last executing test programs: 1.619844239s ago: executing program 0 (id=391): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.60712347s ago: executing program 0 (id=392): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180a00000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.59439344s ago: executing program 0 (id=393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x15, 0x0, &(0x7f0000000040)="3d25ff005b19c4cbe601709b080084dac826ab0815", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.58034216s ago: executing program 0 (id=394): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff92}, 0xbb) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r0, 0x0, 0x0}, 0x10) 1.567142401s ago: executing program 0 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x1, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xff, 0x7}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r1, &(0x7f0000005900)={0x2020}, 0x2020) 1.552640671s ago: executing program 0 (id=396): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20012f"], 0x0}) 881.302848ms ago: executing program 2 (id=430): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000180)=""/134, 0x86) 869.212078ms ago: executing program 2 (id=431): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1dc, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1b0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_tunnel_key={0x19c, 0xf, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x11a, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 856.668329ms ago: executing program 2 (id=432): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7) 845.650259ms ago: executing program 2 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 835.176859ms ago: executing program 2 (id=434): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca348800800000000000000080003802e001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a000005000600000000000800010000000000180025"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 825.405989ms ago: executing program 2 (id=435): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 766.744911ms ago: executing program 1 (id=436): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x4, 0x4e22, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0x5, 0x5, 0x1ff, 0x3, 0x8}, {0x200, 0x6, 0x0, 0x6}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) 736.556832ms ago: executing program 1 (id=437): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000100)) 704.026402ms ago: executing program 1 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:-_group/myevent sc', 0x14) 703.863002ms ago: executing program 1 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) 703.546013ms ago: executing program 1 (id=440): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x984b}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xe8d7b8ee}]}}]}, 0x58}}, 0x0) 679.739223ms ago: executing program 1 (id=441): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 390.52373ms ago: executing program 4 (id=449): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) 359.235861ms ago: executing program 4 (id=450): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000300)={0x16, 0x80, 0x80}) 323.227052ms ago: executing program 4 (id=453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x8010) 298.860112ms ago: executing program 4 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x100) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="14bc8ab3e60a"], 0x9) 231.856244ms ago: executing program 4 (id=457): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 225.811214ms ago: executing program 3 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000240)={0x10, 0x6, 0x1}) 198.122985ms ago: executing program 3 (id=459): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@discard}, {@namecase}, {}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) 182.736435ms ago: executing program 4 (id=460): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ae4000/0x3000)=nil, &(0x7f0000d25000/0x4000)=nil, 0x3000, 0x2}) 128.131257ms ago: executing program 3 (id=461): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) 73.369458ms ago: executing program 3 (id=462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 24.727939ms ago: executing program 3 (id=463): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=464): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0xee00, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 23.905229][ T28] audit: type=1400 audit(1786708826.198:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.908362][ T278] cgroup: Unknown subsys name 'net' [ 23.927962][ T28] audit: type=1400 audit(1786708826.198:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.955277][ T28] audit: type=1400 audit(1786708826.228:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.975236][ T278] cgroup: Unknown subsys name 'devices' [ 24.094924][ T278] cgroup: Unknown subsys name 'hugetlb' [ 24.100565][ T278] cgroup: Unknown subsys name 'rlimit' [ 24.204014][ T28] audit: type=1400 audit(1786708826.498:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.227232][ T28] audit: type=1400 audit(1786708826.498:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.251976][ T28] audit: type=1400 audit(1786708826.498:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.275950][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.285071][ T28] audit: type=1400 audit(1786708826.578:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.310469][ T28] audit: type=1400 audit(1786708826.578:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.337235][ T28] audit: type=1400 audit(1786708826.638:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.362780][ T28] audit: type=1400 audit(1786708826.638:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.362822][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.452205][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.459445][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.467017][ T287] device bridge_slave_0 entered promiscuous mode [ 25.475004][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.482039][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.489474][ T287] device bridge_slave_1 entered promiscuous mode [ 25.526242][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.533333][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.540709][ T286] device bridge_slave_0 entered promiscuous mode [ 25.548709][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.555783][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.563446][ T286] device bridge_slave_1 entered promiscuous mode [ 25.627300][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.634413][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.641828][ T289] device bridge_slave_0 entered promiscuous mode [ 25.663312][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.670356][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.677825][ T289] device bridge_slave_1 entered promiscuous mode [ 25.764839][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.771895][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.779277][ T288] device bridge_slave_0 entered promiscuous mode [ 25.786148][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.793381][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.800801][ T288] device bridge_slave_1 entered promiscuous mode [ 25.807367][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.814475][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.821779][ T290] device bridge_slave_0 entered promiscuous mode [ 25.831146][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.838248][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.845660][ T290] device bridge_slave_1 entered promiscuous mode [ 25.884626][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.891708][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.899022][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.906061][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.968820][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.975909][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.983183][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.990214][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.015327][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.022395][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.029650][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.036697][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.055326][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.062400][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.069654][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.076719][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.094726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.102643][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.109805][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.117806][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.125093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.132282][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.139497][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.147221][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.154494][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.178734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.186998][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.194053][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.209057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.216956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.224571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.232885][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.239918][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.260451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.267955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.276193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.283237][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.290938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.299346][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.306403][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.313757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.321859][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.328907][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.336293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.344502][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.351547][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.358925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.367062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.383208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.403471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.412324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.420493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.448745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.457176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.465197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.474718][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.481758][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.489214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.497448][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.504498][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.511889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.519932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.527973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.543879][ T287] device veth0_vlan entered promiscuous mode [ 26.551099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.558616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.566063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.575348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.583730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.591512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.599681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.607613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.622765][ T289] device veth0_vlan entered promiscuous mode [ 26.632930][ T286] device veth0_vlan entered promiscuous mode [ 26.642523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.651076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.659560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.668278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.675703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.683667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.691693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.700223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.708475][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.715539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.723103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.731553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.739947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.747440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.754908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.770128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.778532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.786793][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.793843][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.801285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.809803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.818514][ T289] device veth1_macvtap entered promiscuous mode [ 26.832301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.840050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.848432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.856874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.865262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.876029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.884208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.893654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.901850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.912317][ T288] device veth0_vlan entered promiscuous mode [ 26.920187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.928168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.936444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.944893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.953433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.961465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.970868][ T287] device veth1_macvtap entered promiscuous mode [ 26.978349][ T286] device veth1_macvtap entered promiscuous mode [ 26.987099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.994923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.002641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.010060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.031425][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 27.040064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.049068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.057595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.066090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.086716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.095354][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.104304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.113353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.122874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.133409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.141643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.150137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.169456][ T290] device veth0_vlan entered promiscuous mode [ 27.179855][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.188340][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.196898][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.204724][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.226591][ T288] device veth1_macvtap entered promiscuous mode [ 27.241285][ T290] device veth1_macvtap entered promiscuous mode [ 27.249949][ T318] binder: 316:318 ioctl 400c620e 0 returned -14 [ 27.250565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.265373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.304018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.320721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.324664][ T326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.330055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.354311][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.364838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.373645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.383754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.391978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.489010][ T340] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 27.592444][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.644939][ T365] capability: warning: `syz.0.24' uses 32-bit capabilities (legacy support in use) [ 27.737872][ T375] loop2: detected capacity change from 0 to 256 [ 27.756899][ T375] ======================================================= [ 27.756899][ T375] WARNING: The mand mount option has been deprecated and [ 27.756899][ T375] and is ignored by this kernel. Remove the mand [ 27.756899][ T375] option from the mount to silence this warning. [ 27.756899][ T375] ======================================================= [ 27.822535][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 27.829790][ T313] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 27.865926][ T313] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 27.880854][ T351] loop3: detected capacity change from 0 to 40427 [ 27.894588][ T375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 27.905833][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.920663][ T313] usb 2-1: Product: syz [ 27.921257][ T351] F2FS-fs (loop3): invalid crc value [ 27.925284][ T313] usb 2-1: Manufacturer: syz [ 27.935196][ T313] usb 2-1: SerialNumber: syz [ 27.949229][ T313] r8152-cfgselector 2-1: config 0 descriptor?? [ 27.976768][ T351] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 28.054878][ T351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.157709][ T313] r8152-cfgselector 2-1: Unknown version 0x1030 [ 28.171310][ T380] loop0: detected capacity change from 0 to 40427 [ 28.188126][ T380] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 28.202501][ T380] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 28.223900][ T401] loop4: detected capacity change from 0 to 256 [ 28.233207][ T380] F2FS-fs (loop0): invalid crc value [ 28.269972][ T380] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.294100][ T406] netlink: 'syz.4.39': attribute type 12 has an invalid length. [ 28.310635][ T406] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 28.326411][ T406] netlink: 148 bytes leftover after parsing attributes in process `syz.4.39'. [ 28.346319][ T380] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 28.360815][ T313] r8152-cfgselector 2-1: Unknown version 0x0000 [ 28.372188][ T380] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.379941][ T313] r8152-cfgselector 2-1: bad CDC descriptors [ 28.390577][ T313] r8152-cfgselector 2-1: Unknown version 0x0000 [ 28.415101][ T313] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 28.461768][ T380] syz.0.31: attempt to access beyond end of device [ 28.461768][ T380] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 28.522601][ T287] syz-executor: attempt to access beyond end of device [ 28.522601][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.538699][ T288] syz-executor: attempt to access beyond end of device [ 28.538699][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.807231][ T389] loop2: detected capacity change from 0 to 131072 [ 28.816925][ T389] F2FS-fs (loop2): invalid crc value [ 28.824088][ T389] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.859284][ T389] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.862564][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.073587][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.085018][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.094938][ T6] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 29.104077][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.117690][ T6] usb 5-1: config 0 descriptor?? [ 29.140358][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 29.140371][ T28] audit: type=1400 audit(1786708831.428:157): avc: denied { mount } for pid=437 comm="syz.2.49" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.168825][ T28] audit: type=1400 audit(1786708831.428:158): avc: denied { read write } for pid=437 