last executing test programs: 1m15.891495483s ago: executing program 4 (id=378): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1m15.891312582s ago: executing program 4 (id=380): r0 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="cf9f05cea4", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0) 1m15.886469553s ago: executing program 4 (id=381): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405, 0xfffffffffffffffe}, {0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x80, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m15.866286534s ago: executing program 4 (id=382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001280)={[{@nodelalloc}, {@nombcache}, {@usrjquota}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) fallocate(r0, 0x10, 0x37eb, 0x683) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1m15.748937821s ago: executing program 4 (id=383): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000100)=0x1006, 0x4) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/10, 0xa}, 0x3d5c}], 0x1, 0x2, 0x0) 1m15.736479182s ago: executing program 4 (id=384): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0xfb) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 1m15.715663383s ago: executing program 32 (id=384): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0xfb) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 1m13.628903295s ago: executing program 3 (id=407): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)={[{@memory_low}, {}, {@checkpoint_diasble}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@noheap}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@user_xattr}, {@noextent_cache}, {@block_mode}]}, 0x2, 0x5517, &(0x7f00000079c0)="$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") r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, r2, &(0x7f00000004c0)={r2, r3, 0xff}) 1m13.415836367s ago: executing program 3 (id=408): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3afa, 0x9, 0x0, 0x1000022b, 0x4, "03f07f0900", 0x565, 0x8}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x9) 1m13.336836692s ago: executing program 3 (id=409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendto$inet6(r1, 0x0, 0x0, 0x20000011, &(0x7f0000000640)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff486f}, 0x1c) 1m13.288531015s ago: executing program 3 (id=411): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x7) 1m13.111666805s ago: executing program 3 (id=416): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, 0x0) 1m12.917038007s ago: executing program 3 (id=422): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, &(0x7f0000001d80)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) 1m12.916134867s ago: executing program 33 (id=422): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, &(0x7f0000001d80)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) 13.965614444s ago: executing program 1 (id=1993): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000001000)=[{&(0x7f0000001040)=""/32, 0x20}, {&(0x7f0000002680)=""/203, 0xcb}], 0x2) 13.911978867s ago: executing program 1 (id=1996): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20e02, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r2, 0x0, 0x0, 0x3}]) 13.786404444s ago: executing program 1 (id=2000): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002f00)=""/4098, 0xdbd}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 13.728674277s ago: executing program 1 (id=2001): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x4) 13.727472048s ago: executing program 1 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 13.616485604s ago: executing program 1 (id=2003): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x5, 0x1, 0x3d3f, 0x0, 0x9, 0x3, 0x8001, [{0x0, 0x20008000, 0x5, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0xb0}}, 0x24040084) 13.603395855s ago: executing program 34 (id=2003): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x5, 0x1, 0x3d3f, 0x0, 0x9, 0x3, 0x8001, [{0x0, 0x20008000, 0x5, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0xb0}}, 0x24040084) 3.360970814s ago: executing program 6 (id=2051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x30) 3.360637694s ago: executing program 5 (id=2052): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 3.316083906s ago: executing program 6 (id=2054): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x1, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0xb, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 1.809613615s ago: executing program 0 (id=2055): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1a37c1, 0x1e4) 1.807544045s ago: executing program 2 (id=2056): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1.807168415s ago: executing program 6 (id=2057): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000840)={[{@fat=@check_strict}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@utf8}, {@utf8no}, {@rodir}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sched_setscheduler(0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1.807016335s ago: executing program 5 (id=2058): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.789719446s ago: executing program 0 (id=2059): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x8) 180.600759ms ago: executing program 0 (id=2060): creat(0x0, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x800, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 180.39944ms ago: executing program 2 (id=2061): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[], 0x2, 0x227, &(0x7f0000000580)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7X9e5csPF9ILPf+fXmvdnZN5ADQRD/LV8+f//04vby+lUAp7GAumo/tvQIG9wY//GlVVPy7e6Z50d5ewyAEFndnrC+A+DNigUcpGaFyGb/EMCCsrkOnmjJfXBcUfoBGDztq8hmR2B4qJq3Dd2ZUyKO2KNOvPF4K458WQSyCGXRAsSY/8NDhg0ArlqCGf73BvtP2jHQTUUcaVETep1CV0645V2pwHb5/iX+rXDcNLaAA2d1v6eevrF/ATgCpVtgWFN6GXV4ntdQ1Sgw4r9oZ/at9LUZ8U8OMhXuLIOri3NLVe3cmjHA34oTUeg6QPUAnb96BbMK+flNHiz9mH0J3ijOcibZcStvHcu3yA961HJhePSuOOvrWMuH1bIlGP7pCZ9KJIkLQKHr/Xwcr2YtOq91e4PzY3YupftzN3/Y9AksPRI4vqOGXDbyk23cCs3+ztNmb7C/tLXT3ow2o90wbN3wr/n+9bAp7x2/mWToP+Q/N8lP84b9WslYhznYa/f73WAP6HeDUT1MSyPjrr3ufBul+eEhx+JPIfT1koStLkqWW4OpP/5KPqVatEqdJwiCIAiCIAiCIAiCIAiCmJI6cApogEH9r/JE/1olCtjhPTybA34FAAD//5X3XDw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) fadvise64(r0, 0x54056, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x80000, 0x0) 177.61047ms ago: executing program 6 (id=2062): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 177.446ms ago: executing program 5 (id=2063): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x2}, 0x10) 160.097081ms ago: executing program 5 (id=2064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 149.637161ms ago: executing program 2 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r1) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 148.438931ms ago: executing program 6 (id=2066): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) 84.991845ms ago: executing program 0 (id=2067): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x2, 0x80801) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x0, r1}) 83.909646ms ago: executing program 2 (id=2068): syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) 83.773206ms ago: executing program 6 (id=2069): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x9}, 0x7) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4000000000000, 0x0, 0x0, 0xfffffffffdffffff}) 83.652105ms ago: executing program 35 (id=2069): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x9}, 0x7) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4000000000000, 0x0, 0x0, 0xfffffffffdffffff}) 69.916986ms ago: executing program 2 (id=2070): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c02f4cc0000ff470012800b000100697036677265"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 46.835088ms ago: executing program 0 (id=2071): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 31.158878ms ago: executing program 5 (id=2072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) fcntl$lock(r0, 0x25, &(0x7f0000002200)={0x0, 0x1, 0xc, 0xd}) 9.355ms ago: executing program 0 (id=2073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0xeee78000, 0xf, 0x7, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x8080000, 0xe, 0x0, 0x7, 0x5, 0x7d, 0x6, 0x2, 0x3, 0x0, 0x3}, {0xeeef0000, 0xd000, 0xe, 0x5, 0x3, 0x8, 0x0, 0x6, 0x3, 0xa7, 0x5}, {0x1, 0x1, 0x3, 0x3, 0x3, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x1, 0x40000, 0xb, 0x3, 0x15, 0xff, 0xaf, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x41000, 0xc, 0x7, 0xad, 0x1c, 0x1, 0xa0, 0x80, 0x1f, 0xe, 0x3}, {0x8000000, 0x8000000, 0xe, 0x5, 0x6, 0x0, 0x7, 0x7, 0x5, 0xa1, 0xff, 0x74}, {0x100000, 0x10000, 0x9, 0x5, 0x5, 0x7, 0x5, 0x34, 0x2, 0xb, 0xad, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x70d}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x9, 0x0, 0xeeee0000, [0x6800000000000000, 0x7, 0x5e, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.68043ms ago: executing program 5 (id=2074): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000001d}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait(r0, &(0x7f0000000780)=[{}], 0x1, 0x12, 0x0, 0x0) 0s ago: executing program 2 (id=2075): r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @local, 0x5}, 0x2b) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 24.592497][ T24] audit: type=1400 audit(1769597695.870:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.596419][ T267] cgroup: Unknown subsys name 'net' [ 24.615934][ T24] audit: type=1400 audit(1769597695.870:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.642979][ T24] audit: type=1400 audit(1769597695.900:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.644492][ T267] cgroup: Unknown subsys name 'devices' [ 24.816047][ T267] cgroup: Unknown subsys name 'hugetlb' [ 24.821822][ T267] cgroup: Unknown subsys name 'rlimit' [ 24.995069][ T24] audit: type=1400 audit(1769597696.280:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.021924][ T24] audit: type=1400 audit(1769597696.280:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.047661][ T24] audit: type=1400 audit(1769597696.280:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.066286][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.080005][ T24] audit: type=1400 audit(1769597696.360:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.105812][ T24] audit: type=1400 audit(1769597696.360:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.105864][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.133220][ T24] audit: type=1400 audit(1769597696.380:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.166586][ T24] audit: type=1400 audit(1769597696.380:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.653385][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.660671][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.668546][ T275] device bridge_slave_0 entered promiscuous mode [ 25.677311][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.684623][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.691992][ T275] device bridge_slave_1 entered promiscuous mode [ 25.790918][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.798220][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.806316][ T277] device bridge_slave_0 entered promiscuous mode [ 25.820971][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.828157][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.836223][ T277] device bridge_slave_1 entered promiscuous mode [ 25.861333][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.868500][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.876224][ T276] device bridge_slave_0 entered promiscuous mode [ 25.900790][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.908169][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.916052][ T276] device bridge_slave_1 entered promiscuous mode [ 25.963063][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.970190][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.977854][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.984932][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.011596][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.018977][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.027002][ T280] device bridge_slave_0 entered promiscuous mode [ 26.036294][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.043376][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.050943][ T280] device bridge_slave_1 entered promiscuous mode [ 26.084299][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.091386][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.099084][ T279] device bridge_slave_0 entered promiscuous mode [ 26.108958][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.116436][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.124761][ T279] device bridge_slave_1 entered promiscuous mode [ 