last executing test programs: 20.5557134s ago: executing program 2 (id=895): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x8, 0x2000, 0x8000) open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r1, 0x2, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 20.270754197s ago: executing program 2 (id=898): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") open(0x0, 0x1, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001040)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@nodioread_nolock}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x1, 0x2, 0x8000000000000000, 0x6, 0xd4e1, 0x34e}) sendfile(r7, r7, 0x0, 0x2000000000006) 18.116781179s ago: executing program 3 (id=902): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001040)={0x7ff, 0x3, 0x7, 0x3, 0x5, "4a0909d0ebddd5853657761b8ecc52f7f41b05"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 13.55498139s ago: executing program 4 (id=905): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x440042, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) 13.446163113s ago: executing program 2 (id=907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000098) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) open(&(0x7f0000000040)='./file0\x00', 0x125302, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x400005, 0x9fd, 0x85, 0x41}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x1, 0x0, 0x7, 0x8}, {0x12, 0x2, 0x0, 0x403, 0x0, 0x400}, 0x8, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4f}}]}, 0x68}}, 0x44080) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)={0x18, r4, 0x1, 0x1, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8840}, 0x801) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000100)) 13.098663891s ago: executing program 0 (id=908): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) fallocate(r1, 0x0, 0xbf5, 0x2000402) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) select(0x40, &(0x7f0000000340)={0x8, 0x5, 0x401, 0x1000, 0x80000000, 0x6, 0x9, 0x8}, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$rfkill(0xffffffffffffffff, &(0x7f00000002c0), 0x8) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe6f) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/current\x00') lseek(r5, 0x4f, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x18, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000000)) 13.043119733s ago: executing program 0 (id=909): getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) pivot_root(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='./file1\x00') faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) syz_usb_disconnect(0xffffffffffffffff) setns(r5, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r6, 0x102, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.147316288s ago: executing program 4 (id=910): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) creat(0x0, 0xd931d3864d39dcdb) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 9.127780888s ago: executing program 2 (id=912): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x40000c17) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x3) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x10000000000005) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r7, 0x1, 0x1e, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.076315809s ago: executing program 3 (id=913): syz_open_procfs(0x0, &(0x7f0000000540)='net/softnet_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000aed000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, r4, 0x3, 0x1, 0x4}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, 0x0, 0x0, 0xf0, 0x0) mmap(&(0x7f00007e5000/0x1000)=nil, 0x1000, 0x6, 0x100010, r5, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto, @fwd={0x1}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001480)=""/132, 0x34, 0x84, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 7.760942431s ago: executing program 1 (id=914): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000600)={'\x00', 0x8000, 0xcf, 0x73, 0x0, 0x8, 0x26000, 0x2000, '\x00', 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={[{@xino_off}, {@uuid_auto}, {@index_off}, {@volatile}, {@uuid_auto}, {@redirect_dir_on}, {@default_permissions}, {@nfs_export_off}, {@nfs_export_off}, {@redirect_dir_nofollow}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r5}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK \x00'}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r6) open(&(0x7f0000000080)='.\x00', 0x51a382, 0x78e22799f4a46e8e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x1684060, &(0x7f0000000540)=ANY=[@ANYBLOB="000400000038fd34d7fc3107d9545fd5c4a7a023f194b0ba675bb0d4faaede2e92df4bd8db22258770ea17c855118f0784a1fab3386e42b2bdca9af373a65092b9909681378456c09866ae112d26b2ccb6bd0a86f4c41f069f1325", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',audit,func=FILE_CHECK,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) 7.760277621s ago: executing program 4 (id=915): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) keyctl$join(0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socket$packet(0x11, 0x3, 0x300) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 7.372505391s ago: executing program 0 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140), 0xc) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000)=0x8011, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7.329988472s ago: executing program 4 (id=917): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r2, 0x0) syz_clone3(&(0x7f0000001440)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x0, 0xfffffffd, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) pread64(r1, 0x0, 0x0, 0x0) 7.047703448s ago: executing program 3 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x800) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = creat(0x0, 0x100) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.218069497s ago: executing program 1 (id=919): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x37b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) chdir(&(0x7f0000000080)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0xf]}, 0x8) 4.217807537s ago: executing program 4 (id=920): ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000004c0)={0x1}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3, 0x0, 0xb, 0x6}, {0xfae2, 0x7, 0x1, 0x3}, {0x9, 0x4, 0x0, 0x8000}, {0x6, 0x0, 0x3, 0x9}, {0xfff, 0x5, 0x8, 0x5}, {0x40, 0x1, 0xc, 0x9}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) write(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) removexattr(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x81800) getpeername$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) userfaultfd(0x801) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.030213892s ago: executing program 0 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.828059257s ago: executing program 1 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) clock_settime(0x1, &(0x7f0000000180)={0x0, 0x3938700}) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000200)=[{0x0}], 0x0, 0x1}, 0x20) 2.553449328s ago: executing program 3 (id=923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x440042, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) 2.553091498s ago: executing program 4 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) rt_tgsigqueueinfo(r0, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x448, 0x73}}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1800000, 0x14}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.534615318s ago: executing program 2 (id=925): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x250) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x340, &(0x7f00000004c0)) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) connect$inet6(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, 0x0) 2.356040622s ago: executing program 1 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a}, 0x28) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xee01, 0x0, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000000000000001"], 0x88}}, 0x20000000) fcntl$setown(r2, 0x8, r4) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 890.163718ms ago: executing program 0 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r5, 0x20, 0x7, 0x8, 0xe, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x28, 0x57, 0x0, 0x3, [0x8, 0xccea0000, 0x7, 0xac, 0x39d, 0x4a, 0x1, 0x7, 0x80000000]}, @timestamp={0x44, 0x2c, 0xfa, 0x0, 0x1, [0x9, 0x55, 0x2, 0x100, 0x3, 0x9, 0xd6, 0x7f, 0x1, 0xffffffff]}, @timestamp_prespec={0x44, 0x44, 0xf9, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}, {@multicast1, 0xfffffffc}, {@local, 0xc}, {@private=0xa010102, 0x6}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 889.315728ms ago: executing program 3 (id=928): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fff7ffc}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x83, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0x10e21}, &(0x7f0000000740)={0x0, 0xea60}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x422a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x40000c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000010000000000000000000000711832000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x12000, 0x0) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) creat(&(0x7f00000000c0)='./file1\x00', 0x1ea) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x60007f9) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4}, 0x6) 399.26054ms ago: executing program 1 (id=929): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', '', [{0x20, '[(\r:\x9d1L\xc0\x935\a~l\xdd\xea\x8cy\t\xbb\x1c\bH\xb3\xf5\x9c\xd3\'\xdf\xea\xbcP\xc8}\xe7\xcb\xfd\\\x029\xd4b\xa3p\x9c\xa2{d\xd3~\xf8\xcb-\xacQ\x00\x11{\x91\xc51\xf8@4E\xd9\x0e\xb4\x9e\xf3N\xf9:?\xb2o\xa1v\xe6\xe9\x87\xfaxm\x13\xf7\xcb\fLi\x7f\x06\x99q\x9c\x12\xcb\xdc\xa5\x1d\xd1\xdb\xbd\xf2 \x0e\x9f\x98\xf5\xed\xeb\x8e\xbc\xf0\xcc\xea\xfc\x91\x19\x16\x02\x0fV\xbc\xd5\xealZ\x8e\x1c'}]}, 0x86) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c) tee(r2, r7, 0xfffffffffffffc01, 0x0) tee(r2, r7, 0x60000000000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r4, 0x80000) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xff5d, 0x0, &(0x7f0000000140)=[@free_buffer], 0xffffffffffffff67, 0x0, 0x0}) 398.53634ms ago: executing program 2 (id=930): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./cgroup/../file0\x00', 0x1c0442, &(0x7f00000009c0)=ANY=[], 0xfc, 0x2d2, &(0x7f0000005a80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x8932, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000001040)={0x8df2, 0x7, 0x8, 0x4, 0x1}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={0xffffffffffffffff, &(0x7f0000000480)="83b15247d600000000e7000700640000009200", 0x0}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x81}]}) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x1f3b83) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="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"/4268, @ANYBLOB="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", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fdatasync(r4) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000002c0)={0x10, 0x6ea7, 0x4, 0xacf, 0x40, 0x7}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000280)='./cgroup/../file0\x00', 0x0, 0x18}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x4a8e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.29794ms ago: executing program 1 (id=931): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000000)) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 2.78229ms ago: executing program 3 (id=932): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000600)={'\x00', 0x8000, 0xcf, 0x73, 0x0, 0x8, 0x26000, 0x2000, '\x00', 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={[{@xino_off}, {@uuid_auto}, {@index_off}, {@volatile}, {@uuid_auto}, {@redirect_dir_on}, {@default_permissions}, {@nfs_export_off}, {@nfs_export_off}, {@redirect_dir_nofollow}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r5}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK \x00'}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r6) open(&(0x7f0000000080)='.