last executing test programs: 13m18.480239941s ago: executing program 4 (id=110): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 13m17.010298858s ago: executing program 4 (id=120): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffef, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0xfffe) 13m16.745425005s ago: executing program 4 (id=121): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f0000000f00)=ANY=[@ANYBLOB="6e6f74732c757365467265ac720069643d", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") chdir(&(0x7f0000000140)='./file0\x00') r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffef, @rand_addr=0x64010101}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0xfffe) syz_pidfd_open(0x0, 0x0) ftruncate(0xffffffffffffffff, 0xfff000) 13m15.290447912s ago: executing program 4 (id=130): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e5, &(0x7f0000000bc0)="$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") brk(0x3) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f0000000280)={[{@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './bus'}}, {@xattr}]}) dup2(r4, r4) inotify_init() mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r5, 0x0, 0x0, 0x8800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) 13m13.869452928s ago: executing program 4 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='0000:00:00.0\x00', 0xd) 13m13.689764903s ago: executing program 4 (id=137): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_pgetevents(0x0, 0x20, 0x0, 0x0, 0x0, 0x0) inotify_init() syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000800)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@nfs}, {@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@numtail}]}, 0x7f, 0x2b5, &(0x7f00000008c0)="$eJzs3cuKI1UYAOC/0pXutArJwpUIFujCVZiZJ+ggLQxmpdRCNzo4PSBJGOhAwAtmZuVecOU7uPMBfAA3voELl4o7ZyGWJFWVW6dnOpLukeH7NvWnzvnrXDh9IZA/n7w+Gtx/OH7w+Ktfo9VKonESJ/EkiU40ovYoAIAXyZOiiD+L0rP6Hq69ShvXOS8A4Ppc+e//wY1NCQC4Zh98+NF7vX7/9P0sa0WMvpnkSZTXsr33ID6LYZzFrWjH3xHFQhm/crd/GmmW1W8GTI4jjxh9/HP1uvd7xDz/drSjs5lfv6OQzcVbo+kkn408uzbjpSSiVyRllzvRjlcjimZUDykv797tn97JqvyjWORHfhhvv/l9Nf9/zqIb7fjl03gYw7g/f8Qy/+vbWfZO8d1fX5YryCOS6SQ/mvdbKvwHBAAAAAAAAAAAAAAAAAAAAADA3nSzhc5q/Z26GmC3u9me5hF/jOr8ZX2gk5jXB6oq/ExX6uvcyrKsLuMzyZtR1vdJ47U00ue1bgAAAAAAAAAAAAAAAAAAAPg/GX/+xeDecHh2vhb8VMyC46f22QzSlTv1x/qfnbU9GPwQsXvWVYI4qKY2TC4MkdRNOzzwx0uajnaZ2PG2QaNx2R6mwygn/+3um/DGrgu8etBZTrU+XYN7SSx2/lG1u+tZre2HZOXU1cfwfJzscCCLLVt3cGnW4Z424fDl/5p+HNuaZituLjZzPau1sZnNPf+kbEj2+4sHAAAAAAAAAAAAAAAAAAC4YPmh3/jtQuPj5zIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhxy+//XwTR2byzGUyr5PmdxtM7H52PtwzbueFlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IL7NwAA//+tq0/O") socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:Dd', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x200048f4, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x5}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 13m13.521925878s ago: executing program 32 (id=137): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_pgetevents(0x0, 0x20, 0x0, 0x0, 0x0, 0x0) inotify_init() syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000800)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@nfs}, {@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@numtail}]}, 0x7f, 0x2b5, &(0x7f00000008c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:Dd', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x200048f4, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x5}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 12m51.221737285s ago: executing program 3 (id=218): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@nodelalloc}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x1, 0x61f, &(0x7f0000000b00)="$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") syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000400)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@fmask={'fmask', 0x3d, 0xffffffffffff9f51}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x5ae9}, {0x20, 0x0, 0x0, 0xffbff010}, {0x6, 0xfd, 0xfc}]}, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) 12m43.561798899s ago: executing program 3 (id=238): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0xe1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000014) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000044000)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) ptrace(0x4206, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) 12m42.061394758s ago: executing program 3 (id=243): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) personality(0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r5, 0x289e0cb5, 0x0) listen(r0, 0x6d5) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f00000008c0)={&(0x7f0000000700)=[{0x1, 0x0, 0x6, 0xffffffff, 0x9, 0x4, 0x8000000000000001, 0x9}, {0x1, 0x0, 0x9, 0x9, 0x1, 0xed32, 0x1, 0x2}, {0xadaab5b1077d4546, 0x0, 0xa06, 0xd190, 0x3, 0x4, 0x80000000000, 0x55c4a6a5}, {0x0, 0x0, 0x6, 0x0, 0x30f, 0x7, 0x2, 0x3}, {0x3, 0x0, 0xe, 0x43000000000, 0xce, 0x0, 0x7, 0x8}, {0x1, 0x0, 0x7ff, 0x1, 0x9, 0x4, 0x5, 0x3}, {0x3, 0x0, 0x7, 0xffffffffffffffc0, 0x6, 0xf, 0x4, 0x2b0}, {0x3, 0x0, 0x5, 0x8000000000000001, 0x6, 0x8000000000000000, 0xa, 0x1}], 0x8, 0x38, 0x0, 0x1ff}) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 12m40.965016435s ago: executing program 3 (id=246): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$inet(0x2, 0x1, 0x0) fsopen(0x0, 0x0) statx(r2, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x100, 0x8, 0x0) getgroups(0x0, 0x0) getgroups(0x0, &(0x7f00000005c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') 12m39.947851861s ago: executing program 3 (id=251): setresuid(0xee00, 0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='uid_map\x00') mount$overlay(0x0, &(0x7f0000000140)='./proc\x00', 0x0, 0x800016, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800704, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x119) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m39.873881253s ago: executing program 3 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffc39, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x2, 0x100004, {{}, {}, {0x14, 0x19, {0x1, 0x8, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000003}, 0x1004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x1ff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) 12m39.802092575s ago: executing program 33 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffc39, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x2, 0x100004, {{}, {}, {0x14, 0x19, {0x1, 0x8, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000003}, 0x1004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x1ff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) 4.757798208s ago: executing program 0 (id=5595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1fba"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}}, 0x0) 4.721606089s ago: executing program 0 (id=5596): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x2) write$ppp(r3, &(0x7f00000002c0)="65257aaba4d762037bd8b40b", 0xc) 4.721343969s ago: executing program 0 (id=5597): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.330022245s ago: executing program 6 (id=5617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.277839976s ago: executing program 6 (id=5618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x100, 0x8688481, 0x2, 0xfffd, 0x8, 0x7177, 0x0, 0x0, 0x40, 0x8}}, 0x50) 3.277773776s ago: executing program 6 (id=5619): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101200) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) 3.277584926s ago: executing program 6 (id=5620): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x52) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) openat(0xffffffffffffff9c, 0x0, 0x604040, 0x13b) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 3.265677586s ago: executing program 6 (id=5621): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000001180)) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.642564888s ago: executing program 2 (id=5625): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.621966598s ago: executing program 2 (id=5626): keyctl$dh_compute(0x17, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={'md5\x00'}}) 1.597780909s ago: executing program 2 (id=5627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000180)=""/196, 0xc4}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4083, 0xff3}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000100)=""/21, 0x15}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) 1.597687489s ago: executing program 2 (id=5628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='acpi-thermal\n', 0xd) 1.597282929s ago: executing program 2 (id=5629): lseek(0xffffffffffffffff, 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) write(r0, &(0x7f0000000500), 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x8}, 0x8) epoll_create(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800000}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 1.529125311s ago: executing program 1 (id=5630): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xa8) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getuid() prctl$PR_SET_IO_FLUSHER(0x4e, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x110002, 0x0, 0x1, 0x0, &(0x7f00000009c0)="178c305d93f4e706096c27b88ab659dceaa46a45120b285fa92524602e1818378b21f5ad60fa7dc60c1dd81d61acec1725050cb5d890431b3846d0bf3c19609e589e113b22d81a7162b51ac5af98acdbee670ec4f2d7835ae825294303a44ffb43ce8fbe5c46d57cefdc3aa10d29d1d1a668c7b33d35aa352a2448f3ce564cb5f68224b472d8c03d87cd3249e657327eb64d4cc592b427861b1e9a24708dc202073ce89e5028cd6d2c5b3a55df062d6c229f386c20874dec8978c689ae12ea2f") keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c9ba00000000fbdbdf84e75008b80ba32b0005001b0003000000000000000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380300", @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf251c0000000c0006000300000000000000080003", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYBLOB="0c0006000300000003000000"], 0x44}}, 0x0) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='9'], 0x1, 0x2cb, &(0x7f00000003c0)="$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") 1.437436093s ago: executing program 1 (id=5631): creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1218048, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b20", 0xb) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) 1.381794324s ago: executing program 0 (id=5632): openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.350671405s ago: executing program 1 (id=5633): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x20, 0x70bd2a, 0x2ddfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xc4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1d1008126883f6f}, 0x4044041) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1d, 0x4, 0xfffffffd, 0x0, 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x28) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="88010000", @ANYRES16=r6, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000080}, 0x4050098) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.322880246s ago: executing program 1 (id=5634): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a00000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d6163040063300000000000000000001400000011000141"], 0x80}}, 0x0) close(0x4) 1.1535344s ago: executing program 6 (id=5635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) 1.091070222s ago: executing program 1 (id=5636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2911deec9a942b"]}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4008000) 1.060558693s ago: executing program 0 (id=5637): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 996.379144ms ago: executing program 5 (id=5639): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) socket(0x1e, 0x1, 