last executing test programs: 4.513769635s ago: executing program 4 (id=1454): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x40, 0xbfec37a8a3e92b68, 0x7, "78a09d7c88438d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.803697109s ago: executing program 1 (id=1458): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x2800, 0x0) 3.650907104s ago: executing program 1 (id=1460): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2048c5, &(0x7f00000004c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c64656275672c756e695f786c6174653d312c757365667265652c756e695f786c6174653d302c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c666c7573682c73686f72746e616d653d6d697865642c71756965742c757466383d302c0040cdb2879094cbe48e22fd367d726b6ecf948aa2"], 0x0, 0x29f, &(0x7f00000008c0)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000001380)='net/icmp6\x00') pread64(r0, 0x0, 0x0, 0x5) 3.3981853s ago: executing program 1 (id=1463): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) fsetxattr(r3, &(0x7f0000000500)=@known='user.incfs.id\x00', 0x0, 0x0, 0x3) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) getrusage(0x1, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/wake_unlock', 0x82042, 0x102) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000005c0)={0x0, 0x3000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000600)="ddce", 0x2}]) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x1003}, 0x38) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) fchown(r6, 0x0, 0xee01) 2.546881998s ago: executing program 0 (id=1473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 2.546638918s ago: executing program 0 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f00000000c0)) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x78, 0x125201) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001380)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d2304183016801cf58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0x0) keyctl$clear(0x7, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) 2.367469787s ago: executing program 1 (id=1475): r0 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xc5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x89\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec:\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\x1b\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xb3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\x04\'U\x06In\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00\xf0\x9d\f\x12\xe7i\'\xef\x89v\xdf\x0f}\xa1\x95\"\x19d\xe06I\xb7\xd6\x89\x98\x02D\x8a*[\xa2\xa6\xc7\f\xfdo\xc7\xab\xa5\x1a\xd9 )\xd2\x83\xf4\xe8^O\xb3\xfd\'\xf8\xb7K\xb8\xb3\x1d\x8c\xf4\x95C\x93\x97e\xb96\xc6\xe7\xa1/\xbeRR\xab\xb3\x17\xdeb\xe2nR\x01\xfe\xe7\xbd\xdc\x8b=\xa1\x127{\x18\n\xe6!\xfa*\xc2\xa2=c\x80\xda\x84\x18\xeb\xbd\xa7W\x0e\xcab\xc4\xd9Pg\xd1\x91V\xcb;\xe4+\xe6\xe7\x82]\x05\x00\x00\x00\x00\x00\x00\x00\xfb?8\xea\x842*\xd9_\xd0\x8b\xeccH\xae\xa0\xf8&8\xc5\xce\xb6Da?\xf6\xf7\x81\xf6\x84\xa2\xcat#\xe4E\xb6\x88\x9aWy\x92z\xf9\xe6z[L\x1b5P\xf0\xce\x05bLI\x18\x83\x8f\xd8\xaf\xffB\xf0\xb7\xfd\xcb\x17l\x88\x1c\xb1\xec\"\x1f\x8b\xb0\x94\xa9j\x19\xc2\xe0LQU\xed\x9dR(\x15#\x9d\xeb\xa8\x02Apo\x00\x00\x00\x00\x00\x00\x00', 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x6a2840, 0x0) sendfile(r1, r0, 0x0, 0x6) 2.298266424s ago: executing program 1 (id=1476): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 2.298055224s ago: executing program 1 (id=1477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) 2.132989711s ago: executing program 4 (id=1478): r0 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000006c0)=0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000780)=""/22, 0x16}], 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) timer_getoverrun(r1) getsockname$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) setreuid(0xee01, 0xee00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r6, r7, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000340)={0x7, 0x9, 0x0, 0xfffffbff, 0x0, [0x800, 0x0, 0x2, 0x5]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) 1.703902135s ago: executing program 0 (id=1482): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 1.666339899s ago: executing program 0 (id=1485): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/184, 0xb8}], 0x1, &(0x7f0000000880)=""/105, 0x69}, 0xffeffff8}], 0x1, 0x400021b0, 0x0) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000980)="c85b94ee8c61142ccd1a0f96e18f26fb06436311a86720e43f502ff5053b20b515f0e75502397ca65d6e01306a7d23cd225c", 0x32}, {0x0}], 0x2}}], 0x2, 0x4044890) 1.570382659s ago: executing program 0 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) 1.55924358s ago: executing program 2 (id=1488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x4000000000000000, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.484896277s ago: executing program 0 (id=1489): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[], 0x18, 0x200400d1}, 0x8860) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000003d40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x8000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x1e, 0x80000, 0x6c87) 1.449926001s ago: executing program 2 (id=1491): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000009c0)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 1.391561847s ago: executing program 2 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f00000000c0)) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x78, 0x125201) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001380)="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", 0x559, 0x0) keyctl$clear(0x7, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) 1.16726671s ago: executing program 4 (id=1493): mkdirat(0xffffffffffffff9c, 0x0, 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0400, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00Z[2)\x00\x00'], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) 1.114272455s ago: executing program 3 (id=1494): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000dc0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x8, [0x0, 0x80338c]}]}}}}}}}, 0x0) 936.011344ms ago: executing program 3 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000b1bb495b2b28a1fc4b74000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f00001800038004000100080002000500000008"], 0x38}}, 0x0) 731.135445ms ago: executing program 3 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 647.874474ms ago: executing program 3 (id=1497): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 478.044551ms ago: executing program 2 (id=1498): r0 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000006c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000780)=""/22, 0x16}], 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) timer_getoverrun(r1) getsockname$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000220001012dbd7000fedbdf25"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) setreuid(0xee01, 0xee00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x5, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r8, r9, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, &(0x7f0000000340)={0x7, 0x9, 0x0, 0xfffffbff, 0x0, [0x800, 0x0, 0x2, 0x5]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) 302.663009ms ago: executing program 4 (id=1499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xffffffffffffffff, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0xf0, 0x1c, 0x1, 0x70bd28, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {0xfffffffd, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc841}, 0x0) 246.142215ms ago: executing program 4 (id=1500): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2800700, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f0000000480)="$eJzs289vFFUcAPDvTH8gP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDHui2EUKihNRFCpBqDFxNDomfj0cS/wJsXo55MvOrdkBDtBfRUM7MzZTvuthS23cJ+Psm27+28nfe+O/Nm3sybDaBrDWV/kogdEfF7RAzUs8sLDNX/XV+4UPtn4UIticXFt/9K8nLXFi7UyqLl57YXmeE0Iv00KSpZbvbc+VMT09NTZ4v86Nzp90dnz51/7uTpiRNTJ6bOjB85cvjQ2IsvjD/fljizuK7t+2hm/97X3738Ru3Y5fd+/i5r745i+bWFvlpbKmowlAX+92KuuuzJdlfWYTsb0klvBxvCmvRERLa5+vL+PxA9cWPjDcRrn3S0ccC6ys5NW1ovnl8E7mJJdLoFQGeUJ/rsOr58bdDQY1O4+nL9AiiL+3rxqi/pjbQo01e5vm2noYg4Nv/v19krKvdTAADWw+e1r47Gs83Gf2k80FBuVzGHMhgR90bE7oi4LyL2RMT9EXnZByPioTXWX50a+v/4J71yS4HdpGz891Ixt7V8/FeO/mKwp8jtzOPvS46fnJ46WHwnw9G3JcuPrVDHD6/+9kWrZY3jv+yV1V+OBYt2XOmt3KCbnJibyAelbXD144h9vc3iT5ZmApKI2BsR+9a26l1l4uTT3+5vVWj1+FfQhnmmxW8inqpv//moxF9KVp6fHL0npqcOjpZ7RYPB+r9ffr30Vqv6byv+Nsi2/7bl+3+1yGDSOF87u/o600r+0h+ftbymudX9vz95Jz8e9RfvfTgxN3d2LKI/OZrnl70/fuOzZb4sn8U/fKB5/99dfCaL/+GIyHbiRyLi0Yh4rGj74xHxREQcWOH7+OmV1ss2w/afbHr8W9r/K9t/7YmeUz9+36r+pfh7Y4XtfzhPDRfv5Me/VdxsA2/nuwMAAIA7RZo/A5+kI0vpNB0ZqT/Dvye2pdMzs3PPHJ/54Mxk/Vn5wehLyztdAw33Q8eS+WKN9fx4cfurXH6ouG/8Zc/WPD9Sm5me7HDs0O22t+j/mT97Ot06YN01m0cb7+9AQ4ANV+3/lQnci29uZGOADeX32tC9Vun/1ee5gLuI8z90r2b9/2Ilby4A7k7O/9C99H/oXvo/dC/9H7rS7fyu/45MlMe6zdKeOzYR6aZoRtcntsb6rLnDByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2+S8AAP//SMHotQ==") mount$incfs(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x404, 0x0) syz_mount_image$fuse(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x820, &(0x7f0000000a40)=ANY=[], 0x4, 0x0, 0x0) stat(0x0, 0x0) 172.603763ms ago: executing program 2 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000014c0)='0fc5:127:pl', 0xb) 128.519447ms ago: executing program 3 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x14, &(0x7f0000000540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc) 77.834252ms ago: executing program 2 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000814) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x282, 0x0) read$FUSE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000500)='cgroup2\x00', 0x0) syz_clone3(&(0x7f0000000000)={0x120801400, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x0, 0x6, 0xa, 0x0, 0x9}) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) 77.501032ms ago: executing program 4 (id=1504): r0 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000780)=""/22, 0x16}], 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000220001012dbd7000fedbdf250400"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) setreuid(0xee01, 0xee00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x5, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000340)={0x7, 0x9, 0x0, 0xfffffbff, 0x0, [0x800, 0x0, 0x2, 0x5]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) 0s ago: executing program 3 (id=1505): syz_clone3(&(0x7f0000000540)={0x180801400, &(0x7f00000005c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) kernel console output (not intermixed with test programs): : link becomes ready [ 26.519982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.527590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.535275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.543334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.551435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.559637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.588687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.597041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.605535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.613639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.621936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.630593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.638956][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.646027][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.653551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.662010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.670425][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.677522][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.685131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.693204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.701403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.709777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.723337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.731946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.750807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.759451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.767751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.775898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.783341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.791950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.803062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.811696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.825106][ T289] device veth0_vlan entered promiscuous mode [ 26.835142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.843128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.851757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.859892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.868231][ T290] device veth0_vlan entered promiscuous mode [ 26.886361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.894569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.902274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.909845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.917929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.925691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.934046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.942521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.950539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.959691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.967287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.976822][ T289] device veth1_macvtap entered promiscuous mode [ 26.990054][ T287] device veth0_vlan entered promiscuous mode [ 26.998865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.006972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.015807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.023289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.031166][ T288] device veth0_vlan entered promiscuous mode [ 27.040452][ T290] device veth1_macvtap entered promiscuous mode [ 27.050712][ T291] device veth0_vlan entered promiscuous mode [ 27.062427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.070844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.079373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.088903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.097211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.117150][ T288] device veth1_macvtap entered promiscuous mode [ 27.124126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.132588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.141396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.149835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.158116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.166715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.175043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.183260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.191620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.200691][ T287] device veth1_macvtap entered promiscuous mode [ 27.216991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.225541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.237393][ T291] device veth1_macvtap entered promiscuous mode [ 27.258711][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 27.273130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.282140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.290776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.299472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.310039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.318657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.352558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.361258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.370243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.379088][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.405369][ T315] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 27.433789][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.476371][ T321] loop2: detected capacity change from 0 to 16 [ 27.571398][ T321] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.600322][ T321] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 27.609685][ T321] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 27.619027][ T321] syz.2.3: attempt to access beyond end of device [ 27.619027][ T321] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 27.633217][ T321] syz.2.3: attempt to access beyond end of device [ 27.633217][ T321] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 27.660586][ T326] tipc: Started in network mode [ 27.665574][ T326] tipc: Node identity 4, cluster identity 4711 [ 27.671777][ T326] tipc: Node number set to 4 [ 27.685931][ T326] tipc: Enabled bearer , priority 0 [ 28.664224][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.799200][ T334] loop4: detected capacity change from 0 to 16 [ 28.824829][ C0] sched: RT throttling activated [ 28.827529][ T334] erofs: (device loop4): mounted with root inode @ nid 36. [ 28.844661][ T334] tipc: Started in network mode [ 28.849620][ T334] tipc: Node identity 4, cluster identity 4711 [ 28.855850][ T334] tipc: Node number set to 4 [ 28.932616][ T338] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 29.707140][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 29.707426][ T28] audit: type=1400 audit(1793169873.782:122): avc: denied { write } for pid=320 comm="syz.4.5" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.776201][ T28] audit: type=1400 audit(1793169873.842:123): avc: denied { read write } for pid=320 comm="syz.4.5" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.814917][ T28] audit: type=1400 audit(1793169873.842:124): avc: denied { open } for pid=320 comm="syz.4.5" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.839091][ T28] audit: type=1400 audit(1793169874.652:125): avc: denied { map_read map_write } for pid=317 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.858632][ T28] audit: type=1400 audit(1793169874.662:126): avc: denied { mmap_zero } for pid=317 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 29.878405][ T28] audit: type=1400 audit(1793169874.672:127): avc: denied { map } for pid=310 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.902504][ T28] audit: type=1400 audit(1793169874.672:128): avc: denied { read write } for pid=310 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.949693][ T28] audit: type=1400 audit(1793169874.672:129): avc: denied { create } for pid=317 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.972004][ T28] audit: type=1400 audit(1793169874.682:130): avc: denied { map } for pid=317 comm="syz.1.2" path="socket:[16276]" dev="sockfs" ino=16276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 30.050050][ T344] loop3: detected capacity change from 0 to 512 [ 30.090699][ T344] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.6: inode has both inline data and extents flags [ 30.104215][ T344] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.6: couldn't read orphan inode 15 (err -117) [ 30.122608][ T344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.145838][ T28] audit: type=1400 audit(1793169875.052:131): avc: denied { write } for pid=341 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.188658][ T353] loop1: detected capacity change from 0 to 256 [ 30.195538][ T353] exfat: Deprecated parameter 'utf8' [ 30.200953][ T353] exfat: Deprecated parameter 'utf8' [ 30.660386][ T353] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 31.077469][ T360] loop4: detected capacity change from 0 to 128 [ 31.170781][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.814917][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 31.822141][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 31.855325][ T367] loop2: detected capacity change from 0 to 512 [ 31.861983][ T367] ext4: Unknown parameter 'hash' [ 31.913704][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 32.216051][ T24] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 32.546473][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.554551][ T24] usb 4-1: Product: syz [ 32.560347][ T24] usb 4-1: Manufacturer: syz [ 33.477331][ T373] loop2: detected capacity change from 0 to 2048 [ 33.554649][ T24] usb 4-1: SerialNumber: syz [ 33.601678][ T373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.721382][ T24] usb 4-1: config 0 descriptor?? [ 33.848055][ T288] EXT4-fs (loop3): unmounting filesystem. [ 34.313001][ T24] usb 4-1: can't set config #0, error -71 [ 34.338383][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.428587][ T24] usb 4-1: USB disconnect, device number 2 [ 34.499214][ T382] loop4: detected capacity change from 0 to 512 [ 34.527372][ T382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.572085][ T382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.581368][ T382] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.584594][ T390] FAULT_INJECTION: forcing a failure. [ 34.584594][ T390] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.606285][ T390] CPU: 1 PID: 390 Comm: syz.2.14 Not tainted syzkaller #0 [ 34.613435][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.623528][ T390] Call Trace: [ 34.626831][ T390] [ 34.629816][ T390] __dump_stack+0x21/0x24 [ 34.634196][ T390] dump_stack_lvl+0x110/0x170 [ 34.638902][ T390] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.643978][ T390] dump_stack+0x15/0x24 [ 34.648166][ T390] should_fail_ex+0x3bf/0x510 [ 34.652872][ T390] should_fail_alloc_page+0x61/0x90 [ 34.658103][ T390] prepare_alloc_pages+0x131/0x570 [ 34.663262][ T390] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 34.668515][ T390] ? propagate_protected_usage+0xd8/0x230 [ 34.674282][ T390] __alloc_pages+0x15b/0x610 [ 34.678911][ T390] ? __cfi___alloc_pages+0x10/0x10 [ 34.684059][ T390] ? try_charge_memcg+0x258/0x1650 [ 34.689200][ T390] ? memcg_rstat_updated+0x56/0x110 [ 34.694427][ T390] ? __this_cpu_preempt_check+0x13/0x20 [ 34.700011][ T390] __folio_alloc+0x12/0x40 [ 34.704462][ T390] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 34.710220][ T390] ? shmem_replace_folio+0x660/0x660 [ 34.715543][ T390] ? xas_start+0x31d/0x3e0 [ 34.719988][ T390] ? xas_load+0x3a2/0x3c0 [ 34.724342][ T390] ? __filemap_get_folio+0x848/0xa70 [ 34.729669][ T390] ? __cfi___filemap_get_folio+0x10/0x10 [ 34.735371][ T390] shmem_get_folio_gfp+0xd6d/0x20f0 [ 34.740602][ T390] ? xas_find+0x6ec/0x820 [ 34.744970][ T390] shmem_fault+0x1ab/0x670 [ 34.749422][ T390] ? __cfi_shmem_fault+0x10/0x10 [ 34.754394][ T390] ? __kasan_check_write+0x14/0x20 [ 34.759533][ T390] ? vma_data_pages+0xfc/0x130 [ 34.764327][ T390] do_fault+0x19de/0x1e30 [ 34.768768][ T390] ? pte_marker_clear+0x220/0x220 [ 34.773816][ T390] ? check_preemption_disabled+0x71/0x120 [ 34.779566][ T390] ? memcg_rstat_updated+0x56/0x110 [ 34.784790][ T390] handle_mm_fault+0x1363/0x26b0 [ 34.789757][ T390] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.795072][ T390] __get_user_pages+0x34b/0xdb0 [ 34.799952][ T390] ? populate_vma_page_range+0x120/0x120 [ 34.805615][ T390] ? do_mmap+0x8bd/0xdd0 [ 34.809900][ T390] ? userfaultfd_unmap_complete+0x28f/0x310 [ 34.815823][ T390] __mm_populate+0x2ea/0x430 [ 34.820441][ T390] ? __cfi___mm_populate+0x10/0x10 [ 34.825584][ T390] vm_mmap_pgoff+0x271/0x3f0 [ 34.830198][ T390] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 34.835330][ T390] ? xfd_validate_state+0x70/0x150 [ 34.840476][ T390] ksys_mmap_pgoff+0xf6/0x1d0 [ 34.845192][ T390] ? __kasan_check_write+0x14/0x20 [ 34.850331][ T390] __x64_sys_mmap+0xfa/0x110 [ 34.854949][ T390] x64_sys_call+0x8fd/0x9a0 [ 34.859574][ T390] do_syscall_64+0x4c/0xa0 [ 34.864036][ T390] ? clear_bhb_loop+0x30/0x80 [ 34.868747][ T390] ? clear_bhb_loop+0x30/0x80 [ 34.873459][ T390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.879378][ T390] RIP: 0033:0x7fac6f19f559 [ 34.883828][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.903453][ T390] RSP: 002b:00007fac6ffaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 34.911911][ T390] RAX: ffffffffffffffda RBX: 00007fac6f425fa0 RCX: 00007fac6f19f559 [ 34.919938][ T390] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 34.927940][ T390] RBP: 00007fac6f236b20 R08: ffffffffffffffff R09: 0000000028f43000 [ 34.935965][ T390] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 34.943961][ T390] R13: 00007fac6f426038 R14: 00007fac6f425fa0 R15: 00007ffc5d672c98 [ 34.951965][ T390] [ 35.014668][ T391] syz.3.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.359284][ T394] ======================================================= [ 35.359284][ T394] WARNING: The mand mount option has been deprecated and [ 35.359284][ T394] and is ignored by this kernel. Remove the mand [ 35.359284][ T394] option from the mount to silence this warning. [ 35.359284][ T394] ======================================================= [ 35.397951][ T391] tipc: Can't bind to reserved service type 0 [ 35.405624][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 35.405638][ T28] audit: type=1400 audit(1793169880.312:160): avc: denied { create } for pid=385 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 35.593558][ T28] audit: type=1400 audit(1793169880.312:161): avc: denied { write } for pid=385 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 35.614422][ T28] audit: type=1400 audit(1793169880.312:162): avc: denied { read } for pid=385 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 35.635098][ T28] audit: type=1400 audit(1793169880.312:163): avc: denied { bind } for pid=383 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.654945][ T28] audit: type=1400 audit(1793169880.312:164): avc: denied { write } for pid=383 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.674438][ T28] audit: type=1400 audit(1793169880.322:165): avc: denied { write } for pid=383 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.694932][ T28] audit: type=1400 audit(1793169880.412:166): avc: denied { create } for pid=381 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.047436][ T28] audit: type=1400 audit(1793169880.932:167): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.092678][ T400] loop2: detected capacity change from 0 to 4096 [ 36.101708][ T28] audit: type=1400 audit(1793169880.982:168): avc: denied { write } for pid=399 comm="syz.2.18" name="route" dev="proc" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.153472][ T400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.170028][ T28] audit: type=1400 audit(1793169881.082:169): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.431813][ T409] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 36.459808][ T409] loop3: detected capacity change from 0 to 512 [ 38.308431][ T409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 38.316747][ T409] System zones: 1-12 [ 38.322363][ T409] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.19: missing EA_INODE flag [ 38.338214][ T409] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.19: error while reading EA inode 12 err=-117 [ 38.748603][ T409] EXT4-fs (loop3): 1 orphan inode deleted [ 38.754399][ T409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.823057][ T291] EXT4-fs (loop4): unmounting filesystem. [ 38.831966][ T290] EXT4-fs (loop2): unmounting filesystem. [ 38.860316][ T424] loop2: detected capacity change from 0 to 512 [ 38.867383][ T424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.882000][ T422] loop4: detected capacity change from 0 to 512 [ 38.896259][ T420] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 38.903009][ T424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.930526][ T424] ext4 filesystem being mounted at /5 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.986501][ T288] EXT4-fs (loop3): unmounting