comm="syz.2.49" name="trace" dev="tracefs" ino=12902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.191764][ T28] audit: type=1400 audit(1786708831.428:159): avc: denied { open } for pid=437 comm="syz.2.49" path="/9/trace/trace" dev="tracefs" ino=12902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.215113][ T28] audit: type=1400 audit(1786708831.488:160): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.412764][ T28] audit: type=1400 audit(1786708831.708:161): avc: denied { mount } for pid=448 comm="syz.2.54" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.434972][ T28] audit: type=1400 audit(1786708831.708:162): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.460391][ T451] loop2: detected capacity change from 0 to 512 [ 29.469847][ T451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.482769][ T451] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 29.491055][ T451] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.55: invalid indirect mapped block 2683928664 (level 1) [ 29.505365][ T451] EXT4-fs (loop2): 1 truncate cleaned up [ 29.511081][ T451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.526075][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.532915][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.536747][ T28] audit: type=1400 audit(1786708831.828:163): avc: denied { read write } for pid=450 comm="syz.2.55" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.539859][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.563362][ T451] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.55: Invalid block bitmap block 3 in block_group 0 [ 29.568888][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.595991][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.609793][ T451] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.618682][ T28] audit: type=1400 audit(1786708831.828:164): avc: denied { open } for pid=450 comm="syz.2.55" path="/15/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.621868][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.642465][ T28] audit: type=1400 audit(1786708831.828:165): avc: denied { ioctl } for pid=450 comm="syz.2.55" path="/15/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.678666][ T451] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.55: invalid indirect mapped block 1669132791 (level 1) [ 29.685122][ T28] audit: type=1400 audit(1786708831.908:166): avc: denied { write } for pid=456 comm="syz.0.56" name="igmp" dev="proc" ino=4026532524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.695615][ T459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 29.724057][ T6] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 29.749600][ T6] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 29.761435][ T289] EXT4-fs (loop2): unmounting filesystem. [ 29.768979][ T6] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 29.776679][ T6] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 29.788895][ T6] arvo: probe of 0003:1E7D:30D4.0001 failed with error -71 [ 29.811466][ T6] usb 5-1: USB disconnect, device number 2 [ 29.885430][ T477] fido_id[477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 30.205407][ T472] loop2: detected capacity change from 0 to 131072 [ 30.216118][ T472] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.262231][ T472] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 30.676514][ T531] loop1: detected capacity change from 0 to 512 [ 30.683153][ T533] loop2: detected capacity change from 0 to 256 [ 30.697878][ T533] exfat: Deprecated parameter 'utf8' [ 30.705433][ T533] exfat: Deprecated parameter 'namecase' [ 30.711506][ T533] exfat: Deprecated parameter 'namecase' [ 30.717879][ T533] exfat: Deprecated parameter 'utf8' [ 30.754536][ T533] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 30.803616][ T543] loop0: detected capacity change from 0 to 256 [ 30.817131][ T543] exfat: Deprecated parameter 'utf8' [ 30.824047][ T543] exfat: Deprecated parameter 'utf8' [ 30.833432][ T543] exfat: Deprecated parameter 'utf8' [ 30.853105][ T543] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 30.951698][ T561] xt_hashlimit: size too large, truncated to 1048576 [ 31.224085][ T580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.232950][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.261972][ T287] EXT4-fs (loop3): unmounting filesystem. [ 31.313941][ T587] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.109: inode #1: comm syz.1.109: iget: illegal inode # [ 31.342582][ T587] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.109: error while reading EA inode 1 err=-117 [ 31.372818][ T587] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.388463][ T587] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.109: inode #1: comm syz.1.109: iget: illegal inode # [ 31.416725][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 31.423268][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.434403][ T587] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.109: error while reading EA inode 1 err=-117 [ 31.450663][ T592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 31.457076][ T587] EXT4-fs (loop1): 1 orphan inode deleted [ 31.460497][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.466000][ T587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.483845][ T592] Zero length message leads to an empty skb [ 31.515454][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.528691][ T585] F2FS-fs (loop3): fault_injection options not supported [ 31.536925][ T286] EXT4-fs (loop1): unmounting filesystem. [ 31.542964][ T6] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 31.545602][ T585] F2FS-fs (loop3): fault_type options not supported [ 31.564285][ T585] F2FS-fs (loop3): invalid crc value [ 31.569070][ T6] usb 5-1: Product: syz [ 31.580426][ T6] usb 5-1: Manufacturer: syz [ 31.585971][ T585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.604189][ T6] hub 5-1:4.0: USB hub found [ 31.630699][ T585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.683644][ T585] syz.3.108: attempt to access beyond end of device [ 31.683644][ T585] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.805310][ T6] hub 5-1:4.0: 2 ports detected [ 32.163809][ T655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 32.171968][ T655] System zones: 1-3, 19-19, 35-36 [ 32.177707][ T655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.187019][ T655] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.230334][ T655] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 32.259494][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.357497][ T663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 32.367715][ T663] device bridge_slave_0 left promiscuous mode [ 32.374141][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.392969][ T663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.410815][ T6] usb 5-1: USB disconnect, device number 3 [ 32.435307][ T669] bridge0: port 2(bridge_slave_1) entered