last executing test programs: 5.15709047s ago: executing program 1: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RATTACH(r1, &(0x7f0000000100)={0x14, 0x69, 0x0, {0x80}}, 0x14) close(r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x80801, 0x0) shutdown(0xffffffffffffffff, 0x0) 4.934965714s ago: executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000840)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x86q\xea\xf2\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\x00\x00\x00\x00\x00\x00\x00\x00h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=4\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa5\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x04\x00\x00\x00\x00\x00\x00\x00l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1& 2]\x8b\x1a\x84\xb1', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5451, 0x0) socket(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') 3.448032742s ago: executing program 1: gettid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) dup3(r3, r1, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket(0x1, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 3.322992401s ago: executing program 1: r0 = memfd_create(&(0x7f0000000480)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9\xc0\xf1\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a~\xf7\v\xd7&6\xf4\xde\x10d\xb3\xdc\xb22`\x8cT\x92\xdcf\xab\t-:\x14\aKN\xc1\xecvrE\x8a\xca\xb0\x92g\xc1\tC\xd9\x94\x13\"\x05\xb9\xf3\x89\xc9\xf9', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 2.495157078s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000200)=""/211, 0xd3, 0x0) 2.373705127s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.271498203s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(&(0x7f0000000340), 0x7, 0x1ab5e0) 2.22713243s ago: executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)) 2.147483221s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x54, 0x0) 2.111249287s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@barrier}, {@data_writeback}]}, 0x1, 0x63e, &(0x7f0000000280)="$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") 2.066166914s ago: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r0, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x900, 0x0) 2.055633205s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") readlink(&(0x7f0000000a40)='./file2\x00', &(0x7f0000000a80)=""/122, 0x7a) 1.990782505s ago: executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060000000000000000000000060000050004000000000011000300486173683a69702c706f5174000008001c100780050014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.984040346s ago: executing program 1: socket(0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1}}}}}}}, 0x0) 1.802367924s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s1f0bQAKJE/AfcEDigNQTB24ckTggpHJACmCBYiSQFs3s2Nk6a7y117ut9/ORJjPvvZ35vmdn/N6+tecFMLauRsRORExHxBsRMVfkJ8UWr3S27HUPd7cX93a3F5Not1//e5KXZ3nRdU7myeKasxHxja9GfCd5PG5zc+v+Qq1WXS/S5VZ9rdzc3LqxUl9Yri5XVyuV2/O3b75464XKwNp6pf7LB19ZefWbv/n1p9/7/c6Xf5BV62JR1t2OQeo0feogTmYyIl49i2AjMFHsp0dcD04mjYiPRcTn8vt/Liby/50AwHnWbs9Fe647DQCcd2k+B5akpYhI02IQUOrM4T0TF9Jao9m6fq+xsbrUmSu7FFPpvZVa9eblmT9+L3/xVJKl5/OyvDxPVw6lb0XE5Yj40cwTebq02KgtjWbIAwBj78nu/j8i/jWTpqVSX6f2+FQPAPjImB11BQCAodP/A8D40f8DwPjpo/8vPuzfOfO6AADD4f0/AIwf/T8AjB/9PwCMla+/9lq2tfeK518vvbm5cb/x5o2lavN+qb6xWFpsrK+VlhuN5fyZPfXjrldrNNbmn4+Nt8qtarNVbm5u3a03NlZbd/Pnet+tTg2lVQDA/3P5yrt/SCJi56Un8i261nLQV8P5lo66AsDITJzmZAME+EjrtdrXL0ZQD2D4+urC80HC7868LsBo9HyY92zPw/f7yQcI4veM4EPl2if7n/+3xjOcL+b/YXydbP7/5YHXAxi+XvP/wHhot5PDa/5PHxQBAOfSKX6Fr/32oAYhwEgdt5j3QD7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPmYkR8N5K0lK8Fnmb/pqVSxFMRcSmmknsrterNiHg6rkTE1EyWnh91pQGAU0r/mhTrf12be+7i4dLp5N8z+T4ivv/T13/81kKrtT6f5f/jIH9mf/mwyqPzTrGuIAAwYHn/XSn2XW/kH+5uL+5vw6zPgzvx32Ip4sW93e18y/KLvLcjZvOxxIV/JjFZnDMbEc9GxMQA4u+8ExGf6NX+JJ8buVSsfNodP4rYTw01fvq++Gle1tlng6+PD6AuMG7evRMRr/S6/9K4mu973/9Z7uQA4j+407nY/s++va74k0WkiR7xs3v+ar8xnv/t1x7LbM91yt6JeHayV/zkIH5yRPzn+oz/p0995ocvH1HW/lnEtegdvztWuVVfKzc3t26s1BeWq8vV1Url9vztmy/eeqFSzueoy/sz1Y/720vXnz6qbln7L3TF318XP4s627P90wfnfqHP9v/8P298+7OPkjOH43/p872//8/0jN+R9Ylf7DP+woVfHbl8dxZ/6Yiv/3Hf/+t9xn/vL1tLfb4UABiC5ubW/YVarbr+gQ6y3r87J3sXepLrHHuQVbG/F+8PF08X9M9xFq044cHUWX1Vz/xg8mCsONgrfyu74pCbkw68Fac6eDisWKP7mQQMx6ObftQ1AQAAAAAAAAAAAAAAjjKMP10adRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4XAAD//xnx1GQ=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 1.797826055s ago: executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000003a0900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3af1e6653a13532f17b33515bdd7e1be14f53b9fc9b00"}}, 0x80}}, 0x0) 1.672242224s ago: executing program 1: renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00003cd000/0x4000)=nil, &(0x7f00003d1000/0x4000)=nil, 0x0, 0x0}) syz_read_part_table(0x104c, &(0x7f0000001080)="$eJzsz9GJwlAQBdCbsJuXvy1hO7ASfy1HsR77sCZBlBGNITYgIpzz9e6bGYYJn9XnXHfHmvLw/F3NDb/JpSb5SbWkahmvdk3/eG1rN6RvaUvxP/tu3cZkfFn4d5pTl83hrbcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe4BQAA//8zxBoa") 1.580971218s ago: executing program 2: syz_read_part_table(0x609, &(0x7f0000000d40)="$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") creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2c880, 0x0) sendfile(r0, r1, 0x0, 0xf800) 1.462038387s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.053447939s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.014165445s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x28) 919.26559ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0}, 0x90) 731.650898ms ago: executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x8, 0xc00, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 704.507262ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 652.750271ms ago: executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, 0xffffffffffffffff) 508.969812ms ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) lstat(0x0, 0x0) 245.321303ms ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="030114000129270c0e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) 140.249459ms ago: executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 35.432815ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") readlink(&(0x7f0000000a40)='./file2\x00', &(0x7f0000000a80)=""/122, 0x7a) 0s ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x587, &(0x7f0000000bc0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)={[{@subsystem='net_prio'}]}) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): [ 7.215657][ T23] audit: type=1400 audit(1717847135.650:52): avc: denied { append } for pid=205 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" dev="tmpfs" ino=9655 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 7.234340][ T23] audit: type=1400 audit(1717847135.670:53): avc: denied { remove_name } for pid=209 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=9655 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7.239472][ T23] audit: type=1400 audit(1717847135.670:54): avc: denied { unlink } for pid=209 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=9655 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 7.246235][ T23] audit: type=1400 audit(1717847135.680:55): avc: denied { setattr } for pid=210 comm="chmod" name="resolv.conf" dev="tmpfs" ino=9656 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 14.550076][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 14.550087][ T23] audit: type=1400 audit(1717847142.990:61): avc: denied { transition } for pid=286 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.556738][ T23] audit: type=1400 audit(1717847142.990:62): avc: denied { noatsecure } for pid=286 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.561280][ T23] audit: type=1400 audit(1717847142.990:63): avc: denied { write } for pid=286 comm="sh" path="pipe:[10600]" dev="pipefs" ino=10600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.566652][ T23] audit: type=1400 audit(1717847142.990:64): avc: denied { rlimitinh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.570044][ T23] audit: type=1400 audit(1717847142.990:65): avc: denied { siginh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. 2024/06/08 11:45:50 fuzzer started 2024/06/08 11:45:50 dialing manager at 10.128.0.163:30000 [ 22.518392][ T23] audit: type=1400 audit(1717847150.950:66): avc: denied { node_bind } for pid=345 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.538801][ T23] audit: type=1400 audit(1717847150.950:67): avc: denied { name_bind } for pid=345 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 22.573007][ T23] audit: type=1400 audit(1717847151.010:68): avc: denied { setattr } for pid=354 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.578716][ T353] cgroup1: Unknown subsys name 'net' [ 22.603562][ T353] cgroup1: Unknown subsys name 'net_prio' [ 22.609490][ T353] cgroup1: Unknown subsys name 'devices' [ 22.618475][ T23] audit: type=1400 audit(1717847151.010:69): avc: denied { mounton } for pid=353 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.642081][ T23] audit: type=1400 audit(1717847151.010:70): avc: denied { mount } for pid=353 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.664359][ T23] audit: type=1400 audit(1717847151.060:71): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.672336][ T361] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.684357][ T23] audit: type=1400 audit(1717847151.080:72): avc: denied { mounton } for pid=362 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.717180][ T23] audit: type=1400 audit(1717847151.080:73): avc: denied { mount } for pid=362 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.740408][ T23] audit: type=1400 audit(1717847151.140:74): avc: denied { relabelto } for pid=361 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.765956][ T23] audit: type=1400 audit(1717847151.140:75): avc: denied { write } for pid=361 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.803918][ T353] cgroup1: Unknown subsys name 'hugetlb' [ 22.809725][ T353] cgroup1: Unknown subsys name 'rlimit' [ 22.825129][ T358] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/08 11:45:51 starting 5 executor processes [ 23.367870][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.374779][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.382575][ T370] device bridge_slave_0 entered promiscuous mode [ 23.389700][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.398943][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.407251][ T370] device bridge_slave_1 entered promiscuous mode [ 23.601891][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.608817][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.616626][ T378] device bridge_slave_0 entered promiscuous mode [ 23.624241][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.631092][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.638496][ T378] device bridge_slave_1 entered promiscuous mode [ 23.728991][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.736291][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.743783][ T379] device bridge_slave_0 entered promiscuous mode [ 23.754630][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.761522][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.768869][ T379] device bridge_slave_1 entered promiscuous mode [ 23.780039][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.786956][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.794834][ T375] device bridge_slave_0 entered promiscuous mode [ 23.801570][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.808397][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.815896][ T377] device bridge_slave_0 entered promiscuous mode [ 23.822731][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.829942][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.837062][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.843838][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.856059][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.863398][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.870915][ T375] device bridge_slave_1 entered promiscuous mode [ 23.882082][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.888923][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.896514][ T377] device bridge_slave_1 