, &(0x7f0000000200)={0x0, 0xcb14, 0x51ea, 0x0, 0x4001bf}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000164000/0x3000)=nil, 0x3000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 24.910787063s ago: executing program 3 (id=314): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x55, 0x8, 0xaf, 0xb, "f3fffffe2c010045"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 24.867430904s ago: executing program 3 (id=316): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[], 0x8, 0x1cf, &(0x7f0000000140)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x2a880, 0x97) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x3, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 24.756829806s ago: executing program 3 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {0xffc, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0xfc, 0x0, 0x4, 0x1}, {0xdddd0000, 0xdddd8000, 0x18, 0x1e, 0x0, 0x4, 0x81, 0x0, 0x3, 0xe, 0x3, 0x6}, {0xdddd0000, 0x200000, 0xb, 0xfd, 0x3, 0x0, 0x3}, {0x100000, 0x25000, 0xd, 0x7, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x80a0000, 0x8, 0x4, 0x1, 0x5, 0x4, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x26000, 0xf, 0x6, 0x5, 0x3, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x8, 0x82, 0xfc, 0x10, 0x0, 0xe, 0x0, 0x3}, {0x4000, 0x800}, {0x100000, 0xfffe}, 0x40040018, 0x0, 0x0, 0x10, 0x1000010000000001, 0x0, 0x900, [0x0, 0x400000000000, 0x6, 0x5]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) 24.652350738s ago: executing program 1 (id=327): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) preadv(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/257, 0x101}], 0x1, 0x8a7, 0x6) 24.636781269s ago: executing program 1 (id=328): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 24.433622354s ago: executing program 0 (id=331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x55, 0x8, 0xaf, 0xb, "f3fffffe2c010045"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 24.433456174s ago: executing program 3 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 24.409894714s ago: executing program 0 (id=334): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r1 = syz_open_procfs(0x0, &(0x7f00000019c0)='pagemap\x00') pread64(r1, &(0x7f0000001a00)=""/102400, 0x19000, 0x1000000000) 24.391102495s ago: executing program 3 (id=335): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000700)) 24.283982338s ago: executing program 0 (id=338): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.209616379s ago: executing program 1 (id=341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.723686172s ago: executing program 0 (id=345): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c1d, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 23.712505492s ago: executing program 4 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/kmsg\x00', 0x20800, 0x105) lseek(r0, 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) 23.615353494s ago: executing program 4 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000500)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 23.494511117s ago: executing program 0 (id=348): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa, 0xfffffffffeffffff}, 0x0) 23.423939468s ago: executing program 4 (id=349): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23.108891806s ago: executing program 4 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 22.94294172s ago: executing program 0 (id=351): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 22.94278328s ago: executing program 1 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$binfmt_aout(r2, &(0x7f0000000640)={{0xcc, 0x6, 0x7, 0x67, 0x26e, 0x0, 0x21c, 0x7fff}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22.94263056s ago: executing program 4 (id=353): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}}, 0x0) 22.845044973s ago: executing program 1 (id=354): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x41, 0x1506, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f00000016c0), &(0x7f0000001700)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000001740)) syz_mount_image$vfat(&(0x7f0000001780), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380687b, 0x0, 0x5, 0x0, &(0x7f00000018c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x1a1) openat$dir(0xffffffffffffff9c, &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x100) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 22.844719153s ago: executing program 4 (id=355): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.667174707s ago: executing program 1 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20001e, &(0x7f0000005840)=ANY=[@ANYBLOB="666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e7400616c6c6f635f6d6f64653d72657573652c6a71666d743d76667376302c70726a71756f74613d75742d566890df9effffc2ad9d794f2516ce73c183000000000000000000002c696e6c696e655f78617474722c7265736769643d", @ANYRESHEX=0x0, @ANYBLOB=',fsync_mode=strict,jqfmt=vfsv0,memory=low,fa{tboot,errors=remount-ro,prjjquota=whint_mode=off,discard,acl,memory=normal,smackfsroot=&[,pcr=00000000000000000034,\x00'], 0x1, 0x5548, &(0x7f0000000180)="$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") pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 9.558653537s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 7.844565079s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 6.035355853s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 4.12121879s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 2.112012578s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 0s ago: executing program 5 (id=332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40400) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 22.833371][ T28] audit: type=1400 audit(1792005428.938:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.837487][ T279] cgroup: Unknown subsys name 'net' [ 22.856151][ T28] audit: type=1400 audit(1792005428.938:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.883571][ T28] audit: type=1400 audit(1792005428.978:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.884027][ T279] cgroup: Unknown subsys name 'devices' [ 23.000414][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.006129][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.141694][ T28] audit: type=1400 audit(1792005429.248:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.164953][ T28] audit: type=1400 audit(1792005429.248:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.190112][ T28] audit: type=1400 audit(1792005429.248:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.288111][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.297121][ T28] audit: type=1400 