\x00', 0x51a382, 0x78e22799f4a46e8e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=941): ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="13010002000000086d044fc20000000022c2"], &(0x7f0000000640)={0x0, 0x0, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES8=r1], 0x1, [{0x0, 0x0}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) sendfile(r0, r3, 0x0, 0x9) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0xc850, &(0x7f0000000140)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc}}], [{@uid_gt}]}, 0x5, 0x254, &(0x7f00000007c0)="$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") futex(&(0x7f0000000040)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000100)=0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008412, &(0x7f0000000180)={[{@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x81}}, {@nogrpid}, {@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@dioread_nolock}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x5, 0x567, &(0x7f0000000f00)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100000000000000000000000000fd00"/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="07a93951b35a65356000cacd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x604ab000) kernel console output (not intermixed with test programs): fsck is recommended [ 123.602119][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.612740][ T1277] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 123.620683][ T1277] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.636537][ T1277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1277 comm=syz.1.257 [ 123.671680][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.681040][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.690758][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.698257][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.721826][ T1244] device veth0_vlan entered promiscuous mode [ 123.734467][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.743490][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.752998][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.761650][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.770523][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.777601][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.787403][ T1277] syz.1.257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.798276][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.807914][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.816508][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.823595][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.845910][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.853777][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.861771][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.872031][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.880557][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.888643][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.904799][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.917664][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.926268][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.954146][ T1244] device veth1_macvtap entered promiscuous mode [ 123.964095][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.973254][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.983443][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.996531][ T1243] device veth0_vlan entered promiscuous mode [ 124.009750][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.018620][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.035393][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.043974][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.052891][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.062075][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.071430][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.080061][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.094053][ T1243] device veth1_macvtap entered promiscuous mode [ 124.105043][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.114155][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.123533][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.140028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.149589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.178393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.195149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.243074][ T30] audit: type=1400 audit(1785248365.160:240): avc: denied { read write } for pid=1291 comm="syz.2.249" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.267141][ T30] audit: type=1400 audit(1785248365.160:241): avc: denied { open } for pid=1291 comm="syz.2.249" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 125.293685][ T10] device bridge_slave_1 left promiscuous mode [ 125.302695][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.315049][ T30] audit: type=1400 audit(1785248366.150:242): avc: denied { bind } for pid=1291 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.040507][ T10] device bridge_slave_0 left promiscuous mode [ 126.046770][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.055374][ T10] device bridge_slave_1 left promiscuous mode [ 126.061681][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.072221][ T1306] loop2: detected capacity change from 0 to 16 [ 126.084213][ T10] device bridge_slave_0 left promiscuous mode [ 126.093733][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.102726][ T10] device veth0_vlan left promiscuous mode [ 126.108871][ T10] device veth1_macvtap left promiscuous mode [ 126.120707][ T10] device veth0_vlan left promiscuous mode [ 126.132148][ T1306] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.308512][ T1313] loop0: detected capacity change from 0 to 512 [ 126.331359][ T1313] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.398807][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 126.407996][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 126.417511][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 126.426655][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 126.436235][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 126.445349][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 126.454523][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 126.463602][ T1319] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.472942][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 126.482084][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 126.491354][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 126.500520][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 126.509634][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 126.518782][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 126.527907][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 126.537067][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 126.546269][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 126.555393][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 126.564536][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 126.573730][ T1319] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.583075][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 126.592202][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 126.601344][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 126.610638][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 126.619776][ T1319] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.629128][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 126.638520][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 126.647630][ T1319] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.656987][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 126.666121][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 126.675219][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 126.684688][ T1319] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.694026][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 126.703323][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 126.712475][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 126.721591][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 126.730864][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 126.740004][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 126.749981][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 126.758981][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 126.768008][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 126.777231][ T1319] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 126.786826][ T1319] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 126.796113][ T1319] handle_bad_sector: 7517 callbacks suppressed [ 126.796150][ T1319] attempt to access beyond end of device [ 126.796150][ T1319] loop2: rw=524288, want=312, limit=16 [ 126.813831][ T1319] attempt to access beyond end of device [ 126.813831][ T1319] loop2: rw=524288, want=1049280, limit=16 [ 126.825628][ T1319] attempt to access beyond end of device [ 126.825628][ T1319] loop2: rw=524288, want=848, limit=16 [ 126.836879][ T1319] attempt to access beyond end of device [ 126.836879][ T1319] loop2: rw=524288, want=13478624104, limit=16 [ 126.848966][ T1319] attempt to access beyond end of device [ 126.848966][ T1319] loop2: rw=524288, want=13478624080, limit=16 [ 126.861137][ T1319] attempt to access beyond end of device [ 126.861137][ T1319] loop2: rw=524288, want=96, limit=16 [ 126.872539][ T1319] attempt to access beyond end of device [ 126.872539][ T1319] loop2: rw=524288, want=221976, limit=16 [ 126.884127][ T1319] attempt to access beyond end of device [ 126.884127][ T1319] loop2: rw=524288, want=14552337264, limit=16 [ 126.896167][ T1319] attempt to access beyond end of device [ 126.896167][ T1319] loop2: rw=524288, want=14546590696, limit=16 [ 126.908308][ T1319] attempt to access beyond end of device [ 126.908308][ T1319] loop2: rw=524288, want=24, limit=16 [ 128.228093][ T1313] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.264: corrupted xattr block 95 [ 128.242009][ T1313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.264: bg 0: block 7: invalid block bitmap [ 128.255157][ T1313] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 128.264391][ T1313] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.264: corrupted xattr block 95 [ 128.277159][ T1313] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 128.287579][ T1313] EXT4-fs (loop0): 1 orphan inode deleted [ 128.293615][ T1313] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 129.132255][ T1332] loop2: detected capacity change from 0 to 256 [ 129.478464][ T30] audit: type=1400 audit(1785248370.390:243): avc: denied { bind } for pid=1337 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.498516][ T1339] tipc: Can't bind to reserved service type 2 [ 129.764476][ T30] audit: type=1400 audit(1785248370.680:244): avc: denied { setopt } for pid=1337 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.818872][ T30] audit: type=1400 audit(1785248370.710:245): avc: denied { write } for pid=1337 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.024720][ T1348] loop1: detected capacity change from 0 to 256 [ 130.056996][ T1348] FAT-fs (loop1): Unrecognized mount option "tf8=1" or missing value [ 131.113840][ T1367] loop2: detected capacity change from 0 to 2048 [ 132.232036][ T1367] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 132.279379][ T1363] EXT4-fs error (device loop2): ext4_ext_precache:608: inode #2: comm syz.2.276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 132.306642][ T1363] EXT4-fs (loop2): Remounting filesystem read-only [ 133.043146][ T1373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 133.164516][ T1373] EXT4-fs (loop2): Remounting filesystem read-only [ 134.728225][ T1390] loop2: detected capacity change from 0 to 1024 [ 135.539639][ T1391] : renamed from bond_slave_0 [ 135.853454][ T1390] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 138.493872][ T30] audit: type=1400 audit(1785248379.410:246): avc: denied { create } for pid=1419 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.576226][ T1424] dummy_hcd dummy_hcd.0: remove, state 4 [ 138.582038][ T1424] usb usb1: USB disconnect, device number 1 [ 139.143436][ T1424] dummy_hcd dummy_hcd.0: stopped [ 139.148617][ T1424] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 139.491650][ T30] audit: type=1400 audit(1785248380.410:247): avc: denied { write } for pid=1419 comm="syz.1.292" path="socket:[20625]" dev="sockfs" ino=20625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.613352][ T30] audit: type=1400 audit(1785248383.530:248): avc: denied { write } for pid=1435 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.637492][ T30] audit: type=1400 audit(1785248383.550:249): avc: denied { create } for pid=1441 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.673489][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.680811][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.737376][ T1447] loop0: detected capacity change from 0 to 256 [ 142.789310][ T30] audit: type=1400 audit(1785248383.580:250): avc: denied { setopt } for pid=1441 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.813401][ T1447] FAT-fs (loop0): Unrecognized mount option "tf8=1" or missing value [ 142.836272][ T30] audit: type=1400 audit(1785248383.670:251): avc: denied { write } for pid=1441 comm="syz.2.297" name="netlink" dev="proc" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 142.859276][ T30] audit: type=1400 audit(1785248383.750:252): avc: denied { unmount } for pid=1444 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.932478][ T30] audit: type=1400 audit(1785248383.830:253): avc: denied { mount } for pid=1449 comm="syz.3.300" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 143.543768][ T1422] syz.1.292 (1422) used greatest stack depth: 20520 bytes left [ 144.017531][ T1474] loop2: detected capacity change from 0 to 1024 [ 144.091364][ T1474] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 146.264857][ T30] audit: type=1400 audit(1785248387.180:254): avc: denied { wake_alarm } for pid=1489 comm="syz.4.310" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.395617][ T30] audit: type=1326 audit(1785248387.300:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.464996][ T1508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 147.695675][ T30] audit: type=1326 audit(1785248387.300:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.721672][ T30] audit: type=1326 audit(1785248387.300:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.746799][ T30] audit: type=1326 audit(1785248387.310:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.772151][ T654] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.776835][ T30] audit: type=1326 audit(1785248387.310:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.867600][ T30] audit: type=1326 audit(1785248387.320:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 147.895077][ T30] audit: type=1326 audit(1785248387.320:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 148.115129][ T30] audit: type=1326 audit(1785248387.320:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 148.147265][ T30] audit: type=1326 audit(1785248387.320:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.0.311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df185ae99 code=0x7ffc0000 [ 148.178187][ T654] usb 3-1: Using ep0 maxpacket: 8 [ 151.276842][ T654] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.439484][ T654] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.450735][ T654] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.739425][ T1549] overlayfs: failed to clone upperpath [ 151.753814][ T1549] overlayfs: failed to clone upperpath [ 151.761110][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 151.761124][ T30] audit: type=1400 audit(1785248392.505:288): avc: denied { remount } for pid=1543 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.808360][ T654] usb 3-1: string descriptor 0 read error: -71 [ 151.826013][ T654] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 151.862729][ T654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.893801][ T654] usb 3-1: can't set config #1, error -71 [ 151.903774][ T654] usb 3-1: USB disconnect, device number 2 [ 152.041858][ T1553] xt_CT: No such helper "netbios-ns" [ 152.067879][ T30] audit: type=1400 audit(1785248392.748:289): avc: denied { read append } for pid=1550 comm="syz.2.329" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.068116][ T30] audit: type=1400 audit(1785248392.748:290): avc: denied { open } for pid=1550 comm="syz.2.329" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.302165][ T1559] loop2: detected capacity change from 0 to 256 [ 152.309239][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 152.387081][ T1559] FAT-fs (loop2): Unrecognized mount option "tf8=1" or missing value [ 152.509982][ T1567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 157.217737][ T1601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 159.618782][ T1622] netlink: 164 bytes leftover after parsing attributes in process `syz.1.348'. [ 160.015275][ T30] audit: type=1400 audit(1785248400.234:291): avc: denied { setattr } for pid=1624 comm="syz.1.352" name="RAW" dev="sockfs" ino=21590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.381412][ T30] audit: type=1400 audit(1785248401.507:292): avc: denied { watch watch_reads } for pid=1639 comm="syz.3.355" path="/75/file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 161.421345][ T1642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.356'. [ 162.444896][ T1646] futex_wake_op: syz.2.350 tries to shift op by 144; fix this program [ 162.479837][ T30] audit: type=1400 audit(1785248402.508:293): avc: denied { map } for pid=1633 comm="syz.2.350" path="socket:[21126]" dev="sockfs" ino=21126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.643946][ T30] audit: type=1400 audit(1785248402.508:294): avc: denied { read accept } for pid=1633 comm="syz.2.350" path="socket:[21126]" dev="sockfs" ino=21126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.395291][ T1659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 164.472881][ T30] audit: type=1400 audit(1785248404.155:295): avc: denied { setopt } for pid=1661 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.891201][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 167.898851][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 167.999280][ T1691] device veth0_vlan left promiscuous mode [ 168.006221][ T1691] device veth0_vlan entered promiscuous mode [ 168.019066][ T1691] device veth1_macvtap left promiscuous mode [ 168.027515][ T1691] device veth1_macvtap entered promiscuous mode [ 168.037653][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.048519][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.096621][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.155561][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.162717][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.192923][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.203570][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.218472][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.225603][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.238370][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.246918][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 168.255989][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.265759][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 168.273985][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.282578][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.290866][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.299271][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.307625][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.315896][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.324403][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.332981][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.341701][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.350167][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.358539][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.366974][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.375500][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.383864][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.392378][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.401239][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.415546][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.423756][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.431469][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.439253][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.447629][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.467155][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.475162][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.483142][ T1689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 168.541465][ T1712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 172.820769][ T30] audit: type=1400 audit(1785248412.213:296): avc: denied { ioctl } for pid=1724 comm="syz.1.377" path="socket:[21218]" dev="sockfs" ino=21218 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.855841][ T1728] netlink: 64 bytes leftover after parsing attributes in process `syz.1.377'. [ 173.058812][ T1733] overlayfs: failed to clone lowerpath [ 173.303249][ T1734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 175.608928][ T1763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.388'. [ 175.711838][ T30] audit: type=1400 audit(1785248414.917:297): avc: denied { getopt } for pid=1770 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.028360][ T1798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 178.992134][ T1820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1820 comm=syz.4.407 [ 185.596660][ T1867] overlayfs: failed to clone lowerpath [ 185.967838][ T1878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1878 comm=syz.2.422 [ 192.336932][ T1906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 197.731872][ T1921] xt_CT: No such helper "netbios-ns" [ 198.802413][ T1922] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.809789][ T1922] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.950497][ T1927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 199.064392][ T30] audit: type=1400 audit(1785248436.768:298): avc: denied { bind } for pid=1923 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.094741][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 199.182978][ T30] audit: type=1400 audit(1785248436.796:299): avc: denied { ioctl } for pid=1923 comm="syz.3.436" path="socket:[24079]" dev="sockfs" ino=24079 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.796244][ T30] audit: type=1400 audit(1785248436.815:300): avc: denied { setopt } for pid=1923 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.262778][ T1954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 205.848562][ T1965] tipc: Started in network mode [ 205.853574][ T1965] tipc: Node identity , cluster identity 4711 [ 205.859714][ T1965] tipc: Failed to obtain node identity [ 205.865305][ T1965] tipc: Enabling of bearer rejected, failed to enable media [ 205.904442][ T30] audit: type=1400 audit(1785248443.150:301): avc: denied { checkpoint_restore } for pid=1957 comm="syz.4.445" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.240616][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 209.716465][ T30] audit: type=1326 audit(1785248446.201:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 210.026099][ T30] audit: type=1326 audit(1785248446.201:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 210.051944][ T30] audit: type=1326 audit(1785248446.220:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 210.097836][ T30] audit: type=1326 audit(1785248446.220:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 210.207659][ T30] audit: type=1326 audit(1785248446.220:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 210.255649][ T30] audit: type=1326 audit(1785248446.220:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 211.056844][ T30] audit: type=1326 audit(1785248446.229:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 211.149471][ T30] audit: type=1326 audit(1785248446.229:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 211.174297][ T30] audit: type=1326 audit(1785248446.238:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.4.458" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 212.443377][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 213.655046][ T2051] xt_nat: multiple ranges no longer supported [ 215.545798][ T2053] overlayfs: failed to clone upperpath [ 216.317260][ T2057] xt_TCPMSS: Only works on TCP SYN packets [ 221.080475][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 222.766507][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 228.941077][ T2167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2167 comm=syz.1.499 [ 230.620424][ T306] device bridge_slave_1 left promiscuous mode [ 230.638099][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.710625][ T306] device bridge_slave_0 left promiscuous mode [ 230.716910][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.310497][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.360855][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.387763][ T2186] device bridge_slave_0 entered promiscuous mode [ 231.401891][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.415470][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.434011][ T2186] device bridge_slave_1 entered promiscuous mode [ 231.545752][ T2199] overlayfs: failed to clone lowerpath [ 231.902953][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.910063][ T2186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.917417][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.924609][ T2186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.977007][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.990329][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.042274][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.057465][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.090335][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.110118][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.128948][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.136083][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.157101][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.176552][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.197952][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.205056][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.298737][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.317593][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.325721][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.349527][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.003590][ T2186] device veth0_vlan entered promiscuous mode [ 233.215970][ T2186] device veth1_macvtap entered promiscuous mode [ 233.253078][ T2207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2207 comm=syz.1.511 [ 233.321504][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 233.321523][ T30] audit: type=1400 audit(1785248468.791:316): avc: denied { mount } for pid=2186 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 233.406766][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 233.442952][ T2212] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 233.518104][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.553426][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.563145][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.571902][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.580521][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.588829][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.597135][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.605105][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.615313][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.985444][ T2225] loop0: detected capacity change from 0 to 128 [ 235.014819][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.023578][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.033504][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.041219][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.463705][ T2225] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.476097][ T2225] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 236.803586][ T338] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.505761][ T2248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2248 comm=syz.4.522 [ 238.880349][ T2261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 240.673052][ T2283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2283 comm=syz.0.533 [ 240.858800][ T2286] loop0: detected capacity change from 0 to 4096 [ 240.897422][ T2286] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 240.919838][ T2286] System zones: 0-5 [ 240.937727][ T2286] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 242.546273][ T2301] futex_wake_op: syz.4.535 tries to shift op by 144; fix this program [ 242.566683][ T2301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 244.749453][ T2326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 244.866474][ T30] audit: type=1326 audit(1785248479.618:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.136800][ T30] audit: type=1326 audit(1785248479.618:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.167205][ T30] audit: type=1326 audit(1785248479.637:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.223802][ T30] audit: type=1326 audit(1785248479.637:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.252115][ T30] audit: type=1326 audit(1785248479.637:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.284624][ T30] audit: type=1326 audit(1785248479.637:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.309605][ T30] audit: type=1326 audit(1785248479.637:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.335917][ T30] audit: type=1326 audit(1785248479.637:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.1.543" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8c299e99 code=0x7ffc0000 [ 245.405624][ T30] audit: type=1400 audit(1785248480.133:325): avc: denied { connect } for pid=2338 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.442434][ T30] audit: type=1400 audit(1785248480.161:326): avc: denied { write } for pid=2338 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.654177][ T2344] loop0: detected capacity change from 0 to 16 [ 249.237488][ T2344] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.685590][ T2361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 252.707704][ T2361] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.742318][ T2361] device bridge_slave_1 left promiscuous mode [ 252.748709][ T2361] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.073688][ T2370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 253.470033][ T2390] futex_wake_op: syz.0.558 tries to shift op by 144; fix this program [ 253.784395][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 253.784413][ T30] audit: type=1400 audit(1785248487.975:328): avc: denied { mounton } for pid=2393 comm="syz.1.559" path="/61/bus" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.409128][ T30] audit: type=1400 audit(1785248488.555:329): avc: denied { read write } for pid=2409 comm="syz.0.565" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.488593][ T30] audit: type=1400 audit(1785248488.555:330): avc: denied { open } for pid=2409 comm="syz.0.565" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.621558][ T2414] device bridge1 entered promiscuous mode [ 254.960224][ T2422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 255.532874][ T2436] futex_wake_op: syz.4.571 tries to shift op by 144; fix this program [ 262.123029][ T30] audit: type=1400 audit(1785248495.770:331): avc: denied { write } for pid=2470 comm="syz.0.582" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 272.033016][ T2528] overlayfs: failed to clone upperpath [ 273.055398][ T2530] overlayfs: missing 'lowerdir' [ 273.309855][ T2543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 274.673392][ T2556] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 281.833260][ T30] audit: type=1400 audit(1785248514.215:332): avc: denied { getopt } for pid=2589 comm="syz.3.613" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.662554][ T30] audit: type=1400 audit(1785248515.001:333): avc: denied { create } for pid=2613 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 282.872787][ T2620] loop0: detected capacity change from 0 to 512 [ 282.895957][ T2620] EXT4-fs (loop0): Unrecognized mount option "‰€Y+«t…Ô»7g8æ˜þ Ÿ¼ïX`­\ŠXÒGÏ&¨m ZZ?£§º÷=WåÊ" or missing value [ 283.514697][ T30] audit: type=1400 audit(1785248515.768:334): avc: denied { read } for pid=2625 comm="syz.3.622" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.064036][ T2647] : renamed from bond_slave_0 [ 285.950304][ T30] audit: type=1326 audit(1785248516.667:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.018158][ T30] audit: type=1326 audit(1785248516.676:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.047447][ T30] audit: type=1326 audit(1785248517.705:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.117164][ T2660] overlayfs: unrecognized mount option "obj_type=}#" or missing value [ 286.207301][ T30] audit: type=1326 audit(1785248517.705:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.403457][ T30] audit: type=1326 audit(1785248517.705:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.428469][ T30] audit: type=1326 audit(1785248517.715:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 286.573399][ T30] audit: type=1326 audit(1785248517.715:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2641 comm="syz.2.625" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 288.330434][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 288.330450][ T30] audit: type=1400 audit(1785248520.307:345): avc: denied { create } for pid=2684 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 288.364228][ T2693] loop0: detected capacity change from 0 to 4096 [ 288.643586][ T2693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 288.691178][ T2693] System zones: 0-5 [ 288.810090][ T2693] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,errors=continue,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 289.599469][ T2707] futex_wake_op: syz.4.643 tries to shift op by 144; fix this program [ 290.404032][ T30] audit: type=1400 audit(1785248522.113:346): avc: denied { mounton } for pid=2690 comm="syz.0.639" path="/25/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.707272][ T30] audit: type=1400 audit(1785248522.534:347): avc: denied { remove_name } for pid=2186 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.843206][ T30] audit: type=1400 audit(1785248522.534:348): avc: denied { rmdir } for pid=2186 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.005992][ T30] audit: type=1400 audit(1785248522.553:349): avc: denied { unlink } for pid=2186 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.101751][ T30] audit: type=1400 audit(1785248522.553:350): avc: denied { unlink } for pid=2186 comm="syz-executor" name=66696C6507 dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 300.416744][ T2762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 300.437288][ T2762] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.488564][ T2762] device bridge_slave_1 left promiscuous mode [ 300.494809][ T2762] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.620244][ T2770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 303.345642][ T2780] futex_wake_op: syz.3.661 tries to shift op by 144; fix this program [ 303.574644][ T30] audit: type=1326 audit(1785248534.540:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 303.790737][ T30] audit: type=1326 audit(1785248534.540:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 303.960591][ T30] audit: type=1326 audit(1785248534.550:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 304.006230][ T30] audit: type=1326 audit(1785248534.550:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 304.031763][ T30] audit: type=1326 audit(1785248534.550:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 304.416833][ T30] audit: type=1326 audit(1785248534.559:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 305.121049][ T30] audit: type=1326 audit(1785248534.559:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 305.257323][ T30] audit: type=1326 audit(1785248534.559:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.659" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f07c02e99 code=0x7ffc0000 [ 305.434801][ T2811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 308.055295][ T2809] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.078986][ T2809] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.086948][ T2809] device bridge_slave_0 entered promiscuous mode [ 308.094523][ T2809] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.101581][ T2809] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.197820][ T2833] futex_wake_op: syz.3.676 tries to shift op by 144; fix this program [ 311.056756][ T2809] device bridge_slave_1 entered promiscuous mode [ 311.101505][ T306] device bridge_slave_1 left promiscuous mode [ 311.108293][ T2840] loop0: detected capacity change from 0 to 256 [ 311.119625][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.135801][ T306] device bridge_slave_0 left promiscuous mode [ 311.142210][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.216660][ T306] device veth1_macvtap left promiscuous mode [ 312.222740][ T306] device veth0_vlan left promiscuous mode [ 312.555955][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.564102][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.591605][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.601683][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.613057][ T1967] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.620137][ T1967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.651181][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.674772][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.693477][ T1967] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.700591][ T1967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.742012][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.750154][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.758622][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.780111][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.800469][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.810103][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.818083][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.837747][ T2809] device veth0_vlan entered promiscuous mode [ 312.856515][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.867279][ T2809] device veth1_macvtap entered promiscuous mode [ 312.911469][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.925637][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.608210][ T2915] binder: 2912:2915 ioctl c0306201 0 returned -14 [ 325.486307][ T30] audit: type=1400 audit(1785248549.569:359): avc: denied { read } for pid=2912 comm="syz.0.698" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.578586][ T30] audit: type=1400 audit(1785248549.569:360): avc: denied { open } for pid=2912 comm="syz.0.698" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.604995][ T30] audit: type=1400 audit(1785248549.569:361): avc: denied { ioctl } for pid=2912 comm="syz.0.698" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 326.379394][ T2951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 329.757275][ T30] audit: type=1400 audit(1785248559.021:362): avc: denied { mounton } for pid=2953 comm="syz.3.708" path="/file0" dev="ramfs" ino=29982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 329.822054][ T2958] loop0: detected capacity change from 0 to 512 [ 329.932821][ T30] audit: type=1400 audit(1785248559.171:363): avc: denied { connect } for pid=2960 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.119844][ T1732] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 330.132661][ T1732] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 330.180264][ T30] audit: type=1400 audit(1785248559.171:364): avc: denied { listen } for pid=2960 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.244302][ T1732] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 330.363693][ T2975] fido_id[2975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.458771][ T2978] loop1: detected capacity change from 0 to 128 [ 330.478645][ T2965] 9pnet: Could not find request transport: 7 [ 330.500746][ T2978] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 330.509590][ T2957] udevd[2957]: incorrect ext4 checksum on /dev/loop1 [ 330.963387][ T2978] loop1: detected capacity change from 0 to 40427 [ 330.977345][ T2978] F2FS-fs (loop1): invalid crc value [ 330.995673][ T2978] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 331.900330][ T2978] F2FS-fs (loop1): Start checkpoint disabled! [ 331.940784][ T2978] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 332.260569][ T30] audit: type=1400 audit(1785248561.416:365): avc: denied { create } for pid=2977 comm="syz.1.713" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 332.317161][ T30] audit: type=1400 audit(1785248561.416:366): avc: denied { write open } for pid=2977 comm="syz.1.713" path="/7/bus/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 334.617688][ T30] audit: type=1400 audit(1785248561.585:367): avc: denied { ioctl } for pid=2977 comm="syz.1.713" path="/7/bus/file0" dev="loop1" ino=10 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 334.703965][ T30] audit: type=1400 audit(1785248563.700:368): avc: denied { unmount } for pid=2186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 334.725181][ T413] handle_bad_sector: 1 callbacks suppressed [ 334.725202][ T413] attempt to access beyond end of device [ 334.725202][ T413] loop1: rw=2049, want=40984, limit=40427 [ 334.783490][ T3008] loop0: detected capacity change from 0 to 512 [ 335.119017][ T3008] EXT4-fs (loop0): Unrecognized mount option "‰€Y+«t…Ô»7g8æ˜þ Ÿ¼ïX`­\ŠXÒGÏ&¨m ZZ?