0x0) write(r0, &(0x7f0000000140)='A123=1\n', 0x7) 996.252844ms ago: executing program 5 (id=5640): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/timers\x00', 0x0, 0x0) sendto$inet_nvme_of_msg(r3, &(0x7f0000000480)={@rsp={{0x5, 0x4, 0x18, 0x18, 0x81}, {@u16=0x4, 0x0, 0x1, 0x7653, 0x5}}, @val=&(0x7f00000003c0)="e1065958ec2d134e9c98811932eb6e3f6c6333766460d98809ac75379333b1cbcc147f555589a8e8f135d7cef2c634c96b072525d7a4a60d30f2b0492f847306c86803bdb83584ca833f2092fe487297d728085e94437d94fccaf25a9142e71f1b069e37e7133c31f3d6007ac8ab36dacd7a1f45b71855969f07099ced75d179a6d33cd02b86f2dcbfdf9bdb9d7bde7b90a429e249f40be7663931c9e929c826cf93443c"}, 0x88, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 995.745214ms ago: executing program 2 (id=5641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0x0', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='Tes', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r2, &(0x7f0000000480), 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f0000000540)='midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='Conf 2\x00', 0x7) write(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000800)=0x2) 951.668755ms ago: executing program 5 (id=5642): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 951.573955ms ago: executing program 5 (id=5643): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) 951.248935ms ago: executing program 1 (id=5644): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xdc}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 877.860037ms ago: executing program 5 (id=5645): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xb, 0x7ffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 10.949699ms ago: executing program 5 (id=5646): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 0s ago: executing program 0 (id=5647): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x51, 0x7, {0x7, 0x0, "81d65dce3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x8, 0xc, {0xc, 0xc, "8e07939d6aee76e23735"}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.2.2152'. [ 363.358055][ T6868] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 365.006499][ T6890] overlayfs: failed to clone upperpath [ 365.123159][ T6896] overlayfs: failed to clone upperpath [ 366.996561][ T24] audit: type=1400 audit(1786047004.376:438): avc: denied { mounton } for pid=6941 comm="syz.5.2180" path="/378/file0" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 367.022420][ T6942] fuse: Bad value for 'fd' [ 367.045907][ T24] audit: type=1400 audit(1786047004.413:439): avc: denied { setopt } for pid=6943 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 367.407251][ T6957] xt_CT: No such helper "netbios-ns" [ 368.149074][ T24] audit: type=1400 audit(1786047005.451:440): avc: denied { name_bind } for pid=6970 comm="syz.0.2191" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 368.286813][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2197'. [ 369.238559][ T7000] xt_hashlimit: size too large, truncated to 1048576 [ 369.294314][ T7004] overlayfs: failed to clone upperpath [ 370.248186][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2210'. [ 370.292139][ T24] audit: type=1400 audit(1786047007.463:441): avc: denied { bind } for pid=7018 comm="syz.0.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.802467][ T24] audit: type=1400 audit(1786047009.801:442): avc: denied { map } for pid=7065 comm="syz.0.2228" path="socket:[32923]" dev="sockfs" ino=32923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.184258][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 373.227676][ T24] audit: type=1400 audit(1786047010.203:443): avc: denied { accept } for pid=7080 comm="syz.1.2233" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.539372][ T7106] overlayfs: failed to clone upperpath [ 375.102565][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.443529][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.450757][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.605970][ T24] audit: type=1400 audit(1786047012.430:444): avc: denied { read } for pid=7131 comm="syz.5.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.726111][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 376.020412][ T7147] tipc: Failed to remove local publication {66,1,1}/3453770324 [ 376.029106][ T7147] tipc: Failed to remove local publication {66,1,1}/3453770324 [ 376.032021][ T24] audit: type=1400 audit(1786047012.832:445): avc: denied { append } for pid=7148 comm="syz.1.2259" name="icmp6" dev="proc" ino=4026532429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 376.106782][ T7158] xt_hashlimit: size too large, truncated to 1048576 [ 376.470969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.049401][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2260'. [ 377.236863][ T7173] fuse: Bad value for 'fd' [ 377.251809][ T24] audit: type=1400 audit(1786047013.973:446): avc: denied { map } for pid=7172 comm="syz.2.2267" path="/460/file0" dev="tmpfs" ino=2542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 378.554201][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2278'. [ 378.574536][ T7224] 9pnet: p9_errstr2errno: server reported unknown error ÐpéÁ¤¦n$Ž[ [ 378.574536][ T7224] Q&|xùÿÿ [ 379.811357][ T7244] overlayfs: failed to clone upperpath [ 379.841352][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2298'. [ 379.855170][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2298'. [ 380.010816][ T7268] xt_CT: No such helper "netbios-ns" [ 380.077336][ T7275] overlayfs: failed to clone upperpath [ 380.192594][ T7287] overlayfs: failed to clone upperpath [ 380.297136][ T24] audit: type=1326 audit(1786047016.817:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.2316" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x0 [ 380.653939][ T7298] overlayfs: failed to clone upperpath [ 380.818365][ T7310] Illegal XDP return value 4294967274, expect packet loss! [ 381.714559][ T24] audit: type=1400 audit(1786047018.145:448): avc: denied { sys_admin } for pid=7325 comm="syz.5.2331" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 381.795086][ T7327] cgroup: Setting release_agent not allowed [ 381.839973][ T24] audit: type=1400 audit(1786047018.192:449): avc: denied { associate } for pid=7328 comm="syz.5.2331" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 382.066186][ T7355] overlayfs: failed to clone upperpath [ 382.078453][ T7356] xt_CT: No such helper "netbios-ns" [ 382.143394][ T7358] overlayfs: failed to clone upperpath [ 383.417677][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 384.113931][ T7317] overlayfs: failed to clone upperpath [ 384.193023][ T7403] tipc: Started in network mode [ 384.198101][ T7403] tipc: Own node identity 7f000001, cluster identity 4711 [ 384.207441][ T7403] tipc: Enabled bearer , priority 10 [ 384.225500][ T7403] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 384.246759][ T7403] tipc: Enabled bearer , priority 10 [ 384.382068][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.405135][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.304534][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 385.397618][ T314] tipc: 32-bit node address hash set to 100007f [ 385.539698][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 385.590356][ T7453] xt_CT: No such helper "netbios-ns" [ 385.636926][ T7462] overlayfs: failed to clone upperpath [ 386.138847][ T7474] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2388'. [ 386.900881][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2397'. [ 386.982342][ T7507] xt_CT: No such helper "netbios-ns" [ 388.066640][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2405'. [ 388.337083][ T7537] xt_CT: No such helper "netbios-ns" [ 389.438380][ T7584] xt_CT: No such helper "netbios-ns" [ 390.246193][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 390.359150][ T7605] xt_hashlimit: size too large, truncated to 1048576 [ 390.676946][ T7612] incfs: Backing dir is not set, filesystem can't be mounted. [ 390.700172][ T7612] incfs: mount failed -2 [ 390.984030][ T7628] fuse: Bad value for 'fd' [ 391.060159][ T7632] fuse: Bad value for 'fd' [ 391.199694][ T7640] xt_hashlimit: size too large, truncated to 1048576 [ 391.253489][ T7644] xt_hashlimit: size too large, truncated to 1048576 [ 391.335084][ T7648] overlayfs: failed to clone upperpath [ 392.091243][ T24] audit: type=1326 audit(1786047027.854:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.146726][ T24] audit: type=1326 audit(1786047027.873:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.202047][ T24] audit: type=1326 audit(1786047027.873:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.252908][ T24] audit: type=1326 audit(1786047027.873:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.304424][ T24] audit: type=1326 audit(1786047027.873:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.354929][ T24] audit: type=1326 audit(1786047027.873:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.405704][ T24] audit: type=1326 audit(1786047027.873:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.456122][ T24] audit: type=1326 audit(1786047027.873:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.481270][ T24] audit: type=1326 audit(1786047027.873:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.506332][ T24] audit: type=1326 audit(1786047027.873:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.1.2465" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 392.616716][ T7686] device veth0_vlan left promiscuous mode [ 392.629553][ T7686] device veth0_vlan entered promiscuous mode [ 392.645002][ T7686] device veth1_macvtap left promiscuous mode [ 392.658537][ T7686] device veth1_macvtap entered promiscuous mode [ 392.676120][ T349] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.685967][ T349] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.693691][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.700975][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.709260][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.717003][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.725531][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.732578][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.740306][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.762176][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 392.773844][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.791570][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 392.805521][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.814421][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.826654][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.835112][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.843629][ T7694] overlayfs: failed to clone upperpath [ 392.849736][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.858746][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.867557][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.877441][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.885825][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.894744][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.913791][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2474'. [ 392.915730][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.932394][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.940592][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.948818][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.957244][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.965521][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.973653][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.981928][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.989531][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 393.041407][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.191105][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.268410][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.275952][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.284327][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.292491][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 393.300862][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.208031][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2489'. [ 396.569368][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 397.302694][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'. [ 397.760114][ T7809] mmap: syz.0.2516 (7809): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 398.905590][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 398.905601][ T24] audit: type=1400 audit(1786047034.224:477): avc: denied { map } for pid=7822 comm="syz.6.2522" path="socket:[34460]" dev="sockfs" ino=34460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 398.918989][ T7826] fuse: Bad value for 'fd' [ 399.054755][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2521'. [ 399.368114][ T7840] xt_TCPMSS: Only works on TCP SYN packets [ 399.715434][ T7849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 400.459477][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2541'. [ 400.473671][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2543'. [ 400.977021][ T7906] xt_hashlimit: size too large, truncated to 1048576 [ 400.985653][ T7905] xt_hashlimit: size too large, truncated to 1048576 [ 402.316376][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 402.632429][ T24] audit: type=1400 audit(1786047037.713:478): avc: denied { create } for pid=7943 comm="syz.5.