audit(1792005429.408:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.322670][ T28] audit: type=1400 audit(1792005429.408:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.353291][ T28] audit: type=1400 audit(1792005429.458:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.354607][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.379433][ T28] audit: type=1400 audit(1792005429.458:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.609663][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.616755][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.624449][ T289] device bridge_slave_0 entered promiscuous mode [ 24.633516][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.640691][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.648090][ T289] device bridge_slave_1 entered promiscuous mode [ 24.705101][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.712233][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.719955][ T288] device bridge_slave_0 entered promiscuous mode [ 24.745757][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.752903][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.760565][ T288] device bridge_slave_1 entered promiscuous mode [ 24.787559][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.794747][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.802356][ T291] device bridge_slave_0 entered promiscuous mode [ 24.812331][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.819670][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.827191][ T291] device bridge_slave_1 entered promiscuous mode [ 24.846045][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.853199][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.860745][ T287] device bridge_slave_0 entered promiscuous mode [ 24.867965][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.875082][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.882574][ T287] device bridge_slave_1 entered promiscuous mode [ 24.928951][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.936027][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.943538][ T290] device bridge_slave_0 entered promiscuous mode [ 24.953485][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.960731][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.968304][ T290] device bridge_slave_1 entered promiscuous mode [ 25.151170][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.158276][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.165633][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.172795][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.181355][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.188448][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.195738][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.202819][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.235088][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.242279][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.249603][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.256648][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.266065][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.273150][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.280467][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.287512][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.319460][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.326922][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.334454][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.342513][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.349859][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.357090][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.364584][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.371788][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.379812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.387359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.420496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.428464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.436130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.444825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.453427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.461829][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.468959][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.476418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.484924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.493145][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.500233][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.507680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.515742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.523798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.532008][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.539126][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.546556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.554807][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.561850][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.569529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.577738][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.584920][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.592397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.621452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.630063][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.637106][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.644675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.653250][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.660356][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.668361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.676604][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.683722][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.691313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.699707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.707706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.716052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.735359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.742899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.750558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.759525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.767897][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.775008][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.782634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.790785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.798865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.807475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.815846][