£§º÷=WåÊ" or missing value [ 338.222431][ T3032] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 341.854384][ T3031] futex_wake_op: syz.3.727 tries to shift op by 144; fix this program [ 341.972244][ T3041] loop0: detected capacity change from 0 to 256 [ 345.158898][ T30] audit: type=1400 audit(1785248573.479:369): avc: denied { bind } for pid=3046 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.162262][ T3055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 345.767123][ T30] audit: type=1400 audit(1785248574.050:370): avc: denied { execute } for pid=3047 comm="syz.3.732" name="file1" dev="ramfs" ino=30196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 345.800854][ T30] audit: type=1400 audit(1785248574.050:371): avc: denied { execute_no_trans } for pid=3047 comm="syz.3.732" path="/file1" dev="ramfs" ino=30196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 347.016753][ T3069] netlink: 556 bytes leftover after parsing attributes in process `syz.1.735'. [ 348.171613][ T3083] : renamed from bond_slave_0 [ 353.913437][ T3106] overlayfs: failed to clone upperpath [ 353.921033][ T3106] netlink: 'syz.3.747': attribute type 4 has an invalid length. [ 353.968822][ T30] audit: type=1400 audit(1785248582.015:372): avc: denied { bind } for pid=3099 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 354.288786][ T3124] loop0: detected capacity change from 0 to 16 [ 354.297574][ T3125] futex_wake_op: syz.1.749 tries to shift op by 144; fix this program [ 354.491695][ T3124] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xc08d75f7, 0x7bbbea8c expected [ 355.677531][ T3132] loop0: detected capacity change from 0 to 1024 [ 355.741460][ T3132] EXT4-fs (loop0): Unrecognized mount option "dont_measure" or missing value [ 360.905467][ T30] audit: type=1400 audit(1785248588.519:373): avc: denied { bind } for pid=3161 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.307065][ T30] audit: type=1400 audit(1785248588.898:374): avc: denied { bind } for pid=3172 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.405543][ T30] audit: type=1400 audit(1785248588.926:375): avc: denied { accept } for pid=3172 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.860236][ T3183] loop1: detected capacity change from 0 to 1024 [ 361.989688][ T3183] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 362.591148][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.599897][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.648181][ T3189] futex_wake_op: syz.0.767 tries to shift op by 144; fix this program [ 362.656680][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 362.682751][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.709744][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 362.722016][ T3193] loop1: detected capacity change from 0 to 512 [ 362.756185][ T3193] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 362.778940][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.807389][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.829750][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.831739][ T3193] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 362.843541][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.862276][ T3193] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.891961][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.955059][ T30] audit: type=1400 audit(1785248590.407:376): avc: denied { append } for pid=3191 comm="syz.1.769" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 369.483584][ T3239] loop0: detected capacity change from 0 to 2048 [ 369.492803][ T3242] overlayfs: failed to clone upperpath [ 369.499268][ T3242] overlayfs: failed to clone upperpath [ 369.572457][ T3239] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 370.482838][ T3258] loop1: detected capacity change from 0 to 1024 [ 371.462955][ T3260] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 371.479561][ T3260] overlayfs: failed to set xattr on upper [ 371.538481][ T30] audit: type=1400 audit(1785248598.269:377): avc: denied { mounton } for pid=3238 comm="syz.0.778" path="/52/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 371.564095][ T3258] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 371.581061][ T30] audit: type=1400 audit(1785248598.269:378): avc: denied { write } for pid=3238 comm="syz.0.778" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 371.625101][ T30] audit: type=1400 audit(1785248598.269:379): avc: denied { add_name } for pid=3238 comm="syz.0.778" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 371.667161][ T30] audit: type=1400 audit(1785248598.278:380): avc: denied { setattr } for pid=3238 comm="syz.0.778" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 373.307296][ T3267] loop0: detected capacity change from 0 to 512 [ 373.337417][ T3267] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 373.361206][ T3267] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.786: corrupted in-inode xattr [ 373.379622][ T30] audit: type=1400 audit(1785248598.278:381): avc: denied { remove_name } for pid=3238 comm="syz.0.778" name="#3" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 373.399982][ T3267] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.786: couldn't read orphan inode 15 (err -117) [ 373.413821][ T3267] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 373.447432][ T30] audit: type=1400 audit(1785248598.278:382): avc: denied { rename } for pid=3238 comm="syz.0.778" name="#3" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 373.528280][ T3271] usb usb8: usbfs: process 3271 (syz.1.785) did not claim interface 0 before use [ 374.013226][ T30] audit: type=1400 audit(1785248598.278:383): avc: denied { unlink } for pid=3238 comm="syz.0.778" name="#3" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.859076][ T30] audit: type=1400 audit(1785248598.278:384): avc: denied { unlink } for pid=3238 comm="syz.0.778" name="#4" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 374.903847][ T30] audit: type=1400 audit(1785248599.497:385): avc: denied { write } for pid=3240 comm="syz.1.781" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 375.027167][ T30] audit: type=1400 audit(1785248599.497:386): avc: denied { open } for pid=3240 comm="syz.1.781" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 378.571277][ T3294] loop1: detected capacity change from 0 to 128 [ 378.604319][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 378.604334][ T30] audit: type=1326 audit(1785248604.880:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.2.793" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b85479e99 code=0x7ffc0000 [ 378.636097][ T3294] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.654277][ T3294] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 378.781473][ T30] audit: type=1400 audit(1785248604.944:449): avc: denied { mount } for pid=3293 comm="syz.1.791" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 378.860634][ T30] audit: type=1400 audit(1785248605.111:450): avc: denied { unmount } for pid=2809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 378.881877][ T413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 379.428552][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.436136][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.443758][ T3310] device bridge_slave_0 entered promiscuous mode [ 379.453930][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.461323][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.469151][ T3310] device bridge_slave_1 entered promiscuous mode [ 379.625951][ T30] audit: type=1400 audit(1785248605.821:451): avc: denied { ioctl } for pid=3315 comm="syz.0.801" path="socket:[31762]" dev="sockfs" ino=31762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 379.767652][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.774782][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.782139][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.789181][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.428253][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.436207][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.481849][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.489583][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.688709][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.850750][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.861976][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.869113][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.896668][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.396651][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.406466][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.413541][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.426020][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.434618][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.442276][ T3319] device bridge_slave_0 entered promiscuous mode [ 381.452283][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.459464][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.467799][ T3319] device bridge_slave_1 entered promiscuous mode [ 381.537575][ T2972] device bridge_slave_1 left promiscuous mode [ 381.544212][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.910796][ T30] audit: type=1326 audit(1785248607.889:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 381.944276][ T30] audit: type=1326 audit(1785248607.889:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 381.972925][ T30] audit: type=1326 audit(1785248607.889:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 382.093495][ T30] audit: type=1326 audit(1785248607.889:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 382.187770][ T2972] device bridge_slave_0 left promiscuous mode [ 382.195151][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.209155][ T30] audit: type=1326 audit(1785248607.889:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 382.237163][ T2972] device veth1_macvtap left promiscuous mode [ 382.247612][ T30] audit: type=1326 audit(1785248607.899:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3341 comm="syz.3.806" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 382.250134][ T2972] device veth0_vlan left promiscuous mode [ 382.431338][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.457427][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.470384][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.509069][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.552059][ T3310] device veth0_vlan entered promiscuous mode [ 382.623517][ T3310] device veth1_macvtap entered promiscuous mode [ 383.448745][ T3357] : renamed from bond_slave_0 [ 383.575851][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.587902][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.605469][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.642830][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.659908][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.679530][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.694422][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.702340][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.710830][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.719594][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.728280][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.737049][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.744643][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.341165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.349158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.362184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.371128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.381980][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.389095][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.397302][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.420690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.429226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.437744][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.445204][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.453774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.463628][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.482444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.490729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.507115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.516385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.576178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.585039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.594033][ T3319] device veth0_vlan entered promiscuous mode [ 384.604002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.619456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.644428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.659499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.735790][ T3319] device veth1_macvtap entered promiscuous mode [ 384.770644][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 384.770707][ T30] audit: type=1326 audit(1785248610.576:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 384.858934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.888045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.029586][ T30] audit: type=1326 audit(1785248610.576:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 385.055665][ T30] audit: type=1326 audit(1785248610.576:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 385.082841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.093252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.126480][ T30] audit: type=1326 audit(1785248610.576:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 385.197946][ T30] audit: type=1326 audit(1785248610.576:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70acdce99 code=0x7ffc0000 [ 385.223643][ T2972] device bridge_slave_0 left promiscuous mode [ 385.279783][ T30] audit: type=1400 audit(1785248610.853:497): avc: denied { audit_read } for pid=3368 comm="syz.0.812" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.318239][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.326346][ T30] audit: type=1400 audit(1785248610.871:498): avc: denied { read } for pid=3368 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.369901][ T3378] loop1: detected capacity change from 0 to 8192 [ 385.371424][ T2972] device veth1_macvtap left promiscuous mode [ 385.403247][ T2972] device veth0_vlan left promiscuous mode [ 385.684248][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 385.822174][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.829614][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.837362][ T3383] device bridge_slave_0 entered promiscuous mode [ 385.855694][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.862844][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.870822][ T3383] device bridge_slave_1 entered promiscuous mode [ 385.944256][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 385.983273][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.990952][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.999037][ T3387] device bridge_slave_0 entered promiscuous mode [ 386.011955][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.019064][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.026671][ T3387] device