entered promiscuous mode [ 24.035141][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.042819][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.051192][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.058469][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.070114][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.078198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.085046][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.131941][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.140127][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.146941][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.190368][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.198172][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.228269][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.253745][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.261710][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.269450][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.277915][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.284862][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.292805][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.300898][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.307722][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.324912][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.355681][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.377943][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.386251][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.394341][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.402882][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.425368][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.433672][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.442259][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.451246][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.473476][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.481045][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.498671][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.506124][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.514212][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.522634][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.530619][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.537429][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.545004][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.553191][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.561304][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.568120][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.583092][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.611589][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.630890][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.639141][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.646014][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.654106][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.662537][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.670762][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.677588][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.685086][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.694075][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.701603][ T398] syz-executor.4 (398) used greatest stack depth: 22392 bytes left [ 24.702176][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.718120][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.726450][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.734579][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.742655][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.750325][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.791901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.801968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.811454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.819464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.830943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.838831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.847094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.855416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.864556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.872966][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879824][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.887264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.896137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.904485][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.911336][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.919090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.927734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.935995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.944484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.988271][ T400] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 24.994117][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.005826][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.008993][ T400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.014461][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.025284][ T400] F2FS-fs (loop4): invalid crc value [ 25.033549][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.038625][ T400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.045913][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.059218][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.068151][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.076520][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.085019][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.093511][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.093921][ T400] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.102235][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.108299][ T400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.116987][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.132291][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.140727][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.148932][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.157541][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.165634][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.184554][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.193406][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.215051][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.228561][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.237508][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.250393][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.258433][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.273876][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.282079][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.290537][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.349469][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.358575][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.399172][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.413001][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.427303][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.437144][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.446235][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.456180][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.517261][ T400] syz-executor.4 (400) used greatest stack depth: 21784 bytes left [ 25.538590][ T420] 9pnet: p9_errstr2errno: server reported unknown error [ 25.576279][ T422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.592149][ T429] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 25.710730][ T429] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 25.857037][ T439] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 25.881092][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.911239][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.929351][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.941919][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.964651][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.972700][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.992080][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.004573][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.016046][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.023422][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.032602][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.040030][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.047197][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.054679][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.062175][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.069406][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.080500][ T466] request_module fs-autofs succeeded, but still no fs? [ 26.087210][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.097935][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.105357][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.112881][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.120097][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.127377][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.134686][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.142284][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.149622][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.157089][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.164420][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.171668][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.178815][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.186108][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.193646][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.200876][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.208130][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.215378][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.222688][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.229994][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.237166][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.244493][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.251678][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.258947][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.266193][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.273659][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.281324][ T124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.302172][ T124] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 26.338534][ T472] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.369984][ T472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.389621][ T475] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 26.414520][ T476] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 26.450747][ T476] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 26.461155][ T488] netlink: 2040 bytes leftover after parsing attributes in process `syz-executor.2'. [ 26.468602][ T476] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 26.489452][ T476] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 26.503685][ T488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 26.638388][ T510] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.647849][ T510] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 27.061948][ T540] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 27.085596][ T540] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 27.543476][ T556] F2FS-fs (loop2): invalid crc value [ 27.558058][ T567] EXT4-fs (loop4): Ignoring removed nobh option [ 27.560370][ T556] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.576330][ T567] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (10000) [ 27.624416][ T556] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 27.631256][ T556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 27.658319][ T23] kauditd_printk_skb: 64 callbacks suppressed [ 27.658332][ T23] audit: type=1400 audit(1717847156.090:140): avc: denied { write } for pid=554 comm="syz-executor.2" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.699784][ T23] audit: type=1400 audit(1717847156.090:141): avc: denied { add_name } for pid=554 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.725189][ T23] audit: type=1400 audit(1717847156.090:142): avc: denied { create } for pid=554 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.725438][ T377] attempt to access beyond end of device [ 27.725438][ T377] loop2: rw=2049, want=45112, limit=40427 [ 27.757012][ T23] audit: type=1400 audit(1717847156.090:143): avc: denied { write open } for pid=554 comm="syz-executor.2" path="/root/syzkaller-testdir4130519018/syzkaller.RCc465/8/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.788219][ T23] audit: type=1400 audit(1717847156.130:144): avc: denied { read } for pid=554 comm="syz-executor.2" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.850069][ T23] audit: type=1400 audit(1717847156.130:145): avc: denied { append } for pid=554 comm="syz-executor.2" path="/root/syzkaller-testdir4130519018/syzkaller.RCc465/8/bus/cpuacct.usage_sys" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.883760][ T23] audit: type=1400 audit(1717847156.130:146): avc: denied { map } for pid=554 comm="syz-executor.2" path="/root/syzkaller-testdir4130519018/syzkaller.RCc465/8/bus/cpuacct.usage_sys" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.912073][ T23] audit: type=1400 audit(1717847156.130:147): avc: denied { ioctl } for pid=554 comm="syz-executor.2" path="/root/syzkaller-testdir4130519018/syzkaller.RCc465/8/bus/file0" dev="loop2" ino=10 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.941215][ T23] audit: type=1400 audit(1717847156.140:148): avc: denied { unmount } for pid=377 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.575481][ T23] audit: type=1400 audit(1717847157.010:149): avc: denied { setopt } for pid=616 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.650197][ T622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 28.674684][ T622] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 28.689162][ T622] EXT4-fs (loop3): mount failed [ 29.055312][ T649] cgroup1: noprefix used incorrectly [ 29.295913][ T649] loop2: p2 p3 < > p4 < p5 > [ 29.300627][ T649] loop2: partition table partially beyond EOD, truncated [ 29.307893][ T649] loop2: p2 start 33028 is beyond EOD, truncated [ 29.315484][ T649] loop2: p3 start 4284160 is beyond EOD, truncated [ 29.318474][ T645] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 29.323497][ T649] loop2: p5 start 33028 is beyond EOD, truncated [ 29.395011][ T647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 29.953417][ T649] syz-executor.2 (649) used greatest stack depth: 21528 bytes left [ 30.369873][ T689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 30.432719][ T689] ext4 filesystem being mounted at /root/syzkaller-testdir1892092855/syzkaller.hENhKJ/22/file0 supports timestamps until 2038 (0x7fffffff) [ 30.488601][ T696] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 30.507668][ T702] mmap: syz-executor.1 (702) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.545277][ T702] binder_alloc: binder_alloc_mmap_handler: 701 20ffc000-20ffd000 already mapped failed -16 [ 30.574690][ T703] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 30.637053][ T704] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 30.809889][ T704] syz-executor.3 (704) used greatest stack depth: 18616 bytes left [ 30.913956][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.050331][ T715] cgroup1: noprefix used incorrectly [ 31.308185][ T723] __nla_validate_parse: 1 callbacks suppressed [ 31.308204][ T723] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.354803][ T713] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 31.371440][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 31.397770][ T715] loop1: p2 p3 < > p4 < p5 > [ 31.402306][ T715] loop1: partition table partially beyond EOD, truncated [ 31.409263][ T715] loop1: p2 start 33028 is beyond EOD, truncated [ 31.415433][ T715] loop1: p3 start 4284160 is beyond EOD, truncated [ 31.422758][ T715] loop1: p5 start 33028 is beyond EOD, truncated [ 31.510011][ T5] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 31.877058][ T478] udevd[478]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 31.886639][ T5] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 31.905969][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.929843][ T5] usb 5-1: Product: syz [ 31.937090][ T5] usb 5-1: Manufacturer: syz [ 31.943965][ T5] usb 5-1: SerialNumber: syz [ 31.954656][ T5] usb 5-1: config 0 descriptor?? [ 31.979917][ T700] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 32.104655][ T745] binder_alloc: binder_alloc_mmap_handler: 744 20ffc000-20ffd000 already mapped failed -16 [ 32.169825][ T393] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.198083][ T747] loop1: p2 p3 p7 [ 32.370647][ T700] erofs: (device loop4): erofs_parse_options: Unrecognized mount option "0xffffffffffffffff0x0000000000000005]#[8+KW䶓?҇98 7" or missing value [ 32.397477][ T478] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.398849][ T409] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.408788][ T375] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 32.420583][ T409] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.427076][ T371] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.438176][ T409] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 32.459759][ T409] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.460855][ T478] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.471607][ T409] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 32.481670][ T478] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 32.496343][ T409] blk_update_request: I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.497983][ T478] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.516717][ T409] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 32.519220][ T371] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.538140][ T409] blk_update_request: I/O error, dev loop1, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.538170][ T371] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 32.557936][ T478] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 32.558959][ T409] Buffer I/O error on dev loop1p7, logical block 11, async page read [ 32.565981][ T478] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 32.573865][ T393] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.582544][ T478] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 32.592249][ T393] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 32.599855][ T478] Buffer I/O error on dev loop1p2, logical block 12, async page read [ 32.685659][ T5] usb 5-1: USB disconnect, device number 2 [ 32.800139][ T393] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.809200][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.815134][ T757] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.817518][ T393] usb 4-1: Product: syz [ 32.830009][ T393] usb 4-1: Manufacturer: syz [ 32.834586][ T393] usb 4-1: SerialNumber: syz [ 32.843881][ T757] ext4 filesystem being mounted at /root/syzkaller-testdir1557977558/syzkaller.tdvr4s/27/file0 supports timestamps until 2038 (0x7fffffff) [ 32.929880][ T757] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 32.942987][ T757] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 33.156678][ T774] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.468421][ T788] cgroup1: noprefix used incorrectly [ 33.663123][ T787] binder_alloc: binder_alloc_mmap_handler: 786 20ffc000-20ffd000 already mapped failed -16 [ 33.710295][ T788] loop2: p2 p3 < > p4 < p5 > [ 33.714827][ T788] loop2: partition table partially beyond EOD, truncated [ 33.721878][ T788] loop2: p2 start 33028 is beyond EOD, truncated [ 33.728026][ T788] loop2: p3 start 4284160 is beyond EOD, truncated [ 33.735275][ T788] loop2: p5 start 33028 is beyond EOD, truncated [ 33.749850][ T780] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 34.179945][ T393] cdc_ncm 4-1:1.0: bind() failure [ 34.190007][ T393] usb 4-1: USB disconnect, device number 2 [ 34.277324][ T23] kauditd_printk_skb: 57 callbacks suppressed [ 34.277336][ T23] audit: type=1326 audit(1717847162.710:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.320950][ T807] cgroup: syz-executor.4 (807) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 34.340797][ T807] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 34.341693][ T798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.354336][ T23] audit: type=1326 audit(1717847162.710:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.382974][ T798] ext4 filesystem being mounted at /root/syzkaller-testdir1557977558/syzkaller.tdvr4s/31/file0 supports timestamps until 2038 (0x7fffffff) [ 34.425185][ T23] audit: type=1326 audit(1717847162.710:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.449639][ T23] audit: type=1326 audit(1717847162.710:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.478740][ T23] audit: type=1326 audit(1717847162.710:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.504503][ T23] audit: type=1326 audit(1717847162.710:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.528876][ T23] audit: type=1326 audit(1717847162.710:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.553989][ T23] audit: type=1326 audit(1717847162.710:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.577716][ T23] audit: type=1326 audit(1717847162.710:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.609247][ T23] audit: type=1326 audit(1717847162.710:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fddecaeef69 code=0x7ffc0000 [ 34.657328][ T809] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.740545][ T798] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 34.779895][ T798] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 34.909733][ T823] binder_alloc: binder_alloc_mmap_handler: 822 20ffc000-20ffd000 already mapped failed -16 [ 34.976501][ T827] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 35.169850][ T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.169872][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.489852][ T393] usb 2-1: Using ep0 maxpacket: 16 [ 35.591455][ T839] cgroup1: noprefix used incorrectly [ 35.660169][ T393] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 35.761460][ T839] loop2: p2 p3 < > p4 < p5 > [ 35.766056][ T839] loop2: partition table partially beyond EOD, truncated [ 35.773450][ T839] loop2: p2 start 33028 is beyond EOD, truncated [ 35.779631][ T839] loop2: p3 start 4284160 is beyond EOD, truncated [ 35.786852][ T839] loop2: p5 start 33028 is beyond EOD, truncated [ 35.835328][ T838] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 35.859927][ T393] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 35.868790][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.884464][ T393] usb 2-1: Product: syz [ 35.888501][ T393] usb 2-1: Manufacturer: syz [ 35.893222][ T393] usb 2-1: SerialNumber: syz [ 35.932925][ T393] usb 2-1: config 0 descriptor?? [ 35.959917][ T820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 36.046290][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.057280][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.067157][ T5] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 36.076107][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.084948][ T5] usb 1-1: config 0 descriptor?? [ 36.428676][ T854] incfs: iterate_incfs_dir / -22 [ 36.487709][ T820] erofs: (device loop1): erofs_parse_options: Unrecognized mount option "0xffffffffffffffff0x0000000000000005]#[8+KW䶓?