filesystem. [ 40.521020][ T438] loop1: detected capacity change from 0 to 512 [ 40.557138][ T437] loop3: detected capacity change from 0 to 16 [ 40.564894][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 40.564911][ T28] audit: type=1400 audit(1793169885.462:178): avc: denied { create } for pid=433 comm="syz.3.24" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 40.677650][ T290] EXT4-fs (loop2): unmounting filesystem. [ 41.227812][ T28] audit: type=1400 audit(1793169885.592:179): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.832594][ T428] syz.0.22 (428) used greatest stack depth: 20648 bytes left [ 41.842395][ T28] audit: type=1400 audit(1793169885.952:180): avc: denied { ioctl } for pid=433 comm="syz.3.24" path="socket:[16572]" dev="sockfs" ino=16572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.948212][ T28] audit: type=1400 audit(1793169885.972:181): avc: denied { bind } for pid=433 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.068220][ T447] futex_wake_op: syz.2.27 tries to shift op by 144; fix this program [ 43.289747][ T28] audit: type=1400 audit(1793169886.762:182): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.309822][ T28] audit: type=1400 audit(1793169886.882:183): avc: denied { setopt } for pid=446 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.331168][ T28] audit: type=1400 audit(1793169886.882:184): avc: denied { read } for pid=446 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.355655][ T28] audit: type=1400 audit(1793169886.962:185): avc: denied { create } for pid=444 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.442956][ T28] audit: type=1400 audit(1793169886.972:186): avc: denied { ioctl } for pid=444 comm="syz.3.28" path="socket:[16584]" dev="sockfs" ino=16584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.514192][ T439] loop4: detected capacity change from 0 to 40427 [ 43.545038][ T28] audit: type=1400 audit(1793169886.992:187): avc: denied { write } for pid=446 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.675812][ T475] loop1: detected capacity change from 0 to 512 [ 43.702068][ T475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.813426][ T482] device bridge_slave_1 left promiscuous mode [ 43.819749][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.827793][ T482] device bridge_slave_0 left promiscuous mode [ 43.834312][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.145982][ T475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.159392][ T475] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.311601][ T492] device bridge_slave_0 left promiscuous mode [ 44.318000][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.326607][ T492] device bridge_slave_1 left promiscuous mode [ 44.332820][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.824019][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 45.824039][ T28] audit: type=1400 audit(1793169889.772:200): avc: denied { mount } for pid=498 comm="syz.2.43" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.855903][ T28] audit: type=1400 audit(1793169890.742:201): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.032182][ T287] EXT4-fs (loop1): unmounting filesystem. [ 46.096787][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 46.108667][ T28] audit: type=1400 audit(1793169891.022:202): avc: denied { setopt } for pid=516 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.317357][ T529] loop4: detected capacity change from 0 to 512 [ 47.175458][ T528] device bridge_slave_1 left promiscuous mode [ 47.181897][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.202895][ T528] device bridge_slave_0 left promiscuous mode [ 47.209524][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.364214][ T529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 47.372838][ T529] System zones: 1-12 [ 47.381388][ T529] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.47: missing EA_INODE flag [ 47.393732][ T529] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.47: error while reading EA inode 12 err=-117 [ 47.406889][ T529] EXT4-fs (loop4): 1 orphan inode deleted [ 47.412692][ T529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.700663][ T291] EXT4-fs (loop4): unmounting filesystem. [ 47.711338][ T541] loop2: detected capacity change from 0 to 256 [ 47.745399][ T28] audit: type=1400 audit(1793169892.642:203): avc: denied { mounton } for pid=538 comm="syz.2.58" path="/13/file0" dev="incremental-fs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.944476][ T555] loop4: detected capacity change from 0 to 256 [ 50.664889][ T28] audit: type=1400 audit(1793169895.572:204): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.827319][ T28] audit: type=1400 audit(1793169895.742:205): avc: denied { read } for pid=564 comm="syz.2.62" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.851619][ T565] binder: 564:565 ioctl c0306201 200000001e00 returned -22 [ 50.862059][ T28] audit: type=1400 audit(1793169895.742:206): avc: denied { open } for pid=564 comm="syz.2.62" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.240012][ T28] audit: type=1400 audit(1793169895.762:207): avc: denied { ioctl } for pid=564 comm="syz.2.62" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.343482][ T28] audit: type=1400 audit(1793169896.252:208): avc: denied { append } for pid=573 comm="syz.1.67" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.990049][ T28] audit: type=1400 audit(1793169896.282:209): avc: denied { write } for pid=576 comm="syz.2.68" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.087853][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 52.299129][ T608] device bridge_slave_1 left promiscuous mode [ 52.305410][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.313532][ T608] device bridge_slave_0 left promiscuous mode [ 52.319779][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.933125][ T613] loop2: detected capacity change from 0 to 512 [ 52.957502][ T613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.029885][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 53.044506][ T28] audit: type=1400 audit(1793169897.952:210): avc: denied { write } for pid=632 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.073930][ T613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.083035][ T28] audit: type=1400 audit(1793169897.982:211): avc: denied { nlmsg_write } for pid=632 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.085762][ T613] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.136082][ T643] device bridge_slave_1 left promiscuous mode [ 53.142296][ T643] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.150215][ T643] device bridge_slave_0 left promiscuous mode [ 53.156434][ T643] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.217716][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 53.242681][ T28] audit: type=1400 audit(1793169898.142:212): avc: denied { write } for pid=646 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.281917][ T28] audit: type=1400 audit(1793169898.192:213): avc: denied { create } for pid=649 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.302826][ T28] audit: type=1400 audit(1793169898.192:214): avc: denied { map } for pid=649 comm="syz.3.96" path="socket:[16869]" dev="sockfs" ino=16869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.634898][ T378] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 53.818865][ T290] EXT4-fs (loop2): unmounting filesystem. [ 53.845387][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 53.858634][ T378] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 53.876779][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.885267][ T378] usb 2-1: Product: syz [ 53.889535][ T378] usb 2-1: Manufacturer: syz [ 53.894677][ T378] usb 2-1: SerialNumber: syz [ 53.956719][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 54.167656][ T378] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 54.184584][ T378] usb 2-1: USB disconnect, device number 2 [ 54.396829][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.765933][ T689] futex_wake_op: syz.3.111 tries to shift op by 144; fix this program [ 55.799231][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.827240][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.845233][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.985125][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 56.004956][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 56.005028][ T28] audit: type=1400 audit(1793169900.912:219): avc: denied { read } for pid=709 comm="syz.4.118" dev="nsfs" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.165772][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.174054][ T28] audit: type=1400 audit(1793169900.912:220): avc: denied { open } for pid=709 comm="syz.4.118" path="pid:[4026532463]" dev="nsfs" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.290227][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.426072][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.426845][ T28] audit: type=1400 audit(1793169900.912:221): avc: denied { ioctl } for pid=709 comm="syz.4.118" path="pid:[4026532463]" dev="nsfs" ino=4026532463 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.458969][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.468803][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.484919][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.506616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 56.521177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.529736][ T720] futex_wake_op: syz.4.120 tries to shift op by 144; fix this program [ 56.550382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 56.559535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.568238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.576887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.585541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.595915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.652324][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.852442][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.922119][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 56.997050][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 57.427278][ T750] Zero length message leads to an empty skb [ 57.437694][ T750] loop4: detected capacity change from 0 to 16 [ 57.578704][ T750] erofs: (device loop4): mounted with root inode @ nid 36. [ 58.430709][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.945690][ T775] loop2: detected capacity change from 0 to 256 [ 60.395793][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.814830][ T28] audit: type=1400 audit(1793169904.972:222): avc: denied { unlink } for pid=761 comm="syz.4.135" name="#1" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.050014][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.070932][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 61.079619][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.097005][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 61.107331][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.118615][ T784] overlayfs: unrecognized mount option "\" or missing value [ 61.126591][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.136865][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.146202][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.154532][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.265301][ T792] futex_wake_op: syz.3.140 tries to shift op by 144; fix this program [ 61.281976][ T28] audit: type=1400 audit(1793169906.192:223): avc: denied { getopt } for pid=791 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.329892][ T28] audit: type=1400 audit(1793169906.212:224): avc: denied { connect } for pid=794 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.547356][ T805] loop1: detected capacity change from 0 to 16 [ 61.557654][ T805] erofs: (device loop1): mounted with root inode @ nid 36. [ 61.709478][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 62.622964][ T827] overlayfs: failed to clone upperpath [ 62.830713][ T28] audit: type=1400 audit(1793169907.742:225): avc: denied { write } for pid=830 comm="syz.2.154" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.269453][ T838] loop1: detected capacity change from 0 to 256 [ 63.823854][ T28] audit: type=1400 audit(1793169907.772:226): avc: denied { open } for pid=830 comm="syz.2.154" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.863843][ T28] audit: type=1400 audit(1793169907.772:227): avc: denied { ioctl } for pid=830 comm="syz.2.154" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.491220][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.609285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.695538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.712016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.745341][ T855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 64.754662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.767356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.781329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.829564][ T28] audit: type=1400 audit(1793169909.742:228): avc: denied { getopt } for pid=866 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.849451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.885989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.110558][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.211759][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.365621][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.463740][ T898] loop4: detected capacity change from 0 to 256 [ 66.896457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 67.382828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.417895][ T906] fuse: Bad value for 'fd' [ 67.422959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 