bridge_slave_1 entered promiscuous mode [ 386.036691][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.044044][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.051493][ T3388] device bridge_slave_0 entered promiscuous mode [ 386.081733][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.089020][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.096886][ T3388] device bridge_slave_1 entered promiscuous mode [ 386.113192][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.120340][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.127681][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.134772][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.182620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.190281][ T3401] loop4: detected capacity change from 0 to 128 [ 386.190752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.218859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.245722][ T3401] attempt to access beyond end of device [ 386.245722][ T3401] loop4: rw=2049, want=1041, limit=128 [ 386.267616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.310338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.314871][ T3400] attempt to access beyond end of device [ 386.314871][ T3400] loop4: rw=524288, want=369, limit=128 [ 386.319097][ T6] usb 2-1: string descriptor 0 read error: -22 [ 386.331172][ T3401] attempt to access beyond end of device [ 386.331172][ T3401] loop4: rw=0, want=153, limit=128 [ 386.370675][ T3401] attempt to access beyond end of device [ 386.370675][ T3401] loop4: rw=0, want=153, limit=128 [ 386.370702][ T6] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 386.383623][ T3401] attempt to access beyond end of device [ 386.383623][ T3401] loop4: rw=0, want=153, limit=128 [ 386.402174][ T3401] attempt to access beyond end of device [ 386.402174][ T3401] loop4: rw=0, want=153, limit=128 [ 386.414146][ T3401] attempt to access beyond end of device [ 386.414146][ T3401] loop4: rw=0, want=153, limit=128 [ 386.427184][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.443447][ T3412] attempt to access beyond end of device [ 386.443447][ T3412] loop4: rw=0, want=151, limit=128 [ 386.460776][ T3401] attempt to access beyond end of device [ 386.460776][ T3401] loop4: rw=0, want=146, limit=128 [ 386.477045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.487858][ T3401] Buffer I/O error on dev loop4, logical block 145, async page read [ 386.495960][ T3401] attempt to access beyond end of device [ 386.495960][ T3401] loop4: rw=0, want=147, limit=128 [ 386.508395][ T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 386.525923][ T3401] Buffer I/O error on dev loop4, logical block 146, async page read [ 386.540317][ T3401] Buffer I/O error on dev loop4, logical block 147, async page read [ 386.551046][ T3401] Buffer I/O error on dev loop4, logical block 148, async page read [ 386.558554][ T3383] device veth0_vlan entered promiscuous mode [ 386.581135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.588998][ T3401] Buffer I/O error on dev loop4, logical block 149, async page read [ 386.602680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.611074][ T3401] Buffer I/O error on dev loop4, logical block 150, async page read [ 386.619910][ T3422] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 386.620770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.641374][ T3401] Buffer I/O error on dev loop4, logical block 151, async page read [ 386.649879][ T3401] Buffer I/O error on dev loop4, logical block 152, async page read [ 386.658036][ T3412] Buffer I/O error on dev loop4, logical block 145, async page read [ 386.666221][ T3412] Buffer I/O error on dev loop4, logical block 146, async page read [ 386.736313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.790301][ T3383] device veth1_macvtap entered promiscuous mode [ 386.800912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.862459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.878311][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.896883][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.904034][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.915057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.925876][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.933021][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.941900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.972460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.981203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.989664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.998682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.014848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.026427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.040005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.054131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.066663][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.079560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.088537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.114229][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.121348][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.149127][ T3387] device veth0_vlan entered promiscuous mode [ 387.190256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.198487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.212149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.234265][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.241366][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.269712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.287648][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.303463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.318167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.327978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.337424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.346222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.354052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.412040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.429677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.441241][ T1125] usb 2-1: USB disconnect, device number 2 [ 387.450605][ T3387] device veth1_macvtap entered promiscuous mode [ 387.537755][ T2972] device bridge_slave_0 left promiscuous mode [ 387.544693][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.557806][ T2972] device bridge_slave_1 left promiscuous mode [ 387.951788][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.972217][ T2972] device bridge_slave_0 left promiscuous mode [ 387.978996][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.991905][ T2972] device bridge_slave_1 left promiscuous mode [ 387.998562][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.008674][ T2972] device bridge_slave_0 left promiscuous mode [ 388.016274][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.232576][ T3467] loop0: detected capacity change from 0 to 128 [ 388.742986][ T2972] device veth0_vlan left promiscuous mode [ 388.749060][ T2972] device veth1_macvtap left promiscuous mode [ 388.755354][ T2972] device veth1_macvtap left promiscuous mode [ 388.762004][ T2972] device veth0_vlan left promiscuous mode [ 388.782549][ T3467] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.800782][ T3467] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.327028][ T413] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.393048][ T3474] loop3: detected capacity change from 0 to 512 [ 389.426916][ T3474] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 389.443390][ T3474] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.825: corrupted in-inode xattr [ 389.455532][ T3474] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.825: couldn't read orphan inode 15 (err -117) [ 389.476468][ T3474] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000000080000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 389.653392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.976220][ T3487] futex_wake_op: syz.1.826 tries to shift op by 144; fix this program [ 390.033074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.182222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.192939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.202715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.213640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.223859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.572171][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.583198][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.600017][ T3388] device veth0_vlan entered promiscuous mode [ 390.611049][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.624186][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.647574][ T3495] xt_hashlimit: size too large, truncated to 1048576 [ 390.713707][ T3496] loop3: detected capacity change from 0 to 2048 [ 390.754146][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.778301][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.787398][ T3496] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 391.023795][ T3388] device veth1_macvtap entered promiscuous mode [ 391.076390][ T3496] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.349588][ T30] audit: type=1400 audit(1785248616.641:499): avc: denied { read } for pid=3491 comm="syz.3.829" path="/2/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.988354][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.003151][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.106083][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.133329][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.184257][ T3513] capability: warning: `syz.3.832' uses deprecated v2 capabilities in a way that may be insecure [ 392.271652][ T3517] loop2: detected capacity change from 0 to 512 [ 392.281038][ T30] audit: type=1400 audit(1785248617.491:500): avc: denied { accept } for pid=3508 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 392.313728][ T3517] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 392.323414][ T3517] SELinux: duplicate or incompatible mount options [ 393.246648][ T3524] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.130975][ T3540] loop1: detected capacity change from 0 to 128 [ 395.137624][ T3543] futex_wake_op: syz.2.840 tries to shift op by 144; fix this program [ 395.354357][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.538004][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.668528][ T3530] device bridge_slave_0 entered promiscuous mode [ 395.712999][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.728365][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.743694][ T3532] device bridge_slave_0 entered promiscuous mode [ 395.753385][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.760846][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.769232][ T3530] device bridge_slave_1 entered promiscuous mode [ 395.780729][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.787903][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.795496][ T3532] device bridge_slave_1 entered promiscuous mode [ 395.887614][ T3556] loop2: detected capacity change from 0 to 16 [ 395.922391][ T3556] erofs: (device loop2): mounted with root inode @ nid 36. [ 396.259162][ T30] audit: type=1400 audit(1785248621.184:501): avc: denied { append } for pid=3537 comm="syz.0.841" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.286772][ T3538] loop0: detected capacity change from 0 to 1024 [ 396.441551][ T3538] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 396.451907][ T3538] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 396.462656][ T3538] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.841: Failed to acquire dquot type 0 [ 396.474703][ T3538] EXT4-fs (loop0): 1 truncate cleaned up [ 396.480540][ T3538] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback. [ 396.523804][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.532105][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.557046][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.565921][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.574395][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.581512][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.590544][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.599524][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.608876][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.616401][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.650786][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.658654][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.666915][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.723609][ T2972] device bridge_slave_1 left promiscuous mode [ 396.730120][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.749221][ T2972] device bridge_slave_0 left promiscuous mode [ 396.764652][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.775091][ T2972] device bridge_slave_1 left promiscuous mode [ 396.781822][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.789768][ T2972] device bridge_slave_0 left promiscuous mode [ 396.796051][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.805528][ T2972] device veth1_macvtap left promiscuous mode [ 396.811744][ T2972] device veth0_vlan left promiscuous mode [ 396.817793][ T2972] device veth1_macvtap left promiscuous mode [ 396.824471][ T2972] device veth0_vlan left promiscuous mode [ 397.102215][ T3530] device veth0_vlan entered promiscuous mode [ 397.125702][ T3530] device veth1_macvtap entered promiscuous mode [ 397.268654][ T3532] device veth0_vlan entered promiscuous mode [ 397.293096][ T3532] device veth1_macvtap entered promiscuous mode [ 