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.822891][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.830511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.838950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.852502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.861186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.878377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.886690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.894877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.904127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.912514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.920654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.939276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.947300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.955773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.964048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.973162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.980790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.988469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.995972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.004336][ T289] device veth0_vlan entered promiscuous mode [ 26.018029][ T290] device veth0_vlan entered promiscuous mode [ 26.026275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.034543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.042893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.051221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.069182][ T287] device veth0_vlan entered promiscuous mode [ 26.077693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.086420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.094973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.103586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.111789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.120330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.128891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.136414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.154854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.163249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.178953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.187237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.195537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.203952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.211507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.219139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.226586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.234313][ T291] device veth0_vlan entered promiscuous mode [ 26.246256][ T290] device veth1_macvtap entered promiscuous mode [ 26.253876][ T288] device veth0_vlan entered promiscuous mode [ 26.261920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.274247][ T287] device veth1_macvtap entered promiscuous mode [ 26.286680][ T291] device veth1_macvtap entered promiscuous mode [ 26.294441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.302783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.311227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.323019][ T289] device veth1_macvtap entered promiscuous mode [ 26.333397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.341802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.350326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.357981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.366703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.390195][ T288] device veth1_macvtap entered promiscuous mode [ 26.400217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.409690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.417992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.426735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.435215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.443748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.452260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.460857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.469333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.477674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.486211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.494704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.503163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.511765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.520257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.542017][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.550559][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.559222][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.567550][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.596962][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.762549][ T333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.895341][ T350] device syzkaller1 entered promiscuous mode [ 26.906919][ T292] kernel write not supported for file bpf-prog (pid: 292 comm: kworker/0:2) [ 26.957002][ T352] loop3: detected capacity change from 0 to 4096 [ 26.976563][ T352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.990676][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.050827][ T288] EXT4-fs (loop3): unmounting filesystem. [ 27.178424][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 27.191374][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.207093][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.226787][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.242541][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.260294][ T6] usb 5-1: config 0 descriptor?? [ 27.272596][ T6] hub 5-1:0.0: USB hub found [ 27.434651][ T380] loop3: detected capacity change from 0 to 40427 [ 27.447743][ T380] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 27.457562][ T380] F2FS-fs (loop3): invalid crc value [ 27.474341][ T6] hub 5-1:0.0: 1 port detected [ 27.479795][ T380] F2FS-fs (loop3): invalid crc value [ 27.496100][ T380] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 27.609352][ T389] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 27.637479][ T391] loop0: detected capacity change from 0 to 256 [ 27.644852][ T391] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.655851][ T391] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 27.667120][ T391] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 27.689399][ T391] loop0: Can't mount, would change RO state [ 27.717454][ T393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.36'. [ 27.743558][ T395] loop0: detected capacity change from 0 to 128 [ 27.750801][ T395] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 