67.441503][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.449935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.458234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.466635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.475347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.493343][ T910] loop4: detected capacity change from 0 to 256 [ 67.516228][ T910] exfat: Deprecated parameter 'namecase' [ 67.533803][ T910] exfat: Deprecated parameter 'namecase' [ 67.543313][ T910] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 67.629480][ T28] audit: type=1400 audit(1793169912.542:229): avc: denied { name_bind } for pid=926 comm="syz.4.188" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 67.677561][ T937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 67.776632][ T947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.850057][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.054429][ T953] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 68.093489][ T28] audit: type=1400 audit(1793169913.002:230): avc: denied { ioctl } for pid=956 comm="syz.4.203" path="socket:[17997]" dev="sockfs" ino=17997 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.121046][ T957] loop4: detected capacity change from 0 to 256 [ 68.140245][ T957] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 68.155662][ T28] audit: type=1400 audit(1793169913.072:231): avc: denied { read append open } for pid=956 comm="syz.4.203" path="/38/file1/cpuacct.usage_percpu" dev="loop4" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.183743][ T28] audit: type=1400 audit(1793169913.072:232): avc: denied { lock } for pid=956 comm="syz.4.203" path="/38/file1/cpuacct.usage_percpu" dev="loop4" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.208819][ T28] audit: type=1400 audit(1793169913.072:233): avc: denied { write } for pid=956 comm="syz.4.203" name="cpuacct.usage_percpu" dev="loop4" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.233459][ T28] audit: type=1400 audit(1793169913.072:234): avc: denied { remove_name } for pid=956 comm="syz.4.203" name="file0" dev="loop4" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.280762][ T28] audit: type=1400 audit(1793169913.072:235): avc: denied { unlink } for pid=956 comm="syz.4.203" name="file0" dev="loop4" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.325006][ T378] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.421964][ T967] futex_wake_op: syz.4.206 tries to shift op by 144; fix this program [ 68.506285][ T378] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.521207][ T378] usb 3-1: not running at top speed; connect to a high speed hub [ 68.532948][ T28] audit: type=1400 audit(1793169913.442:236): avc: denied { getopt } for pid=970 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.563008][ T378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 4 [ 68.589722][ T28] audit: type=1400 audit(1793169913.502:237): avc: denied { read } for pid=974 comm="syz.1.210" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.595258][ T378] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 4 [ 68.679759][ T378] usb 3-1: string descriptor 0 read error: -22 [ 68.683689][ T983] loop1: detected capacity change from 0 to 256 [ 68.696982][ T378] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 68.713836][ T983] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 68.723356][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.896433][ T28] audit: type=1400 audit(1793169913.812:238): avc: denied { getopt } for pid=999 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.167158][ T1013] loop1: detected capacity change from 0 to 16 [ 69.251851][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.341517][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.556092][ T1013] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.620948][ T378] usb 3-1: Can't set UAC3 power state to 1 for id 10 [ 69.761453][ T378] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 69.917503][ T1016] loop4: detected capacity change from 0 to 256 [ 69.945824][ T378] usb 3-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 69.972239][ T1016] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 69.998881][ T378] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 70.038195][ T378] usb 3-1: USB disconnect, device number 2 [ 70.295277][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.359184][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.416539][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.325838][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 72.343313][ T1056] new mount options do not match the existing superblock, will be ignored [ 73.460943][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.518015][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.643458][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 73.668196][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 73.668211][ T28] audit: type=1400 audit(1793169918.582:240): avc: denied { write } for pid=1078 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.858381][ T1093] loop4: detected capacity change from 0 to 1024 [ 73.870769][ T1093] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.118777][ T1093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.483787][ T291] EXT4-fs (loop4): unmounting filesystem. [ 76.299301][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.517931][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.651862][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 76.676936][ T1143] futex_wake_op: syz.2.267 tries to shift op by 144; fix this program [ 76.702538][ T1144] futex_wake_op: syz.1.268 tries to shift op by 144; fix this program [ 76.804896][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.985940][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.997352][ T19] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 77.006461][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 77.014501][ T19] usb 5-1: Product: syz [ 77.018763][ T19] usb 5-1: Manufacturer: syz [ 77.227168][ T19] usb 5-1: USB disconnect, device number 2 [ 77.617977][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.695712][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.192114][ T1170] overlayfs: failed to clone upperpath [ 79.065710][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.169779][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.286789][ T1173] loop1: detected capacity change from 0 to 256 [ 79.302032][ T28] audit: type=1400 audit(1793169924.212:241): avc: denied { write } for pid=1182 comm="syz.4.280" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.325124][ T28] audit: type=1400 audit(1793169924.242:242): avc: denied { open } for pid=1182 comm="syz.4.280" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.348448][ T28] audit: type=1400 audit(1793169924.242:243): avc: denied { ioctl } for pid=1182 comm="syz.4.280" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.404370][ T1133] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.664768][ T1199] loop2: detected capacity change from 0 to 256 [ 79.836490][ T1191] futex_wake_op: syz.3.284 tries to shift op by 144; fix this program [ 81.234931][ T1209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 81.474945][ T1225] Illegal XDP return value 4294967282 on prog (id 55) dev N/A, expect packet loss! [ 82.826413][ T1242] futex_wake_op: syz.4.298 tries to shift op by 144; fix this program [ 82.834683][ T28] audit: type=1400 audit(1793169927.742:244): avc: denied { getopt } for pid=1246 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.898928][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.984642][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.140213][ T28] audit: type=1400 audit(1793169928.052:245): avc: denied { create } for pid=1269 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.225949][ T28] audit: type=1400 audit(1793169928.082:246): avc: denied { setopt } for pid=1269 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.679250][ T1290] IPv6: NLM_F_REPLACE set, but no existing node found! [ 84.215109][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.258989][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.672738][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.776779][ T1333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.882564][ T1342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 84.920353][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.946373][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.391018][ T1355] overlayfs: failed to clone upperpath [ 85.664093][ T28] audit: type=1400 audit(1793169930.572:247): avc: denied { read } for pid=1357 comm="syz.3.345" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.207957][ T1369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'. [ 86.237313][ T1369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'. [ 86.354853][ T28] audit: type=1400 audit(1793169931.262:248): avc: denied { create } for pid=1374 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.379832][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.408855][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.457939][ T28] audit: type=1400 audit(1793169931.262:249): avc: denied { bind } for pid=1374 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.565660][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.269571][ T1408] fuse: Bad value for 'fd' [ 88.529297][ T28] audit: type=1400 audit(1793169933.442:250): avc: denied { read } for pid=1419 comm="syz.2.369" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.607265][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.632591][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.874410][ T1434] netlink: 160 bytes leftover after parsing attributes in process `syz.0.373'. [ 88.898416][ T28] audit: type=1400 audit(1793169933.812:251): avc: denied { getopt } for pid=1435 comm="syz.0.374" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.379929][ T1442] fuse: Bad value for 'fd' [ 89.838014][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.137981][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 91.171855][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.192975][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.684622][ T28] audit: type=1400 audit(1793169936.592:252): avc: denied { write } for pid=1488 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.880452][ T1495] loop4: detected capacity change from 0 to 256 [ 92.921360][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.943916][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.970887][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.982259][ T1504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 92.998528][ T1504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 93.121507][ T28] audit: type=1400 audit(1793169938.032:253): avc: denied { read } for pid=1532 comm="syz.1.414" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.163252][ T28] audit: type=1400 audit(1793169938.062:254): avc: denied { open } for pid=1532 comm="syz.1.414" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.192977][ T28] audit: type=1400 audit(1793169938.062:255): avc: denied { ioctl } for pid=1532 comm="syz.1.414" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.219049][ T28] audit: type=1400 audit(1793169938.072:256): avc: denied { write } for pid=1534 comm="syz.1.415" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.242079][ T28] audit: type=1400 audit(1793169938.072:257): avc: denied { set_context_mgr } for pid=1534 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.502263][ T1559] loop1: detected capacity change from 0 to 256 [ 93.934318][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 94.364393][ T1567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 94.492950][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.569659][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.905403][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 94.934068][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.954699][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.157214][ T1614] loop4: detected capacity change from 0 to 256 [ 95.912914][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 95.946571][ T1624] netlink: 140 bytes leftover after parsing attributes in process `syz.0.450'. [ 95.986142][ T1624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.450'. [ 97.126043][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.152879][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.270950][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 97.292118][ T1657] kernel profiling enabled (shift: 63) [ 97.299245][ T1657] profiling shift: 63 too large [ 97.309505][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.331135][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.555722][ T1662] loop4: detected capacity change from 0 to 40427 [ 97.578156][ T1662] F2FS-fs (loop4): Image doesn't support compression [ 97.585145][ T1662] F2FS-fs (loop4): fault_type options not supported [ 97.626461][ T1673] loop2: detected capacity change from 0 to 256 [ 97.753622][ T1662] F2FS-fs (loop4): invalid crc value [ 97.825512][ T1675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 97.875006][ T28] audit: type=1400 audit(1793169942.732:258): avc: denied { nlmsg_read } for pid=1674 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.935972][ T1662] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.391654][ T1662] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.511512][ T1689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 98.948886][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.971929][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.193817][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.077178][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.113091][ T1715] syz.0.483 uses obsolete (PF_INET,SOCK_PACKET) [ 100.136279][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.443149][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.471897][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 