26.205618][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.212716][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.220211][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.227269][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.249968][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.257082][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.264992][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.272133][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.289080][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.296184][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.303572][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.310806][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.335928][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.343606][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.351660][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.359651][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.367041][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.374330][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.381845][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.389350][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.397248][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.404940][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.434968][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.443368][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.452197][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.459267][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.467646][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.476295][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.483495][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.517904][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.526717][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.536197][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.543266][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.550817][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.559775][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.566858][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.574364][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.582329][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.603375][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.611574][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.620477][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.629064][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.637575][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.644658][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.652405][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.661408][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.668535][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.675999][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.684501][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.691839][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.718526][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.727366][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.735822][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.743170][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.751097][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.758809][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.766460][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.775022][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.783152][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.790252][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.798295][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.807154][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.815868][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.823386][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.830865][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.839336][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.847798][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.855990][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.864188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.872426][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.880940][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.889408][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.903567][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.911989][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.921199][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.935087][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.943810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.957983][ T280] device veth0_vlan entered promiscuous mode [ 26.965830][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.974606][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.983155][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.991369][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.999951][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.007795][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.018773][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.027569][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.042391][ T276] device veth0_vlan entered promiscuous mode [ 27.051071][ T275] device veth0_vlan entered promiscuous mode [ 27.061284][ T277] device veth0_vlan entered promiscuous mode [ 27.067781][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.076187][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.085078][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.093406][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.102328][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.110407][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.118666][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.127026][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.135342][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.143127][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.151077][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.158862][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.166899][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.174504][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.191231][ T279] device veth0_vlan entered promiscuous mode [ 27.197830][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.207485][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.215826][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.223498][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.239437][ T280] device veth1_macvtap entered promiscuous mode [ 27.246373][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.254891][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.263171][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.272617][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.281564][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.293747][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.302968][ T275] device veth1_macvtap entered promiscuous mode [ 27.317149][ T276] device veth1_macvtap entered promiscuous mode [ 27.327869][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.336354][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.344810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.352953][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.362231][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.370581][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.378832][ T279] device veth1_macvtap entered promiscuous mode [ 27.387109][ T277] device veth1_macvtap entered promiscuous mode [ 27.404689][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.412573][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.421163][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.430587][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.439139][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.447951][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.456645][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.465771][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.474889][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.483542][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.492306][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.501240][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.510162][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.532404][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 27.537233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.548639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.557698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.566153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.578665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.587847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.599047][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 27.644553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.660504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.785894][ T313] attempt to access beyond end of device [ 27.785894][ T313] loop1: rw=2049, want=234, limit=128 [ 27.798539][ T313] attempt to access beyond end of device [ 27.798539][ T313] loop1: rw=0, want=129, limit=128 [ 27.822243][ T313] attempt to access beyond end of device [ 27.822243][ T313] loop1: rw=0, want=233, limit=128 [ 27.884959][ T321] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 27.906234][ T321] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue [ 27.941174][ T321] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2750: inode #15: comm syz.3.9: corrupted in-inode xattr [ 27.957856][ T321] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2820: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.994366][ T25] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.164268][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.294268][ T296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.354244][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.365812][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 28.377256][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 28.386513][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.398528][ T25] usb 1-1: config 0 descriptor?? [ 28.414369][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 28.414893][ T308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.515234][ T351] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 28.523422][ T351] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.533110][ T351] F2FS-fs (loop1): invalid crc value [ 28.534886][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.546022][ T351] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.552438][ T20] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 28.562306][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.573585][ T20] usb 3-1: config 0 descriptor?? [ 28.606069][ T351] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.613289][ T351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.664169][ T296] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.675764][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.687263][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.697679][ T296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.784302][ T296] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 28.803644][ T296] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 28.818604][ T296] usb 4-1: Manufacturer: syz [ 28.834917][ T296] usb 4-1: config 0 descriptor?? [ 28.875435][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.883485][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.891214][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.898821][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.910618][ T360] EXT4-fs (loop1): Ignoring removed nobh option [ 28.924140][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.931503][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.934489][ T360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.951991][ T360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.961998][ T25] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 28.963747][ T25] lenovo 0003:17EF:6067.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 28.982201][ T360] EXT4-fs (loop1): 1 truncate cleaned up [ 28.988224][ T360] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nobh,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000003ffc,usrquota,max_batch_time=0x0000000000000004,inode_readahead_blks=0x0000000000000001,,errors=continue [ 29.051268][ T360] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2224: inode #15: comm syz.1.19: corrupted in-inode xattr [ 29.082947][ T53] usb 1-1: USB disconnect, device number 2 [ 29.091013][ T365] fido_id[365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 29.110108][ T360] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1758: inode #15: comm syz.1.19: unable to update i_inline_off [ 29.122898][ T360] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2224: inode #15: comm syz.1.19: corrupted in-inode xattr [ 29.136185][ T366] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #15: comm syz.1.19: corrupted in-inode xattr [ 29.270713][ T20] usb 3-1: USB disconnect, device number 2 [ 29.315291][ T296] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 29.322758][ T296] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 29.345416][ T296] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 29.585148][ T20] usb 4-1: USB disconnect, device number 2 [ 29.751432][ T374] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 29.774966][ T374] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.784776][ T374] F2FS-fs (loop1): fault_type options not supported [ 29.802539][ T374] F2FS-fs (loop1): fault_injection options not supported [ 29.811464][ T374] F2FS-fs (loop1): invalid crc value [ 29.815262][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 29.815295][ T24] audit: type=1400 audit(1769597701.100:133): avc: denied { read } for pid=381 comm="syz.2.25" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.861138][ T24] audit: type=1400 audit(1769597701.130:134): avc: denied { open } for pid=381 comm="syz.2.25" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.884351][ T24] audit: type=1400 audit(1769597701.130:135): avc: denied { ioctl } for pid=381 comm="syz.2.25" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.914989][ T374] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.964159][ T24] audit: type=1400 audit(1769597701.230:136): avc: denied { create } for pid=387 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.015258][ T374] F2FS-fs (loop1): Start checkpoint disabled! [ 30.021707][ T24] audit: type=1400 audit(1769597701.240:137): avc: denied { getopt } for pid=387 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.051370][ T374] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.058707][ T374] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.074137][ T24] audit: type=1400 audit(1769597701.280:138): avc: denied { create } for pid=389 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.112764][ T24] audit: type=1400 audit(1769597701.290:139): avc: denied { ioctl } for pid=389 comm="syz.2.28" path="socket:[15081]" dev="sockfs" ino=15081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.174091][ T24] audit: type=1400 audit(1769597701.290:140): avc: denied { setopt } for pid=389 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.200866][ T9] attempt to access beyond end of device [ 30.200866][ T9] loop1: rw=2049, want=40976, limit=40427 [ 30.241224][ T24] audit: type=1400 audit(1769597701.290:141): avc: denied { bind } for pid=389 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.305436][ T24] audit: type=1400 audit(1769597701.320:142): avc: denied { map_create } for pid=391 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.519253][ T414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.708109][ T420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 