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 402.791564][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2571'. [ 403.094578][ T7966] xt_TCPMSS: Only works on TCP SYN packets [ 403.193160][ T7976] device bridge2 entered promiscuous mode [ 403.344555][ T7983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2582'. [ 403.583979][ T7987] fuse: Bad value for 'fd' [ 403.589026][ T24] audit: type=1400 audit(1786047038.602:479): avc: denied { read } for pid=7986 comm="syz.2.2584" name="file0" dev="tmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.612330][ T349] kernel write not supported for file /newroot/515/file0 (pid: 349 comm: kworker/1:4) [ 403.631024][ T24] audit: type=1400 audit(1786047038.621:480): avc: denied { open } for pid=7986 comm="syz.2.2584" path="/515/file0" dev="tmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.655405][ T7991] overlayfs: failed to clone upperpath [ 403.661479][ T7991] overlayfs: failed to clone upperpath [ 404.767868][ T8025] fuse: Unknown parameter '01777777777777777777777' [ 405.207332][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.548274][ T8047] overlayfs: failed to clone upperpath [ 405.776483][ T24] audit: type=1400 audit(1786047040.651:481): avc: denied { bind } for pid=8054 comm="syz.5.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.184646][ T24] audit: type=1400 audit(1786047041.960:482): avc: denied { wake_alarm } for pid=8089 comm="syz.2.2624" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.443657][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 407.715675][ T8096] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2627'. [ 408.215570][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2637'. [ 409.287096][ T8126] overlayfs: failed to clone upperpath [ 409.539970][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2648'. [ 409.996836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.052308][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 411.955745][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2667'. [ 412.317696][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8215 comm=syz.5.2670 [ 412.332976][ T8215] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2670'. [ 412.342840][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.894704][ T8238] xt_CT: No such helper "netbios-ns" [ 412.981320][ T24] audit: type=1400 audit(1786047047.395:483): avc: denied { ioctl } for pid=8239 comm="syz.0.2679" path="socket:[34798]" dev="sockfs" ino=34798 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.015415][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 414.263661][ T8265] overlayfs: failed to clone upperpath [ 416.182673][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2697'. [ 417.510317][ T24] audit: type=1400 audit(1786047051.623:484): avc: denied { getopt } for pid=8320 comm="syz.1.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.236300][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 418.471237][ T24] audit: type=1400 audit(1786047052.521:485): avc: denied { write } for pid=8344 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.501928][ T24] audit: type=1400 audit(1786047052.549:486): avc: denied { read } for pid=8344 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.655612][ T24] audit: type=1400 audit(1786047052.689:487): avc: denied { setopt } for pid=8335 comm="syz.0.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.257041][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2730'. [ 420.402453][ T24] audit: type=1400 audit(1786047054.335:488): avc: denied { write } for pid=8381 comm="syz.1.2729" path="socket:[37034]" dev="sockfs" ino=37034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.609347][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2733'. [ 422.015995][ T8426] overlayfs: unrecognized mount option "/" or missing value [ 422.025082][ T8426] overlayfs: missing 'lowerdir' [ 422.030492][ T24] audit: type=1326 audit(1786047055.851:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.6.2744" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53daae10d9 code=0x0 [ 422.312334][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.849717][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2748'. [ 423.196207][ T24] audit: type=1400 audit(1786047056.945:490): avc: denied { read } for pid=8446 comm="syz.0.2750" name="file0" dev="tmpfs" ino=3324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.231691][ T24] audit: type=1400 audit(1786047056.945:491): avc: denied { open } for pid=8446 comm="syz.0.2750" path="/601/file0" dev="tmpfs" ino=3324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.256199][ T24] audit: type=1400 audit(1786047056.964:492): avc: denied { ioctl } for pid=8446 comm="syz.0.2750" path="/601/file0" dev="tmpfs" ino=3324 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.321459][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 423.361623][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 423.373217][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 423.383436][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 424.359048][ T24] audit: type=1326 audit(1786047058.030:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.1.2757" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x0 [ 425.213191][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 425.864399][ T8514] tipc: Started in network mode [ 425.872168][ T8514] tipc: Own node identity 4, cluster identity 4711 [ 425.893594][ T8514] tipc: 32-bit node address hash set to 4 [ 426.028324][ T24] audit: type=1400 audit(1786047059.592:494): avc: denied { setopt } for pid=8524 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 426.070486][ T24] audit: type=1326 audit(1786047059.620:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.2.2773" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89a29cd0d9 code=0x0 [ 428.431481][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 428.650187][ T8570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 428.653302][ T24] audit: type=1400 audit(1786047062.043:496): avc: denied { name_bind } for pid=8569 comm="syz.1.2785" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 428.679310][ T8570] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 428.713561][ T24] audit: type=1400 audit(1786047062.099:497): avc: denied { create } for pid=8571 comm="syz.1.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 429.183429][ T24] audit: type=1400 audit(1786047062.501:498): avc: denied { write } for pid=8571 comm="syz.1.2786" path="socket:[37333]" dev="sockfs" ino=37333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 430.904121][ T8588] netlink: 'syz.2.2790': attribute type 16 has an invalid length. [ 430.914840][ T8588] netlink: 'syz.2.2790': attribute type 17 has an invalid length. [ 431.132674][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2789'. [ 432.809169][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2795'. [ 432.872350][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2796'. [ 434.371157][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2802'. [ 435.497022][ T8645] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 436.064194][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2808'. [ 438.400600][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2815'. [ 441.352602][ T8695] xt_CT: No such helper "netbios-ns" [ 443.785314][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2829'. [ 444.717198][ T24] audit: type=1400 audit(1786047077.075:499): avc: denied { bind } for pid=8754 comm="syz.1.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.755018][ T8758] overlayfs: missing 'lowerdir' [ 445.194068][ T8766] xt_TCPMSS: Only works on TCP SYN packets [ 449.149785][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2845'. [ 450.200234][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'. [ 450.382207][ T24] audit: type=1326 audit(1786047082.369:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.440002][ T24] audit: type=1326 audit(1786047082.426:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.484344][ T24] audit: type=1326 audit(1786047082.426:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.509823][ T24] audit: type=1326 audit(1786047082.426:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.536084][ T24] audit: type=1326 audit(1786047082.426:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.651606][ T24] audit: type=1326 audit(1786047082.426:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.691985][ T24] audit: type=1326 audit(1786047082.426:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.719387][ T24] audit: type=1326 audit(1786047082.426:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.745378][ T24] audit: type=1326 audit(1786047082.426:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 450.942558][ T24] audit: type=1326 audit(1786047082.426:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.6.2849" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 451.558001][ T8828] xt_TCPMSS: Only works on TCP SYN packets [ 452.552526][ T8835] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 454.480441][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 456.149559][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 456.149570][ T24] audit: type=1400 audit(1786047087.177:528): avc: denied { connect } for pid=8850 comm="syz.5.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.913874][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2864'. [ 457.030714][ T8873] xt_TCPMSS: Only works on TCP SYN packets [ 457.440686][ T24] audit: type=1326 audit(1786047088.973:529): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.2868" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53daae10d9 code=0x0 [ 459.126000][ T8905] xt_CT: No such helper "netbios-ns" [ 459.168857][ T24] audit: type=1400 audit(1786047090.592:530): avc: denied { create } for pid=8897 comm="syz.1.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 459.455339][ T8909] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2875'. [ 463.019778][ T8942] netlink: 'syz.5.2886': attribute type 3 has an invalid length. [ 463.071336][ T8942] netlink: 'syz.5.2886': attribute type 3 has an invalid length. [ 463.163229][ T24] audit: type=1400 audit(1786047350.332:531): avc: denied { getopt } for pid=8939 comm="syz.1.