397.498712][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.514151][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.534877][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.543634][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.552239][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.560313][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.568233][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.576613][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.585292][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.594273][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.603004][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.611330][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.618927][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.626822][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.635897][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.643644][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.651302][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.659948][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.668618][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.675752][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.735605][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.744389][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.753034][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.760231][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.767678][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.776015][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.784740][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.814369][ T3576] loop2: detected capacity change from 0 to 128 [ 397.830096][ T3418] udevd[3418]: incorrect ext4 checksum on /dev/loop2 [ 397.838635][ T3576] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 398.009407][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.016838][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.024440][ T3577] device bridge_slave_0 entered promiscuous mode [ 398.038802][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.046310][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.125369][ T30] audit: type=1400 audit(1785248622.891:502): avc: denied { create } for pid=3581 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 398.150566][ T3577] device bridge_slave_1 entered promiscuous mode [ 398.259980][ T30] audit: type=1400 audit(1785248622.901:503): avc: denied { setopt } for pid=3581 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 398.374609][ T3576] loop2: detected capacity change from 0 to 40427 [ 398.396784][ T3576] F2FS-fs (loop2): invalid crc value [ 398.416396][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.425127][ T3576] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 398.437120][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.455547][ T3587] device bridge_slave_0 entered promiscuous mode [ 398.466907][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.480994][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.489062][ T3576] F2FS-fs (loop2): Start checkpoint disabled! [ 398.496332][ T3587] device bridge_slave_1 entered promiscuous mode [ 398.504051][ T3576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 398.740556][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.747757][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.755698][ T3578] device bridge_slave_0 entered promiscuous mode [ 398.763320][ T3590] tipc: Started in network mode [ 398.768275][ T3590] tipc: Node identity 7f000001, cluster identity 4711 [ 398.775519][ T3590] tipc: Enabled bearer , priority 10 [ 398.795826][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.810719][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.823029][ T3578] device bridge_slave_1 entered promiscuous mode [ 398.968191][ T2970] handle_bad_sector: 18238 callbacks suppressed [ 398.968211][ T2970] attempt to access beyond end of device [ 398.968211][ T2970] loop2: rw=2049, want=40984, limit=40427 [ 398.988346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.995908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.003697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.012379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.055935][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.063059][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.071298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.086580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.096076][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.103156][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.173116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.225878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.241380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.249641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.257932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.275258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.283905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.351706][ T3577] device veth0_vlan entered promiscuous mode [ 399.365690][ T3577] device veth1_macvtap entered promiscuous mode [ 399.390473][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.399012][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.407069][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.414679][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.422330][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.431223][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.492002][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.536022][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.546683][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.556364][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.563455][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.571408][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.581098][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.590708][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.597964][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.606626][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.616349][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.735697][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.870891][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.993112][ T39] tipc: Node number set to 2130706433 [ 400.430263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.440488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.449349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.457280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.465664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.473368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.481016][ T3587] device veth0_vlan entered promiscuous mode [ 400.520367][ T3587] device veth1_macvtap entered promiscuous mode [ 400.529195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.537903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.546428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.567860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.577278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.587105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.597392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.636365][ T3610] : renamed from bond_slave_0 [ 400.657374][ T30] audit: type=1326 audit(1785248625.246:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.4.838" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3e24e99 code=0x7ffc0000 [ 400.706325][ T30] audit: type=1326 audit(1785248625.246:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.4.838" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3e24e99 code=0x7ffc0000 [ 400.910269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.917932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.926401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.934873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.943216][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.950319][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.957821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.966400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.974837][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.981926][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.997203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.005068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 401.013308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.021356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 401.029752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.050941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.059632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.072481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.080571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.088945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.096522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.105370][ T3578] device veth0_vlan entered promiscuous mode [ 401.123566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.131851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.147239][ T3578] device veth1_macvtap entered promiscuous mode [ 401.157133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.164955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.173296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.183329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.191944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.201566][ T2972] device bridge_slave_1 left promiscuous mode [ 401.207892][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.215610][ T2972] device bridge_slave_0 left promiscuous mode [ 401.222023][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.230356][ T2972] device bridge_slave_1 left promiscuous mode [ 401.236547][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.244235][ T2972] device bridge_slave_0 left promiscuous mode [ 401.250525][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.258468][ T2972] device bridge_slave_1 left promiscuous mode [ 401.264899][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.272808][ T2972] device bridge_slave_0 left promiscuous mode [ 401.279009][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.287734][ T2972] device veth1_macvtap left promiscuous mode [ 401.293854][ T2972] device veth0_vlan left promiscuous mode [ 401.300178][ T2972] device veth1_macvtap left promiscuous mode [ 401.306371][ T2972] device veth0_vlan left promiscuous mode [ 401.312668][ T2972] device veth1_macvtap left promiscuous mode [ 401.319156][ T2972] device veth0_vlan left promiscuous mode [ 405.639592][ T3623] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 405.812934][ T3635] netlink: 'syz.3.853': attribute type 3 has an invalid length. [ 406.462176][ T3645] futex_wake_op: syz.2.855 tries to shift op by 144; fix this program [ 407.793632][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 407.817538][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 410.152626][ T3651] loop2: detected capacity change from 0 to 40427 [ 410.201575][ T3651] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 410.220480][ T3651] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 411.484318][ T3678] : renamed from bond_slave_0 [ 411.491807][ T30] audit: type=1326 audit(1785248635.244:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.865" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ab043e99 code=0x7ffc0000 [ 411.554050][ T30] audit: type=1326 audit(1785248635.244:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.865" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ab043e99 code=0x7ffc0000 [ 411.583774][ T3651] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 411.745839][ T3691] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 411.757312][ T3691] ±ÿ: renamed from team_slave_1 [ 412.053069][ T3688] loop0: detected capacity change from 0 to 2048 [ 412.079264][ T3688] EXT4-fs (loop0): Ignoring removed nobh option [ 412.105038][ T3688] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 412.128347][ T3688] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.644864][ T3705] futex_wake_op: syz.2.872 tries to shift op by 144; fix this program [ 415.850576][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 416.040510][ T3722] loop3: detected capacity change from 0 to 16 [ 416.047577][ T3722] erofs: (device loop3): mounted with root inode @ nid 36. [ 416.576759][ T30] audit: type=1400 audit(1785248639.915:508): avc: denied { ioctl } for pid=3721 comm="syz.3.878" path="socket:[35933]" dev="sockfs" ino=35933 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.066676][ T3725] loop0: detected capacity change from 0 to 4096 [ 417.077625][ T3725] EXT4-fs (loop0): Test dummy encryption mode enabled [ 417.085122][ T3725] EXT4-fs (loop0): Ignoring removed oldalloc option [ 417.099385][ T3725] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 417.109135][ T3725] System zones: 0-5 [ 417.113399][ T30] audit: type=1400 audit(1785248640.432:509): avc: denied { mounton } for pid=3721 comm="syz.3.878" path="/6/file2/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 417.113743][ T3722] incfs: Error accessing: ./file0. [ 417.142861][ T3722] incfs: mount failed -20 [ 417.152570][ T30] audit: type=1400 audit(1785248640.469:510): avc: denied { read } for pid=3721 comm="syz.3.878" name="file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 417.294304][ T3725] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 417.335030][ T30] audit: type=1400 audit(1785248640.469:511): avc: denied { open } for pid=3721 comm="syz.3.878" path="/6/file2/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 425.951826][ T3767] futex_wake_op: syz.3.886 tries to shift op by 144; fix this program [ 426.106607][ T30] audit: type=1400 audit(1785248648.593:512): avc: denied { bind } for pid=3759 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.356240][ T30] audit: type=1400 audit(1785248648.741:513): avc: denied { map } for pid=3752 comm="syz.3.886" path="socket:[34996]" dev="sockfs" ino=34996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.384966][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 426.394173][ T3774] loop0: detected capacity change from 0 