31.036558][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.051077][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.071941][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.089854][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.099385][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.108904][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.118399][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.128024][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.144133][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.394106][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 31.514191][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.525948][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.536644][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.543554][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.553139][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.568205][ T25] usb 3-1: config 0 descriptor?? [ 31.984145][ T296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.178882][ T480] device batadv_slave_1 entered promiscuous mode [ 32.186200][ T479] device batadv_slave_1 left promiscuous mode [ 32.256984][ T15] usb 3-1: USB disconnect, device number 3 [ 32.364189][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.378571][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.389889][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.403214][ T296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.415415][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.426805][ T296] usb 5-1: config 0 descriptor?? [ 32.461366][ T503] KVM: debugfs: duplicate directory 503-4 [ 32.639175][ T524] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 32.649355][ T524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.659791][ T524] ext2 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.677230][ T524] EXT4-fs (loop3): shut down requested (1) [ 32.764259][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.837216][ T542] ====================================================== [ 32.837216][ T542] WARNING: the mand mount option is being deprecated and [ 32.837216][ T542] will be removed in v5.15! [ 32.837216][ T542] ====================================================== [ 32.900524][ T542] EXT4-fs (loop1): Ignoring removed oldalloc option [ 32.907378][ T542] EXT4-fs (loop1): Ignoring removed bh option [ 32.913596][ T542] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 32.925503][ T296] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 32.935987][ T296] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 32.953122][ T551] attempt to access beyond end of device [ 32.953122][ T551] loop3: rw=2049, want=260, limit=256 [ 32.988490][ T555] device veth2 entered promiscuous mode [ 33.014112][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 33.134322][ T15] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 33.142865][ T15] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 33.153353][ T15] usb 1-1: config 2 has no interface number 0 [ 33.159698][ T15] usb 1-1: config 2 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 33.173065][ T15] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 33.198170][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.202257][ T296] usb 5-1: USB disconnect, device number 2 [ 33.269210][ T579] syz.2.109 uses obsolete (PF_INET,SOCK_PACKET) [ 33.316731][ T581] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,,errors=continue [ 33.494159][ T15] usb 1-1: string descriptor 0 read error: -71 [ 33.501340][ T15] snd-usb-audio: probe of 1-1:2.194 failed with error -2 [ 33.514796][ T15] usb 1-1: USB disconnect, device number 3 [ 33.564180][ T278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.571787][ T593] F2FS-fs (loop3): fault_type options not supported [ 33.579524][ T593] F2FS-fs (loop3): invalid crc value [ 33.586520][ T593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.620802][ T593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.642580][ T593] attempt to access beyond end of device [ 33.642580][ T593] loop3: rw=2049, want=78912, limit=40427 [ 33.655547][ T593] attempt to access beyond end of device [ 33.655547][ T593] loop3: rw=0, want=78912, limit=40427 [ 33.673075][ T280] attempt to access beyond end of device [ 33.673075][ T280] loop3: rw=2049, want=45104, limit=40427 [ 33.762760][ T600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.116'. [ 33.772994][ T600] netlink: 43 bytes leftover after parsing attributes in process `syz.4.116'. [ 33.782445][ T600] netlink: 'syz.4.116': attribute type 5 has an invalid length. [ 33.790749][ T600] netlink: 43 bytes leftover after parsing attributes in process `syz.4.116'. [ 33.815376][ T602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.117'. [ 33.824506][ T602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.117'. [ 33.834835][ T602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.117'. [ 33.935562][ T278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.952212][ T278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.964521][ T278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.005509][ T278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.014650][ T278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.024546][ T278] usb 3-1: config 0 descriptor?? [ 34.080154][ T619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 34.096601][ T619] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 34.106568][ T619] EXT4-fs error (device loop4): ext4_get_journal_inode:5242: comm syz.4.124: inode #1: comm syz.4.124: iget: illegal inode # [ 34.119974][ T619] EXT4-fs (loop4): no journal found [ 34.268286][ T636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 34.341609][ T646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 34.393331][ T656] input: syz1 as /devices/virtual/input/input4 [ 34.416966][ T649] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 34.444583][ T659] EXT4-fs (loop4): Ignoring removed nobh option [ 34.451028][ T659] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.476133][ T659] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.483649][ T659] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 34.498408][ T659] EXT4-fs (loop4): Remounting filesystem read-only [ 34.515266][ T278] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 34.519002][ T659] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.140: Failed to acquire dquot type 0 [ 34.538580][ T278] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.551571][ T659] EXT4-fs (loop4): 1 truncate cleaned up [ 34.561338][ T659] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012 [ 34.586815][ T666] EXT4-fs (loop0): Ignoring removed bh option [ 34.604330][ T666] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.653576][ T666] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nodelalloc,bh,data_err=ignore,barrier=0x000000000000007f,data_err=ignore,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,min_batch_time=0x0000000000000400,,errors=continue [ 34.689476][ T666] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3358: comm syz.0.142: Allocating blocks 385-513 which overlap fs metadata [ 34.704553][ T666] EXT4-fs (loop0): pa ffff88811c850f18: logic 16, phys. 129, len 24 [ 34.712590][ T666] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 8 [ 34.795001][ T53] usb 3-1: USB disconnect, device number 4 [ 34.875006][ T680] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 34.882886][ T680] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.892019][ T680] F2FS-fs (loop3): invalid crc value [ 34.902965][ T689] capability: warning: `syz.0.150' uses deprecated v2 capabilities in a way that may be insecure [ 34.922294][ T680] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.027717][ T680] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.038486][ T680] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.084112][ T24] kauditd_printk_skb: 95 callbacks suppressed [ 35.084125][ T24] audit: type=1400 audit(1769597706.360:236): avc: denied { setattr } for pid=679 comm="syz.3.148" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.239532][ T24] audit: type=1326 audit(1769597706.520:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f01e59eb9 code=0x7ffc0000 [ 35.283070][ T24] audit: type=1326 audit(1769597706.520:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0f01e59eb9 code=0x7ffc0000 [ 35.357039][ T24] audit: type=1326 audit(1769597706.520:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.392311][ T24] audit: type=1326 audit(1769597706.520:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.444194][ T24] audit: type=1326 audit(1769597706.520:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.488739][ T24] audit: type=1326 audit(1769597706.520:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.543299][ T24] audit: type=1326 audit(1769597706.520:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.590152][ T24] audit: type=1326 audit(1769597706.520:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.638882][ T24] audit: type=1326 audit(1769597706.520:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f01dfb2d9 code=0x7ffc0000 [ 35.743606][ T704] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 35.769221][ T704] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.778405][ T704] F2FS-fs (loop2): invalid crc value [ 35.798485][ T704] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.852027][ T704] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.861248][ T704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.086931][ T704] attempt to access beyond end of device [ 36.086931][ T704] loop2: rw=2049, want=79880, limit=40427 [ 36.104699][ T704] attempt to access beyond end of device [ 36.104699][ T704] loop2: rw=2049, want=81920, limit=40427 [ 36.128627][ T704] attempt to access beyond end of device [ 36.128627][ T704] loop2: rw=2049, want=52136, limit=40427 [ 36.144361][ T704] attempt to access beyond end of device [ 36.144361][ T704] loop2: rw=2049, want=53248, limit=40427 [ 36.211262][ T704] attempt to access beyond end of device [ 36.211262][ T704] loop2: rw=2049, want=77824, limit=40427 [ 36.241365][ T704] attempt to access beyond end of device [ 36.241365][ T704] loop2: rw=2049, want=85880, limit=40427 [ 36.354128][ T15] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.440006][ T760] cgroup: syz.0.179 (760) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 36.457472][ T760] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 36.694217][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.705973][ T762] F2FS-fs (loop0): invalid crc value [ 36.722853][ T762] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.734234][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.754101][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.764234][ T15] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.777194][ T15] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.786370][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.795497][ T15] usb 5-1: config 0 descriptor?? [ 36.820090][ T762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.889723][ T770] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.915684][ T770] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 36.924529][ T770] FAT-fs (loop2): Filesystem has been set read-only [ 37.064196][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 37.082624][ T5] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 37.091930][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.092171][ T762] F2FS-fs (loop0): Start checkpoint disabled! [ 37.103151][ T5] usb 4-1: config 0 descriptor?? [ 37.170789][ T774] F2FS-fs (loop2): invalid crc value [ 37.187007][ T774] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 37.216793][ T774] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 37.223633][ T774] F2FS-fs (loop2): Start checkpoint disabled! [ 37.233060][ T774] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 37.275049][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x3 [ 37.282814][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.292367][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.301153][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.308722][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.316478][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.323951][ T15] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 37.331704][ T15] plantronics 0003:047F:FFFF.0007: collection stack underflow [ 37.339671][ T15] plantronics 0003:047F:FFFF.0007: item 0 2 0 12 parsing failed [ 37.349146][ T15] plantronics 0003:047F:FFFF.0007: parse failed [ 37.355614][ T15] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 37.492026][ T786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 37.495659][ T15] usb 5-1: USB disconnect, device number 3 [ 37.500073][ T786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 37.516441][ T786] F2FS-fs (loop0): invalid crc value [ 37.536310][ T786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.579711][ T786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 37.588382][ T5] waltop 0003:172F:0034.0008: item fetching failed at offset 4/5 [ 37.596264][ T786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.604603][ T5] waltop: probe of 0003:172F:0034.0008 failed with error -22 [ 37.795575][ T15] usb 4-1: USB disconnect, device number 3 [ 37.924799][ T809] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 37.932781][ T809] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.944707][ T809] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.978566][ T809] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.986003][ T809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.094144][ T756] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.301112][ T830] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+ [ 38.334168][ T756] usb 1-1: Using ep0 maxpacket: 16 [ 38.356510][ T834] device bridge_slave_1 left promiscuous mode [ 38.362843][ T834] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.371114][ T834] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 38.464197][ T756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.475512][ T756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.485664][ T756] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 38.494897][ T756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.503923][ T756] usb 1-1: config 0 descriptor?? [ 38.985923][ T756] sony 0003:054C:05C4.0009: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 