27.807880][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.807880][ T8] loop0: rw=1, sector=156, nr_sectors = 1 limit=128 [ 27.822154][ T8] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 27.832418][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.832418][ T8] loop0: rw=1, sector=157, nr_sectors = 1 limit=128 [ 27.846314][ T8] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 27.854979][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.854979][ T8] loop0: rw=1, sector=158, nr_sectors = 1 limit=128 [ 27.869480][ T8] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 27.878057][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 27.878072][ T28] audit: type=1400 audit(1792005433.978:168): avc: denied { mount } for pid=400 comm="syz.3.41" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.900463][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.900463][ T8] loop0: rw=1, sector=159, nr_sectors = 1 limit=128 [ 27.915193][ T28] audit: type=1400 audit(1792005434.008:169): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.922542][ T8] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 27.951008][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.951008][ T8] loop0: rw=1, sector=160, nr_sectors = 1 limit=128 [ 27.964652][ T8] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 27.971026][ T403] loop3: detected capacity change from 0 to 256 [ 27.974139][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.974139][ T8] loop0: rw=1, sector=161, nr_sectors = 1 limit=128 [ 27.993344][ T8] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 28.013235][ T403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 28.025742][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 28.051798][ T28] audit: type=1400 audit(1792005434.158:170): avc: denied { write } for pid=402 comm="syz.3.42" name="file1" dev="loop3" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.089816][ T6] hub 5-1:0.0: activate --> -90 [ 28.117889][ T412] loop2: detected capacity change from 0 to 128 [ 28.127929][ T28] audit: type=1400 audit(1792005434.178:171): avc: denied { setopt } for pid=404 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.147491][ T414] device sit0 entered promiscuous mode [ 28.163232][ T28] audit: type=1400 audit(1792005434.178:172): avc: denied { ioctl } for pid=404 comm="syz.1.43" path="socket:[16605]" dev="sockfs" ino=16605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.175815][ T414] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 28.205356][ T412] incfs: ino conflict with backing FS 1 [ 28.208983][ T28] audit: type=1400 audit(1792005434.178:173): avc: denied { setopt } for pid=406 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.226938][ T414] netlink: 1 bytes leftover after parsing attributes in process `syz.0.45'. [ 28.238386][ T28] audit: type=1400 audit(1792005434.178:174): avc: denied { write } for pid=404 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.261865][ T289] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 28.270466][ T28] audit: type=1400 audit(1792005434.178:175): avc: denied { map } for pid=402 comm="syz.3.42" path="/9/file1/file1" dev="loop3" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.293754][ T289] FAT-fs (loop2): Filesystem has been set read-only [ 28.294700][ T28] audit: type=1400 audit(1792005434.198:176): avc: denied { read } for pid=405 comm="syz.2.44" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.311324][ T289] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 28.322104][ T28] audit: type=1400 audit(1792005434.278:177): avc: denied { mounton } for pid=411 comm="syz.2.47" path="/13/file0/bus" dev="loop2" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 28.362656][ T289] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 28.437079][ T289] syz-executor (289) used greatest stack depth: 20768 bytes left [ 28.459756][ T423] loop0: detected capacity change from 0 to 128 [ 28.480912][ T423] ======================================================= [ 28.480912][ T423] WARNING: The mand mount option has been deprecated and [ 28.480912][ T423] and is ignored by this kernel. Remove the mand [ 28.480912][ T423] option from the mount to silence this warning. [ 28.480912][ T423] ======================================================= [ 28.520141][ T372] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.528501][ T423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.547349][ T423] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.560076][ T6] usb 5-1-port1: config error [ 28.568604][ T6] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 28.584631][ T24] usb 5-1: USB disconnect, device number 2 [ 28.615844][ T287] EXT4-fs (loop0): unmounting filesystem. [ 28.690891][ T434] loop3: detected capacity change from 0 to 512 [ 28.718423][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 28.728957][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.754613][ T434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.770434][ T434] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.782020][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.798255][ T372] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.811346][ T372] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.820594][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.832858][ T372] usb 2-1: config 0 descriptor?? [ 28.919172][ T43] device bridge_slave_1 left promiscuous mode [ 28.938293][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.949170][ T43] device bridge_slave_0 left promiscuous mode [ 28.955370][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.965143][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.972228][ T43] device veth1_macvtap left promiscuous mode [ 28.985598][ T43] device veth0_vlan left promiscuous mode [ 28.996482][ T441] loop3: detected capacity change from 0 to 512 [ 29.069673][ T441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.099533][ T441] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.146351][ T441] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 29.199851][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.208204][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.215084][ T451] loop4: detected capacity change from 0 to 512 [ 29.226699][ T438] device bridge_slave_0 entered promiscuous mode [ 29.239897][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.247196][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.261044][ T451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.274394][ T372] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 29.286313][ T451] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.305123][ T288] EXT4-fs (loop3): unmounting filesystem. [ 29.311515][ T438] device bridge_slave_1 