҇98 7" or missing value [ 36.513139][ T18] usb 2-1: USB disconnect, device number 2 [ 36.753884][ T865] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 36.763330][ T865] ext4 filesystem being mounted at /root/syzkaller-testdir3475051270/syzkaller.ewco4M/35/file0 supports timestamps until 2038 (0x7fffffff) [ 36.838529][ T870] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 36.844540][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 36.868104][ T870] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 36.966084][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 36.995698][ T5] usb 1-1: USB disconnect, device number 2 [ 37.337270][ T891] incfs: iterate_incfs_dir / -22 [ 37.546807][ T902] cgroup1: noprefix used incorrectly [ 37.870179][ T906] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 37.924208][ T902] loop4: p2 p3 < > p4 < p5 > [ 37.929154][ T902] loop4: partition table partially beyond EOD, truncated [ 37.937963][ T902] loop4: p2 start 33028 is beyond EOD, truncated [ 37.944228][ T902] loop4: p3 start 4284160 is beyond EOD, truncated [ 37.987343][ T902] loop4: p5 start 33028 is beyond EOD, truncated [ 38.618708][ T478] udevd[478]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.651865][ T752] print_req_error: 215 callbacks suppressed [ 38.651880][ T752] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.672446][ T371] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.692347][ T664] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.720229][ T371] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.735896][ T664] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.753559][ T752] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.779840][ T371] buffer_io_error: 190 callbacks suppressed [ 38.779850][ T371] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 38.801027][ T664] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 38.811774][ T752] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 38.827488][ T752] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.829590][ T664] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.840799][ T371] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.871257][ T752] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 38.885674][ T752] blk_update_request: I/O error, dev loop1, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.898787][ T371] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 38.907067][ T664] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 38.914348][ T371] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 38.922900][ T752] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 38.938669][ T371] Buffer I/O error on dev loop1p7, logical block 11, async page read [ 38.939052][ T664] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 38.999851][ T18] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.138665][ T914] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 39.168424][ T914] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.180886][ T914] F2FS-fs (loop2): invalid crc value [ 39.223038][ T914] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.259924][ T18] usb 5-1: Using ep0 maxpacket: 16 [ 39.348016][ T914] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.355191][ T914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.370135][ T23] kauditd_printk_skb: 155 callbacks suppressed [ 39.370146][ T23] audit: type=1400 audit(1717847167.800:372): avc: denied { setattr } for pid=911 comm="syz-executor.2" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.409930][ T18] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 39.422894][ T23] audit: type=1400 audit(1717847167.830:373): avc: denied { create } for pid=911 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.443979][ T377] attempt to access beyond end of device [ 39.443979][ T377] loop2: rw=524288, want=45072, limit=40427 [ 39.465349][ T377] attempt to access beyond end of device [ 39.465349][ T377] loop2: rw=0, want=45072, limit=40427 [ 39.475780][ T23] audit: type=1400 audit(1717847167.840:374): avc: denied { mounton } for pid=911 comm="syz-executor.2" path="/root/syzkaller-testdir4130519018/syzkaller.RCc465/32/bus/file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.532883][ T23] audit: type=1400 audit(1717847167.840:375): avc: denied { write } for pid=911 comm="syz-executor.2" name="file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.579383][ T936] incfs: iterate_incfs_dir / -22 [ 39.586428][ T421] attempt to access beyond end of device [ 39.586428][ T421] loop2: rw=2049, want=40992, limit=40427 [ 39.597586][ T23] audit: type=1400 audit(1717847167.840:376): avc: denied { add_name } for pid=911 comm="syz-executor.2" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.617977][ T23] audit: type=1400 audit(1717847167.840:377): avc: denied { setattr } for pid=911 comm="syz-executor.2" name="work" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.639854][ T124] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.639928][ T18] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 39.648518][ T23] audit: type=1400 audit(1717847167.840:378): avc: denied { remove_name } for pid=911 comm="syz-executor.2" name="#1" dev="loop2" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.674666][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.688048][ T23] audit: type=1400 audit(1717847167.840:379): avc: denied { rename } for pid=911 comm="syz-executor.2" name="#1" dev="loop2" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.694374][ T18] usb 5-1: Product: syz [ 39.710145][ T23] audit: type=1400 audit(1717847167.840:380): avc: denied { reparent } for pid=911 comm="syz-executor.2" name="#1" dev="loop2" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.729051][ T18] usb 5-1: Manufacturer: syz [ 39.735559][ T23] audit: type=1326 audit(1717847167.950:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=934 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1007df69 code=0x7ffc0000 [ 39.740025][ T18] usb 5-1: SerialNumber: syz [ 39.769126][ T18] usb 5-1: config 0 descriptor?? [ 39.852173][ T916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 40.151131][ T916] erofs: (device loop4): erofs_parse_options: Unrecognized mount option "0xffffffffffffffff0x0000000000000005]#[8+KW䶓?҇98 7" or missing value [ 40.169880][ T18] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.179949][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.200139][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.209704][ T124] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 40.219080][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.239245][ T124] usb 1-1: config 0 descriptor?? [ 40.249850][ T842] usb 5-1: USB disconnect, device number 3 [ 40.321033][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.327988][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.335455][ T951] device bridge_slave_0 entered promiscuous mode [ 40.344240][ T951] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.351228][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.358587][ T951] device bridge_slave_1 entered promiscuous mode [ 40.421351][ T951] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.428199][ T951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.435357][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.442212][ T951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.471669][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.479150][ T842] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.486816][ T842] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.498875][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.507085][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.513937][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.530866][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.538891][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.539995][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.545731][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.557564][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.565481][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.573525][ T18] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 40.590028][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.598801][ T18] usb 2-1: config 0 descriptor?? [ 40.603979][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.622739][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.640098][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.678391][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.688173][ T421] device bridge_slave_1 left promiscuous mode [ 40.694961][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.702513][ T421] device bridge_slave_0 left promiscuous mode [ 40.708459][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.787509][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.796449][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.829916][ T124] usbhid 1-1:0.0: can't add hid device: -71 [ 40.835720][ T124] usbhid: probe of 1-1:0.0 failed with error -71 [ 40.852240][ T124] usb 1-1: USB disconnect, device number 3 [ 40.960003][ T842] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.061218][ T969] ====================================================== [ 41.061218][ T969] WARNING: the mand mount option is being deprecated and [ 41.061218][ T969] will be removed in v5.15! [ 41.061218][ T969] ====================================================== [ 41.089464][ T969] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.100360][ T969] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 41.232309][ T947] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.244217][ T947] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue [ 41.348543][ T18] waltop 0003:172F:0032.0002: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 41.379912][ T842] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 41.390890][ T842] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 41.402061][ T842] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 41.557331][ T947] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 41.625167][ T842] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 41.634179][ T842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.652834][ T976] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 41.660028][ T958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 41.660545][ T976] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.676779][ T976] F2FS-fs (loop2): invalid crc value [ 41.685392][ T976] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.824009][ T976] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.830982][ T976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 41.870427][ T994] incfs: iterate_incfs_dir / -22 [ 41.883998][ T958] [ 41.886269][ T958] ********************************************************** [ 41.886294][ T951] attempt to access beyond end of device [ 41.886294][ T951] loop2: rw=524288, want=45072, limit=40427 [ 41.900643][ T958] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 41.904795][ T951] attempt to access beyond end of device [ 41.904795][ T951] loop2: rw=0, want=45072, limit=40427 [ 41.919534][ T958] ** ** [ 41.930005][ T958] ** trace_printk() being used. Allocating extra memory. ** [ 41.941701][ T958] ** ** [ 41.949427][ T958] ** This means that this is a DEBUG kernel and it is ** [ 41.958003][ T958] ** unsafe for production use. ** [ 41.965620][ T958] ** ** [ 41.974657][ T421] attempt to access beyond end of device [ 41.974657][ T421] loop2: rw=2049, want=40992, limit=40427 [ 42.002357][ T958] ** If you see this message and you are not debugging ** [ 42.009674][ T958] ** the kernel, report this immediately to your vendor! ** [ 42.017160][ T958] ** ** [ 42.024567][ T958] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 42.032147][ T958] ********************************************************** [ 42.360486][ T795] usb 4-1: USB disconnect, device number 3 [ 42.921363][ T842] usb 2-1: USB disconnect, device number 3 [ 42.984017][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.990974][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.998420][ T1006] device bridge_slave_0 entered promiscuous mode [ 43.019276][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.026580][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.040588][ T1006] device bridge_slave_1 entered promiscuous mode [ 43.169124][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.178066][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.189708][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.198253][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.206319][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.209845][ T124] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.213223][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.228858][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.311689][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.320254][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.328457][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.335413][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.451776][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.459707][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.466176][ T1028] incfs: iterate_incfs_dir / -22 [ 43.493520][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.512826][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.532797][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.544592][ T7] device bridge_slave_1 left promiscuous mode [ 43.551180][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.560983][ T7] device bridge_slave_0 left promiscuous mode [ 43.574531][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.581851][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.629828][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 43.702897][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.717002][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.749998][ T124] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 43.791883][ T1033] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 43.799472][ T1033] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.811426][ T1033] F2FS-fs (loop0): invalid crc value [ 43.821096][ T1033] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.864897][ T1033] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.871805][ T1033] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 43.888974][ T364] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.919341][ T378] attempt to access beyond end of device [ 43.919341][ T378] loop0: rw=524288, want=45072, limit=40427 [ 43.919996][ T124] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 43.939645][ T378] attempt to access beyond end of device [ 43.939645][ T378] loop0: rw=0, want=45072, limit=40427 [ 43.939944][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.969977][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.977778][ T124] usb 5-1: Product: syz [ 43.989072][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.998664][ T124] usb 5-1: Manufacturer: syz [ 44.003070][ T124] usb 5-1: SerialNumber: syz [ 44.008215][ T5] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 44.017468][ T124] usb 5-1: config 0 descriptor?? [ 44.022390][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.031115][ T5] usb 4-1: config 0 descriptor?? [ 44.034837][ T421] attempt to access beyond end of device [ 44.034837][ T421] loop0: rw=2049, want=40992, limit=40427 [ 44.039907][ T1012] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 44.165715][ T1046] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.200256][ T1046] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.259924][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.271026][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.280838][ T364] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 44.289726][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.299415][ T364] usb 2-1: config 0 descriptor?? [ 44.381581][ T1012] erofs: (device loop4): erofs_parse_options: Unrecognized mount option "0xffffffffffffffff0x0000000000000005]#[8+KW䶓?҇98 7" or missing value [ 44.495579][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.502846][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.505876][ T124] usb 5-1: USB disconnect, device number 4 [ 44.510732][ T1058] device bridge_slave_0 entered promiscuous mode [ 44.524961][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.531871][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.543079][ T1058] device bridge_slave_1 entered promiscuous mode [ 44.629908][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 44.635696][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 44.643382][ T5] usb 4-1: USB disconnect, device number 4 [ 44.940142][ T7] device bridge_slave_1 left promiscuous mode [ 44.946351][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.956491][ T7] device bridge_slave_0 left promiscuous mode [ 44.962796][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.991206][ T1041] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.002315][ T1041] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue [ 45.037667][ T364] waltop 0003:172F:0032.0003: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 45.055553][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.062454][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.069651][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.076607][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.141128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.148912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.158382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.175079][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.183276][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.192552][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.202205][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.454544][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.488539][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.598892][ T23] kauditd_printk_skb: 121 callbacks suppressed [ 45.598902][ T23] audit: type=1400 audit(1717847174.030:503): avc: denied { write } for pid=1081 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.606547][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.634139][ T1089] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 45.653880][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.667146][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.682600][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.700361][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.809050][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.825711][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.842689][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.260740][ T1108] device pim6reg1 entered promiscuous mode [ 46.562429][ T1096] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 46.569972][ T1096] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.579426][ T1096] F2FS-fs (loop0): invalid crc value [ 46.586758][ T1096] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.650487][ T1096] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.657618][ T1096] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 46.680790][ T393] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 46.719220][ T1058] attempt to access beyond end of device [ 46.719220][ T1058] loop0: rw=524288, want=45072, limit=40427 [ 46.742578][ T1058] attempt to access beyond end of device [ 46.742578][ T1058] loop0: rw=0, want=45072, limit=40427 [ 46.744432][ T795] usb 2-1: USB disconnect, device number 4 [ 46.793548][ T7] attempt to access beyond end of device [ 46.793548][ T7] loop0: rw=2049, want=40992, limit=40427 [ 46.871498][ T1119] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 46.880997][ T23] audit: type=1400 audit(1717847175.320:504): avc: denied { execute } for pid=1118 comm="syz-executor.3" name="file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.904495][ T23] audit: type=1400 audit(1717847175.340:505): avc: denied { read open } for pid=1118 comm="syz-executor.3" path="/root/syzkaller-testdir1892092855/syzkaller.hENhKJ/43/file1/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.935531][ T1119] process 'syz-executor.3' launched './file2' with NULL argv: empty string added [ 46.946888][ T23] audit: type=1400 audit(1717847175.380:506): avc: denied { execute_no_trans } for pid=1118 comm="syz-executor.3" path="/root/syzkaller-testdir1892092855/syzkaller.hENhKJ/43/file1/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.960523][ T1119] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[9000] [ 46.985886][ T1119] ------------[ cut here ]------------ [ 46.991172][ T1119] WARNING: CPU: 1 PID: 1119 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 47.001213][ T1119] Modules linked in: [ 47.004957][ T1119] CPU: 1 PID: 1119 Comm: syz-executor.3 Not tainted 5.4.274-syzkaller-00016-gdd432c37afcd #0 [ 47.014929][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 47.024847][ T1119] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 47.030914][ T1119] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 32 f7 5a 85 48 c7 c2 a0 be f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 00 bf f7 84 48 c7 c6 20 bf f7 84 ba 02 00 [ 47.050344][ T1119] RSP: 0018:ffff8881ea0feb58 EFLAGS: 00010246 [ 47.056244][ T1119] RAX: 2fd08bd991f80b00 RBX: 1ffff1103d41fe28 RCX: 2fd08bd991f80b00 [ 47.064051][ T1119] RDX: ffffc90001f4d000 RSI: 0000000000034694 RDI: 0000000000034695 [ 47.071886][ T1119] RBP: ffff8881e5d61000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 47.079763][ T1119] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881e765dfd2 [ 47.087572][ T1119] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881ea0ff140 [ 47.095454][ T1119] FS: 00007fcb0f3f86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 47.104246][ T1119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.110785][ T1119] CR2: 0000001b32922000 CR3: 00000001e68ef000 CR4: 00000000003406a0 [ 47.118604][ T1119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.126488][ T1119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.134296][ T1119] Call Trace: [ 47.137433][ T1119] ? __warn+0x162/0x250 [ 47.141441][ T1119] ? report_bug+0x3a1/0x4e0 [ 47.146131][ T1119] ? z_erofs_lz4_decompress+0x910/0xc70 [ 47.151603][ T1119] ? z_erofs_lz4_decompress+0x910/0xc70 [ 47.157091][ T1119] ? do_invalid_op+0x6e/0x110 [ 47.161612][ T1119] ? invalid_op+0x1e/0x30 [ 47.165774][ T1119] ? wake_up_klogd+0xb2/0xf0 [ 47.170324][ T1119] ? z_erofs_lz4_decompress+0x910/0xc70 [ 47.175700][ T1119] ? z_erofs_lz4_decompress+0x910/0xc70 [ 47.181091][ T1119] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 47.187077][ T1119] z_erofs_decompress+0xba6/0xfc0 [ 47.191932][ T1119] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 47.197238][ T1119] ? z_erofs_onlinepage_endio+0x140/0x140 [ 47.202805][ T1119] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 47.208076][ T1119] ? _raw_spin_lock+0x1b0/0x1b0 [ 47.213025][ T1119] ? prepare_to_wait_event+0x3c1/0x420 [ 47.218329][ T1119] ? autoremove_wake_function+0xf0/0xf0 [ 47.223700][ T1119] ? finish_wait+0xa5/0x1a0 [ 47.228045][ T1119] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 47.233781][ T1119] ? z_erofs_attach_page+0x4d7/0x710 [ 47.238895][ T1119] ? z_erofs_do_read_page+0x2580/0x2580 [ 47.244272][ T1119] ? init_wait_entry+0xd0/0xd0 [ 47.248873][ T1119] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 47.255300][ T1119] ? check_preemption_disabled+0x153/0x320 [ 47.260940][ T1119] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 47.267216][ T1119] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 47.273554][ T1119] ? setup_fault_attr+0x3d0/0x3d0 [ 47.278385][ T1119] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 47.284925][ T1119] read_pages+0x119/0x400 [ 47.289060][ T1119] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 47.294708][ T1119] ? find_get_entry+0x569/0x600 [ 47.299414][ T1119] __do_page_cache_readahead+0x448/0x4f0 [ 47.304955][ T1119] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 47.311443][ T1119] generic_file_read_iter+0x673/0x21f0 [ 47.316665][ T1119] ? avc_denied+0x15c/0x1d0 [ 47.321122][ T1119] ? find_get_pages_range_tag+0xae0/0xae0 [ 47.326728][ T1119] ? get_vfs_caps_from_disk+0x163/0x760 [ 47.332201][ T1119] ? iov_iter_init+0x82/0x160 [ 47.336729][ T1119] __vfs_read+0x5cd/0x730 [ 47.340875][ T1119] ? rw_verify_area+0x360/0x360 [ 47.345557][ T1119] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 47.352180][ T1119] ? security_file_permission+0x1dc/0x2f0 [ 47.357718][ T1119] vfs_read+0x148/0x360 [ 47.361793][ T1119] kernel_read+0xa2/0xf0 [ 47.365962][ T1119] prepare_binprm+0x5c5/0x780 [ 47.370580][ T1119] ? install_exec_creds+0x130/0x130 [ 47.375683][ T1119] __do_execve_file+0x8b9/0x10d0 [ 47.380453][ T1119] ? do_execve_file+0x40/0x40 [ 47.384960][ T1119] ? strncpy_from_user+0x1c0/0x300 [ 47.390179][ T1119] ? getname_flags+0x1ec/0x4e0 [ 47.394782][ T1119] __x64_sys_execve+0x90/0xa0 [ 47.399466][ T1119] do_syscall_64+0xca/0x1c0 [ 47.403829][ T1119] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.409699][ T1119] RIP: 