38.997441][ T756] sony 0003:054C:05C4.0009: failed to claim input [ 39.619595][ T890] handle_bad_sector: 3 callbacks suppressed [ 39.619609][ T890] attempt to access beyond end of device [ 39.619609][ T890] loop3: rw=2049, want=142, limit=128 [ 39.637484][ T890] attempt to access beyond end of device [ 39.637484][ T890] loop3: rw=2049, want=144, limit=128 [ 39.648715][ T890] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 40.168185][ T895] F2FS-fs (loop4): invalid crc value [ 40.177487][ T893] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 40.184856][ T893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.193790][ T893] F2FS-fs (loop3): invalid crc value [ 40.200861][ T895] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.244653][ T893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.284022][ T895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.310676][ T24] kauditd_printk_skb: 1157 callbacks suppressed [ 40.310690][ T24] audit: type=1400 audit(1769597711.590:1403): avc: denied { ioctl } for pid=894 comm="syz.4.230" path="/34/file0/file1" dev="loop4" ino=10 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.341909][ T893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.349623][ T279] attempt to access beyond end of device [ 40.349623][ T279] loop4: rw=2049, want=45104, limit=40427 [ 40.350935][ T893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 40.682664][ T905] F2FS-fs (loop2): invalid crc value [ 40.719139][ T905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.739097][ T915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 40.784265][ T915] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.791723][ T915] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.804950][ T905] F2FS-fs (loop2): Start checkpoint disabled! [ 40.816626][ T905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.830898][ T20] usb 1-1: USB disconnect, device number 4 [ 40.915843][ T24] audit: type=1400 audit(1769597712.200:1404): avc: denied { name_bind } for pid=925 comm="syz.3.240" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 41.030521][ T24] audit: type=1400 audit(1769597712.310:1405): avc: denied { mounton } for pid=931 comm="syz.4.242" path="/38/file1" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 41.054691][ T622] attempt to access beyond end of device [ 41.054691][ T622] loop2: rw=2049, want=40968, limit=40427 [ 41.066189][ T622] attempt to access beyond end of device [ 41.066189][ T622] loop2: rw=2049, want=41000, limit=40427 [ 41.414380][ T951] FAT-fs (loop4): Unrecognized mount option "rs=remount-ro" or missing value [ 41.636005][ T957] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 41.648771][ T24] audit: type=1400 audit(1769597712.930:1406): avc: denied { create } for pid=956 comm="syz.2.251" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.716297][ T951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 41.791170][ T24] audit: type=1400 audit(1769597713.070:1407): avc: denied { rename } for pid=947 comm="syz.4.248" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.815346][ T951] Quota error (device loop4): find_tree_dqentry: Getting block too big (260 >= 6) [ 41.859173][ T951] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 41.869675][ T951] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.248: Failed to acquire dquot type 1 [ 42.026312][ T967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 42.035585][ T967] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.124337][ T24] audit: type=1400 audit(1769597713.410:1408): avc: denied { watch watch_reads } for pid=966 comm="syz.2.253" path="/50/file2" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.159655][ T934] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.210698][ T934] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.362687][ T997] exfat: Deprecated parameter 'utf8' [ 42.368182][ T997] exfat: Deprecated parameter 'utf8' [ 42.373611][ T997] exfat: Bad value for 'errors' [ 42.567855][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.577712][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.594939][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.606533][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.615085][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.623341][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.640329][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.649293][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.666933][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 42.675611][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 42.801067][ T24] audit: type=1400 audit(1769597714.080:1409): avc: denied { write } for pid=1031 comm="syz.2.278" name="mcfilter6" dev="proc" ino=4026532331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.878600][ T1034] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.900544][ T1034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.913304][ T24] audit: type=1400 audit(1769597714.190:1410): avc: denied { ioctl } for pid=1036 comm="syz.0.280" path="socket:[17059]" dev="sockfs" ino=17059 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.940707][ T40] Bluetooth: hci1: sending frame failed (-49) [ 42.948551][ T1034] EXT4-fs (loop2): 1 truncate cleaned up [ 42.954386][ T1034] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue [ 43.024261][ T756] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.179126][ T1051] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 43.196192][ T1051] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 43.203494][ T1051] exFAT-fs (loop2): error, failed to bmap (inode : ffff888135c7f250 iblock : 8, err : -5) [ 43.213825][ T1051] exFAT-fs (loop2): Filesystem has been set read-only [ 43.221024][ T1051] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 43.272145][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.279379][ T1057] bridge0: port 2(bridge_slave_1) entered listening state [ 43.286644][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.293708][ T1057] bridge0: port 1(bridge_slave_0) entered listening state [ 43.312620][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.324746][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.336881][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.345223][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.353563][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.362363][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.375252][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.383705][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.394435][ T756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.405473][ T756] usb 4-1: config 0 has no interfaces? [ 43.410958][ T756] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.420429][ T756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.430551][ T756] usb 4-1: config 0 descriptor?? [ 43.599441][ T1081] exfat: Deprecated parameter 'utf8' [ 43.604907][ T1081] exfat: Deprecated parameter 'namecase' [ 43.610679][ T1081] exfat: Deprecated parameter 'namecase' [ 43.616875][ T1081] exfat: Deprecated parameter 'utf8' [ 43.646100][ T1081] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 43.675566][ T15] usb 4-1: USB disconnect, device number 4 [ 43.852835][ T1099] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 43.860764][ T1099] netlink: 76 bytes leftover after parsing attributes in process `syz.1.305'. [ 44.248037][ T1126] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 44.264196][ T1126] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.278604][ T1126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 44.287546][ T1126] System zones: 0-1, 3-36 [ 44.293352][ T1126] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 44.328197][ T1126] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2750: inode #2: comm syz.4.316: corrupted in-inode xattr [ 44.342306][ T1126] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2224: inode #2: comm syz.4.316: corrupted in-inode xattr [ 44.388635][ T1129] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 44.396486][ T1129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 44.405939][ T1129] F2FS-fs (loop3): invalid crc value [ 44.412882][ T1129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.453692][ T1129] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 44.460848][ T1129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.477600][ T1129] attempt to access beyond end of device [ 44.477600][ T1129] loop3: rw=2049, want=45104, limit=40427 [ 44.494289][ T1129] attempt to access beyond end of device [ 44.494289][ T1129] loop3: rw=2049, want=45136, limit=40427 [ 44.525881][ T1140] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 44.541816][ T1140] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.610435][ T1140] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm syz.4.320: lblock 0 mapped to illegal pblock 0 (length 6) [ 44.624134][ T1140] EXT4-fs error (device loop4): ext4_ext_remove_space:2924: inode #15: comm syz.4.320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 44.643656][ T1140] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 3: comm syz.4.320: lblock 3 mapped to illegal pblock 3 (length 3) [ 44.658754][ T1140] EXT4-fs error (device loop4): ext4_ext_remove_space:2924: inode #15: comm syz.4.320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.787308][ T1151] xt_hashlimit: size too large, truncated to 1048576 [ 44.974708][ T20] Bluetooth: hci1: command 0x1003 tx timeout [ 44.983509][ T317] Bluetooth: hci1: sending frame failed (-49) [ 45.004125][ T15] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.125936][ T1162] F2FS-fs (loop1): invalid crc value [ 45.143565][ T1162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.170975][ T1177] input: syz1 as /devices/virtual/input/input6 [ 45.194132][ T1177] input: failed to attach handler leds to device input6, error: -6 [ 45.202762][ T1162] F2FS-fs (loop1): Start checkpoint disabled! [ 45.213964][ T1162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 45.294081][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 45.360593][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 45.360607][ T24] audit: type=1400 audit(1769597716.640:1422): avc: denied { map } for pid=1188 comm="syz.2.340" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.391231][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 45.398774][ T15] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.410317][ T15] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 45.421448][ T15] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.431507][ T15] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 45.441913][ T24] audit: type=1400 audit(1769597716.640:1423): avc: denied { execute } for pid=1188 comm="syz.2.340" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.483368][ T112] attempt to access beyond end of device [ 45.483368][ T112] loop1: rw=1, want=77832, limit=40427 [ 45.494889][ T112] attempt to access beyond end of device [ 45.494889][ T112] loop1: rw=1, want=77872, limit=40427 [ 45.506553][ T112] attempt to access beyond end of device [ 45.506553][ T112] loop1: rw=1, want=77904, limit=40427 [ 45.518086][ T112] attempt to access beyond end of device [ 45.518086][ T112] loop1: rw=1, want=77944, limit=40427 [ 45.529440][ T112] attempt to access beyond end of device [ 45.529440][ T112] loop1: rw=1, want=77992, limit=40427 [ 45.540868][ T112] attempt to access beyond end of device [ 45.540868][ T112] loop1: rw=1, want=78048, limit=40427 [ 45.554140][ T112] attempt to access beyond end of device [ 45.554140][ T112] loop1: rw=1, want=78080, limit=40427 [ 45.565520][ T112] attempt to access beyond end of device [ 45.565520][ T112] loop1: rw=1, want=78144, limit=40427 [ 45.576809][ T112] attempt to access beyond end of device [ 45.576809][ T112] loop1: rw=1, want=78168, limit=40427 [ 45.588655][ T112] attempt to access beyond end of device [ 45.588655][ T112] loop1: rw=1, want=78208, limit=40427 [ 45.614188][ T306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.624395][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.633645][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.642013][ T15] usb 5-1: Product: syz [ 45.646551][ T15] usb 5-1: Manufacturer: syz [ 45.651215][ T15] usb 5-1: SerialNumber: syz [ 45.697015][ T15] cdc_mbim 5-1:1.0: skipping garbage [ 45.847459][ T24] audit: type=1400 audit(1769597717.130:1424): avc: denied { mount } for pid=1195 comm="syz.1.343" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 45.895698][ T1149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.984255][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.995354][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.005685][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.018869][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.028035][ T1198] F2FS-fs (loop1): fault_injection options not supported [ 46.028515][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.044164][ T1198] F2FS-fs (loop1): fault_type options not supported [ 46.051494][ T306] usb 4-1: config 0 descriptor?? [ 46.057148][ T1198] F2FS-fs (loop1): invalid crc value [ 46.063770][ T1198] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.097652][ T1198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.231640][ T1208] tmpfs: Too small a size for current use [ 46.340647][ T24] audit: type=1326 audit(1769597717.620:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.343040][ T24] audit: type=1326 audit(1769597717.620:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.396317][ T24] audit: type=1326 audit(1769597717.670:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.426378][ T24] audit: type=1326 audit(1769597717.670:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.451034][ T24] audit: type=1326 audit(1769597717.670:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.451052][ T24] audit: type=1326 audit(1769597717.670:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.451067][ T24] audit: type=1326 audit(1769597717.670:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 