entered promiscuous mode [ 29.336795][ T372] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 29.365786][ T291] EXT4-fs (loop4): unmounting filesystem. [ 29.439949][ T460] xt_hashlimit: size too large, truncated to 1048576 [ 29.524364][ T372] usb 2-1: USB disconnect, device number 2 [ 29.555706][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.562843][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.570236][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.577350][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.624194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.634855][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.649920][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.667953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.683788][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.690924][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.719890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.735959][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.743098][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.777724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.798001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.826434][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.854204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.869202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.887187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.898804][ T438] device veth0_vlan entered promiscuous mode [ 29.928470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.949599][ T438] device veth1_macvtap entered promiscuous mode [ 29.972319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.991188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.133227][ T473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 30.230183][ T483] xt_hashlimit: size too large, truncated to 1048576 [ 30.290810][ T490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.299615][ T490] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.358364][ T288] EXT4-fs (loop3): unmounting filesystem. [ 30.391489][ T497] netlink: 'syz.5.78': attribute type 4 has an invalid length. [ 30.427714][ T497] netlink: 'syz.5.78': attribute type 4 has an invalid length. [ 30.572035][ T511] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 30.603257][ T511] EXT4-fs (loop5): orphan cleanup on readonly fs [ 30.615475][ T511] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.83: Block bitmap for bg 0 marked uninitialized [ 30.646431][ T511] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 30.668484][ T511] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.83: Block bitmap for bg 0 marked uninitialized [ 30.691387][ T511] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 30.709850][ T511] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.83: Block bitmap for bg 0 marked uninitialized [ 30.748437][ T511] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 30.772375][ T511] EXT4-fs (loop5): 1 orphan inode deleted [ 30.778309][ T511] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 30.823018][ T511] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 30.863212][ T511] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 30.874328][ T511] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.83: Block bitmap for bg 0 marked uninitialized [ 30.889113][ T432] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.938863][ T438] EXT4-fs (loop5): unmounting filesystem. [ 30.970106][ T432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.016480][ T531] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 31.071902][ T438] EXT4-fs (loop5): unmounting filesystem. [ 31.246242][ T553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 31.277653][ T438] EXT4-fs (loop5): unmounting filesystem. [ 31.747422][ T597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.118'. [ 31.798232][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.925527][ T612] netlink: 'syz.5.125': attribute type 3 has an invalid length. [ 31.933352][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.125'. [ 32.029397][ T6] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 32.039796][ T6] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 32.059709][ T6] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 32.068954][ T6] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 32.077057][ T6] usb 2-1: Product: syz [ 32.081392][ T6] usb 2-1: SerialNumber: syz [ 32.090581][ T6] usb 2-1: bad CDC descriptors [ 32.141480][ T625] set_capacity_and_notify: 5 callbacks suppressed [ 32.141500][ T625] loop4: detected capacity change from 0 to 1024 [ 32.170336][ T625] EXT4-fs: Ignoring removed orlov option [ 32.190916][ T625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.296665][ T60] usb 2-1: USB disconnect, device number 3 [ 32.323852][ T644] Zero length message leads to an empty skb [ 32.398639][ T291] EXT4-fs (loop4): unmounting filesystem. [ 32.447452][ T658] loop4: detected capacity change from 0 to 512 [ 32.472997][ T658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.482619][ T658] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.511341][ T291] EXT4-fs (loop4): unmounting filesystem. [ 32.701170][ T693] loop8: detected capacity change from 0 to 16384 [ 32.761336][ T700] loop4: detected capacity change from 0 to 128 [ 32.789796][ T700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.813623][ T700] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.857893][ T709] loop1: detected capacity change from 0 to 512 [ 32.865840][ T291] EXT4-fs (loop4): unmounting filesystem. [ 32.888062][ T709] EXT4-fs: Ignoring removed oldalloc option [ 32.914139][ T709] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.942345][ T709] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.956491][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 32.956507][ T28] audit: type=1400 audit(1792005439.068:296): avc: denied { write } for pid=686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.001049][ T28] audit: type=1400 audit(1792005439.068:297): avc: denied { add_name } for pid=686 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.018432][ T709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.039363][ T28] audit: type=1400 audit(1792005439.068:298): avc: denied { create } for pid=686 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.065459][ T709] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.159: bad orphan inode 131083 [ 33.090159][ T28] audit: type=1400 audit(1792005439.068:299): avc: denied { write } for pid=686 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ifb1.link" dev="tmpfs" ino=912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.092902][ T709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.117657][ T28] audit: type=1400 audit(1792005439.068:300): avc: denied { append } for pid=686 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.link" dev="tmpfs" ino=912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.149217][ T28] audit: type=1400 audit(1792005439.188:301): avc: denied { remove_name } for pid=718 comm="rm" name="resolv.conf.ifb1.link" dev="tmpfs" ino=912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.172961][ T28] audit: type=1400 audit(1792005439.188:302): avc: denied { unlink } for pid=718 comm="rm" name="resolv.conf.ifb1.link" dev="tmpfs" ino=912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.198296][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.215070][ T28] audit: type=1400 audit(1792005439.318:303): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.286424][ T709] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 33.331769][ T679] syz.5.151 (679) used greatest stack depth: 20648 bytes left [ 33.341194][ T290] EXT4-fs (loop1): unmounting filesystem. [ 33.347404][ T28] audit: type=1400 audit(1792005439.448:304): avc: denied { getopt } for pid=734 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.383288][ T739] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 33.399508][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.415656][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.439370][ T6] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.470469][ T744] loop1: detected capacity change from 0 to 512 [ 33.504799][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.517538][ T744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.527137][ T744] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.542781][ T28] audit: type=1400 audit(1792005439.648:305): avc: denied { connect } for pid=753 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.572454][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.581825][ T290] EXT4-fs (loop1): unmounting filesystem. [ 33.628038][ T6] usb 5-1: Product: syz [ 33.638136][ T6] usb 5-1: Manufacturer: syz [ 33.643670][ T6] usb 5-1: SerialNumber: syz [ 33.674941][ T6] cdc_ncm 5-1:1.0: skipping garbage [ 33.688242][ T6] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 33.708261][ T6] cdc_ncm 5-1:1.0: bind() failure [ 33.770834][ T776] loop1: detected capacity change from 0 to 2048 [ 33.801068][ T784] device vlan0 entered promiscuous mode [ 33.830392][ T780] device vlan0 left promiscuous mode [ 33.844671][ T735] loop3: detected capacity change from 0 to 40427 [ 33.851569][ T776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.860240][ T791] fuse: Bad value for 'fd' [ 33.875864][ T776] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.876930][ T735] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 33.916100][ T24] usb 5-1: USB disconnect, device number 3 [ 33.936278][ T735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 33.961251][ T735] F2FS-fs (loop3): invalid crc value [ 33.969494][ T796] ip_tables: iptables: counters copy to user failed while replacing table [ 34.026210][ T735] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 34.060390][ T290] EXT4-fs (loop1): unmounting filesystem. [ 34.100938][ T735] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 34.110362][ T735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.159477][ T825] overlayfs: failed to clone upperpath [ 34.165824][ T827] loop5: detected capacity change from 0 to 256 [ 34.209927][ T827] FAT-fs (loop5): Directory bread(block 1285) failed [ 34.235724][ T827] FAT-fs (loop5): Directory bread(block 1286) failed [ 34.243009][ T827] FAT-fs (loop5): Directory bread(block 1287) failed [ 34.250353][ T288] syz-executor: attempt to access beyond end of device [ 34.250353][ T288] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 34.265169][ T827] FAT-fs (loop5): Directory bread(block 1288) failed [ 34.301255][ T827] FAT-fs (loop5): Directory bread(block 1285) failed [ 34.308007][ T827] FAT-fs (loop5): Directory bread(block 1286) failed [ 34.329030][ T827] FAT-fs (loop5): Directory bread(block 1287) failed [ 34.343205][ T827] FAT-fs (loop5): Directory bread(block 1288) failed [ 34.358624][ T827] FAT-fs (loop5): Directory bread(block 1285) failed [ 34.365377][ T827] FAT-fs (loop5): Directory bread(block 1286) failed [ 34.688725][ T875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.208'. [ 34.771763][ T880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.899533][ T882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.282494][ T889] loop5: detected capacity change from 0 to 512 [ 35.350155][ T889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.368320][ T889] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.411564][ T851] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 35.421288][ T851] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 35.431415][ T851] F2FS-fs (loop3): invalid crc value [ 35.469009][ T438] EXT4-fs (loop5): unmounting filesystem. [ 35.489535][ T851] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 35.551697][ T851] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 35.562760][ T851] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 35.569868][ T851] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 35.580618][ T851] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 35.591901][ T867] F2FS-fs (loop4): invalid crc value [ 35.612807][ T851] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 35.626333][ T867] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.626784][ T851] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 35.722437][ T867] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 35.763685][ T867] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 35.876931][ T917] overlayfs: failed to clone upperpath [ 35.999886][ T921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.156650][ T923] bridge0: port 3(syz_tun) entered blocking state [ 36.188206][ T923] bridge0: port 3(syz_tun) entered disabled state [ 36.198912][ T923] device syz_tun entered promiscuous mode [ 36.204801][ T923] bridge0: port 3(syz_tun) entered blocking state [ 36.211288][ T923] bridge0: port 3(syz_tun) entered forwarding state [ 36.348324][ T930] kvm [929]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 36.372288][ T930] kvm [929]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 36.514635][ T941] syz.0.242[941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.514739][ T941] syz.0.242[941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.667295][ T959] EXT4-fs: Ignoring removed nobh option [ 36.727482][ T959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.746640][ T959] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.777664][ T959] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.240: corrupted inode contents [ 36.817142][ T971] syz.4.246[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.817265][ T971] syz.4.246[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.849391][ T959] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.240: mark_inode_dirty error [ 36.919504][ T959] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.240: corrupted inode contents [ 36.931977][ T959] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.240: mark_inode_dirty error [ 36.983264][ T985] bridge0: port 3(vlan2) entered blocking state [ 36.989898][ T985] bridge0: port 3(vlan2) entered disabled state [ 36.998801][ T290] EXT4-fs (loop1): unmounting filesystem. [ 36.999568][ T985] device vlan2 entered promiscuous mode [ 37.038091][ T992] input: syz0 as /devices/virtual/input/input5 [ 37.120732][ T1003] syz.3.259[1003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.120856][ T1003] syz.3.259[1003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.156417][ T1007] overlayfs: failed to clone upperpath [ 37.176564][ T1009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 37.221059][ T1013] set_capacity_and_notify: 3 callbacks suppressed [ 37.221077][ T1013] loop4: detected capacity change from 0 to 512 [ 37.235626][ T1013] EXT4-fs: Ignoring removed nobh option [ 37.276317][ T1013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.296078][ T1013] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.322361][ T1013] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.264: corrupted inode contents [ 37.336963][ T1013] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.264: mark_inode_dirty error [ 37.348792][ T1013] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.264: corrupted inode contents [ 37.367725][ T1013] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.264: mark_inode_dirty error [ 37.450443][ T291] EXT4-fs (loop4): unmounting filesystem. [ 37.493838][ T1035] input: syz0 as /devices/virtual/input/input7 [ 37.661314][ T1044] kvm [1043]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 37.670752][ T1044] kvm [1043]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 37.835202][ T1052] loop1: detected capacity change from 0 to 1024 [ 37.868449][ T1052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.878871][ T1052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.895544][ T1052] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.277: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.918432][ T1052] EXT4-fs (loop1): 1 orphan inode deleted [ 37.934407][ T1052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.958894][ T1052] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.277: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 38.263197][ T290] EXT4-fs (loop1): unmounting filesystem. [ 38.394967][ T1069] kernel profiling enabled (shift: 9) [ 38.440780][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 38.440798][ T28] audit: type=1400 audit(1792005444.548:330): avc: denied { setopt } for pid=1070 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.499145][ T28] audit: type=1400 audit(1792005444.598:331): avc: denied { read write } for pid=1076 comm="syz.3.289" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.523203][ T1075] loop4: detected capacity change from 0 to 16 [ 38.552225][ T1081] loop3: detected capacity change from 0 to 1024 [ 38.559118][ T1075] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.566666][ T28] audit: type=1400 audit(1792005444.598:332): avc: denied { open } for pid=1076 comm="syz.3.289" path="/49/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.608725][ T1081] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.619003][ T1081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.625705][ T1081] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.291: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.652531][ T28] audit: type=1400 audit(1792005444.598:333): avc: denied { ioctl } for pid=1076 comm="syz.3.289" path="/49/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.682042][ T1081] EXT4-fs (loop3): 1 orphan inode deleted [ 38.687837][ T1081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.726837][ T1090] loop4: detected capacity change from 0 to 512 [ 38.756449][ T1081] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.291: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 38.782573][ T1090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.792134][ T1090] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.802674][ T28] audit: type=1400 audit(1792005444.708:334): avc: denied { mounton } for pid=1074 comm="syz.4.288" path="/38/file0" dev="loop4" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.851024][ T1097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.296'. [ 38.871660][ T28] audit: type=1400 audit(1792005444.708:335): avc: denied { write } for pid=1074 comm="syz.4.288" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.895279][ T291] EXT4-fs (loop4): unmounting filesystem. [ 38.902656][ T28] audit: type=1400 audit(1792005444.708:336): avc: denied { remove_name } for pid=1074 comm="syz.4.288" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.947944][ T28] audit: type=1400 audit(1792005444.708:337): avc: denied { rename } for pid=1074 comm="syz.4.288" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.972159][ T28] audit: type=1400 audit(1792005444.708:338): avc: denied { unlink } for pid=1074 comm="syz.4.288" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.995203][ T28] audit: type=1400 audit(1792005444.708:339): avc: denied { create } for pid=1074 comm="syz.4.288" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.122335][ T1111] xt_hashlimit: size too large, truncated to 1048576 [ 39.271022][ T288] EXT4-fs (loop3): unmounting filesystem. [ 39.643125][ T1113] syz.4.304 (1113) used greatest stack depth: 20576 bytes left [ 39.700154][ T1143] loop3: detected capacity change from 0 to 16 [ 39.735632][ T1143] erofs: (device loop3): mounted with root inode @ nid 36. [ 39.744979][ T1143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 39.766825][ T1143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 39.849731][ T1163] loop5: detected capacity change from 0 to 256 [ 39.862027][ T1163] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 40.357095][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.364414][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.372748][ T1193] device bridge_slave_0 entered promiscuous mode [ 40.380485][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.387614][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.395526][ T1193] device bridge_slave_1 