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 463.518034][ T24] audit: type=1326 audit(1786047350.519:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.2885" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 463.548348][ T24] audit: type=1326 audit(1786047350.519:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.2885" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 463.850651][ T24] audit: type=1326 audit(1786047350.547:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.2885" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 463.960308][ T24] audit: type=1326 audit(1786047350.547:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.2885" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 463.985239][ T24] audit: type=1326 audit(1786047350.547:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.2885" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x7ffc0000 [ 464.525052][ T8956] tipc: New replicast peer: 127.0.0.2 [ 464.530545][ T8956] tipc: Enabled bearer , priority 10 [ 466.863929][ T8989] netlink: 'syz.0.2888': attribute type 12 has an invalid length. [ 467.727495][ T8995] xt_hashlimit: size too large, truncated to 1048576 [ 468.067425][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.074487][ T9006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.121585][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 468.204998][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.951697][ T9014] netlink: 'syz.2.2903': attribute type 27 has an invalid length. [ 469.074750][ T9018] tmpfs: Bad value for 'huge' [ 469.180090][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.319930][ T9029] xt_TCPMSS: Only works on TCP SYN packets [ 471.106925][ T9050] tipc: Trying to set illegal importance in message [ 471.311642][ T9055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 471.320846][ T9055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 471.331143][ T24] audit: type=1400 audit(1786047357.974:537): avc: denied { create } for pid=9054 comm="syz.5.2916" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 471.353040][ T24] audit: type=1400 audit(1786047357.984:538): avc: denied { write } for pid=9054 comm="syz.5.2916" name=E91F7189591E9233614B dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 471.532637][ T24] audit: type=1400 audit(1786047358.152:539): avc: denied { unlink } for pid=874 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 471.624052][ T9067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=9067 comm=syz.2.2920 [ 472.958299][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2928'. [ 475.385384][ T9077] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 476.593655][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2931'. [ 477.938118][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2939'. [ 477.984305][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2938'. [ 478.000548][ T9142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2943'. [ 478.227587][ T24] audit: type=1326 audit(1786047364.419:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.2950" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x0 [ 478.416607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.757825][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2955'. [ 479.296271][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2956'. [ 479.806393][ T24] audit: type=1400 audit(1786047365.533:541): avc: denied { map } for pid=9178 comm="syz.5.2958" path="socket:[36421]" dev="sockfs" ino=36421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 480.115309][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2963'. [ 480.143168][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2964'. [ 480.851729][ T9220] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 480.862153][ T9220] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 480.886238][ T9220] overlayfs: missing 'lowerdir' [ 480.921969][ T24] audit: type=1400 audit(1786047366.945:542): avc: denied { accept } for pid=9227 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 481.491129][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2982'. [ 481.810498][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 482.042335][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2989'. [ 483.989510][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2999'. [ 484.232939][ T9312] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3007'. [ 484.287386][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 485.311729][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3016'. [ 486.209920][ T9397] netlink: 'syz.1.3044': attribute type 32 has an invalid length. [ 486.336103][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3043'. [ 487.404479][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 487.735054][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 487.925989][ T9462] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3061'. [ 487.935022][ T9462] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3061'. [ 487.944021][ T9462] netlink: 'syz.5.3061': attribute type 5 has an invalid length. [ 487.951754][ T9462] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3061'. [ 488.171915][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3062'. [ 490.814860][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.011295][ T24] audit: type=1326 audit(1786047376.383:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.087418][ T24] audit: type=1326 audit(1786047376.449:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.118845][ T24] audit: type=1326 audit(1786047376.449:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.144568][ T24] audit: type=1326 audit(1786047376.449:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.349901][ T24] audit: type=1326 audit(1786047376.477:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.705171][ T24] audit: type=1326 audit(1786047376.477:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.789929][ T24] audit: type=1326 audit(1786047376.477:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.845253][ T24] audit: type=1326 audit(1786047376.477:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 491.906141][ T24] audit: type=1326 audit(1786047376.477:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 492.159076][ T24] audit: type=1326 audit(1786047376.486:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.3096" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 493.649821][ T9630] netlink: 'syz.1.3135': attribute type 30 has an invalid length. [ 495.652981][ T9677] xt_CT: No such helper "netbios-ns" [ 495.835014][ T9680] xt_hashlimit: size too large, truncated to 1048576 [ 496.614283][ T9714] tipc: Started in network mode [ 496.619214][ T9714] tipc: Own node identity , cluster identity 4711 [ 497.362850][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'. [ 498.281983][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 498.281994][ T24] audit: type=1400 audit(1786047383.184:568): avc: denied { read } for pid=9767 comm="syz.0.3189" dev="sockfs" ino=39952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 498.312612][ T9768] xt_hashlimit: size too large, truncated to 1048576 [ 498.496042][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 499.292778][ T9804] tipc: Enabling of bearer rejected, failed to enable media [ 499.652860][ T9827] 9pnet: Insufficient options for proto=fd [ 499.667950][ T9838] xt_hashlimit: size too large, truncated to 1048576 [ 499.752143][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 499.918274][ T9852] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3225'. [ 499.967837][ T9855] syz.1.3227[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.967894][ T9855] syz.1.3227[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.115242][ T9908] xt_hashlimit: size too large, truncated to 1048576 [ 502.211521][ T9953] xt_CT: No such helper "netbios-ns" [ 503.743537][ T9994] device veth1_macvtap left promiscuous mode [ 503.754149][ T9994] device macsec0 entered promiscuous mode [ 503.770843][ T9994] device veth1_macvtap entered promiscuous mode [ 503.783875][ T9994] device macsec0 left promiscuous mode [ 503.906797][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3291'. [ 503.917147][T10008] device ip6gre1 entered promiscuous mode [ 504.304553][T10024] netlink: 'syz.5.3298': attribute type 12 has an invalid length. [ 505.400341][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3302'. [ 505.750826][T10069] xt_CT: No such helper "netbios-ns" [ 507.110953][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3329'. [ 507.354305][T10112] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3334'. [ 507.798859][T10126] xt_CT: No such helper "netbios-ns" [ 508.913110][ T24] audit: type=1400 audit(1786047393.127:569): avc: denied { checkpoint_restore } for pid=10163 comm="syz.2.3355" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 510.365410][T10195] overlayfs: failed to clone upperpath [ 510.737556][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3382'. [ 511.641124][T10275] 9pnet: Insufficient options for proto=fd [ 512.273121][ T24] audit: type=1400 audit(1786047396.260:570): avc: denied { connect } for pid=10288 comm="syz.2.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.473093][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 515.716292][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 515.802608][T10422] xt_hashlimit: size too large, truncated to 1048576 [ 517.709189][T10464] overlayfs: failed to resolve './file1': -2 [ 518.114242][T10484] ip_tables: iptables: counters copy to user failed while replacing table [ 518.180818][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 518.190067][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 518.201454][T10504] device erspan0 entered promiscuous mode [ 518.209331][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.219701][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.226730][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.232956][T10511] overlayfs: failed to clone upperpath [ 518.240917][ T314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 518.248914][T10509] tipc: Enabling of bearer rejected, failed to enable media [ 521.213929][T10588] tipc: Trying to set illegal importance in message [ 521.575855][T10614] xt_hashlimit: size too large, truncated to 1048576 [ 522.102579][T10626] tipc: Trying to set illegal importance in message [ 522.205558][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.280482][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3540'. [ 522.298245][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'. [ 522.461918][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.608286][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3544'. [ 523.532995][T10681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 524.673597][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 526.254544][T10786] xt_hashlimit: size too large, truncated to 1048576 [ 526.567400][T10804] overlayfs: failed to clone upperpath [ 526.682100][T10809] device bridge_slave_1 left promiscuous mode [ 526.688335][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.695792][T10809] device bridge_slave_0 left promiscuous mode [ 526.701900][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.791075][T10813] tipc: Failed to remove local publication {66,1,1}/214178977 [ 526.798670][T10813] tipc: Failed to remove local publication {66,1,1}/214178977 [ 527.620929][T10860] overlayfs: failed to clone upperpath [ 528.048572][T10889] xt_CT: No such helper "netbios-ns" [ 529.493108][T10916] overlayfs: failed to clone upperpath [ 529.839746][T10938] xt_CT: No such helper "netbios-ns" [ 530.413987][T10955] overlayfs: failed to clone upperpath [ 530.467688][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3685'. [ 530.497930][T10974] 9pnet: Insufficient options for proto=fd [ 530.838059][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3694'. [ 531.099925][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.465967][T11011] xt_CT: No such helper "netbios-ns" [ 532.230097][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3714'. [ 532.443778][T11058] overlayfs: failed to clone upperpath [ 532.931185][T11087] xt_CT: No such helper "netbios-ns" [ 533.728407][T11120] overlayfs: failed to clone upperpath [ 533.739365][T11122] overlayfs: failed to clone upperpath [ 534.997285][T11177] overlayfs: failed to clone upperpath [ 536.346912][T11233] fuse: Unknown parameter '01777777777777777777777' [ 536.423170][T11248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3800'. [ 536.435242][T11248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3800'. [ 536.845373][T11270] overlayfs: failed to clone upperpath [ 536.932930][T11276] netlink: 'syz.2.3813': attribute type 4 has an invalid length. [ 537.799465][ T24] audit: type=1400 audit(1786047676.143:571): avc: denied { getopt } for pid=11302 comm="syz.5.