listening state [ 32.451869][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.607473][ T673] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 32.615075][ T673] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.623821][ T673] F2FS-fs (loop1): invalid crc value [ 32.630438][ T673] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.682165][ T673] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 32.695799][ T673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.733340][ T286] syz-executor: attempt to access beyond end of device [ 32.733340][ T286] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.792438][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.002410][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 33.008788][ T309] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 33.036226][ T713] set_capacity_and_notify: 6 callbacks suppressed [ 33.036241][ T713] loop1: detected capacity change from 0 to 256 [ 33.039154][ T309] usb 4-1: config 0 has no interface number 0 [ 33.077740][ T713] FAT-fs (loop1): Directory bread(block 64) failed [ 33.085469][ T309] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.093231][ T713] FAT-fs (loop1): Directory bread(block 65) failed [ 33.112658][ T713] FAT-fs (loop1): Directory bread(block 66) failed [ 33.116034][ T309] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.119194][ T713] FAT-fs (loop1): Directory bread(block 67) failed [ 33.129844][ T717] syz.4.165 uses obsolete (PF_INET,SOCK_PACKET) [ 33.152026][ T309] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 33.174577][ T713] FAT-fs (loop1): Directory bread(block 68) failed [ 33.181391][ T309] usb 4-1: config 0 interface 196 has no altsetting 0 [ 33.191229][ T713] FAT-fs (loop1): Directory bread(block 69) failed [ 33.203855][ T309] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.213185][ T713] FAT-fs (loop1): Directory bread(block 70) failed [ 33.219727][ T713] FAT-fs (loop1): Directory bread(block 71) failed [ 33.226391][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.238463][ T720] loop4: detected capacity change from 0 to 1024 [ 33.247823][ T713] FAT-fs (loop1): Directory bread(block 72) failed [ 33.252469][ T309] usb 4-1: Product: syz [ 33.262174][ T720] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 33.271977][ T309] usb 4-1: Manufacturer: syz [ 33.280217][ T713] FAT-fs (loop1): Directory bread(block 73) failed [ 33.282056][ T309] usb 4-1: SerialNumber: syz [ 33.292064][ T720] EXT4-fs error (device loop4): ext4_get_journal_inode:5749: inode #32: comm syz.4.166: iget: special inode unallocated [ 33.311634][ T309] usb 4-1: config 0 descriptor?? [ 33.322512][ T720] EXT4-fs (loop4): no journal found [ 33.328062][ T677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.338047][ T720] EXT4-fs (loop4): can't get journal size [ 33.352815][ T720] EXT4-fs (loop4): filesystem is read-only [ 33.362468][ T720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.411527][ T290] EXT4-fs (loop4): unmounting filesystem. [ 33.461410][ T723] loop4: detected capacity change from 0 to 512 [ 33.501646][ T723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.609230][ T290] EXT4-fs (loop4): unmounting filesystem. [ 33.662436][ T732] sd 0:0:1:0: PR command failed: 1026 [ 33.668420][ T732] sd 0:0:1:0: Sense Key : 0x5 [current] [ 33.688538][ T732] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 33.746992][ T309] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 33.762446][ T309] ipheth: probe of 4-1:0.196 failed with error -22 [ 33.803701][ T741] loop2: detected capacity change from 0 to 512 [ 33.827579][ T741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.842785][ T741] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.871747][ T741] EXT4-fs (loop2): 1 truncate cleaned up [ 33.877485][ T741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.938578][ T289] EXT4-fs (loop2): unmounting filesystem. [ 33.963347][ T6] usb 4-1: USB disconnect, device number 2 [ 34.057147][ T750] loop4: detected capacity change from 0 to 4096 [ 34.094583][ T750] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.127572][ T750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.150572][ T28] kauditd_printk_skb: 3324 callbacks suppressed [ 34.150585][ T28] audit: type=1326 audit(1786708836.438:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.182212][ T290] EXT4-fs (loop4): unmounting filesystem. [ 34.232457][ T28] audit: type=1326 audit(1786708836.438:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.262532][ T28] audit: type=1326 audit(1786708836.438:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.287623][ T28] audit: type=1326 audit(1786708836.438:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.312682][ T28] audit: type=1326 audit(1786708836.438:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.353007][ T28] audit: type=1326 audit(1786708836.438:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.377833][ T28] audit: type=1326 audit(1786708836.438:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.425026][ T28] audit: type=1326 audit(1786708836.438:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.462597][ T28] audit: type=1326 audit(1786708836.438:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.487600][ T28] audit: type=1326 audit(1786708836.438:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=697 comm="syz.0.157" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d44f3f459 code=0x7ffc0000 [ 34.665605][ T792] loop3: detected capacity change from 0 to 16 [ 34.676066][ T794] loop1: detected capacity change from 0 to 512 [ 34.695932][ T794] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 34.710174][ T792] erofs: (device loop3): mounted with root inode @ nid 36. [ 34.714443][ T794] EXT4-fs (loop1): can't mount with commit=33527, fs mounted w/o journal [ 34.765235][ T792] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 34.899166][ T804] loop1: detected capacity change from 0 to 512 [ 34.929758][ T806] loop3: detected capacity change from 0 to 16 [ 34.949581][ T804] EXT4-fs (loop1): 1 truncate cleaned up [ 34.965781][ T804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.966181][ T806] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 35.034026][ T806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 35.062469][ T806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 35.193448][ T286] EXT4-fs (loop1): unmounting filesystem. [ 35.248544][ T812] mmap: syz.3.208 (812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.393396][ T823] 9p: Unknown Cache mode readahead [ 35.659612][ T842] loop1: detected capacity change from 0 to 512 [ 35.682139][ T842] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.742236][ T842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.761947][ T842] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.798920][ T286] EXT4-fs (loop1): unmounting filesystem. [ 35.875803][ T867] printk: console [ttyS0] disabled