46.535108][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535129][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535146][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535164][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535181][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535198][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535215][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535232][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535248][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535265][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535283][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535300][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535317][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535334][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535351][ T306] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 46.535535][ T306] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 46.538862][ T306] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.644955][ T1149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.815741][ T306] usb 4-1: USB disconnect, device number 5 [ 46.924190][ T15] cdc_mbim 5-1:1.0: bind() failure [ 46.944180][ T15] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 46.964171][ T15] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 46.968883][ T15] usb 5-1: USB disconnect, device number 4 [ 47.054113][ T20] Bluetooth: hci1: command 0x1001 tx timeout [ 47.054165][ T317] Bluetooth: hci1: sending frame failed (-49) [ 47.193707][ T1229] tipc: Started in network mode [ 47.199127][ T1229] tipc: Own node identity ac14142f, cluster identity 4711 [ 47.206737][ T1229] tipc: New replicast peer: 0.0.0.0 [ 47.212277][ T1229] tipc: Enabled bearer , priority 10 [ 47.219750][ T1229] tipc: New replicast peer: 255.255.255.255 [ 47.374082][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.381733][ C0] bridge0: topology change detected, propagating [ 47.388414][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.454074][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.461355][ C0] bridge0: topology change detected, propagating [ 47.695355][ T1252] F2FS-fs (loop4): invalid crc value [ 47.707593][ T1252] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.757208][ T1252] F2FS-fs (loop4): Start checkpoint disabled! [ 47.773663][ T1252] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 47.896323][ T1266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.924302][ T1266] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.971773][ T1269] EXT4-fs (loop3): Ignoring removed bh option [ 48.002858][ T1269] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue [ 48.060570][ T1269] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.324111][ T278] tipc: 32-bit node address hash set to 2f1414ac [ 48.391223][ T1298] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nombcache,usrjquota=,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue [ 48.584231][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.607873][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.615716][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.623792][ T1305] device bridge_slave_0 entered promiscuous mode [ 48.644037][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.651634][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.659399][ T1305] device bridge_slave_1 entered promiscuous mode [ 48.725953][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.733284][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.740638][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.747789][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.788995][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.797404][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.805600][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.823240][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.831640][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.838761][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.846777][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.855387][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.862506][ T622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.880790][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.888973][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.905624][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.920391][ T1305] device veth0_vlan entered promiscuous mode [ 48.927357][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.944954][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.953590][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.961917][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.970479][ T1305] device veth1_macvtap entered promiscuous mode [ 48.989524][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.002192][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.012696][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.024886][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.036375][ T306] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 49.046634][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.057462][ T306] usb 4-1: config 0 descriptor?? [ 49.105830][ T112] device bridge_slave_1 left promiscuous mode [ 49.118327][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.129230][ T112] device bridge_slave_0 left promiscuous mode [ 49.134260][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 49.136777][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.152565][ T112] device veth1_macvtap left promiscuous mode [ 49.158918][ T112] device veth0_vlan left promiscuous mode [ 49.287269][ T1329] F2FS-fs (loop2): fault_injection options not supported [ 49.295020][ T1329] F2FS-fs (loop2): fault_type options not supported [ 49.302782][ T1329] F2FS-fs (loop2): invalid crc value [ 49.309396][ T1329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.343369][ T1329] F2FS-fs (loop2): Start checkpoint disabled! [ 49.350446][ T1329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 49.535706][ T306] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 49.543472][ T306] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 49.551865][ T306] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 49.559746][ T306] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 49.567247][ T306] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 49.576108][ T306] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 49.774735][ T15] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.974166][ T306] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 49.987835][ T306] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 49.997582][ T306] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 50.007107][ T306] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 50.015397][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 50.021643][ T306] playstation: probe of 0003:054C:0DF2.000B failed with error -71 [ 50.045125][ T306] usb 4-1: USB disconnect, device number 6 [ 50.064252][ T1353] fido_id[1353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 50.134194][ T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.144456][ T15] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.224293][ T15] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 50.233459][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.241811][ T15] usb 3-1: SerialNumber: syz [ 50.285038][ T15] usb 3-1: 0:2 : does not exist [ 50.535121][ T1366] netlink: 'syz.3.406': attribute type 34 has an invalid length. [ 50.684192][ T15] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 50.693192][ T15] usb 3-1: USB disconnect, device number 5 [ 50.701138][ T1369] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 50.709887][ T1369] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.723406][ T1369] F2FS-fs (loop3): invalid crc value [ 50.732653][ T1369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.768278][ T1369] F2FS-fs (loop3): Start checkpoint disabled! [ 50.775641][ T1369] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.782819][ T1369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 50.914514][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.940463][ T1380] EXT4-fs (loop3): Ignoring removed nobh option [ 50.947276][ T1380] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.972429][ T1380] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 51.011090][ T1380] incfs: Backing dir is not set, filesystem can't be mounted. [ 51.029210][ T1380] incfs: mount failed -2 [ 51.052197][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 51.052211][ T24] audit: type=1400 audit(1769597722.330:1462): avc: denied { rmdir } for pid=280 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.084759][ T24] audit: type=1400 audit(1769597722.370:1463): avc: denied { unlink } for pid=280 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.086844][ T280] EXT4-fs error (device loop3): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 51.123209][ T24] audit: type=1400 audit(1769597722.370:1464): avc: denied { unlink } for pid=280 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.149741][ T280] EXT4-fs error (device loop3): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 51.407171][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.414471][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.421918][ T1411] device bridge_slave_0 entered promiscuous mode [ 51.429229][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.439021][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.447328][ T1411] device bridge_slave_1 entered promiscuous mode [ 51.457166][ T1416] EXT4-fs (loop5): Test dummy encryption mode enabled [ 51.519913][ T1416] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,nojournal_checksum,errors=continue,resgid=0x000000000000ee00,test_dummy_encryption,i_version,,errors=continue [ 51.568488][ T24] audit: type=1400 audit(1769597722.850:1465): avc: denied { read } for pid=1424 comm="syz.2.429" name="usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.614602][ T24] audit: type=1400 audit(1769597722.870:1466): avc: denied { open } for pid=1424 comm="syz.2.429" path="/dev/usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.660726][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.668778][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.674576][ T24] audit: type=1400 audit(1769597722.880:1467): avc: denied { map } for pid=1424 comm="syz.2.429" path="/dev/usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.676316][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.707317][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.738211][ T24] audit: type=1400 audit(1769597722.880:1468): avc: denied { write } for pid=1423 comm="syz.1.427" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.771055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.784830][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.792377][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.815312][ T24] audit: type=1400 audit(1769597723.100:1469): avc: denied { accept } for pid=1434 comm="syz.5.431" path="socket:[19018]" dev="sockfs" ino=19018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.841404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.859840][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.867016][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.882345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.890844][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.897942][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.925187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.936878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.947132][ T1439] input: syz0 as /devices/virtual/input/input7 [ 51.957282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.971693][ T1411] device veth0_vlan entered promiscuous mode [ 51.979116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.988277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.996917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.012071][ T1411] device veth1_macvtap entered promiscuous mode [ 52.021642][ T622] device bridge_slave_1 left promiscuous mode [ 52.030162][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.039112][ T622] device bridge_slave_0 left promiscuous mode [ 52.046178][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.055459][ T622] device veth1_macvtap left promiscuous mode [ 52.061553][ T622] device veth0_vlan left promiscuous mode [ 52.090678][ T24] audit: type=1400 audit(1769597723.370:1470): avc: denied { map } for pid=1445 comm="syz.5.436" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.178654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.188209][ T1448] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 52.188209][ T1448] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 52.188209][ T1448] [ 52.213679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.222347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.222973][ T1448] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.253981][ T1448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842412c, mo2=0002] [ 52.267954][ T1448] System zones: 1-3, 19-19, 35-36 [ 52.280535][ T1448] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nolazytime,grpid,norecovery,dioread_nolock,errors=remount-ro,noacl,jqfmt=vfsv1, [ 52.298004][ T1448] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.345804][ T24] audit: type=1400 audit(1769597723.630:1471): avc: denied { mounton } for pid=1447 comm="syz.5.437" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.347831][ T1448] overlayfs: upper fs needs to support d_type. [ 52.411382][ T1305] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 52.436519][ T1305] EXT4-fs (loop5): Remounting filesystem read-only [ 52.455475][ T1458] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 52.471449][ T1305] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=7, size=1024 fake=0 [ 52.505749][ T1458] EXT4-fs (loop6): 1 truncate cleaned up [ 52.511469][ T1458] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache, [ 52.565309][ T1463] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,barrier,noblock_validity,journal_ioprio=0x0000000000000004,delalloc,auto_da_alloc,,errors=continue [ 52.585171][ T1463] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.617734][ T1479] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 52.771513][ T1480] EXT4-fs (loop2): Test dummy encryption mode enabled [ 52.806118][ T1480] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 52.823904][ T1480] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.856855][ T1480] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 52.896054][ T1493] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue [ 52.912288][ T1493] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.304142][ T20] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.315048][ T1131] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.554169][ T1131] usb 7-1: Using ep0 maxpacket: 16 [ 53.584191][ T53] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 53.664342][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.675815][ T1131] usb 7-1: config 0 interface 0 has no altsetting 0 [ 53.682495][ T1131] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 53.692144][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.702512][ T1131] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.710606][ T20] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 53.720494][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.728847][ T1131] usb 7-1: config 0 descriptor?? [ 53.734659][ T20] usb 3-1: config 0 descriptor?? [ 53.944392][ T53] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.957983][ T53] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.995748][ T1524] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.006958][ T1524] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.022212][ T1524] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.034843][ T1524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.034843][ T1524] [ 54.045270][ T1524] EXT4-fs (loop1): Total free blocks count 0 [ 54.051717][ T1524] EXT4-fs (loop1): Free/Dirty block details [ 54.058183][ T1524] EXT4-fs (loop1): free_blocks=2415919504 [ 54.064354][ T1524] EXT4-fs (loop1): dirty_blocks=16 [ 54.069742][ T1524] EXT4-fs (loop1): Block reservation details [ 54.076177][ T1524] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 54.089262][ T622] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 54.102361][ T622] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.102361][ T622] [ 54.154327][ T53] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.163507][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.171700][ T53] usb 1-1: Product: syz [ 54.176080][ T53] usb 1-1: Manufacturer: syz [ 54.180704][ T53] usb 1-1: SerialNumber: syz [ 54.209401][ T1131] hid (null): report_id 0 is invalid [ 54.217317][ T20] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 54.238022][ T20] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 54.295258][ T1535] exfat: Deprecated parameter 'namecase' [ 54.301080][ T1535] exfat: Deprecated parameter 'namecase' [ 54.309478][ T1535] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 54.321916][ T20] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 54.330653][ T1535] handle_bad_sector: 1607 callbacks suppressed [ 54.330668][ T1535] attempt to access beyond end of device [ 54.330668][ T1535] loop1: rw=524288, want=34225520825, limit=256 [ 54.350295][ T1535] attempt to access beyond end of device [ 54.350295][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.362577][ T1535] attempt to access beyond end of device [ 54.362577][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.374441][ T1535] attempt to access beyond end of device [ 54.374441][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.386091][ T1534] attempt to access beyond end of device [ 54.386091][ T1534] loop1: rw=0, want=34225520825, limit=256 [ 54.398208][ T1535] attempt to access beyond end of device [ 54.398208][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.411554][ T306] usb 7-1: USB disconnect, device number 2 [ 54.415080][ T1535] attempt to access beyond end of device [ 54.415080][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.436493][ T1534] attempt to access beyond end of device [ 54.436493][ T1534] loop1: rw=0, want=34225520825, limit=256 [ 54.449334][ T1535] attempt to access beyond end of device [ 54.449334][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.463561][ T1535] attempt to access beyond end of device [ 54.463561][ T1535] loop1: rw=0, want=34225520825, limit=256 [ 54.514515][ T53] usb 1-1: 0:2 : does not exist [ 54.556043][ T53] usb 1-1: USB disconnect, device number 5 [ 54.775989][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.894118][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 54.900670][ T591] Bluetooth: hci0: sending frame failed (-49) [ 55.045950][ T1551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.475'. [ 55.219901][ T1564] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 55.244206][ T1564] EXT4-fs (loop0): Ignoring removed bh option [ 55.279591][ T1564] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.304923][ T1564] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0002] [ 55.313586][ T1564] System zones: 0-5 [ 55.318946][ T1564] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,mblk_io_submit,bh,test_dummy_encryption,nodiscard,usrquota,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 55.404255][ T1571] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.174736][ T306] usb 3-1: USB disconnect, device number 6 [ 56.185615][ T306] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 56.226817][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 56.226831][ T24] audit: type=1400 audit(1769597727.510:1523): avc: denied { read write } for pid=1623 comm="syz.2.507" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.304113][ T24] audit: type=1400 audit(1769597727.580:1524): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.329351][ T24] audit: type=1400 audit(1769597727.590:1525): avc: denied { read } for pid=1632 comm="syz.6.511" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 56.352787][ T24] audit: type=1400 audit(1769597727.610:1526): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.384702][ T24] audit: type=1400 audit(1769597727.670:1527): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.411310][ T24] audit: type=1400 audit(1769597727.670:1528): avc: denied { create } for pid=1636 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 56.434821][ T24] audit: type=1400 audit(1769597727.670:1529): avc: denied { create } for pid=1636 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 56.456501][ T24] audit: type=1400 audit(1769597727.720:1530): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.485114][ T24] audit: type=1400 audit(1769597727.720:1531): avc: denied { prog_load } for pid=1638 comm="syz.6.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.505239][ T24] audit: type=1400 audit(1769597727.720:1532): avc: denied { create } for pid=1638 comm="syz.6.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.974408][ T306] Bluetooth: hci0: command 0x1001 tx timeout [ 56.980948][ T591] Bluetooth: hci0: sending frame failed (-49) [ 58.126290][ T622] Bluetooth: hci1: Frame reassembly failed (-84) [ 59.015451][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.034711][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.051527][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.055760][ T1066] Bluetooth: hci0: command 0x1009 tx timeout [ 59.063190][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.075300][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.083550][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.092894][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.101776][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.111600][ T20] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 59.594489][ T5] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 59.606916][ T5] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 59.624140][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 59.696556][ T1803] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 59.744221][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 59.826643][ T1816] netlink: 80 bytes leftover after parsing attributes in process `syz.2.596'. [ 59.835820][ T1816] netlink: 80 bytes leftover after parsing attributes in process `syz.2.596'. [ 59.845139][ T1816] netlink: 80 bytes leftover after parsing attributes in process `syz.2.596'. [ 60.141851][ T1829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 60.175345][ T1066] Bluetooth: hci1: command 0x1003 tx timeout [ 60.181638][ T1038] Bluetooth: hci1: sending frame failed (-49) [ 60.654143][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 60.701807][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.724460][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.743236][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.753478][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.762142][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.770528][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.779428][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.787833][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.242715][ T24] kauditd_printk_skb: 205 callbacks suppressed [ 61.242729][ T24] audit: type=1400 audit(1769597732.520:1738): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.279156][ T24] audit: type=1400 audit(1769597732.560:1739): avc: denied { execmem } for pid=1857 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 61.299904][ T24] audit: type=1400 audit(1769597732.560:1740): avc: denied { bpf } for pid=1857 comm="syz.2.615" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 61.327927][ T24] audit: type=1400 audit(1769597732.600:1741): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.365498][ T24] audit: type=1400 audit(1769597732.650:1742): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.414187][ T24] audit: type=1400 audit(1769597732.680:1743): avc: denied { create } for pid=1864 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 61.438932][ T24] audit: type=1326 audit(1769597732.690:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1861 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 61.450826][ T1862] device veth2 entered promiscuous mode [ 61.468945][ T24] audit: type=1326 audit(1769597732.710:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1861 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 61.493060][ T24] audit: type=1326 audit(1769597732.710:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1861 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 61.522420][ T24] audit: type=1326 audit(1769597732.710:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1861 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 62.254268][ T15] Bluetooth: hci1: command 0x1001 tx timeout [ 62.260569][ T1038] Bluetooth: hci1: sending frame failed (-49) [ 63.374286][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 64.018392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.040910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.070589][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.079344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.088323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.099707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.114681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.126490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.334563][ T5] Bluetooth: hci1: command 0x1009 tx timeout [ 68.667851][ T24] kauditd_printk_skb: 233 callbacks suppressed [ 68.667866][ T24] audit: type=1400 audit(1769597739.940:1981): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.754294][ T24] audit: type=1400 audit(1769597739.950:1982): avc: denied { write } for pid=2080 comm="syz.5.718" name="mcfilter6" dev="proc" ino=4026533057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 68.785700][ T1305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.794206][ T2092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.801139][ T2092] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 68.804023][ T2094] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.815569][ T1305] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 68.823308][ T1305] audit: backlog limit exceeded [ 68.824834][ T24] audit: type=1400 audit(1769597739.980:1983): avc: denied { read } for pid=2086 comm="syz.2.720" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 68.834342][ T2094] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 70.574131][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 72.968823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 72.980694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 73.739807][ T24] kauditd_printk_skb: 659 callbacks suppressed [ 73.739821][ T24] audit: type=1400 audit(1769597745.020:2635): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.794867][ T24] audit: type=1400 audit(1769597745.080:2636): avc: denied { map_create } for pid=2438 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.822655][ T24] audit: type=1400 audit(1769597745.080:2637): avc: denied { prog_load } for pid=2438 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.843435][ T24] audit: type=1400 audit(1769597745.080:2638): avc: denied { prog_load } for pid=2438 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.863020][ T24] audit: type=1400 audit(1769597745.100:2639): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.895597][ T24] audit: type=1400 audit(1769597745.170:2640): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.920571][ T24] audit: type=1400 audit(1769597745.200:2641): avc: denied { read write } for pid=2442 comm="syz.1.882" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 73.946116][ T24] audit: type=1400 audit(1769597745.200:2642): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.972618][ T2445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 73.985181][ T24] audit: type=1400 audit(1769597745.270:2643): avc: denied { map_create } for pid=2444 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.985746][ T2445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 74.031984][ T24] audit: type=1400 audit(1769597745.300:2644): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.685127][ T2491] serio: Serial port ptm0 [ 76.345434][ T2612] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 76.358811][ T2612] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 76.815532][ T2642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 76.828806][ T2642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 77.334399][ T2680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.981'. [ 77.348059][ T2680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.981'. [ 78.745076][ T24] kauditd_printk_skb: 204 callbacks suppressed [ 78.745100][ T24] audit: type=1400 audit(1769598006.026:2849): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.786231][ T24] audit: type=1400 audit(1769598006.056:2850): avc: denied { read write } for pid=2730 comm="syz.2.1006" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.811448][ T24] audit: type=1400 