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.523778][T11480] device veth0 entered promiscuous mode [ 541.548270][T11479] device veth0 left promiscuous mode [ 541.576246][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 542.607546][T11517] xt_hashlimit: size too large, truncated to 1048576 [ 542.707070][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 542.740204][T11534] device vlan3 entered promiscuous mode [ 542.746300][T11534] device vlan2 entered promiscuous mode [ 542.752034][T11534] device gretap0 entered promiscuous mode [ 543.766681][ T24] audit: type=1326 audit(1786047681.727:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11554 comm="syz.5.3927" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0822a810d9 code=0x0 [ 545.931834][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3933'. [ 546.471265][T11622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.895671][T11603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.902923][T11603] IPv6: NLM_F_CREATE should be set when creating new route [ 546.967908][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.975109][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.499553][ T24] audit: type=1400 audit(1786047685.225:573): avc: denied { lock } for pid=11635 comm="syz.1.3954" path="socket:[44164]" dev="sockfs" ino=44164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 549.554765][T11678] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3966'. [ 551.990668][T11703] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3971'. [ 551.999783][T11703] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3971'. [ 552.008813][T11703] netlink: 'syz.5.3971': attribute type 5 has an invalid length. [ 552.016580][T11703] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3971'. [ 552.461234][T11706] overlayfs: failed to clone upperpath [ 552.475606][T11706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.392175][T11714] overlayfs: failed to resolve './file0': -2 [ 555.068344][T11741] bridge0: port 2(erspan0) entered blocking state [ 555.089678][T11741] bridge0: port 2(erspan0) entered disabled state [ 555.107676][T11741] device erspan0 entered promiscuous mode [ 556.108903][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3990'. [ 556.511280][ T300] tipc: Subscription rejected, illegal request [ 558.851744][ T24] audit: type=1400 audit(1786047694.836:574): avc: denied { shutdown } for pid=11815 comm="syz.6.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 559.594389][ T24] audit: type=1326 audit(1786047695.537:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 559.619394][ T24] audit: type=1326 audit(1786047695.537:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 560.905994][ T24] audit: type=1326 audit(1786047695.537:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 560.933529][ T24] audit: type=1326 audit(1786047695.537:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 560.962273][ T24] audit: type=1326 audit(1786047695.537:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 560.987370][ T24] audit: type=1326 audit(1786047695.537:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 561.012467][ T24] audit: type=1326 audit(1786047695.537:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 561.240783][ T24] audit: type=1326 audit(1786047695.537:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 561.266010][ T24] audit: type=1326 audit(1786047695.537:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.4022" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4218b840d9 code=0x7ffc0000 [ 561.680785][T11873] overlayfs: missing 'lowerdir' [ 562.054301][T11901] tipc: Trying to set illegal importance in message [ 563.176644][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4077'. [ 563.665766][T11893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4045'. [ 563.695309][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4085'. [ 565.977134][T12058] tipc: Trying to set illegal importance in message [ 566.146975][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4117'. [ 566.369232][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4123'. [ 567.576195][T12111] tipc: Trying to set illegal importance in message [ 567.613961][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4139'. [ 567.641723][T12113] device ip6gre2 entered promiscuous mode [ 571.388132][T12259] overlayfs: failed to clone upperpath [ 571.582762][T12282] overlayfs: failed to clone upperpath [ 572.037149][T12321] overlayfs: missing 'lowerdir' [ 573.418372][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 573.418384][ T24] audit: type=1326 audit(1786047708.465:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.508912][ T24] audit: type=1326 audit(1786047708.493:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.577725][ T24] audit: type=1326 audit(1786047708.493:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.634961][ T24] audit: type=1326 audit(1786047708.493:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.709945][ T24] audit: type=1326 audit(1786047708.493:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.788193][ T24] audit: type=1326 audit(1786047708.493:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.813548][ T24] audit: type=1326 audit(1786047708.493:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.838578][ T24] audit: type=1326 audit(1786047708.493:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.863520][ T24] audit: type=1326 audit(1786047708.493:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 573.888826][ T24] audit: type=1326 audit(1786047708.493:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.2.4251" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 575.088622][T12418] overlayfs: failed to clone upperpath [ 575.614146][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4284'. [ 575.947940][T12404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4270'. [ 576.404077][T12470] overlayfs: failed to clone upperpath [ 576.667941][T12498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4309'. [ 576.958060][T12511] overlayfs: failed to resolve './file0': -2 [ 577.147537][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4327'. [ 577.269648][T12553] overlayfs: failed to clone upperpath [ 577.711349][T12594] overlayfs: failed to clone upperpath [ 577.729842][T12594] overlayfs: failed to clone lowerpath [ 577.876763][T12609] tipc: Trying to set illegal importance in message [ 580.635190][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4408'. [ 581.199035][T12749] overlayfs: failed to clone upperpath [ 581.591213][T12758] device veth0_vlan left promiscuous mode [ 581.597946][T12758] device veth0_vlan entered promiscuous mode [ 581.610211][T12758] device veth1_macvtap left promiscuous mode [ 581.622718][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 581.650503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.678801][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 581.701688][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.708743][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.772558][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 581.782594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 581.790869][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 581.799989][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 581.808143][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 581.816427][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 581.836435][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 581.844529][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): 26±ÿ: link becomes ready [ 581.854358][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 581.871561][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.895204][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.984462][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 582.031592][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.087286][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.121794][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 582.149065][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.176006][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 582.221277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 582.243928][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 582.265672][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 582.286915][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 582.307452][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 582.339971][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 582.383418][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 582.405448][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 582.427302][T12710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 582.443385][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.471860][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 582.735858][T12764] overlayfs: failed to clone upperpath [ 582.802743][T12784] overlayfs: failed to clone lowerpath [ 582.808997][T12784] overlayfs: failed to clone lowerpath [ 582.849459][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.910380][T12794] overlayfs: failed to clone upperpath [ 583.171910][T12813] 9pnet: Insufficient options for proto=fd [ 583.920213][T12827] overlayfs: failed to clone upperpath [ 583.933130][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 583.933140][ T24] audit: type=1400 audit(1786047718.306:628): avc: denied { create } for pid=12826 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 584.311611][T12870] overlayfs: failed to clone upperpath [ 584.673963][T12905] 9pnet: Insufficient options for proto=fd [ 584.969264][T12930] overlayfs: failed to clone upperpath [ 584.986946][ T24] audit: type=1326 audit(1786047719.279:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.4500" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b1bc0d9 code=0x0 [ 585.003749][T12933] overlayfs: failed to clone lowerpath [ 585.020084][T12933] overlayfs: failed to clone lowerpath [ 585.559367][ T24] audit: type=1326 audit(1786047719.821:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.587709][ T24] audit: type=1326 audit(1786047719.821:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.634228][ T24] audit: type=1326 audit(1786047719.840:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.661381][ T24] audit: type=1326 audit(1786047719.840:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.687746][ T24] audit: type=1326 audit(1786047719.840:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.715406][ T24] audit: type=1326 audit(1786047719.840:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.751369][ T24] audit: type=1326 audit(1786047719.840:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.795882][ T24] audit: type=1326 audit(1786047719.840:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.6.4527" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f53daae10d9 code=0x7ffc0000 [ 585.821487][T13000] overlayfs: failed to clone upperpath [ 585.827659][T13000] overlayfs: failed to clone upperpath [ 587.875748][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.906690][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.921510][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.942635][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.955121][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.964719][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.979206][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 587.988364][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 588.008504][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 588.024767][T13042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4550'. [ 588.324667][T13045] device macsec1 entered promiscuous mode [ 588.581916][T13078] overlayfs: failed to clone upperpath [ 589.233022][T13099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13099 comm=syz.6.4574 [ 589.394046][T13111] ip_tables: iptables: counters copy to user failed while replacing table [ 592.027922][T13187] xt_hashlimit: size too large, truncated to 1048576 [ 592.497451][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 592.497462][ T24] audit: type=1326 audit(1786047726.313:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.529698][ T24] audit: type=1326 audit(1786047726.313:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.555419][ T24] audit: type=1326 audit(1786047726.313:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.581046][ T24] audit: type=1326 audit(1786047726.313:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.606164][ T24] audit: type=1326 audit(1786047726.313:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.631323][ T24] audit: type=1326 audit(1786047726.313:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89a298d90e code=0x7ffc0000 [ 592.657175][ T24] audit: type=1326 audit(1786047726.313:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.682138][ T24] audit: type=1326 audit(1786047726.313:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.707116][ T24] audit: type=1326 audit(1786047726.313:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 592.732122][ T24] audit: type=1326 audit(1786047726.313:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.4610" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a29cd0d9 code=0x7ffc0000 [ 595.866488][T13222] __nla_validate_parse: 72 callbacks suppressed [ 595.866497][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 595.947163][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.449987][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'. [ 596.466870][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4624'. [ 596.866536][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.251320][T13262] xt_hashlimit: size too large, truncated to 1048576 [ 598.266852][T13262] xt_hashlimit: invalid rate [ 600.128180][T13312] overlayfs: failed to resolve './file0': -2 [ 603.115981][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.126412][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.136167][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.145308][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.154793][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.164184][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.173098][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.187100][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.196224][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.205355][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 603.218756][T13365] device ip6gre1 left promiscuous mode [ 603.224568][T13365] device bridge2 left promiscuous mode [ 603.230125][T13365] device ip6gre2 left promiscuous mode [ 610.026538][T13464] __nla_validate_parse: 198 callbacks suppressed [ 610.026547][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 613.120986][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4714'. [ 620.726607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.451498][T13629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4753'. [ 635.110536][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 653.566080][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.478835][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4842'. [ 657.548737][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4850'. [ 658.312342][ C0] hrtimer: interrupt took 9356 ns [ 660.045767][T13982] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4860'. [ 662.681916][T14019] tipc: Trying to set illegal importance in message [ 663.194150][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 668.515459][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.524490][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.533552][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.542785][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.551810][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.561219][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.570185][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.579479][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.588450][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.643701][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.654388][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.665072][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 668.675887][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 669.132819][T14112] tipc: Trying to set illegal importance in message [ 680.218262][T14243] __nla_validate_parse: 102 callbacks suppressed [ 680.218271][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4934'. [ 682.591385][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.600530][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.611923][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.621590][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.847235][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.870035][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.888350][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.897270][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 682.906237][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 685.799882][T14333] __nla_validate_parse: 20 callbacks suppressed [ 685.799891][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4963'. [ 687.365002][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4973'. [ 695.629356][T14511] tipc: Trying to set illegal importance in message [ 702.336006][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5050'. [ 707.642434][T14720] tipc: Trying to set illegal importance in message [ 710.189323][T14772] xt_CT: No such helper "netbios-ns" [ 710.602213][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 710.929279][T14785] xt_TCPMSS: Only works on TCP SYN packets [ 712.161558][T14811] xt_CT: No such helper "netbios-ns" [ 715.643488][T14853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5112'. [ 717.401466][T14875] xt_CT: No such helper "netbios-ns" [ 717.442066][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'. [ 717.465899][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5115'. [ 720.232104][T14919] xt_TCPMSS: Only works on TCP SYN packets [ 721.206111][T14927] xt_TCPMSS: Only works on TCP SYN packets [ 721.517485][T14933] xt_TCPMSS: Only works on TCP SYN packets [ 722.029147][T14935] xt_TCPMSS: Only works on TCP SYN packets [ 724.609533][T14963] tipc: Trying to set illegal importance in message [ 724.689189][T14964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5144'. [ 725.039993][T14979] xt_CT: No such helper "netbios-ns" [ 726.803661][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.812613][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.822438][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.831649][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.840658][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.850034][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.860217][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.869597][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 726.878967][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 727.471236][T15011] xt_TCPMSS: Only works on TCP SYN packets [ 733.662297][T15075] tipc: Trying to set illegal importance in message [ 734.140873][T15076] xt_CT: No such helper "netbios-ns" [ 736.575039][T15125] __nla_validate_parse: 108 callbacks suppressed [ 736.575048][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5192'. [ 737.486453][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5193'. [ 738.438081][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.457819][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.466915][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.476027][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.486768][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.496860][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.506037][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.522149][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5196'. [ 738.632098][T15148] tipc: Trying to set illegal importance in message [ 741.817750][T15184] xt_CT: No such helper "netbios-ns" [ 746.311452][T15223] xt_CT: No such helper "netbios-ns" [ 748.289421][T15241] xt_TCPMSS: Only works on TCP SYN packets [ 749.135434][T15242] xt_CT: No such helper "netbios-ns" [ 749.216163][T15244] __nla_validate_parse: 117 callbacks suppressed [ 749.216178][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5224'. [ 749.262726][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.390961][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.807873][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.146128][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5232'. [ 751.464985][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 752.675929][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'. [ 757.822363][T15340] xt_CT: No such helper "netbios-ns" [ 757.830717][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5249'. [ 757.845708][T15342] xt_CT: No such helper "netbios-ns" [ 758.223687][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5253'. [ 759.282437][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5256'. [ 759.610012][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 760.093327][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5259'. [ 760.916013][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5261'. [ 764.398914][T15407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5267'. [ 764.423305][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5268'. [ 764.748683][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5271'. [ 764.784517][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 764.827280][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.516292][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.207900][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5277'. [ 767.574604][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.861237][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5281'. [ 768.490140][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5282'. [ 771.320885][T15482] 9pnet: Insufficient options for proto=fd [ 771.337801][T15482] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5288'. [ 772.098147][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5293'. [ 772.680101][T15513] xt_CT: No such helper "netbios-ns" [ 774.048268][T15525] xt_CT: No such helper "netbios-ns" [ 774.414197][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5302'. [ 777.054792][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5306'. [ 777.428673][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5309'. [ 777.768352][T15568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5312'. [ 779.947084][T15592] 9pnet: Insufficient options for proto=fd [ 779.957842][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5319'. [ 