100.491076][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 100.794417][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.820826][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.016561][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 101.263124][ T1762] overlayfs: failed to clone upperpath [ 101.611197][ T1765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.500'. [ 101.726544][ T1765] netlink: 43 bytes leftover after parsing attributes in process `syz.1.500'. [ 101.830364][ T1765] netlink: 'syz.1.500': attribute type 6 has an invalid length. [ 101.973199][ T1765] netlink: 'syz.1.500': attribute type 5 has an invalid length. [ 101.980968][ T1765] netlink: 43 bytes leftover after parsing attributes in process `syz.1.500'. [ 101.999094][ T1767] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 102.241211][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.349491][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.466783][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.496390][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 103.567521][ T1798] loop4: detected capacity change from 0 to 16 [ 103.578115][ T1797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.604978][ T1797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.620104][ T1798] erofs: (device loop4): mounted with root inode @ nid 36. [ 103.771738][ T28] audit: type=1400 audit(1793169948.682:259): avc: denied { sqpoll } for pid=1806 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.862247][ T1819] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value [ 103.877388][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 103.889851][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.916452][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.938619][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.966452][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.090307][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.116338][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.207696][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.331750][ T1849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.354825][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.377290][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.348290][ T28] audit: type=1400 audit(1793169950.262:260): avc: denied { accept } for pid=1896 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.536308][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.617935][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.909009][ T1906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.093329][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.203624][ T28] audit: type=1400 audit(1793169951.112:261): avc: denied { listen } for pid=1921 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.743881][ T1953] futex_wake_op: syz.2.572 tries to shift op by 144; fix this program [ 106.874200][ T1959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 106.883283][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 106.892273][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 107.108852][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.159538][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.484451][ T28] audit: type=1400 audit(1793169952.392:262): avc: denied { write } for pid=1983 comm="syz.2.585" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.585650][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.666340][ T1998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.689097][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 108.465409][ T2049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.862160][ T2051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.892619][ T2061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.963572][ T2054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.999676][ T2065] loop4: detected capacity change from 0 to 256 [ 109.028073][ T2065] exfat: Deprecated parameter 'utf8' [ 109.051779][ T2065] exfat: Deprecated parameter 'namecase' [ 109.073214][ T2065] exfat: Deprecated parameter 'namecase' [ 109.091105][ T2065] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 109.389970][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 109.619304][ T2080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.640795][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.732572][ T2091] loop4: detected capacity change from 0 to 256 [ 109.819383][ T2093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.846801][ T2093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.277278][ T2120] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 111.350862][ T2132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 111.369110][ T2132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 111.388321][ T2132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 111.440419][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 111.563546][ T2146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.590416][ T2146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.677977][ T28] audit: type=1400 audit(1793169956.592:263): avc: denied { bind } for pid=2147 comm="syz.1.647" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.754362][ T28] audit: type=1400 audit(1793169956.592:264): avc: denied { name_bind } for pid=2147 comm="syz.1.647" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 111.817910][ T28] audit: type=1400 audit(1793169956.592:265): avc: denied { node_bind } for pid=2147 comm="syz.1.647" saddr=::ffff:255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.239330][ T2171] netlink: 'syz.2.656': attribute type 39 has an invalid length. [ 112.387669][ T2181] capability: warning: `syz.4.662' uses 32-bit capabilities (legacy support in use) [ 112.484963][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 113.876207][ T2209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.386368][ T28] audit: type=1400 audit(1793169959.302:266): avc: denied { getopt } for pid=2229 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.432371][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.454553][ T2226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.479000][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.502640][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.690688][ T28] audit: type=1400 audit(1793169959.602:267): avc: denied { shutdown } for pid=2259 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.824551][ T2270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.293367][ T2270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.631977][ T2288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 115.641091][ T2288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 115.651555][ T2288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 115.698699][ T2302] netlink: 388 bytes leftover after parsing attributes in process `syz.2.703'. [ 115.800860][ T2311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.855823][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.225924][ T2318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 116.363033][ T2330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.390967][ T2330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.478181][ T2332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 116.649735][ T2342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 117.170360][ T2364] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 117.184901][ T2364] sch_tbf: burst 2 is lower than device veth1_virt_wifi mtu (1514) ! [ 117.295862][ T2374] futex_wake_op: syz.2.730 tries to shift op by 144; fix this program [ 117.950346][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.986080][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.835834][ T2403] netlink: 72 bytes leftover after parsing attributes in process `syz.1.742'. [ 118.874070][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 118.889686][ T2405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.917807][ T2405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.980496][ T2403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 118.990534][ T2403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 119.415961][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.443567][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.569283][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.677456][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.790585][ T2427] overlayfs: conflicting options: userxattr,metacopy=on [ 119.977774][ T2446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 120.071090][ T2448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.097522][ T2448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.373563][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.380737][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.388526][ T2463] device bridge_slave_0 entered promiscuous mode [ 120.396660][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.403766][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.414729][ T2463] device bridge_slave_0 left promiscuous mode [ 120.427846][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.822974][ T28] audit: type=1400 audit(1793169965.732:268): avc: denied { getopt } for pid=2477 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.008804][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.155642][ T28] audit: type=1400 audit(1793169966.072:269): avc: denied { wake_alarm } for pid=2500 comm="syz.3.778" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.212156][ T2495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.233866][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.261316][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.630028][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.651787][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.834672][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 122.112665][ T2548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 122.179356][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.205574][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.512947][ T2569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.635059][ T2576] loop1: detected capacity change from 0 to 256 [ 122.744903][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.832043][ T2575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.863494][ T2584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 122.900928][ T2577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.146311][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.172526][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.598554][ T2615] netlink: 284 bytes leftover after parsing attributes in process `syz.0.820'. [ 123.638780][ T28] audit: type=1400 audit(1793169968.552:270): avc: denied { setopt } for pid=2619 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.806838][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.920592][ T2627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.074442][ T2637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.829'. [ 124.190544][ T2643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.217034][ T2643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.007613][ T28] audit: type=1400 audit(1793169969.922:271): avc: denied { nlmsg_read } for pid=2652 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 125.059254][ T28] audit: type=1400 audit(1793169969.942:272): avc: denied { audit_write } for pid=2652 comm="syz.4.835" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.093092][ T28] audit: type=1107 audit(1793169969.942:273): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 125.490057][ T2686] netlink: 'syz.1.850': attribute type 32 has an invalid length. [ 125.517630][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.598286][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.669853][ T2693] futex_wake_op: syz.1.852 tries to shift op by 144; fix this program [ 126.302188][ T2729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 126.409252][ T2736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 126.481891][ T2737] futex_wake_op: syz.3.870 tries to shift op by 144; fix this program [ 127.136521][ T291] cgroup: fork rejected by pids controller in /syz4 [ 127.178000][ T10] tipc: Left network mode [ 127.262016][ T2768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 127.523354][ T28] audit: type=1400 audit(1793169972.432:274): avc: denied { mounton } for pid=2773 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.566812][ T28] audit: type=1400 audit(1793169972.442:275): avc: denied { create } for pid=2773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.716364][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.739393][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.763415][ T2773] device bridge_slave_0 entered promiscuous mode [ 127.805173][ T2773] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.831311][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.862918][ T2773] device bridge_slave_1 entered promiscuous mode [ 127.949209][ T10] device veth1_macvtap left promiscuous mode [ 127.955808][ T10] device veth0_vlan left promiscuous mode [ 128.102461][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.124243][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.238741][ T2811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.261889][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.358444][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.367544][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.382952][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.392110][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.406972][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.414056][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.422089][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.430641][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.439119][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.446218][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.461713][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.471482][ T2818] loop2: detected capacity change from 0 to 256 [ 128.475554][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.486181][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.494288][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.510258][ T2818] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 128.529050][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.549044][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.560134][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.568013][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.576146][ T2773] device veth0_vlan entered promiscuous mode [ 128.589486][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.599714][ T2773] device veth1_macvtap entered promiscuous mode [ 128.611102][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.619953][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.630931][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.639423][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.655397][ T28] audit: type=1400 audit(1793169973.572:276): avc: denied { mounton } for pid=2773 comm="syz-executor" path="/root/syzkaller.3RidFM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.727550][ T2826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 128.736739][ T2826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 128.765603][ T2833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 128.910518][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.986594][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.062127][ T2848] loop4: detected capacity change from 0 to 256 [ 129.111743][ T2848] FAT-fs (loop4): Directory bread(block 64) failed [ 129.142648][ T2848] FAT-fs (loop4): Directory bread(block 65) failed [ 129.172928][ T2848] FAT-fs (loop4): Directory bread(block 66) failed [ 129.202848][ T2848] FAT-fs (loop4): Directory bread(block 67) failed [ 129.232230][ T2848] FAT-fs (loop4): Directory bread(block 68) failed [ 129.261145][ T2848] FAT-fs (loop4): Directory bread(block 69) failed [ 129.335157][ T2848] FAT-fs (loop4): Directory bread(block 70) failed [ 129.375071][ T2848] FAT-fs (loop4): Directory bread(block 71) failed [ 129.409656][ T2848] FAT-fs (loop4): Directory bread(block 72) failed [ 129.445393][ T2848] FAT-fs (loop4): Directory bread(block 73) failed [ 129.507472][ T2862] loop2: detected capacity change from 0 to 512 [ 129.575683][ T2862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.632207][ T2862] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.715430][ T290] EXT4-fs (loop2): unmounting filesystem. [ 130.409379][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.496006][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.532049][ T28] audit: type=1400 audit(1793169975.442:277): avc: denied { ioctl } for pid=2907 comm="syz.4.935" path="socket:[23311]" dev="sockfs" ino=23311 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.058738][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 131.103364][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.699716][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.728751][ T28] audit: type=1400 audit(1793169976.642:278): avc: denied { lock } for pid=2948 comm="syz.0.949" path="socket:[23366]" dev="sockfs" ino=23366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 132.876949][ T2958] futex_wake_op: syz.0.951 tries to shift op by 144; fix this program [ 133.001717][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 133.049618][ T2988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 133.059211][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 133.068840][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 133.215904][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.230522][ T3008] netlink: 136 bytes leftover after parsing attributes in process `syz.3.974'. [ 133.328013][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.255804][ T3031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 134.294175][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 134.345154][ T3033] futex_wake_op: syz.4.980 tries to shift op by 144; fix this program [ 134.430835][ T3041] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 134.439093][ T3041] netem: change failed [ 134.476596][ T3047] loop1: detected capacity change from 0 to 256 [ 134.505730][ T3047] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 134.765150][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.793094][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.803818][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 136.830523][ T3087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 136.897484][ T28] audit: type=1400 audit(1793169981.812:279): avc: denied { ioctl } for pid=3100 comm="syz.1.1009" path="socket:[24578]" dev="sockfs" ino=24578 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.926869][ T3099] loop2: detected capacity change from 0 to 256 [ 136.953855][ T3099] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 137.094674][ T28] audit: type=1400 audit(1793169982.002:280): avc: denied { read } for pid=3117 comm="syz.4.1018" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.303466][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.361707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 137.373237][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.394722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 137.413290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.435880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.457078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.479662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.502024][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.525351][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.784423][ T3138] netlink: 'syz.2.1023': attribute type 32 has an invalid length. [ 137.948875][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 138.066424][ T3156] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 138.098530][ T3159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 138.120188][ T3163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 138.134941][ T28] audit: type=1400 audit(1793169983.042:281): avc: denied { read } for pid=3164 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.260016][ T3180] loop2: detected capacity change from 0 to 512 [ 138.282414][ T3180] EXT4-fs: Ignoring removed nobh option [ 138.322471][ T3180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.332145][ T3180] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.346370][ T28] audit: type=1400 audit(1793169983.262:282): avc: denied { remount } for pid=3179 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.372956][ T290] EXT4-fs (loop2): unmounting filesystem. [ 138.401861][ T3189] loop1: detected capacity change from 0 to 256 [ 138.491632][ T3196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 138.627624][ T3201] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 138.754885][ T28] audit: type=1400 audit(1793169983.662:283): avc: denied { ioctl } for pid=3206 comm="syz.2.1048" path="socket:[24683]" dev="sockfs" ino=24683 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.846959][ T3209] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 139.097651][ T3217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 139.130772][ T3218] loop4: detected capacity change from 0 to 256 [ 139.397196][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.491090][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.563989][ T3233] futex_wake_op: syz.0.1057 tries to shift op by 144; fix this program [ 140.293567][ T3243] futex_wake_op: syz.2.1059 tries to shift op by 144; fix this program [ 140.454006][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.481631][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.577058][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.090617][ T28] audit: type=1400 audit(1793169986.002:284): avc: denied { write } for pid=3270 comm="syz.2.1071" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.184179][ T3279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'. [ 141.193301][ T3279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'. [ 141.270730][ T3287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 141.287341][ T3277] futex_wake_op: syz.2.1072 tries to shift op by 144; fix this program [ 141.808998][ T3292] futex_wake_op: syz.0.1078 tries to shift op by 144; fix this program [ 142.102403][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.130093][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.261130][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.050480][ T3316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.078930][ T3316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.308597][ T3330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 143.382856][ T3334] futex_wake_op: syz.4.1090 tries to shift op by 144; fix this program [ 143.532924][ T3348] 8021q: VLANs not supported on lo [ 143.547887][ T3344] futex_wake_op: syz.1.1098 tries to shift op by 144; fix this program [ 143.766300][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.788796][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.810426][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.839125][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.886026][ T3361] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 143.893936][ T3361] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1105'. [ 144.358333][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.515718][ T28] audit: type=1400 audit(1793169989.432:285): avc: denied { setopt } for pid=3386 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.696863][ T3398] futex_wake_op: syz.3.1120 tries to shift op by 144; fix this program [ 144.832876][ T3403] futex_wake_op: syz.2.1122 tries to shift op by 144; fix this program [ 144.851958][ T28] audit: type=1400 audit(1793169989.762:286): avc: denied { setopt } for pid=3412 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.178466][ T3438] device bridge_slave_0 left promiscuous mode [ 145.184729][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.193546][ T3438] device bridge_slave_1 left promiscuous mode [ 145.199809][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.858551][ T3474] loop2: detected capacity change from 0 to 256 [ 147.822174][ T3474] FAT-fs (loop2): Directory bread(block 1285) failed [ 147.838353][ T3474] FAT-fs (loop2): Directory bread(block 1286) failed [ 147.850429][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1155'. [ 147.859592][ T3474] FAT-fs (loop2): Directory bread(block 1287) failed [ 147.865175][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1155'. [ 147.867246][ T3474] FAT-fs (loop2): Directory bread(block 1288) failed [ 147.876671][ T3471] futex_wake_op: syz.3.1151 tries to shift op by 144; fix this program [ 147.894626][ T3474] FAT-fs (loop2): Directory bread(block 1285) failed [ 147.907966][ T3463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.915361][ T3474] FAT-fs (loop2): Directory bread(block 1286) failed [ 147.929773][ T3474] FAT-fs (loop2): Directory bread(block 1287) failed [ 147.948446][ T3474] FAT-fs (loop2): Directory bread(block 1288) failed [ 147.956638][ T3474] FAT-fs (loop2): Directory bread(block 1285) failed [ 147.967182][ T3474] FAT-fs (loop2): Directory bread(block 1286) failed [ 148.081862][ T3493] futex_wake_op: syz.4.1157 tries to shift op by 144; fix this program [ 148.127248][ T3499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.222221][ T3499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.958434][ T28] audit: type=1400 audit(1793169993.872:287): avc: denied { bind } for pid=3529 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.056982][ T3535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 149.134823][ T28] audit: type=1400 audit(1793169994.042:288): avc: denied { ioctl } for pid=3539 comm="syz.1.1180" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25345 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.177334][ T3542] ip_tables: iptables: counters copy to user failed while replacing table [ 149.330836][ T3552] futex_wake_op: syz.4.1183 tries to shift op by 144; fix this program [ 149.418297][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 149.456542][ T3563] tipc: Enabling of bearer rejected, media not registered [ 150.092842][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.116320][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.201964][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.241813][ T3577] loop4: detected capacity change from 0 to 256 [ 150.293188][ T3577] exfat: Deprecated parameter 'namecase' [ 150.323524][ T3577] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xda9fba55, utbl_chksum : 0xe619d30d) [ 150.395763][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.416931][ T24] kernel write not supported for file /slabinfo (pid: 24 comm: kworker/1:0) [ 150.428537][ T28] audit: type=1400 audit(1793169995.342:289): avc: denied { rename } for pid=3576 comm="syz.4.1193" name="file0" dev="loop4" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.491747][ T28] audit: type=1400 audit(1793169995.402:290): avc: denied { remount } for pid=3591 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 150.512593][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 150.534164][ T3580] lo: Caught tx_queue_len zero misconfig [ 150.838029][ T3611] xt_hashlimit: size too large, truncated to 1048576 [ 150.995498][ T3617] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1208'. [ 151.624570][ T3645] ip_tables: iptables: counters copy to user failed while replacing table [ 151.659097][ T3648] loop1: detected capacity change from 0 to 256 [ 151.735878][ T3476] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.821923][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.859209][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.743363][ T3670] ip_tables: iptables: counters copy to user failed while replacing table [ 152.794876][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 152.811156][ T3673] xt_hashlimit: size too large, truncated to 1048576 [ 153.234699][ T295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.440613][ T3706] ip_tables: iptables: counters copy to user failed while replacing table [ 153.461842][ T295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.476516][ T295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.517160][ T295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.541592][ T295] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.577457][ T295] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 153.594662][ T28] audit: type=1400 audit(1793169998.502:291): avc: denied { bind } for pid=3711 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.598455][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 153.636897][ T295] usb 2-1: Product: syz [ 153.641283][ T295] usb 2-1: Manufacturer: syz [ 153.644887][ T28] audit: type=1400 audit(1793169998.502:292): avc: denied { setopt } for pid=3711 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.861928][ T221] usb 2-1: USB disconnect, device number 3 [ 153.958451][ T3734] netlink: 'syz.2.1254': attribute type 5 has an invalid length. [ 154.274814][ T295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.453427][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.486294][ T295] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.518357][ T295] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.563354][ T295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.580392][ T3751] ip_tables: iptables: counters copy to user failed while replacing table [ 154.584194][ T295] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 154.627585][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.638847][ T3743] device veth0_vlan left promiscuous mode [ 154.662609][ T295] usb 3-1: config 0 descriptor?? [ 154.703072][ T3743] device veth0_vlan entered promiscuous mode [ 154.724022][ T3743] device veth1_macvtap left promiscuous mode [ 154.776496][ T3743] device veth1_macvtap entered promiscuous mode [ 154.817744][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.859736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.878375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.915313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.923917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.964220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.984377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.004564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 155.013704][ T3761] loop1: detected capacity change from 0 to 256 [ 155.024914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.044894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 155.065035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.076946][ T3761] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 155.084146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.098883][ T295] wacom 0003:056A:0303.0001: unknown main item tag 0x0 [ 155.102565][ T3743] syz.4.1257 (3743) used greatest stack depth: 20416 bytes left [ 155.113726][ T295] wacom 0003:056A:0303.0001: unknown main item tag 0x3 [ 155.121015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.121611][ T295] wacom 0003:056A:0303.0001: unknown main item tag 0x0 [ 155.139764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.151645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.154930][ T295] wacom 0003:056A:0303.0001: unknown main item tag 0x0 [ 155.167555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.175012][ T295] wacom 0003:056A:0303.0001: unknown main item tag 0x0 [ 155.184463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.193044][ T295] wacom 0003:056A:0303.0001: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 155.193420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.212243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.213630][ T295] wacom 0003:056A:0303.0001: hidraw0: USB HID v36.2c Joystick [HID 056a:0303] on usb-dummy_hcd.2-1/input0 [ 155.224495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.243353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.265365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.273571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.282058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.287169][ T295] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0303.0001/input/input4 [ 155.292106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.331665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.334668][ T28] audit: type=1400 audit(1793170000.242:293): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=689 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.351628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.370823][ T295] usb 3-1: USB disconnect, device number 3 [ 155.387591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.401634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.414924][ T28] audit: type=1400 audit(1793170000.242:294): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=689 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.441638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.457928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.466507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.474001][ T28] audit: type=1400 audit(1793170000.312:295): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=689 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.638957][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 155.705003][ T3782] futex_wake_op: syz.3.1268 tries to shift op by 144; fix this program [ 155.798204][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.823743][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.971036][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 156.069074][ T3798] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 156.085876][ T28] audit: type=1400 audit(1793170001.002:296): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 156.119218][ T28] audit: type=1400 audit(1793170001.032:297): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.146723][ T3786] loop4: detected capacity change from 0 to 40427 [ 156.192511][ T3786] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 156.241281][ T3786] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.244080][ T28] audit: type=1400 audit(1793170001.032:298): avc: denied { read } for pid=141 comm="dhcpcd" name="n32" dev="tmpfs" ino=1480 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.318316][ T3786] F2FS-fs (loop4): invalid crc value [ 156.365570][ T28] audit: type=1400 audit(1793170001.032:299): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=1480 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.390883][ T3786] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 156.402600][ T28] audit: type=1400 audit(1793170001.032:300): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=1480 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.572562][ T28] audit: type=1400 audit(1793170001.272:301): avc: denied { read } for pid=3809 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.131200][ T28] audit: type=1400 audit(1793170001.272:302): avc: denied { open } for pid=3809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.131238][ T28] audit: type=1400 audit(1793170001.272:303): avc: denied { getattr } for pid=3809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.197221][ T3786] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.197250][ T3786] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.201630][ T28] audit: type=1400 audit(1793170002.112:304): avc: denied { setattr } for pid=3785 comm="syz.4.1270" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.344902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.452450][ T3845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1288'. [ 157.611383][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.637313][ T3867] xt_hashlimit: size too large, truncated to 1048576 [ 158.189488][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.515341][ T295] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 158.530971][ T295] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input7 [ 158.541483][ T295] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 158.602626][ T3896] fido_id[3896]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.658653][ T443] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 158.846853][ T443] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.856840][ T443] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 158.962747][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.047922][ T443] usb 3-1: config 0 descriptor?? [ 159.219175][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.464741][ T3917] loop1: detected capacity change from 0 to 256 [ 159.545709][ T443] input: HID 18b1:0037 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:18B1:0037.0003/input/input8 [ 159.660960][ T3919] futex_wake_op: syz.4.1310 tries to shift op by 144; fix this program [ 159.770031][ T443] petalynx 0003:18B1:0037.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 159.784343][ T443] usb 3-1: USB disconnect, device number 4 [ 159.807737][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.837951][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.077099][ T3932] fido_id[3932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 160.311998][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.333189][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.494252][ T3953] xt_hashlimit: size too large, truncated to 1048576 [ 160.848831][ T3969] futex_wake_op: syz.4.1327 tries to shift op by 144; fix this program [ 160.864824][ T3969] loop4: detected capacity change from 0 to 256 [ 160.877905][ T3969] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 161.008736][ T3975] ip_tables: iptables: counters copy to user failed while replacing table [ 161.017559][ T3973] futex_wake_op: syz.2.1330 tries to shift op by 144; fix this program [ 161.069755][ T3979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 161.311639][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 161.311662][ T28] audit: type=1326 audit(1793170006.222:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.402600][ T28] audit: type=1326 audit(1793170006.252:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.454808][ T28] audit: type=1326 audit(1793170006.252:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.535790][ T28] audit: type=1326 audit(1793170006.252:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.563991][ T28] audit: type=1326 audit(1793170006.252:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.589777][ T28] audit: type=1326 audit(1793170006.252:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.623928][ T4003] syz.4.1343 (4003): /proc/4002/oom_adj is deprecated, please use /proc/4002/oom_score_adj instead. [ 161.636112][ T28] audit: type=1326 audit(1793170006.262:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.669089][ T28] audit: type=1326 audit(1793170006.262:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.694784][ T28] audit: type=1326 audit(1793170006.262:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.723713][ T28] audit: type=1326 audit(1793170006.262:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.1323" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7fc00000 [ 161.766837][ T6] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6 comm=kworker/0:0 [ 161.787543][ T4009] ip_tables: iptables: counters copy to user failed while replacing table [ 161.834823][ T2272] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 161.896308][ T4014] device dummy0 entered promiscuous mode [ 161.902358][ T4014] device vlan2 entered promiscuous mode [ 161.933532][ T4012] loop2: detected capacity change from 0 to 256 [ 162.015975][ T2272] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.037487][ T2272] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.060667][ T2272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.074641][ T2272] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 162.092022][ T2272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.111796][ T2272] usb 2-1: config 0 descriptor?? [ 162.531161][ T2272] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0004/input/input9 [ 162.545792][ T2272] uclogic 0003:28BD:0935.