audit(1769598006.066:2851): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.844101][ T24] audit: type=1400 audit(1769598006.116:2852): avc: denied { read write } for pid=2732 comm="syz.2.1007" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.877220][ T24] audit: type=1400 audit(1769598006.146:2853): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.903194][ T24] audit: type=1400 audit(1769598006.156:2854): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.928191][ T24] audit: type=1400 audit(1769598006.186:2855): avc: denied { prog_load } for pid=2734 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.948466][ T24] audit: type=1400 audit(1769598006.206:2856): avc: denied { map_create } for pid=2734 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.990094][ T24] audit: type=1400 audit(1769598006.246:2857): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.041794][ T24] audit: type=1400 audit(1769598006.246:2858): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.130741][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 79.147995][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.167915][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 79.178261][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.187540][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.196454][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.205755][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.214612][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.223499][ T2765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1020'. [ 79.238499][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.249668][ T2767] mac–e: renamed from bridge_slave_1 [ 79.415789][ T2797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1037'. [ 79.429104][ T2797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1037'. [ 79.455253][ T2797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1037'. [ 80.293845][ T2841] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1055'. [ 80.307425][ T2841] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.328001][ T2841] mac–e: renamed from bridge_slave_1 [ 80.384927][ T2850] pimreg: tun_chr_ioctl cmd 1074025680 [ 80.429129][ T2850] pimreg: tun_chr_ioctl cmd 2147767511 [ 80.505359][ T2876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1073'. [ 80.533444][ T2880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 80.543647][ T2876] mac–e: renamed from bridge_slave_1 [ 80.669356][ T2898] netlink: 'syz.5.1080': attribute type 15 has an invalid length. [ 80.690071][ T2898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 80.740446][ T2908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1086'. [ 80.792307][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.840880][ T2916] mac–e: renamed from bridge_slave_1 [ 81.561085][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.752266][ T2964] netlink: 'syz.6.1111': attribute type 15 has an invalid length. [ 81.765775][ T2964] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1111'. [ 82.150113][ T2999] netlink: 'syz.1.1129': attribute type 15 has an invalid length. [ 82.333072][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.401062][ T3025] netlink: 'syz.0.1146': attribute type 15 has an invalid length. [ 83.765954][ T24] kauditd_printk_skb: 305 callbacks suppressed [ 83.765970][ T24] audit: type=1400 audit(1769598011.046:3164): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.881947][ T24] audit: type=1400 audit(1769598011.156:3165): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.913309][ T24] audit: type=1400 audit(1769598011.176:3166): avc: denied { read write } for pid=3139 comm="syz.0.1193" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 83.938514][ T24] audit: type=1400 audit(1769598011.176:3167): avc: denied { mounton } for pid=3139 comm="syz.0.1193" path="/213/file0" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 83.962131][ T24] audit: type=1400 audit(1769598011.186:3168): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.989555][ T24] audit: type=1400 audit(1769598011.186:3169): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.019232][ T24] audit: type=1400 audit(1769598011.216:3170): avc: denied { read write } for pid=3142 comm="syz.0.1194" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 84.044880][ T24] audit: type=1400 audit(1769598011.216:3171): avc: denied { wake_alarm } for pid=3141 comm="syz.5.1195" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 84.068201][ T24] audit: type=1400 audit(1769598011.216:3172): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.095998][ T24] audit: type=1400 audit(1769598011.326:3173): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.171140][ T3152] process 'syz.6.1199' launched './file0' with NULL argv: empty string added [ 84.443956][ T3179] bridge0: port 2(vlan2) entered blocking state [ 84.450394][ T3179] bridge0: port 2(vlan2) entered disabled state [ 84.457676][ T3179] device vlan2 entered promiscuous mode [ 84.463441][ T3179] device syz_tun entered promiscuous mode [ 84.527189][ T3190] Zero length message leads to an empty skb [ 84.567129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): mac–e: link becomes ready [ 84.575485][ T7] bridge0: port 2(mac–e) entered blocking state [ 84.581907][ T7] bridge0: port 2(mac–e) entered forwarding state [ 85.107533][ T3237] tun0: tun_chr_ioctl cmd 1074025675 [ 85.122648][ T3237] tun0: persist enabled [ 85.130725][ T3237] tun0: tun_chr_ioctl cmd 1074025675 [ 85.144300][ T3237] tun0: persist disabled [ 85.611740][ T3295] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 85.721969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): mac–e: link becomes ready [ 85.729984][ T7] bridge0: port 2(mac–e) entered blocking state [ 85.736687][ T7] bridge0: port 2(mac–e) entered forwarding state [ 86.050814][ T3324] __nla_validate_parse: 5 callbacks suppressed [ 86.050824][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 86.069558][ T3324] netlink: 'syz.2.1276': attribute type 2 has an invalid length. [ 87.219049][ T3415] bridge0: port 2(vlan2) entered blocking state [ 87.225458][ T3415] bridge0: port 2(vlan2) entered forwarding state [ 87.235467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): mac–e: link becomes ready [ 87.264167][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.520491][ T278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.722513][ T3472] netlink: 'syz.1.1344': attribute type 5 has an invalid length. [ 87.730933][ T3472] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1344'. [ 88.254166][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.557729][ T3523] device veth0_vlan left promiscuous mode [ 88.564180][ T3523] device veth0_vlan entered promiscuous mode [ 88.574572][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.583801][ T1131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.593725][ T1131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.802408][ T24] kauditd_printk_skb: 337 callbacks suppressed [ 88.802422][ T24] audit: type=1400 audit(1769598016.076:3511): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.862170][ T24] audit: type=1326 audit(1769598016.116:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 88.904112][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.906183][ T3572] x_tables: ip6_tables: CT target: only valid in raw table, not . [ 88.916812][ T24] audit: type=1326 audit(1769598016.116:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6098afeb9 code=0x7ffc0000 [ 88.949539][ T24] audit: type=1400 audit(1769598016.116:3514): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.974495][ T24] audit: type=1400 audit(1769598016.116:3515): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.998735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.009040][ T24] audit: type=1400 audit(1769598016.126:3516): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.037303][ T24] audit: type=1400 audit(1769598016.136:3517): avc: denied { read write } for pid=3563 comm="syz.5.1384" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.068566][ T24] audit: type=1400 audit(1769598016.136:3518): avc: denied { map_create } for pid=3564 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.088185][ T24] audit: type=1400 audit(1769598016.136:3519): avc: denied { map_create } for pid=3564 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.122442][ T24] audit: type=1400 audit(1769598016.136:3520): avc: denied { prog_load } for pid=3564 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.210526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): mac–e: link becomes ready [ 89.226296][ T7] bridge0: port 2(mac–e) entered blocking state [ 89.232629][ T7] bridge0: port 2(mac–e) entered forwarding state [ 90.076545][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 90.107478][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 90.140945][ T3667] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1429'. [ 90.488620][ T3715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1454'. [ 90.782092][ T3756] tap0: tun_chr_ioctl cmd 4 [ 90.787679][ T3756] tap0: tun_chr_ioctl cmd 1074025681 [ 91.395848][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.573132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.397194][ T3903] netlink: 'syz.6.1545': attribute type 4 has an invalid length. [ 93.452713][ T296] Bluetooth: hci0: command 0x1003 tx timeout [ 93.459436][ T317] Bluetooth: hci0: sending frame failed (-49) [ 93.840810][ T24] kauditd_printk_skb: 298 callbacks suppressed [ 93.840826][ T24] audit: type=1400 audit(1769598277.114:3819): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.885563][ T24] audit: type=1400 audit(1769598277.164:3820): avc: denied { read write } for pid=3916 comm="syz.0.1551" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.919169][ T24] audit: type=1400 audit(1769598277.194:3821): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.019404][ T24] audit: type=1400 audit(1769598277.294:3822): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.068951][ T24] audit: type=1400 audit(1769598277.334:3823): avc: denied { read write } for pid=3920 comm="syz.1.1552" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.138883][ T24] audit: type=1400 audit(1769598277.334:3824): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.190854][ T24] audit: type=1400 audit(1769598277.374:3825): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.233761][ T24] audit: type=1400 audit(1769598277.394:3826): avc: denied { read write } for pid=3924 comm="syz.1.1553" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.258638][ T24] audit: type=1400 audit(1769598277.404:3827): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.284620][ T24] audit: type=1400 audit(1769598277.434:3828): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.860051][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.532518][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 95.539020][ T317] Bluetooth: hci0: sending frame failed (-49) [ 95.636428][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 95.646818][ T3994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1584'. [ 95.671656][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 95.686227][ T3994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1584'. [ 96.254618][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.863043][ T4094] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.610619][ T296] Bluetooth: hci0: command 0x1009 tx timeout [ 98.354167][ T4147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'. [ 98.961487][ T24] kauditd_printk_skb: 168 callbacks suppressed [ 98.961502][ T24] audit: type=1400 audit(1769598282.246:3997): avc: denied { read write } for pid=4148 comm="syz.5.1647" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.131518][ T24] audit: type=1400 audit(1769598282.416:3998): avc: denied { remount } for pid=4148 comm="syz.5.1647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 99.173721][ T24] audit: type=1400 audit(1769598282.447:3999): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.241890][ T24] audit: type=1400 audit(1769598282.487:4000): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.266538][ T24] audit: type=1400 audit(1769598282.497:4001): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.321304][ T24] audit: type=1400 audit(1769598282.497:4002): avc: denied { create } for pid=4161 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 99.359752][ T24] audit: type=1400 audit(1769598282.497:4003): avc: denied { name_bind } for pid=4161 comm="syz.1.1652" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 99.409697][ T24] audit: type=1400 audit(1769598282.507:4004): avc: denied { name_bind } for pid=4163 comm="syz.5.1653" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 99.440376][ T24] audit: type=1400 audit(1769598282.507:4005): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.476376][ T24] audit: type=1400 audit(1769598282.517:4006): avc: denied { create } for pid=4165 comm="syz.0.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 99.684986][ T4198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 100.649119][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.790585][ T4274] tap0: tun_chr_ioctl cmd 1074025677 [ 100.799264][ T4274] tap0: linktype set to 778 [ 101.450637][ T4337] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1733'. [ 101.675080][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 102.193419][ T4391] netlink: 'syz.5.1756': attribute type 17 has an invalid length. [ 103.278807][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 103.562351][ T4462] netlink: 'syz.2.1785': attribute type 3 has an invalid length. [ 103.570463][ T4462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1785'. [ 104.078470][ T24] kauditd_printk_skb: 242 callbacks suppressed [ 104.078485][ T24] audit: type=1400 audit(1769598287.369:4249): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.109785][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 104.127165][ T24] audit: type=1400 audit(1769598287.399:4250): avc: denied { create } for pid=4494 comm="syz.5.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.154947][ T24] audit: type=1400 audit(1769598287.399:4251): avc: denied { create } for pid=4494 comm="syz.5.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.175826][ T24] audit: type=1400 audit(1769598287.399:4252): avc: denied { create } for pid=4494 comm="syz.5.