entered promiscuous mode [ 40.497054][ T1207] loop4: detected capacity change from 0 to 128 [ 40.523015][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.536138][ T1207] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 40.547733][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.561603][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.568731][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.576100][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.583206][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.608122][ T1207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.618371][ T1207] ext2 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.635962][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.647621][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.663214][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.676909][ T291] EXT4-fs (loop4): unmounting filesystem. [ 40.690076][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.699738][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.712641][ T1211] loop4: detected capacity change from 0 to 512 [ 40.717976][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.726046][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.735655][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.746824][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.761424][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.765895][ T1211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.778702][ T1211] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.778752][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.796178][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.835410][ T291] EXT4-fs (loop4): unmounting filesystem. [ 40.849153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.861413][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.878129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.901861][ T714] udevd[714]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.913214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.936580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.965357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.973070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.990045][ T1193] device veth0_vlan entered promiscuous mode [ 41.022183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.035120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.051123][ T1193] device veth1_macvtap entered promiscuous mode [ 41.073443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.088768][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.097380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.119683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.134817][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.154687][ T43] device bridge_slave_1 left promiscuous mode [ 41.164418][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.198747][ T43] device bridge_slave_0 left promiscuous mode [ 41.215130][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.231990][ T43] device veth1_macvtap left promiscuous mode [ 41.258367][ T43] device veth0_vlan left promiscuous mode [ 41.710350][ T1243] loop1: detected capacity change from 0 to 256 [ 41.732323][ T714] udevd[714]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 41.741323][ T1243] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.758618][ T714] udevd[714]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 41.778854][ T1243] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 41.796070][ T1243] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 41.851176][ T1243] loop1: Can't mount, would change RO state [ 41.879914][ T714] udevd[714]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 41.978229][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.135462][ T1247] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 42.145067][ T1247] F2FS-fs (loop1): invalid crc value [ 42.154767][ T1247] F2FS-fs (loop1): invalid crc value [ 42.160297][ T1247] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 42.169407][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.180508][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.194228][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.207301][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.216825][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.227097][ T60] usb 5-1: config 0 descriptor?? [ 42.233115][ T43] device bridge_slave_1 left promiscuous mode [ 42.239528][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.248561][ T43] device bridge_slave_0 left promiscuous mode [ 42.254837][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.264916][ T43] device veth1_macvtap left promiscuous mode [ 42.268532][ T1152] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.271292][ T43] device veth0_vlan left promiscuous mode [ 42.650137][ T60] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 42.669182][ T60] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 42.931935][ T60] usb 5-1: USB disconnect, device number 4 SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=332 state=3 status=67 (errno 9: Bad file descriptor) [ 64.579507][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 64.579547][ T28] audit: type=1400 audit(1792005470.688:359): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14311]" dev="pipefs" ino=14311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 64.648606][ T288] bridge0: port 3(syz_tun) entered disabled state [ 64.659915][ T288] device syz_tun left promiscuous mode [ 64.665428][ T288] bridge0: port 3(syz_tun) entered disabled state [ 65.679122][ T8] device bridge_slave_1 left promiscuous mode [ 65.685279][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.692933][ T8] device bridge_slave_0 left promiscuous mode [ 65.699180][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.707031][ T8] device bridge_slave_1 left promiscuous mode [ 65.713253][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.720763][ T8] device bridge_slave_0 left promiscuous mode [ 65.726876][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.734912][ T8] device bridge_slave_1 left promiscuous mode [ 65.741091][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.748754][ T8] device bridge_slave_0 left promiscuous mode [ 65.754868][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.763611][ T8] device veth1_macvtap left promiscuous mode [ 65.769696][ T8] device veth0_vlan left promiscuous mode [ 65.775766][ T8] device veth1_macvtap left promiscuous mode [ 65.782126][ T8] device veth0_vlan left promiscuous mode [ 65.788447][ T8] device veth1_macvtap left promiscuous mode [ 65.794471][ T8] device veth0_vlan left promiscuous mode