0033:0x7fcb1007df69 [ 47.413950][ T1119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.433395][ T1119] RSP: 002b:00007fcb0f3f80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 47.441642][ T1119] RAX: ffffffffffffffda RBX: 00007fcb101b4f80 RCX: 00007fcb1007df69 [ 47.449453][ T1119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 47.457598][ T1119] RBP: 00007fcb100db6fe R08: 0000000000000000 R09: 0000000000000000 [ 47.465354][ T1119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.473301][ T1119] R13: 000000000000000b R14: 00007fcb101b4f80 R15: 00007ffd3e5bec18 [ 47.481117][ T1119] ---[ end trace d3f09d13cb64649d ]--- [ 47.730533][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.763101][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.979587][ T393] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 48.012363][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.061475][ T393] usb 3-1: config 0 descriptor?? [ 48.099990][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.196369][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.203422][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.210818][ T1151] device bridge_slave_0 entered promiscuous mode [ 48.217750][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.224777][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.232385][ T1151] device bridge_slave_1 entered promiscuous mode [ 48.271104][ T1145] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 48.278656][ T1145] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.288529][ T1145] F2FS-fs (loop3): invalid crc value [ 48.295864][ T1145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.304423][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.311387][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.318517][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.325594][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.346556][ T1145] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.353669][ T1145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 48.365027][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.373084][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.380550][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.391330][ T7] device bridge_slave_1 left promiscuous mode [ 48.397616][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.405244][ T7] device bridge_slave_0 left promiscuous mode [ 48.408494][ T379] attempt to access beyond end of device [ 48.408494][ T379] loop3: rw=524288, want=45072, limit=40427 [ 48.413068][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.423012][ T379] attempt to access beyond end of device [ 48.423012][ T379] loop3: rw=0, want=45072, limit=40427 [ 48.477634][ T9] attempt to access beyond end of device [ 48.477634][ T9] loop3: rw=2049, want=40992, limit=40427 [ 48.488898][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.500767][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.510630][ T124] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 48.527577][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.536823][ T124] usb 5-1: config 0 descriptor?? [ 48.613127][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.621147][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.628051][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.641830][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.650102][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.658560][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.665441][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.680108][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.685679][ T23] audit: type=1400 audit(1717847177.120:507): avc: denied { execute } for pid=1171 comm="syz-executor.1" path=2F6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=16858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.688136][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.730161][ T393] usbhid 3-1:0.0: can't add hid device: -71 [ 48.735875][ T393] usbhid: probe of 3-1:0.0 failed with error -71 [ 48.743463][ T393] usb 3-1: USB disconnect, device number 2 [ 48.751563][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.759694][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.780030][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.790056][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.809410][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.820876][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.850229][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.869860][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.891330][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.899556][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.908492][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.916892][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.218009][ T1142] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.377451][ T1142] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue [ 49.523446][ T124] waltop 0003:172F:0032.0004: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 50.041148][ T23] audit: type=1400 audit(1717847178.480:508): avc: denied { append } for pid=1198 comm="syz-executor.0" name="random" dev="devtmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 50.243884][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.251424][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.259505][ T1195] device bridge_slave_0 entered promiscuous mode [ 50.267137][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.274228][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.281836][ T1195] device bridge_slave_1 entered promiscuous mode [ 50.379647][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.386561][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.393797][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.400819][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.446537][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.454399][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.461517][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.480188][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.490410][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.497283][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.575896][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.585393][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.592300][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.724867][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.733591][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.744743][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.752713][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.760835][ T7] device bridge_slave_1 left promiscuous mode [ 50.766822][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.774338][ T7] device bridge_slave_0 left promiscuous mode [ 50.780361][ T124] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.781511][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.863251][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.872412][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.887691][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.896734][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.911795][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.919961][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.936510][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.945071][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.953311][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.962019][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.230685][ T1261] device pim6reg1 entered promiscuous mode [ 51.555999][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.566919][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.576500][ T124] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 51.585586][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.594349][ T124] usb 1-1: config 0 descriptor?? [ 51.607787][ T956] usb 5-1: USB disconnect, device number 5 [ 52.160019][ T967] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.219895][ T124] usbhid 1-1:0.0: can't add hid device: -71 [ 52.228418][ T124] usbhid: probe of 1-1:0.0 failed with error -71 [ 52.235662][ T124] usb 1-1: USB disconnect, device number 4 [ 52.521996][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.535120][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.544751][ T967] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 52.553598][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.651605][ T1330] device pim6reg1 entered promiscuous mode [ 52.817516][ T967] usb 5-1: config 0 descriptor?? [ 53.033433][ T23] audit: type=1400 audit(1717847181.470:509): avc: denied { setattr } for pid=1364 comm="syz-executor.0" name="tun" dev="devtmpfs" ino=9214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 53.063197][ T23] audit: type=1400 audit(1717847181.500:510): avc: denied { create } for pid=1297 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.110630][ T23] audit: type=1400 audit(1717847181.500:511): avc: denied { write } for pid=1297 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.140190][ T23] audit: type=1400 audit(1717847181.500:512): avc: denied { read } for pid=1297 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.161641][ T23] audit: type=1326 audit(1717847181.540:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4546df69 code=0x0 [ 53.334149][ T124] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 53.344635][ T1374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 53.394660][ T1299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.415186][ T1299] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue [ 53.437973][ T23] audit: type=1400 audit(1717847181.870:514): avc: denied { create } for pid=1379 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.483366][ T967] waltop 0003:172F:0032.0005: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 53.486016][ T23] audit: type=1400 audit(1717847181.900:515): avc: denied { bind } for pid=1379 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.520494][ T23] audit: type=1400 audit(1717847181.900:516): avc: denied { write } for pid=1379 comm="syz-executor.2" path="socket:[17517]" dev="sockfs" ino=17517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.458008][ T124] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.468417][ T1443] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.593390][ T1453] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 54.609895][ T1453] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 54.623672][ T1453] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 54.640935][ T1453] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 54.892000][ T1458] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 54.923528][ T1451] F2FS-fs (loop2): invalid crc value [ 54.935170][ T1451] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.984588][ T1451] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 54.993045][ T1453] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 55.002522][ T23] audit: type=1400 audit(1717847183.430:517): avc: denied { remount } for pid=1452 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.022454][ T1453] EXT4-fs (sda1): re-mounted. Opts: quota,usrjquota=grpid,noinit_itable,jqfmt=vfsv0,prjquota,norecovery,nojournal_checksum,nobarrier,resuid=0x0000000000000000,noquota,data=ordered,,errors=continue [ 55.040882][ T956] usb 5-1: USB disconnect, device number 6 [ 55.046912][ T1451] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 55.179721][ T1006] attempt to access beyond end of device [ 55.179721][ T1006] loop2: rw=2049, want=45104, limit=40427 [ 55.415182][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 55.442873][ T1472] EXT4-fs (loop0): Ignoring removed oldalloc option [ 55.450158][ T1472] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.457049][ T1472] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.464434][ T1472] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 55.608142][ T23] audit: type=1400 audit(1717847184.040:518): avc: denied { ioctl } for pid=1480 comm="syz-executor.1" path="socket:[18448]" dev="sockfs" ino=18448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.635537][ T1484] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 56.167029][ T1493] FAT-fs (loop3): Unrecognized mount option "ioch" or missing value [ 56.561396][ T1506] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 56.669866][ T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 56.909829][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 56.995503][ T5] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 57.006326][ T1528] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 57.039893][ T967] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 57.048427][ T967] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.058516][ T967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.068461][ T967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.078857][ T967] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.092211][ T967] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.101719][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.702433][ T1549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.709886][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 58.749929][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 59.293783][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 59.293796][ T23] audit: type=1400 audit(1717847187.730:520): avc: denied { name_bind } for pid=1580 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.322523][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 59.371152][ T364] usb 3-1: USB disconnect, device number 3 [ 61.149891][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 66.008355][ T23] audit: type=1400 audit(1717847194.440:521): avc: denied { bind } for pid=1739 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.042301][ T23] audit: type=1400 audit(1717847194.440:522): avc: denied { node_bind } for pid=1739 comm="syz-executor.0" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.342637][ T1751] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.349935][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 66.353807][ T1751] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 66.360930][ T121] cfg80211: failed to load regulatory.db [ 66.370024][ T1751] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 66.384062][ T1751] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 66.503078][ T23] audit: type=1400 audit(1717847194.940:523): avc: denied { read } for pid=1759 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.511543][ T1757] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.531773][ T1757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.539182][ T1757] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 66.549694][ T1757] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 66.559887][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.562807][ T1757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set [ 66.583590][ T1757] EXT4-fs error (device loop2) in ext4_free_blocks:5019: Corrupt filesystem [ 66.592856][ T1757] EXT4-fs (loop2): 1 truncate cleaned up [ 66.598415][ T1757] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 66.609500][ T1757] EXT4-fs error (device loop2): ext4_xattr_block_get:544: inode #16: comm syz-executor.2: corrupted xattr block 31 [ 66.621657][ T1757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 66.630655][ T1757] EXT4-fs error (device loop2): ext4_xattr_block_get:544: inode #16: comm syz-executor.2: corrupted xattr block 31 [ 66.642917][ T1757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 66.651981][ T23] audit: type=1400 audit(1717847195.090:524): avc: denied { read } for pid=1754 comm="syz-executor.2" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.775522][ T23] audit: type=1400 audit(1717847195.210:525): avc: denied { connect } for pid=1767 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.882640][ T1768] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 66.891772][ T1768] ext4 filesystem being mounted at /root/syzkaller-testdir3841544995/syzkaller.lG9XCn/41/file1 supports timestamps until 2038 (0x7fffffff) [ 66.992426][ T1776] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 66.992501][ T1776] loop1: p1 size 108986237 extends beyond EOD, truncated [ 67.087289][ T1776] loop1: p2 size 520093696 extends beyond EOD, truncated [ 67.095022][ T1778] loop2: p2 < > [ 67.099831][ T1776] loop1: p5 size 108986237 extends beyond EOD, truncated [ 67.107368][ T1776] loop1: p6 size 520093696 extends beyond EOD, truncated [ 67.114834][ T1776] loop1: p7 size 108986237 extends beyond EOD, truncated [ 67.122412][ T1776] loop1: p8 size 520093696 extends beyond EOD, truncated [ 67.129840][ T1776] loop1: p9 size 108986237 extends beyond EOD, truncated [ 67.137461][ T1776] loop1: p10 size 520093696 extends beyond EOD, truncated [ 67.145308][ T1776] loop1: p11 size 108986237 extends beyond EOD, truncated [ 67.153257][ T1776] loop1: p12 size 520093696 extends beyond EOD, truncated [ 67.160843][ T1776] loop1: p13 size 108986237 extends beyond EOD, truncated [ 67.168412][ T1776] loop1: p14 size 520093696 extends beyond EOD, truncated [ 67.175981][ T1776] loop1: p15 size 108986237 extends beyond EOD, truncated [ 67.186233][ T1776] loop1: p16 size 520093696 extends beyond EOD, truncated [ 67.195016][ T1776] loop1: p17 size 108986237 extends beyond EOD, truncated [ 67.202787][ T1776] loop1: p18 size 520093696 extends beyond EOD, truncated [ 67.210381][ T1776] loop1: p19 size 108986237 extends beyond EOD, truncated [ 67.218004][ T1776] loop1: p20 size 520093696 extends beyond EOD, truncated [ 67.225777][ T1776] loop1: p21 size 108986237 extends beyond EOD, truncated [ 67.233421][ T1776] loop1: p22 size 520093696 extends beyond EOD, truncated [ 67.241558][ T1776] loop1: p23 size 108986237 extends beyond EOD, truncated [ 67.249100][ T1776] loop1: p24 size 520093696 extends beyond EOD, truncated [ 67.256643][ T1776] loop1: p25 size 108986237 extends beyond EOD, truncated [ 67.257407][ T23] audit: type=1400 audit(1717847195.690:526): avc: denied { unmount } for pid=1006 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.284027][ T1776] loop1: p26 size 520093696 extends beyond EOD, truncated [ 67.291773][ T1776] loop1: p27 size 108986237 extends beyond EOD, truncated [ 67.299436][ T1776] loop1: p28 size 520093696 extends beyond EOD, truncated [ 67.307189][ T1776] loop1: p29 size 108986237 extends beyond EOD, truncated [ 67.314815][ T1776] loop1: p30 size 520093696 extends beyond EOD, truncated [ 67.322427][ T1776] loop1: p31 size 108986237 extends beyond EOD, truncated [ 67.330179][ T1776] loop1: p32 size 520093696 extends beyond EOD, truncated [ 67.337943][ T1776] loop1: p33 size 108986237 extends beyond EOD, truncated [ 67.345488][ T1776] loop1: p34 size 520093696 extends beyond EOD, truncated [ 67.353191][ T1776] loop1: p35 size 108986237 extends beyond EOD, truncated [ 67.360828][ T1776] loop1: p36 size 520093696 extends beyond EOD, truncated [ 67.368390][ T1776] loop1: p37 size 108986237 extends beyond EOD, truncated [ 67.375999][ T1776] loop1: p38 size 520093696 extends beyond EOD, truncated [ 67.383569][ T1776] loop1: p39 size 108986237 extends beyond EOD, truncated [ 67.391152][ T1776] loop1: p40 size 520093696 extends beyond EOD, truncated [ 67.398659][ T1776] loop1: p41 size 108986237 extends beyond EOD, truncated [ 67.406372][ T1776] loop1: p42 size 520093696 extends beyond EOD, truncated [ 67.413998][ T1776] loop1: p43 size 108986237 extends beyond EOD, truncated [ 67.421764][ T1776] loop1: p44 size 520093696 extends beyond EOD, truncated [ 67.429285][ T1776] loop1: p45 size 108986237 extends beyond EOD, truncated [ 67.440096][ T1776] loop1: p46 size 520093696 extends beyond EOD, truncated [ 67.448057][ T1776] loop1: p47 size 108986237 extends beyond EOD, truncated [ 67.455621][ T1776] loop1: p48 size 520093696 extends beyond EOD, truncated [ 67.463293][ T1776] loop1: p49 size 108986237 extends beyond EOD, truncated [ 67.471163][ T1776] loop1: p50 size 520093696 extends beyond EOD, truncated [ 67.478720][ T1776] loop1: p51 size 108986237 extends beyond EOD, truncated [ 67.486436][ T1776] loop1: p52 size 520093696 extends beyond EOD, truncated [ 67.493984][ T1776] loop1: p53 size 108986237 extends beyond EOD, truncated [ 67.501700][ T1776] loop1: p54 size 520093696 extends beyond EOD, truncated [ 67.509381][ T1776] loop1: p55 size 108986237 extends beyond EOD, truncated [ 67.516976][ T1776] loop1: p56 size 520093696 extends beyond EOD, truncated [ 67.524941][ T1776] loop1: p57 size 108986237 extends beyond EOD, truncated [ 67.532514][ T1776] loop1: p58 size 520093696 extends beyond EOD, truncated [ 67.540145][ T1776] loop1: p59 size 108986237 extends beyond EOD, truncated [ 67.548050][ T1776] loop1: p60 size 520093696 extends beyond EOD, truncated [ 67.557445][ T1776] loop1: p61 size 108986237 extends beyond EOD, truncated [ 67.565055][ T1776] loop1: p62 size 520093696 extends beyond EOD, truncated [ 67.572924][ T1776] loop1: p63 size 108986237 extends beyond EOD, truncated [ 67.580593][ T1776] loop1: p64 size 520093696 extends beyond EOD, truncated [ 67.588124][ T1776] loop1: p65 size 108986237 extends beyond EOD, truncated [ 67.595867][ T1776] loop1: p66 size 520093696 extends beyond EOD, truncated [ 67.606187][ T1776] loop1: p67 size 108986237 extends beyond EOD, truncated [ 67.609922][ T1790] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 67.620042][ T1776] loop1: p68 size 520093696 extends beyond EOD, truncated [ 67.622779][ T1790] ext4 filesystem being mounted at /root/syzkaller-testdir4234069513/syzkaller.gjiqmj/57/file1 supports timestamps until 2038 (0x7fffffff) [ 67.630703][ T1776] loop1: p69 size 108986237 extends beyond EOD, truncated [ 67.643852][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.659359][ T1776] loop1: p70 size 520093696 extends beyond EOD, truncated [ 67.667796][ T1776] loop1: p71 size 108986237 extends beyond EOD, truncated [ 67.676040][ T1776] loop1: p72 size 520093696 extends beyond EOD, truncated [ 67.683830][ T1776] loop1: p73 size 108986237 extends beyond EOD, truncated [ 67.691535][ T1776] loop1: p74 size 520093696 extends beyond EOD, truncated [ 67.699699][ T1776] loop1: p75 size 108986237 extends beyond EOD, truncated [ 67.707975][ T1776] loop1: p76 size 520093696 extends beyond EOD, truncated [ 67.716256][ T1776] loop1: p77 size 108986237 extends beyond EOD, truncated [ 67.724416][ T1776] loop1: p78 size 520093696 extends beyond EOD, truncated [ 67.732513][ T1776] loop1: p79 size 108986237 extends beyond EOD, truncated [ 67.742578][ T1776] loop1: p80 size 520093696 extends beyond EOD, truncated [ 67.750408][ T1776] loop1: p81 size 108986237 extends beyond EOD, truncated [ 67.757896][ T1776] loop1: p82 size 520093696 extends beyond EOD, truncated [ 67.765417][ T1776] loop1: p83 size 108986237 extends beyond EOD, truncated [ 67.773052][ T1776] loop1: p84 size 520093696 extends beyond EOD, truncated [ 67.780910][ T1776] loop1: p85 size 108986237 extends beyond EOD, truncated [ 67.788502][ T1776] loop1: p86 size 520093696 extends beyond EOD, truncated [ 67.796120][ T1776] loop1: p87 size 108986237 extends beyond EOD, truncated [ 67.803791][ T1776] loop1: p88 size 520093696 extends beyond EOD, truncated [ 67.811399][ T1776] loop1: p89 size 108986237 extends beyond EOD, truncated [ 67.819160][ T1776] loop1: p90 size 520093696 extends beyond EOD, truncated [ 67.827036][ T1776] loop1: p91 size 108986237 extends beyond EOD, truncated [ 67.834560][ T1776] loop1: p92 size 520093696 extends beyond EOD, truncated [ 67.842107][ T1776] loop1: p93 size 108986237 extends beyond EOD, truncated [ 67.849597][ T1776] loop1: p94 size 520093696 extends beyond EOD, truncated [ 67.857381][ T1776] loop1: p95 size 108986237 extends beyond EOD, truncated [ 67.865069][ T1776] loop1: p96 size 520093696 extends beyond EOD, truncated [ 67.872820][ T1776] loop1: p97 size 108986237 extends beyond EOD, truncated [ 67.880575][ T1776] loop1: p98 size 520093696 extends beyond EOD, truncated [ 67.888362][ T1776] loop1: p99 size 108986237 extends beyond EOD, truncated [ 67.896218][ T1776] loop1: p100 size 520093696 extends beyond EOD, truncated [ 67.903965][ T1776] loop1: p101 size 108986237 extends beyond EOD, truncated [ 67.911941][ T1776] loop1: p102 size 520093696 extends beyond EOD, truncated [ 67.919819][ T1776] loop1: p103 size 108986237 extends beyond EOD, truncated [ 67.927511][ T1776] loop1: p104 size 520093696 extends beyond EOD, truncated [ 67.936091][ T1776] loop1: p105 size 108986237 extends beyond EOD, truncated [ 67.943986][ T1776] loop1: p106 size 520093696 extends beyond EOD, truncated [ 67.951835][ T1776] loop1: p107 size 108986237 extends beyond EOD, truncated [ 67.959481][ T1776] loop1: p108 size 520093696 extends beyond EOD, truncated [ 67.967133][ T1776] loop1: p109 size 108986237 extends beyond EOD, truncated [ 67.975201][ T1776] loop1: p110 size 520093696 extends beyond EOD, truncated [ 67.982951][ T1776] loop1: p111 size 108986237 extends beyond EOD, truncated [ 67.990855][ T1776] loop1: p112 size 520093696 extends beyond EOD, truncated [ 67.998448][ T1776] loop1: p113 size 108986237 extends beyond EOD, truncated [ 68.006564][ T1776] loop1: p114 size 520093696 extends beyond EOD, truncated [ 68.014445][ T1776] loop1: p115 size 108986237 extends beyond EOD, truncated [ 68.022691][ T1776] loop1: p116 size 520093696 extends beyond EOD, truncated [ 68.030372][ T1776] loop1: p117 size 108986237 extends beyond EOD, truncated [ 68.038247][ T1776] loop1: p118 size 520093696 extends beyond EOD, truncated [ 68.046003][ T1776] loop1: p119 size 108986237 extends beyond EOD, truncated [ 68.053746][ T1776] loop1: p120 size 520093696 extends beyond EOD, truncated [ 68.061405][ T1776] loop1: p121 size 108986237 extends beyond EOD, truncated [ 68.069083][ T1776] loop1: p122 size 520093696 extends beyond EOD, truncated [ 68.076943][ T1776] loop1: p123 size 108986237 extends beyond EOD, truncated [ 68.084757][ T1776] loop1: p124 size 520093696 extends beyond EOD, truncated [ 68.092833][ T1776] loop1: p125 size 108986237 extends beyond EOD, truncated [ 68.100641][ T1776] loop1: p126 size 520093696 extends beyond EOD, truncated [ 68.108387][ T1776] loop1: p127 size 108986237 extends beyond EOD, truncated [ 68.116180][ T1776] loop1: p128 size 520093696 extends beyond EOD, truncated [ 68.123850][ T1776] loop1: p129 size 108986237 extends beyond EOD, truncated [ 68.131597][ T1776] loop1: p130 size 520093696 extends beyond EOD, truncated [ 68.139200][ T1776] loop1: p131 size 108986237 extends beyond EOD, truncated [ 68.147233][ T1776] loop1: p132 size 520093696 extends beyond EOD, truncated [ 68.154839][ T1776] loop1: p133 size 108986237 extends beyond EOD, truncated [ 68.162474][ T1776] loop1: p134 size 520093696 extends beyond EOD, truncated [ 68.170116][ T1776] loop1: p135 size 108986237 extends beyond EOD, truncated [ 68.177751][ T1776] loop1: p136 size 520093696 extends beyond EOD, truncated [ 68.185587][ T1776] loop1: p137 size 108986237 extends beyond EOD, truncated [ 68.193627][ T1776] loop1: p138 size 520093696 extends beyond EOD, truncated [ 68.201345][ T1776] loop1: p139 size 108986237 extends beyond EOD, truncated [ 68.209089][ T1776] loop1: p140 size 520093696 extends beyond EOD, truncated [ 68.217241][ T1776] loop1: p141 size 108986237 extends beyond EOD, truncated [ 68.225646][ T1776] loop1: p142 size 520093696 extends beyond EOD, truncated [ 68.233368][ T1776] loop1: p143 size 108986237 extends beyond EOD, truncated [ 68.241003][ T1776] loop1: p144 size 520093696 extends beyond EOD, truncated [ 68.248821][ T1776] loop1: p145 size 108986237 extends beyond EOD, truncated [ 68.259398][ T1776] loop1: p146 size 520093696 extends beyond EOD, truncated [ 68.267449][ T1776] loop1: p147 size 108986237 extends beyond EOD, truncated [ 68.275268][ T1776] loop1: p148 size 520093696 extends beyond EOD, truncated [ 68.283141][ T1776] loop1: p149 size 108986237 extends beyond EOD, truncated [ 68.293449][ T1776] loop1: p150 size 520093696 extends beyond EOD, truncated [ 68.294708][ T23] audit: type=1400 audit(1717847196.730:527): avc: denied { bind } for pid=1804 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.306029][ T1776] loop1: p151 size 108986237 extends beyond EOD, truncated [ 68.321384][ T1806] ------------[ cut here ]------------ [ 68.328497][ T1776] loop1: p152 size 520093696 extends beyond EOD, truncated [ 68.332601][ T1806] kernel BUG at net/core/dev.c:2873! [ 68.332671][ T1806] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 68.340652][ T1776] loop1: p153 size 108986237 extends beyond EOD, truncated [ 68.344838][ T1806] CPU: 1 PID: 1806 Comm: syz-executor.3 Tainted: G W 5.4.274-syzkaller-00016-gdd432c37afcd #0 [ 68.344844][ T1806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 68.344872][ T1806] RIP: 0010:skb_checksum_help+0x873/0x880 [ 68.351749][ T1776] loop1: p154 size 520093696 extends beyond EOD, truncated [ 68.357773][ T1806] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 5e 05 16 fe e9 c3 fc ff ff e8 74 20 e6 fd 0f 0b e8 6d 20 e6 fd <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 53 [ 68.357781][ T1806] RSP: 0018:ffff8881f0f9ee68 EFLAGS: 00010283 [ 68.370243][ T1776] loop1: p155 size 108986237 extends beyond EOD, truncated [ 68.379239][ T1806] RAX: ffffffff837e1bb3 RBX: 0000000000002989 RCX: 0000000000040000 [ 68.379246][ T1806] RDX: ffffc900047ef000 RSI: 0000000000000cd4 RDI: 0000000000000cd5 [ 68.379253][ T1806] RBP: 0000000000004137 R08: ffffffff837e162f R09: ffffed103e1f3dbe [ 68.379261][ T1806] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f43ea430 [ 68.379269][ T1806] R13: 0000000000004135 R14: ffff8881f43ea3c0 R15: 1ffff1103e87d486 [ 68.379287][ T1806] FS: 00007f1991cc76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.386216][ T1776] loop1: p156 size 520093696 extends beyond EOD, truncated [ 68.391909][ T1806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.391917][ T1806] CR2: 000000002000e000 CR3: 00000001e0770000 CR4: 00000000003406a0 [ 68.391925][ T1806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.391931][ T1806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.391934][ T1806] Call Trace: [ 68.391952][ T1806] ? __die+0xb4/0x100 [ 68.391969][ T1806] ? die+0x26/0x50 [ 68.412832][ T1776] loop1: p157 size 108986237 extends beyond EOD, truncated [ 68.417433][ T1806] ? do_trap+0x1e7/0x340 [ 68.417445][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.417462][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.425511][ T1776] loop1: p158 size 520093696 extends beyond EOD, truncated [ 68.432279][ T1806] ? do_invalid_op+0xfb/0x110 [ 68.432291][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.432302][ T1806] ? invalid_op+0x1e/0x30 [ 68.432320][ T1806] ? skb_checksum_help+0x2ef/0x880 [ 68.441380][ T1776] loop1: p159 size 108986237 extends beyond EOD, truncated [ 68.447980][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.447991][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.448010][ T1806] ? skb_checksum_help+0x873/0x880 [ 68.457224][ T1776] loop1: p160 size 520093696 extends beyond EOD, truncated [ 68.464086][ T1806] ip_do_fragment+0x15e/0x2200 [ 68.464102][ T1806] ? ip_fragment+0x210/0x210 [ 68.464113][ T1806] ? ip_frag_next+0xad0/0xad0 [ 68.464135][ T1806] ? kmem_cache_free+0x10b/0x2c0 [ 68.473697][ T1776] loop1: p161 size 108986237 extends beyond EOD, truncated [ 68.479836][ T1806] ? __ip_finish_output+0x457/0x710 [ 68.479847][ T1806] ? ip_fragment+0x9a/0x210 [ 68.479858][ T1806] __ip_finish_output+0x49c/0x710 [ 68.479877][ T1806] ip_output+0x19b/0x3a0 [ 68.487082][ T1776] loop1: p162 size 520093696 extends beyond EOD, truncated [ 68.494181][ T1806] ? ip_finish_output+0x1d0/0x1d0 [ 68.494193][ T1806] ? ip_mc_finish_output+0x340/0x340 [ 68.494208][ T1806] iptunnel_xmit+0x476/0x850 [ 68.494227][ T1806] ip_tunnel_xmit+0x1ac0/0x2690 [ 68.502854][ T1776] loop1: p163 size 108986237 extends beyond EOD, truncated [ 68.509801][ T1806] ? ip_tunnel_xmit+0xd1/0x2690 [ 68.509816][ T1806] ? tnl_update_pmtu+0xbb0/0xbb0 [ 68.509828][ T1806] ? skb_mac_gso_segment+0x28e/0x490 [ 68.509844][ T1806] ? gre_build_header+0x23f/0x7a0 [ 68.513698][ T1776] loop1: p164 size 520093696 extends beyond EOD, truncated [ 68.516745][ T1806] ipgre_xmit+0x81a/0xbf0 [ 68.516761][ T1806] dev_hard_start_xmit+0x1b7/0x6b0 [ 68.516780][ T1806] __dev_queue_xmit+0x14da/0x27e0 [ 68.521263][ T1776] loop1: p165 size 108986237 extends beyond EOD, truncated [ 68.527510][ T1806] ? dev_queue_xmit+0x20/0x20 [ 68.527521][ T1806] ? virtio_net_hdr_to_skb+0xa10/0x1130 [ 68.527539][ T1806] ? fanout_demux_rollover+0xc10/0xc10 [ 68.532380][ T1776] loop1: p166 size 520093696 extends beyond EOD, truncated [ 68.536527][ T1806] packet_sendmsg+0x4747/0x6100 [ 68.536539][ T1806] ? avc_denied+0x1d0/0x1d0 [ 68.536558][ T1806] ? avc_has_perm+0x16f/0x260 [ 68.542286][ T1776] loop1: p167 size 108986237 extends beyond EOD, truncated [ 68.548608][ T1806] ? plist_check_list+0x20d/0x220 [ 68.548630][ T1806] ? selinux_socket_sendmsg+0x243/0x340 [ 68.553951][ T1776] loop1: p168 size 520093696 extends beyond EOD, truncated [ 68.558055][ T1806] ? selinux_socket_accept+0x5b0/0x5b0 [ 68.558068][ T1806] ? rw_copy_check_uvector+0x2a3/0x2f0 [ 68.558086][ T1806] ? compat_packet_setsockopt+0x160/0x160 [ 68.563029][ T1776] loop1: p169 size 108986237 extends beyond EOD, truncated [ 68.567176][ T1806] ? push_pipe+0x3ce/0x760 [ 68.567190][ T1806] ? security_socket_sendmsg+0x7d/0xa0 [ 68.567208][ T1806] ? compat_packet_setsockopt+0x160/0x160 [ 68.575041][ T1776] loop1: p170 size 520093696 extends beyond EOD, truncated [ 68.579142][ T1806] ____sys_sendmsg+0x5ac/0x8f0 [ 68.579156][ T1806] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 68.579175][ T1806] ? selinux_socket_setsockopt+0x260/0x360 [ 68.584951][ T1776] loop1: p171 size 108986237 extends beyond EOD, truncated [ 68.589046][ T1806] __sys_sendmsg+0x28b/0x380 [ 68.589058][ T1806] ? ____sys_sendmsg+0x8f0/0x8f0 [ 68.589074][ T1806] ? fput_many+0x15e/0x1b0 [ 68.596905][ T1776] loop1: p172 size 520093696 extends beyond EOD, truncated [ 68.600669][ T1806] ? sockfs_listxattr+0xe0/0xe0 [ 68.600686][ T1806] do_syscall_64+0xca/0x1c0 [ 68.600706][ T1806] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 68.605862][ T1776] loop1: p173 size 108986237 extends beyond EOD, truncated [ 68.609618][ T1806] RIP: 0033:0x7f199294cf69 [ 68.609630][ T1806] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 68.609636][ T1806] RSP: 002b:00007f1991cc70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.609648][ T1806] RAX: ffffffffffffffda RBX: 00007f1992a83f80 RCX: 00007f199294cf69 [ 68.609654][ T1806] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 68.609669][ T1806] RBP: 00007f19929aa6fe R08: 0000000000000000 R09: 0000000000000000 [ 68.615459][ T1776] loop1: p174 size 520093696 extends beyond EOD, truncated [ 68.621490][ T1806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.621497][ T1806] R13: 000000000000000b R14: 00007f1992a83f80 R15: 00007fffc3f81d48 [ 68.621505][ T1806] Modules linked in: [ 68.621595][ T1806] ---[ end trace d3f09d13cb64649e ]--- [ 68.627420][ T1776] loop1: p175 size 108986237 extends beyond EOD, truncated [ 68.630898][ T1806] RIP: 0010:skb_checksum_help+0x873/0x880 [ 68.630909][ T1806] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 5e 05 16 fe e9 c3 fc ff ff e8 74 20 e6 fd 0f 0b e8 6d 20 e6 fd <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 53 [ 68.630915][ T1806] RSP: 0018:ffff8881f0f9ee68 EFLAGS: 00010283 [ 68.630924][ T1806] RAX: ffffffff837e1bb3 RBX: 0000000000002989 RCX: 0000000000040000 [ 68.630931][ T1806] RDX: ffffc900047ef000 RSI: 0000000000000cd4 RDI: 0000000000000cd5 [ 68.630939][ T1806] RBP: 0000000000004137 R08: ffffffff837e162f R09: ffffed103e1f3dbe [ 68.630946][ T1806] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f43ea430 [ 68.630960][ T1806] R13: 0000000000004135 R14: ffff8881f43ea3c0 R15: 1ffff1103e87d486 [ 68.638183][ T1776] loop1: p176 size 520093696 extends beyond EOD, truncated [ 68.639835][ T1806] FS: 00007f1991cc76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.639849][ T1806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.647757][ T1776] loop1: p177 size 108986237 extends beyond EOD, truncated [ 68.651730][ T1806] CR2: 000000002000e000 CR3: 00000001e0770000 CR4: 00000000003406a0 [ 68.651744][ T1806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.657708][ T1776] loop1: p178 size 520093696 extends beyond EOD, truncated [ 68.661273][ T1806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.661280][ T1806] Kernel panic - not syncing: Fatal exception in interrupt [ 68.666164][ T1806] Kernel Offset: disabled [ 69.127264][ T1806] Rebooting in 86400 seconds..