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.197696][ T24] audit: type=1400 audit(1769598287.409:4253): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.244887][ T24] audit: type=1400 audit(1769598287.409:4254): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.271097][ T24] audit: type=1400 audit(1769598287.459:4255): avc: denied { prog_load } for pid=4498 comm="syz.5.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.292058][ T24] audit: type=1400 audit(1769598287.479:4256): avc: denied { map_create } for pid=4498 comm="syz.5.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.318412][ T24] audit: type=1400 audit(1769598287.509:4257): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.344164][ T24] audit: type=1400 audit(1769598287.519:4258): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.218575][ T4580] mmap: syz.1.1837 (4580) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 106.659274][ T4689] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 106.744866][ T4697] capability: warning: `syz.1.1891' uses 32-bit capabilities (legacy support in use) [ 107.572373][ T4751] device sit0 entered promiscuous mode [ 107.580390][ T4751] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 107.588745][ T4751] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1914'. [ 108.686089][ T4836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.185339][ T24] kauditd_printk_skb: 339 callbacks suppressed [ 109.185365][ T24] audit: type=1400 audit(1769598548.473:4598): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.219484][ T24] audit: type=1400 audit(1769598548.503:4599): avc: denied { read write } for pid=4861 comm="syz.1.1963" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.246947][ T24] audit: type=1400 audit(1769598548.533:4600): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.271175][ T24] audit: type=1400 audit(1769598548.543:4601): avc: denied { create } for pid=4863 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 109.470029][ T24] audit: type=1400 audit(1769598548.753:4602): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.494873][ T24] audit: type=1400 audit(1769598548.773:4603): avc: denied { map_create } for pid=4865 comm="syz.6.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.521050][ T24] audit: type=1400 audit(1769598548.773:4604): avc: denied { map_create } for pid=4865 comm="syz.6.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.544986][ T24] audit: type=1400 audit(1769598548.773:4605): avc: denied { prog_load } for pid=4865 comm="syz.6.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.564697][ T24] audit: type=1400 audit(1769598548.793:4606): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.589875][ T24] audit: type=1400 audit(1769598548.803:4607): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.907293][ T4956] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 114.742833][ T24] kauditd_printk_skb: 132 callbacks suppressed [ 114.742848][ T24] audit: type=1400 audit(1769598554.036:4740): avc: denied { read write } for pid=5006 comm="syz.2.2030" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 114.788771][ T24] audit: type=1400 audit(1769598554.056:4741): avc: denied { execmem } for pid=5005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 114.808442][ T24] audit: type=1400 audit(1769598554.066:4742): avc: denied { read write } for pid=5007 comm="syz.0.2029" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 114.832397][ T24] audit: type=1400 audit(1769598554.066:4743): avc: denied { mounton } for pid=5007 comm="syz.0.2029" path="/407/file0" dev="tmpfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=0 [ 114.856232][ T24] audit: type=1400 audit(1769598554.066:4744): avc: denied { create } for pid=5009 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 114.875694][ T24] audit: type=1400 audit(1769598554.066:4745): avc: denied { create } for pid=5012 comm="syz.6.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 114.896536][ T24] audit: type=1400 audit(1769598554.066:4746): avc: denied { read write } for pid=275 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.920748][ T24] audit: type=1400 audit(1769598554.076:4747): avc: denied { execmem } for pid=5012 comm="syz.6.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 114.940201][ T24] audit: type=1400 audit(1769598554.076:4748): avc: denied { read write } for pid=1305 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.964903][ T24] audit: type=1400 audit(1769598554.086:4749): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.361988][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.861321][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 120.861334][ T24] audit: type=1400 audit(1769598560.159:4779): avc: denied { map_create } for pid=5059 comm="syz.6.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.905222][ T24] audit: type=1400 audit(1769598560.159:4780): avc: denied { read write } for pid=5060 comm="syz.2.2050" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.932277][ T24] audit: type=1400 audit(1769598560.159:4781): avc: denied { create } for pid=5058 comm="syz.0.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 120.955369][ T24] audit: type=1400 audit(1769598560.179:4782): avc: denied { map_create } for pid=5059 comm="syz.6.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.984854][ T24] audit: type=1400 audit(1769598560.179:4783): avc: denied { prog_load } for pid=5059 comm="syz.6.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.004141][ T24] audit: type=1400 audit(1769598560.189:4784): avc: denied { read write } for pid=5060 comm="syz.2.2050" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.028461][ T24] audit: type=1400 audit(1769598560.189:4785): avc: denied { execmem } for pid=5057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 121.048179][ T24] audit: type=1400 audit(1769598560.199:4786): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.072486][ T24] audit: type=1400 audit(1769598560.199:4787): avc: denied { read write } for pid=1411 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.097143][ T24] audit: type=1400 audit(1769598560.229:4788): avc: denied { read write } for pid=5067 comm="syz.6.2054" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.159059][ T5102] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2070'. [ 124.175473][ T5102] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2070'. [ 124.349641][ T5117] bridge0: port 2(vlan2) entered disabled state [ 124.358401][ T5117] device vlan2 left promiscuous mode [ 124.363743][ T5117] device syz_tun left promiscuous mode [ 124.370195][ T5117] bridge0: port 2(vlan2) entered disabled state [ 124.797788][ T363] device bridge_slave_1 left promiscuous mode [ 124.803939][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.811524][ T363] device bridge_slave_0 left promiscuous mode [ 124.818216][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.827281][ T363] device veth1_macvtap left promiscuous mode [ 124.833807][ T363] device veth0_vlan left promiscuous mode [ 126.397435][ T363] device bridge_slave_0 left promiscuous mode [ 126.403850][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.412753][ T363] device mac–e left promiscuous mode [ 126.418585][ T363] bridge0: port 2(mac–e) entered disabled state [ 126.425487][ T363] device bridge_slave_0 left promiscuous mode [ 126.432949][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.442962][ T363] device mac–e left promiscuous mode [ 126.448756][ T363] bridge0: port 2(mac–e) entered disabled state [ 126.455981][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.465150][ T363] device veth1_macvtap left promiscuous mode [ 126.471242][ T363] device veth0_vlan left promiscuous mode [ 126.477833][ T363] device veth1_macvtap left promiscuous mode [ 126.484298][ T363] device veth0_vlan left promiscuous mode [ 126.491191][ T363] device veth1_macvtap left promiscuous mode [ 126.497825][ T363] device veth0_vlan left promiscuous mode [ 127.996778][ T363] ------------[ cut here ]------------ [ 128.002407][ T363] WARNING: CPU: 1 PID: 363 at net/ipv6/xfrm6_tunnel.c:338 xfrm6_tunnel_net_exit+0xc0/0x130 [ 128.013016][ T363] Modules linked in: [ 128.017264][ T363] CPU: 1 PID: 363 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 128.024753][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.035369][ T363] Workqueue: netns cleanup_net [ 128.040554][ T363] RIP: 0010:xfrm6_tunnel_net_exit+0xc0/0x130 [ 128.046732][ T363] Code: e8 c5 d0 94 fd 4b 83 3c 3e 00 75 19 e8 19 53 5a fd 49 81 ff f8 07 00 00 74 1b e8 0b 53 5a fd 49 83 c7 08 eb c9 e8 00 53 5a fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 128.066607][ T363] RSP: 0018:ffffc90008b9fc30 EFLAGS: 00010293 [ 128.072839][ T363] RAX: ffffffff840a62d0 RBX: ffff88812488b9c0 RCX: ffff8881108be2c0 [ 128.081245][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888124a443f0 [ 128.089658][ T363] RBP: ffffc90008b9fc50 R08: ffffffff86b336c7 R09: 1ffffffff0d666d8 [ 128.097858][ T363] R10: dffffc0000000000 R11: fffffbfff0d666d9 R12: dffffc0000000000 [ 128.106257][ T363] R13: dffffc0000000000 R14: ffff888124a44000 R15: 00000000000003f0 [ 128.114266][ T363] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 128.123535][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.130236][ T363] CR2: 00007ffc481f2080 CR3: 000000010d4ed000 CR4: 00000000003506b0 [ 128.138297][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.146310][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.154280][ T363] Call Trace: [ 128.157652][ T363] cleanup_net+0x58e/0xb80 [ 128.162246][ T363] ? __kasan_check_write+0x14/0x20 [ 128.167592][ T363] ? ops_init+0x4a0/0x4a0 [ 128.172230][ T363] ? read_word_at_a_time+0x12/0x20 [ 128.177487][ T363] ? strscpy+0x9b/0x290 [ 128.181916][ T363] process_one_work+0x6e1/0xba0 [ 128.186875][ T363] worker_thread+0xa6a/0x13c0 [ 128.191835][ T363] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 128.197397][ T363] kthread+0x346/0x3d0 [ 128.201491][ T363] ? worker_clr_flags+0x190/0x190 [ 128.206633][ T363] ? kthread_blkcg+0xd0/0xd0 [ 128.211265][ T363] ret_from_fork+0x1f/0x30 [ 128.215913][ T363] ---[ end trace e4072651e9a53916 ]--- [ 128.221543][ T363] ------------[ cut here ]------------ [ 128.227085][ T363] WARNING: CPU: 0 PID: 363 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x115/0x130 [ 128.237179][ T363] Modules linked in: [ 128.241075][ T363] CPU: 0 PID: 363 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 128.250043][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.260289][ T363] Workqueue: netns cleanup_net [ 128.265069][ T363] RIP: 0010:xfrm6_tunnel_net_exit+0x115/0x130 [ 128.271269][ T363] Code: fd 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c4 52 5a fd 49 81 ff f8 07 00 00 74 1b e8 b6 52 5a fd 49 83 c7 08 eb c5 e8 ab 52 5a fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 9b 52 5a fd 5b 41 5c 41 5e 41 [ 128.291261][ T363] RSP: 0018:ffffc90008b9fc30 EFLAGS: 00010293 [ 128.297413][ T363] RAX: ffffffff840a6325 RBX: ffff888124a44800 RCX: ffff8881108be2c0 [ 128.305469][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888124a44808 [ 128.313969][ T363] RBP: ffffc90008b9fc50 R08: ffffffff86b336c7 R09: 1ffffffff0d666d8 [ 128.322242][ T363] R10: dffffc0000000000 R11: fffffbfff0d666d9 R12: dffffc0000000000 [ 128.330402][ T363] R13: dffffc0000000000 R14: ffff888124a44000 R15: 0000000000000008 [ 128.338607][ T363] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 128.347629][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.354910][ T363] CR2: 00007ffc481f2080 CR3: 000000010d4ed000 CR4: 00000000003506b0 [ 128.363165][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.371505][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.379600][ T363] Call Trace: [ 128.382917][ T363] cleanup_net+0x58e/0xb80 [ 128.387430][ T363] ? __kasan_check_write+0x14/0x20 [ 128.392707][ T363] ? ops_init+0x4a0/0x4a0 [ 128.397271][ T363] ? read_word_at_a_time+0x12/0x20 [ 128.402631][ T363] ? strscpy+0x9b/0x290 [ 128.406941][ T363] process_one_work+0x6e1/0xba0 [ 128.411813][ T363] worker_thread+0xa6a/0x13c0 [ 128.416651][ T363] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 128.422150][ T363] kthread+0x346/0x3d0 [ 128.427271][ T363] ? worker_clr_flags+0x190/0x190 [ 128.432533][ T363] ? kthread_blkcg+0xd0/0xd0 [ 128.437424][ T363] ret_from_fork+0x1f/0x30 [ 128.441866][ T363] ---[ end trace e4072651e9a53917 ]--- [ 128.462399][ T363] ------------[ cut here ]------------ [ 128.468082][ T363] WARNING: CPU: 0 PID: 363 at net/xfrm/xfrm_state.c:2716 xfrm_state_fini+0x206/0x250 [ 128.477756][ T363] Modules linked in: [ 128.481699][ T363] CPU: 0 PID: 363 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 128.490907][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.501730][ T363] Workqueue: netns cleanup_net [ 128.507147][ T363] RIP: 0010:xfrm_state_fini+0x206/0x250 [ 128.512700][ T363] Code: 43 80 3c 2c 00 74 08 48 89 df e8 35 cf aa fd 48 8b 3b 44 89 f6 e8 ca 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7a 51 70 fd <0f> 0b e9 64 fe ff ff e8 6e 51 70 fd 0f 0b e9 cc fe ff ff e8 62 51 [ 128.532707][ T363] RSP: 0018:ffffc90008b9fc10 EFLAGS: 00010293 [ 128.538980][ T363] RAX: ffffffff83f46456 RBX: ffff88812488b9c0 RCX: ffff8881108be2c0 [ 128.547462][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881108be2c0 [ 128.555882][ T363] RBP: ffffc90008b9fc38 R08: ffffffff86b336c7 R09: 1ffffffff0d666d8 [ 128.564013][ T363] R10: dffffc0000000000 R11: fffffbfff0d666d9 R12: 1ffffffff0d664b8 [ 128.572106][ T363] R13: dffffc0000000000 R14: ffff88812488c740 R15: dffffc0000000000 [ 128.580243][ T363] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 128.589271][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.595940][ T363] CR2: 00007ffc481f2080 CR3: 000000000640f000 CR4: 00000000003506b0 [ 128.604218][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.612556][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.620726][ T363] Call Trace: [ 128.624162][ T363] xfrm_net_exit+0x25/0x60 [ 128.628718][ T363] cleanup_net+0x58e/0xb80 [ 128.633193][ T363] ? __kasan_check_write+0x14/0x20 [ 128.638577][ T363] ? ops_init+0x4a0/0x4a0 [ 128.642941][ T363] ? read_word_at_a_time+0x12/0x20 [ 128.648227][ T363] ? strscpy+0x9b/0x290 [ 128.652651][ T363] process_one_work+0x6e1/0xba0 [ 128.657619][ T363] worker_thread+0xa6a/0x13c0 [ 128.662336][ T363] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 128.667869][ T363] kthread+0x346/0x3d0 [ 128.671993][ T363] ? worker_clr_flags+0x190/0x190 [ 128.677142][ T363] ? kthread_blkcg+0xd0/0xd0 [ 128.681767][ T363] ret_from_fork+0x1f/0x30 [ 128.686533][ T363] ---[ end trace e4072651e9a53918 ]---