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 162.729399][ T443] usb 2-1: USB disconnect, device number 4 [ 162.886900][ T4041] futex_wake_op: syz.2.1357 tries to shift op by -1; fix this program [ 163.128367][ T4051] loop2: detected capacity change from 0 to 16 [ 163.154915][ T4051] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.350925][ T4063] device syz_tun entered promiscuous mode [ 163.371999][ T4065] wireguard: wg2: Could not create IPv4 socket [ 163.626301][ T4082] loop1: detected capacity change from 0 to 512 [ 163.660959][ T4082] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.719018][ T4082] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 163.735004][ T4082] EXT4-fs (loop1): Remounting filesystem read-only [ 163.744076][ T4082] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1376: invalid indirect mapped block 4278190080 (level 0) [ 163.803550][ T4082] EXT4-fs (loop1): Remounting filesystem read-only [ 163.830579][ T4082] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1376: invalid indirect mapped block 1 (level 1) [ 163.917156][ T4082] EXT4-fs (loop1): Remounting filesystem read-only [ 163.934365][ T4082] EXT4-fs (loop1): 1 truncate cleaned up [ 163.944877][ T4082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.989161][ T287] EXT4-fs (loop1): unmounting filesystem. [ 164.006241][ T4095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1381'. [ 164.066518][ T4097] netlink: 'syz.1.1382': attribute type 3 has an invalid length. [ 164.179217][ T4108] device macsec1 entered promiscuous mode [ 164.300179][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.318087][ T4117] device batadv_slave_1 entered promiscuous mode [ 164.333679][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.360468][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 164.762182][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.788160][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.997876][ T4140] loop2: detected capacity change from 0 to 4096 [ 165.075925][ T4140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.104624][ T4140] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.136713][ T4140] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 165.454836][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.659172][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.686414][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.830516][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.839087][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.849976][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.868923][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40 [ 165.878267][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.886614][ T24] usb 2-1: Product: syz [ 165.890916][ T24] usb 2-1: Manufacturer: syz [ 165.896080][ T24] usb 2-1: SerialNumber: syz [ 165.924861][ T221] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 166.075402][ T4167] loop4: detected capacity change from 0 to 16 [ 166.097649][ T4167] erofs: (device loop4): mounted with root inode @ nid 36. [ 166.105659][ T221] usb 3-1: not running at top speed; connect to a high speed hub [ 166.112497][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 166.122816][ T221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.129173][ T24] usb 2-1: USB disconnect, device number 5 [ 166.145740][ T221] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 166.162212][ T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.178040][ T221] usb 3-1: Found UVC 1.00 device (046d:0825) [ 166.185329][ T221] usb 3-1: No streaming interface found for terminal 2. [ 166.357346][ T3769] udevd[3769]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.379776][ T221] usb 3-1: USB disconnect, device number 5 [ 166.465065][ T4171] ip_tables: iptables: counters copy to user failed while replacing table [ 166.551690][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.578840][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.394336][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.506365][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.717296][ T4209] ip6gre0: Caught tx_queue_len zero misconfig [ 167.723920][ T4209] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 168.013709][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.041180][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.127272][ T221] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.157586][ T4230] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 168.273018][ T4243] loop1: detected capacity change from 0 to 512 [ 168.319801][ T4243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.324871][ T221] usb 5-1: Using ep0 maxpacket: 16 [ 168.336446][ T221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.346421][ T4243] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.356249][ T221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.370464][ T221] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 168.381775][ T221] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.399233][ T221] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 168.410710][ T221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.411522][ T287] EXT4-fs (loop1): unmounting filesystem. [ 168.425993][ T221] usb 5-1: Product: syz [ 168.430230][ T221] usb 5-1: Manufacturer: syz [ 168.435075][ T221] usb 5-1: SerialNumber: syz [ 168.459363][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 168.459382][ T28] audit: type=1400 audit(1793170013.372:340): avc: denied { read write } for pid=4252 comm="syz.1.1436" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.491782][ T28] audit: type=1400 audit(1793170013.402:341): avc: denied { open } for pid=4252 comm="syz.1.1436" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.522010][ T28] audit: type=1400 audit(1793170013.402:342): avc: denied { ioctl } for pid=4252 comm="syz.1.1436" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.613755][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.655483][ T221] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 168.664125][ T221] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 169.075936][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.095153][ T4278] futex_wake_op: syz.2.1445 tries to shift op by 144; fix this program [ 169.111507][ T4278] loop2: detected capacity change from 0 to 256 [ 169.149295][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.265106][ T4278] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 169.389785][ T221] usb 5-1: USB disconnect, device number 3 [ 169.416097][ T3768] udevd[3768]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 170.623297][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.721903][ T28] audit: type=1326 audit(1793170015.632:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7ffc0000 [ 170.747124][ T4323] loop1: detected capacity change from 0 to 128 [ 170.758005][ T28] audit: type=1326 audit(1793170015.632:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7ffc0000 [ 170.782873][ T28] audit: type=1326 audit(1793170015.632:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7ffc0000 [ 170.803146][ T221] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.815288][ T28] audit: type=1326 audit(1793170015.632:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9f559 code=0x7ffc0000 [ 170.841088][ T28] audit: type=1326 audit(1793170015.632:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c17f9f559 code=0x7ffc0000 [ 170.867504][ T28] audit: type=1326 audit(1793170015.632:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c17f9f2c2 code=0x7ffc0000 [ 170.893627][ T28] audit: type=1326 audit(1793170015.632:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1460" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c17f5fd8e code=0x7ffc0000 [ 171.014859][ T221] usb 5-1: Using ep0 maxpacket: 16 [ 171.021138][ T221] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 171.031475][ T221] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 171.040601][ T221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.048752][ T221] usb 5-1: Product: syz [ 171.053023][ T221] usb 5-1: Manufacturer: syz [ 171.057849][ T221] usb 5-1: SerialNumber: syz [ 171.075045][ T221] usb 5-1: config 0 descriptor?? [ 171.081788][ T221] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 171.090089][ T221] usb 5-1: Detected FT232R [ 171.282212][ T221] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 171.488445][ T4344] futex_wake_op: syz.3.1466 tries to shift op by 144; fix this program [ 171.503165][ T221] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.694614][ T2272] usb 5-1: USB disconnect, device number 4 [ 171.708162][ T2272] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.720538][ T2272] ftdi_sio 5-1:0.0: device disconnected [ 171.899015][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.817099][ T4394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1488'. [ 172.929960][ T4401] netlink: 'syz.2.1491': attribute type 3 has an invalid length. [ 172.938203][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 172.952786][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 173.047582][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.466105][ T28] kauditd_printk_skb: 3443 callbacks suppressed [ 173.466129][ T28] audit: type=1326 audit(1793170018.372:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.583027][ T28] audit: type=1326 audit(1793170018.412:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.616224][ T28] audit: type=1326 audit(1793170018.422:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.645960][ T28] audit: type=1326 audit(1793170018.422:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.689894][ T28] audit: type=1326 audit(1793170018.422:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.746322][ T28] audit: type=1326 audit(1793170018.432:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.797001][ T28] audit: type=1326 audit(1793170018.432:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.862298][ T28] audit: type=1326 audit(1793170018.442:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.914865][ T28] audit: type=1326 audit(1793170018.442:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 173.960059][ T28] audit: type=1326 audit(1793170018.452:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.1.1477" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c17f408d9 code=0x7ffc0000 [ 174.071509][ T4425] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1499'. [ 174.138717][ T4427] loop4: detected capacity change from 0 to 512 [ 174.179662][ T4427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.1500: Parent and EA inode have the same ino 15 [ 174.195083][ T4427] EXT4-fs (loop4): 1 orphan inode deleted [ 174.200948][ T4427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.272047][ T2773] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 174.354453][ T2773] ------------[ cut here ]------------ [ 174.360067][ T2773] kernel BUG at fs/namei.c:2962! [ 174.384003][ T2773] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 174.390145][ T2773] CPU: 1 PID: 2773 Comm: syz-executor Not tainted syzkaller #0 [ 174.397729][ T2773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.407823][ T2773] RIP: 0010:may_delete+0x727/0x730 [ 174.413020][ T2773] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 60 42 ae ff 0f 0b e8 59 42 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 41 42 [ 174.432671][ T2773] RSP: 0018:ffffc90010fb7c58 EFLAGS: 00010293 [ 174.438773][ T2773] RAX: ffffffff81c32fc7 RBX: ffff888132c5bee0 RCX: ffff88811b846540 [ 174.443983][ T4439] 9pnet_fd: Insufficient options for proto=fd [ 174.446770][ T2773] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 174.446788][ T2773] RBP: ffffc90010fb7cb0 R08: 0000000000000003 R09: 0000000000000004 [ 174.446803][ T2773] R10: dffffc0000000000 R11: fffff520021f6f68 R12: 1ffff1102658b7dc [ 174.476856][ T2773] R13: 0000000000000001 R14: ffff888117190470 R15: dffffc0000000000 [ 174.484864][ T2773] FS: 000055555702b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 174.493910][ T2773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.500526][ T2773] CR2: 0000200000c71000 CR3: 000000011b9da000 CR4: 00000000003506a0 [ 174.508553][ T2773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.516549][ T2773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.524549][ T2773] Call Trace: [ 174.527856][ T2773] [ 174.530809][ T2773] vfs_rmdir+0x2f/0x4f0 [ 174.535008][ T2773] ? incfs_kill_sb+0xec/0x210 [ 174.539720][ T2773] incfs_kill_sb+0xfe/0x210 [ 174.544265][ T2773] deactivate_locked_super+0xb5/0x120 [ 174.549689][ T2773] deactivate_super+0xaf/0xe0 [ 174.554406][ T2773] cleanup_mnt+0x45e/0x4e0 [ 174.558859][ T2773] __cleanup_mnt+0x19/0x20 [ 174.563319][ T2773] task_work_run+0x1e1/0x250 [ 174.567950][ T2773] ? __cfi_task_work_run+0x10/0x10 [ 174.573104][ T2773] ? __x64_sys_umount+0x12d/0x170 [ 174.578169][ T2773] ? __cfi___x64_sys_umount+0x10/0x10 [ 174.583587][ T2773] exit_to_user_mode_loop+0x9b/0xb0 [ 174.588823][ T2773] exit_to_user_mode_prepare+0x87/0xd0 [ 174.594343][ T2773] syscall_exit_to_user_mode+0x1a/0x30 [ 174.599842][ T2773] do_syscall_64+0x58/0xa0 [ 174.604288][ T2773] ? clear_bhb_loop+0x30/0x80 [ 174.609002][ T2773] ? clear_bhb_loop+0x30/0x80 [ 174.613718][ T2773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.619735][ T2773] RIP: 0033:0x7f9f65ba0797 [ 174.624221][ T2773] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 174.643887][ T2773] RSP: 002b:00007ffc4f495188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.652330][ T2773] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9f65ba0797 [ 174.660337][ T2773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4f495240 [ 174.668338][ T2773] RBP: 00007ffc4f495240 R08: 00007ffc4f496240 R09: 00000000ffffffff [ 174.676338][ T2773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4f496330 [ 174.684379][ T2773] R13: 00007f9f65c35f63 R14: 000000000002a896 R15: 00007ffc4f497400 [ 174.692479][ T2773] [ 174.695533][ T2773] Modules linked in: [ 174.720822][ T2773] ---[ end trace 0000000000000000 ]--- [ 174.758734][ T2773] RIP: 0010:may_delete+0x727/0x730 [ 174.775567][ T2773] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 60 42 ae ff 0f 0b e8 59 42 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 41 42 [ 174.803107][ T2773] RSP: 0018:ffffc90010fb7c58 EFLAGS: 00010293 [ 174.810787][ T2773] RAX: ffffffff81c32fc7 RBX: ffff888132c5bee0 RCX: ffff88811b846540 [ 174.819327][ T2773] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 174.835702][ T2773] RBP: ffffc90010fb7cb0 R08: 0000000000000003 R09: 0000000000000004 [ 174.855471][ T2773] R10: dffffc0000000000 R11: fffff520021f6f68 R12: 1ffff1102658b7dc [ 174.893764][ T2773] R13: 0000000000000001 R14: ffff888117190470 R15: dffffc0000000000 [ 174.918859][ T2773] FS: 000055555702b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 174.940380][ T2773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.956172][ T2773] CR2: 00007f23bdff62f8 CR3: 000000011b9da000 CR4: 00000000003506a0 [ 174.975576][ T2773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.994394][ T2773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.013496][ T2773] Kernel panic - not syncing: Fatal exception [ 175.020160][ T2773] Kernel Offset: disabled [ 175.024513][ T2773] Rebooting in 86400 seconds..