to 4096 [ 426.404552][ T30] audit: type=1400 audit(1785248648.741:514): avc: denied { read accept } for pid=3752 comm="syz.3.886" path="socket:[34996]" dev="sockfs" ino=34996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.404648][ T3774] EXT4-fs (loop0): Test dummy encryption mode enabled [ 427.212127][ T3780] futex_wake_op: syz.2.892 tries to shift op by 144; fix this program [ 427.257522][ T30] audit: type=1400 audit(1785248648.926:515): avc: denied { execmem } for pid=3752 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 427.345154][ T3774] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 427.420953][ T3774] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 427.431291][ T30] audit: type=1400 audit(1785248648.926:516): avc: denied { mmap_zero } for pid=3752 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 427.728144][ T3774] System zones: 0-5 [ 427.740206][ T30] audit: type=1400 audit(1785248648.926:517): avc: denied { read write } for pid=3387 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.765678][ T30] audit: type=1400 audit(1785248648.926:518): avc: denied { open } for pid=3387 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.797651][ T3774] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 427.805797][ T3799] loop2: detected capacity change from 0 to 128 [ 427.847237][ T30] audit: type=1400 audit(1785248648.926:519): avc: denied { ioctl } for pid=3387 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.880469][ T3793] udevd[3793]: incorrect ext4 checksum on /dev/loop2 [ 427.896212][ T3799] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 427.934105][ T30] audit: type=1400 audit(1785248648.963:520): avc: denied { read write } for pid=3769 comm="syz.0.890" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 428.019241][ T30] audit: type=1400 audit(1785248648.963:521): avc: denied { open } for pid=3769 comm="syz.0.890" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 428.068142][ T3801] loop4: detected capacity change from 0 to 8192 [ 429.304914][ T3799] loop2: detected capacity change from 0 to 256 [ 429.376080][ T3801] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.391729][ T3799] FAT-fs (loop2): Directory bread(block 64) failed [ 430.027008][ T3799] FAT-fs (loop2): Directory bread(block 65) failed [ 430.250061][ T3801] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 430.712814][ T3799] FAT-fs (loop2): Directory bread(block 66) failed [ 430.741222][ T3799] FAT-fs (loop2): Directory bread(block 67) failed [ 430.749827][ T3801] FAT-fs (loop4): Filesystem has been set read-only [ 430.773187][ T3799] FAT-fs (loop2): Directory bread(block 68) failed [ 430.802977][ T3799] FAT-fs (loop2): Directory bread(block 69) failed [ 430.809653][ T3799] FAT-fs (loop2): Directory bread(block 70) failed [ 430.860554][ T3799] FAT-fs (loop2): Directory bread(block 71) failed [ 430.962027][ T3799] FAT-fs (loop2): Directory bread(block 72) failed [ 430.990560][ T3799] FAT-fs (loop2): Directory bread(block 73) failed [ 431.077814][ T3831] futex_wake_op: syz.1.904 tries to shift op by 144; fix this program [ 431.391918][ T3833] usb usb8: usbfs: process 3833 (syz.4.903) did not claim interface 0 before use [ 434.454841][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 434.454859][ T30] audit: type=1400 audit(1785248653.339:553): avc: denied { create } for pid=3821 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.497664][ T30] audit: type=1400 audit(1785248653.339:554): avc: denied { setopt } for pid=3821 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.517297][ T30] audit: type=1400 audit(1785248653.486:555): avc: denied { create } for pid=3826 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 434.538191][ T30] audit: type=1400 audit(1785248653.551:556): avc: denied { write } for pid=3826 comm="syz.4.903" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 434.581847][ T30] audit: type=1400 audit(1785248653.662:557): avc: denied { create } for pid=3826 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.864422][ T30] audit: type=1400 audit(1785248653.791:558): avc: denied { read } for pid=3826 comm="syz.4.903" dev="nsfs" ino=4026532288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 434.885676][ T30] audit: type=1400 audit(1785248653.800:559): avc: denied { open } for pid=3826 comm="syz.4.903" path="net:[4026532288]" dev="nsfs" ino=4026532288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 434.917143][ T30] audit: type=1400 audit(1785248653.800:560): avc: denied { create } for pid=3826 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 434.976535][ T30] audit: type=1400 audit(1785248656.505:561): avc: denied { name_bind } for pid=3834 comm="syz.4.905" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 435.001370][ T30] audit: type=1400 audit(1785248656.542:562): avc: denied { node_bind } for pid=3834 comm="syz.4.905" saddr=172.20.20.45 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 435.267617][ T3852] lo: Caught tx_queue_len zero misconfig [ 435.273655][ T3852] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 438.243231][ T3853] loop0: detected capacity change from 0 to 1024 [ 438.905006][ T3853] EXT4-fs (loop0): Ignoring removed orlov option [ 439.068016][ T3853] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 439.816793][ T3870] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.186463][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 440.186483][ T30] audit: type=1400 audit(1785248661.666:570): avc: denied { create } for pid=3856 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.275817][ T30] audit: type=1400 audit(1785248661.666:571): avc: denied { shutdown } for pid=3856 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.332506][ T30] audit: type=1400 audit(1785248661.666:572): avc: denied { map } for pid=3856 comm="syz.3.913" path="socket:[35086]" dev="sockfs" ino=35086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.462475][ T3878] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 440.481995][ T3878] ±ÿ: renamed from team_slave_1 [ 440.658540][ T30] audit: type=1400 audit(1785248661.666:573): avc: denied { read accept } for pid=3856 comm="syz.3.913" path="socket:[35086]" dev="sockfs" ino=35086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.720988][ T30] audit: type=1400 audit(1785248661.786:574): avc: denied { setopt } for pid=3855 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 440.786386][ T30] audit: type=1400 audit(1785248661.943:575): avc: denied { connect } for pid=3874 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.111510][ T3889] usb usb8: usbfs: process 3889 (syz.0.916) did not claim interface 0 before use [ 443.722465][ T30] audit: type=1400 audit(1785248661.952:576): avc: denied { write } for pid=3874 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.753593][ T30] audit: type=1400 audit(1785248662.201:577): avc: denied { read } for pid=3880 comm="syz.4.917" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.925013][ T30] audit: type=1400 audit(1785248662.201:578): avc: denied { open } for pid=3880 comm="syz.4.917" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.951575][ T30] audit: type=1400 audit(1785248662.211:579): avc: denied { ioctl } for pid=3880 comm="syz.4.917" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 447.155193][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 447.155210][ T30] audit: type=1400 audit(1785248668.156:583): avc: denied { ioctl } for pid=3919 comm="syz.3.928" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36419 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 447.382721][ T3926] futex_wake_op: syz.0.927 tries to shift op by 144; fix this program [ 447.618659][ T30] audit: type=1400 audit(1785248668.202:584): avc: denied { mount } for pid=3913 comm="syz.1.926" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 447.640608][ T30] audit: type=1400 audit(1785248668.202:585): avc: denied { write } for pid=3913 comm="syz.1.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 447.684092][ T3933] loop2: detected capacity change from 0 to 256 [ 447.700805][ T30] audit: type=1400 audit(1785248668.673:586): avc: denied { mount } for pid=3919 comm="syz.3.928" name="/" dev="ramfs" ino=36443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 447.723262][ T30] audit: type=1400 audit(1785248668.673:587): avc: denied { execute } for pid=3919 comm="syz.3.928" name="file0" dev="ramfs" ino=36444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 447.745837][ T30] audit: type=1400 audit(1785248668.673:588): avc: denied { bind } for pid=3919 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.833865][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.4.924 [ 448.114625][ T30] audit: type=1400 audit(1785248668.747:589): avc: denied { mounton } for pid=3931 comm="syz.2.930" path="/syzcgroup/unified/file0" dev="cgroup2" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 448.182265][ T30] audit: type=1400 audit(1785248668.793:590): avc: denied { mount } for pid=3932 comm="syz.4.924" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 448.551982][ T30] audit: type=1400 audit(1785248669.448:591): avc: denied { read write } for pid=3943 comm="syz.0.941" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.661143][ T3948] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 448.673160][ T3948] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 448.681606][ T3948] CPU: 1 PID: 3948 Comm: syz.0.941 Not tainted syzkaller #0 [ 448.688928][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.695525][ T30] audit: type=1400 audit(1785248669.550:592): avc: denied { open } for pid=3943 comm="syz.0.941" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.699020][ T3948] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 448.727741][ T3948] Code: 00 00 ff 24 c5 40 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 448.747504][ T3948] RSP: 0018:ffffc900011d7aa8 EFLAGS: 00010246 [ 448.753677][ T3948] RAX: 0000000000000000 RBX: ffff888112f9c010 RCX: 0000000000080000 [ 448.761697][ T3948] RDX: ffffc90002101000 RSI: 000000000000261c RDI: 000000000000261d [ 448.769729][ T3948] RBP: ffffc900011d7ad0 R08: ffff888127b90000 R09: 0000000000000004 [ 448.777750][ T3948] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 448.785797][ T3948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 448.793815][ T3948] FS: 00007fd9a9a9d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 448.802794][ T3948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.809417][ T3948] CR2: 00007fd9a9a9bfd0 CR3: 0000000120f9b000 CR4: 00000000003526a0 [ 448.817436][ T3948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.825447][ T3948] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.833489][ T3948] Call Trace: [ 448.836871][ T3948] [ 448.839827][ T3948] ? dummy_pullup+0x130/0x130 [ 448.844591][ T3948] udc_bind_to_driver+0x2af/0x770 [ 448.849648][ T3948] usb_gadget_probe_driver+0x1fc/0x380 [ 448.855176][ T3948] raw_ioctl+0x114d/0x3040 [ 448.859682][ T3948] ? ioctl_has_perm+0x3ab/0x4f0 [ 448.864648][ T3948] ? audio_source_pcm_show+0xe0/0xe0 [ 448.870020][ T3948] ? has_cap_mac_admin+0x370/0x370 [ 448.875177][ T3948] ? __kasan_check_write+0x14/0x20 [ 448.880406][ T3948] ? __ia32_sys_rt_sigreturn+0x636/0x730 [ 448.886123][ T3948] ? selinux_file_ioctl+0x3ad/0x4c0 [ 448.889166][ T3950] loop3: detected capacity change from 0 to 8192 [ 448.891427][ T3948] ? load_gs_index+0xc0/0xc0 [ 448.902386][ T3948] ? selinux_file_alloc_security+0x120/0x120 [ 448.908419][ T3948] ? __fget_files+0x2e1/0x340 [ 448.913162][ T3948] ? security_file_ioctl+0x84/0xa0 [ 448.918366][ T3948] ? audio_source_pcm_show+0xe0/0xe0 [ 448.923680][ T3948] __se_sys_ioctl+0x121/0x1a0 [ 448.928473][ T3948] __x64_sys_ioctl+0x7b/0x90 [ 448.933100][ T3948] x64_sys_call+0x2f/0x9a0 [ 448.937613][ T3948] do_syscall_64+0x4c/0xa0 [ 448.942151][ T3948] ? clear_bhb_loop+0x50/0xa0 [ 448.946950][ T3948] ? clear_bhb_loop+0x50/0xa0 [ 448.951665][ T3948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.957598][ T3948] RIP: 0033:0x7fd9ab043b2b [ 448.962398][ T3948] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 448.982051][ T3948] RSP: 002b:00007fd9a9a9af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.990533][ T3948] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd9ab043b2b [ 448.998625][ T3948] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 449.006637][ T3948] RBP: 00007fd9a9a9bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 449.014647][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.022655][ T3948] R13: 0000200000000280 R14: 0000000000000003 R15: 0000000000000000 [ 449.030763][ T3948] [ 449.033823][ T3948] Modules linked in: [ 449.041823][ T3948] ---[ end trace b453447fde9c65b3 ]--- [ 449.047423][ T3948] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 449.053145][ T3948] Code: 00 00 ff 24 c5 40 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 449.119004][ T3948] RSP: 0018:ffffc900011d7aa8 EFLAGS: 00010246 [ 449.125150][ T3948] RAX: 0000000000000000 RBX: ffff888112f9c010 RCX: 0000000000080000 [ 449.133336][ T3948] RDX: ffffc90002101000 RSI: 000000000000261c RDI: 000000000000261d [ 449.141889][ T3948] RBP: ffffc900011d7ad0 R08: ffff888127b90000 R09: 0000000000000004 [ 449.150247][ T3948] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 449.158618][ T3948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 449.172807][ T3950] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.188563][ T3948] FS: 00007fd9a9a9d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 449.197614][ T3948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.204287][ T3948] CR2: 0000001b3481cff8 CR3: 0000000120f9b000 CR4: 00000000003526a0 [ 449.212334][ T3948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.227123][ T3948] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.230197][ T3950] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 449.252221][ T3948] Kernel panic - not syncing: Fatal exception [ 449.258660][ T3948] Kernel Offset: disabled [ 449.263005][ T3948] Rebooting in 86400 seconds..