780.846712][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5323'. [ 781.257928][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5326'. [ 783.908433][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5331'. [ 783.947092][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5330'. [ 784.391188][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5334'. [ 786.094051][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5339'. [ 788.890477][T15705] 9pnet: Insufficient options for proto=fd [ 788.902366][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5351'. [ 789.151003][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5352'. [ 791.780864][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5362'. [ 791.830141][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.375323][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.503591][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.642437][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'. [ 792.952645][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5369'. [ 792.995345][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.615366][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.763526][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5370'. [ 794.102513][T15780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5371'. [ 794.117783][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 794.447588][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5374'. [ 794.864138][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5376'. [ 794.940928][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.480445][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5385'. [ 801.147063][T15896] xt_TCPMSS: Only works on TCP SYN packets [ 802.001032][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5403'. [ 802.519962][T15930] xt_CT: No such helper "netbios-ns" [ 805.266079][T15978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5423'. [ 807.090344][T16018] xt_CT: No such helper "netbios-ns" [ 808.369437][T16041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5441'. [ 810.315829][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5452'. [ 815.338319][T16142] xt_CT: No such helper "netbios-ns" [ 815.821615][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5471'. [ 816.308724][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5474'. [ 816.385003][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 816.613551][T16168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5477'. [ 816.630858][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 817.945757][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 818.242045][T16184] xt_CT: No such helper "netbios-ns" [ 818.448182][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 818.890090][T16197] xt_CT: No such helper "netbios-ns" [ 820.093003][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5487'. [ 820.218649][T16207] xt_CT: No such helper "netbios-ns" [ 820.569598][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5489'. [ 821.744673][T16226] xt_TCPMSS: Only works on TCP SYN packets [ 822.080622][T16227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5494'. [ 822.362322][T16235] xt_TCPMSS: Only works on TCP SYN packets [ 824.405225][T16257] xt_CT: No such helper "netbios-ns" [ 827.503306][ T7] tipc: Disabling bearer [ 827.509284][ T7] tipc: Disabling bearer [ 827.531810][ T7] tipc: Left network mode [ 827.712887][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.758744][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.804134][T16283] device bridge_slave_0 entered promiscuous mode [ 827.813043][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.820116][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.827770][T16283] device bridge_slave_1 entered promiscuous mode [ 827.918169][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.925277][T16283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.932562][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.939575][T16283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.003327][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.012080][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.020360][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.038097][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 828.046475][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.053547][ T592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.061459][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 828.070355][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.077401][ T592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.086336][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.118435][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.140070][T16292] xt_CT: No such helper "netbios-ns" [ 828.293450][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 828.405446][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 828.424016][T16283] device veth0_vlan entered promiscuous mode [ 828.430700][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 828.440540][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 828.457357][T16283] device veth1_macvtap entered promiscuous mode [ 828.464340][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 828.478924][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 828.571752][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 828.583420][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 829.091058][T16305] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.098158][T16305] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.105552][T16305] device bridge_slave_0 entered promiscuous mode [ 829.112749][T16305] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.119925][T16305] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.127323][T16305] device bridge_slave_1 entered promiscuous mode [ 829.422190][T16305] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.429315][T16305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.436613][T16305] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.443675][T16305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.467113][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.483719][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.491169][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.545936][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.560673][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.567773][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.577257][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.585999][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.593077][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.601291][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 829.610082][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 830.449520][T16305] device veth0_vlan entered promiscuous mode [ 830.523160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.533754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.543036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.551303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.575793][T16305] device veth1_macvtap entered promiscuous mode [ 830.789865][T16328] xt_CT: No such helper "netbios-ns" [ 830.944860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.955891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.981736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 831.006733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 831.031377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 831.056543][ T592] tipc: Disabling bearer [ 831.062553][ T592] tipc: Left network mode [ 831.069454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 831.103917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 831.123128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.156820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 831.369104][T16336] xt_CT: No such helper "netbios-ns" [ 831.854258][T16339] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.861429][T16339] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.869073][T16339] device bridge_slave_0 entered promiscuous mode [ 831.880498][T16339] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.887738][T16339] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.895307][T16339] device bridge_slave_1 entered promiscuous mode [ 832.499256][ T592] device bridge_slave_0 left promiscuous mode [ 832.513441][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.644002][T16351] EXT4-fs (loop5): Test dummy encryption mode enabled [ 832.925318][T16351] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.5523: inode #1: comm syz.5.5523: iget: illegal inode # [ 832.965304][T16351] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5523: error while reading EA inode 1 err=-117 [ 832.987879][T16351] EXT4-fs (loop5): 1 orphan inode deleted [ 832.993740][T16351] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue [ 833.035218][T16357] EXT4-fs (loop0): Test dummy encryption mode enabled [ 833.130724][T16357] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.5524: inode #1: comm syz.0.5524: iget: illegal inode # [ 833.167950][T16357] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5524: error while reading EA inode 1 err=-117 [ 833.181898][T16357] EXT4-fs (loop0): 1 orphan inode deleted [ 833.187674][T16357] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue [ 833.225399][T16366] xt_CT: No such helper "netbios-ns" [ 833.877641][T16339] device veth0_vlan entered promiscuous mode [ 833.889626][T16339] device veth1_macvtap entered promiscuous mode [ 833.897393][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 833.907479][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 833.914890][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 834.324375][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 834.342879][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 834.453714][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.460787][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.469036][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.477466][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.486051][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.493078][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.500694][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.556960][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.602213][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 834.639715][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.657854][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 834.674947][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 834.692044][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 834.700414][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 834.711739][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 834.720486][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 834.728657][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 835.124345][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5526'. [ 835.136483][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5528'. [ 835.163849][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.175077][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.183531][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 835.193124][ T2980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 836.123277][T16397] EXT4-fs (loop5): Test dummy encryption mode enabled [ 836.158478][T16397] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.5532: inode #1: comm syz.5.5532: iget: illegal inode # [ 836.226050][T16401] xt_CT: No such helper "netbios-ns" [ 836.445090][T16397] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5532: error while reading EA inode 1 err=-117 [ 836.457514][T16397] EXT4-fs (loop5): 1 orphan inode deleted [ 836.463545][T16397] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue [ 836.666868][T16405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5533'. [ 837.815919][T16412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5534'. [ 837.952447][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.952665][T16417] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,nogrpid,nodioread_nolock,journal_ioprio=0x0000000000000007,,errors=continue [ 837.959522][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.959881][T16416] device bridge_slave_0 entered promiscuous mode [ 837.990969][T16417] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.995563][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.014751][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.024547][T16416] device bridge_slave_1 entered promiscuous mode [ 838.726989][T16417] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.5537: Freeing blocks not in datazone - block = 0, count = 16 [ 838.772850][ T592] device bridge_slave_1 left promiscuous mode [ 838.781434][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.815620][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.117476][T16447] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 842.126826][T16447] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.155437][T16447] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz.1.5543: iget: bad i_size value: 2533274857506816 [ 842.756157][T16452] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz.1.5543: iget: bad i_size value: 2533274857506816 [ 842.768495][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'. [ 842.812081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 842.819895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 842.835536][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 842.844193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 842.852415][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.859494][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.866934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 842.876494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 842.884992][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.892046][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.994849][T16462] xt_TCPMSS: Only works on TCP SYN packets [ 843.345177][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5546'. [ 843.359004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 843.375832][T16455] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 843.385861][T16455] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.408033][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5545'. [ 843.549867][T16455] EXT4-fs error (device loop5): ext4_lookup:1830: inode #12: comm syz.5.5544: iget: bad i_size value: 2533274857506816 [ 843.563639][T16455] EXT4-fs error (device loop5): ext4_lookup:1830: inode #12: comm syz.5.5544: iget: bad i_size value: 2533274857506816 [ 843.577485][T16455] EXT4-fs error (device loop5): ext4_lookup:1830: inode #12: comm syz.5.5544: iget: bad i_size value: 2533274857506816 [ 843.590322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 843.598554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 843.607696][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 843.616072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 843.637797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 843.649547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.672453][T16416] device veth0_vlan entered promiscuous mode [ 843.731066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 843.751651][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 843.772409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 843.780623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.794175][T16416] device veth1_macvtap entered promiscuous mode [ 843.812933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 843.886877][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5548'. [ 843.995110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.095335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.120610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.138448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.139720][T16479] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 844.247738][T16484] xt_TCPMSS: Only works on TCP SYN packets [ 844.310022][T16483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 844.337341][T16483] EXT4-fs error (device loop6): __ext4_iget:5034: inode #15: block 1803188595: comm syz.6.5536: invalid block [ 844.371757][T16483] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.5536: couldn't read orphan inode 15 (err -117) [ 844.427247][T16483] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,auto_da_alloc,nombcache,resuid=0x0000000000000000,inlinecrypt,,errors=continue [ 844.575062][ T592] bridge0: port 2(erspan0) entered disabled state [ 844.593439][ T592] device erspan0 left promiscuous mode [ 844.611060][ T592] bridge0: port 2(erspan0) entered disabled state [ 845.099024][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5550'. [ 845.260454][ T592] device bridge_slave_0 left promiscuous mode [ 845.266598][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.315916][ T592] device veth0_vlan left promiscuous mode [ 845.333918][T16501] xt_CT: No such helper "netbios-ns" [ 845.569709][T16498] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 845.578669][T16498] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.653036][T16498] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5551: iget: bad i_size value: 2533274857506816 [ 845.675727][T16498] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5551: iget: bad i_size value: 2533274857506816 [ 845.695914][T16498] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5551: iget: bad i_size value: 2533274857506816 [ 846.013028][T16504] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.042387][T16504] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.083670][T16504] device bridge_slave_0 entered promiscuous mode [ 846.601657][T16504] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.102721][T16504] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.129792][T16504] device bridge_slave_1 entered promiscuous mode [ 847.186860][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5556'. [ 847.350510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 847.360186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 848.570818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 848.763287][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5558'. [ 848.830637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 848.862782][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.869825][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.878189][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5559'. [ 849.412712][T16539] xt_CT: No such helper "netbios-ns" [ 849.446880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.458030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.466441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.475585][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.482650][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.482860][T16543] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 849.499028][T16543] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.519997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 849.528132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 849.536441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 849.541681][T16542] FAT-fs (loop1): bogus number of FAT structure [ 849.561435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 849.563060][T16542] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 849.571418][T16543] EXT4-fs error (device loop0): ext4_lookup:1830: inode #12: comm syz.0.5563: iget: bad i_size value: 2533274857506816 [ 849.579139][T16542] FAT-fs (loop1): Can't find a valid FAT filesystem [ 849.605773][T16543] EXT4-fs error (device loop0): ext4_lookup:1830: inode #12: comm syz.0.5563: iget: bad i_size value: 2533274857506816 [ 849.607394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 849.621502][T16543] EXT4-fs error (device loop0): ext4_lookup:1830: inode #12: comm syz.0.5563: iget: bad i_size value: 2533274857506816 [ 849.627443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 849.679675][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 849.688679][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.695909][T16550] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 849.730348][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 849.737971][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 849.746646][T16504] device veth0_vlan entered promiscuous mode [ 849.757803][T16550] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.762572][T16504] device veth1_macvtap entered promiscuous mode [ 849.774855][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 849.783260][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 849.952334][T16550] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5561: iget: bad i_size value: 2533274857506816 [ 849.973510][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 849.996871][T16550] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5561: iget: bad i_size value: 2533274857506816 [ 850.010339][T16550] EXT4-fs error (device loop6): ext4_lookup:1830: inode #12: comm syz.6.5561: iget: bad i_size value: 2533274857506816 [ 850.070582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 850.078925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 850.087280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 850.095526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 850.226756][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5564'. [ 850.386921][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 850.386933][ T24] audit: type=1400 audit(1786047966.553:698): avc: denied { ioctl } for pid=16566 comm="syz.0.5565" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 850.555530][ T24] audit: type=1400 audit(1786047966.712:699): avc: denied { read } for pid=16574 comm="syz.6.5567" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 850.587708][ T24] audit: type=1400 audit(1786047966.712:700): avc: denied { write } for pid=16576 comm="syz.5.5568" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 850.637883][ T24] audit: type=1400 audit(1786047966.730:701): avc: denied { open } for pid=16574 comm="syz.6.5567" path="/4/dev/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 850.662486][ T24] audit: type=1400 audit(1786047966.730:702): avc: denied { ioctl } for pid=16574 comm="syz.6.5567" path="/4/dev/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 850.688612][ T24] audit: type=1400 audit(1786047966.740:703): avc: denied { unmount } for pid=16416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 850.710019][ T24] audit: type=1400 audit(1786047966.805:704): avc: denied { map } for pid=16584 comm="syz.5.5572" path="socket:[58405]" dev="sockfs" ino=58405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 850.734765][T16585] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 850.744673][ T24] audit: type=1400 audit(1786047966.805:705): avc: denied { read } for pid=16584 comm="syz.5.5572" path="socket:[58405]" dev="sockfs" ino=58405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 850.767979][T16585] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 850.778092][T16585] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 850.789544][ T592] device bridge_slave_1 left promiscuous mode [ 850.797348][T16585] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 850.805387][T16585] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 850.813272][T16585] EXT4-fs (loop1): too many log groups per flexible block group [ 850.817579][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.821091][T16585] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 850.834885][T16585] EXT4-fs (loop1): mount failed [ 850.840554][ T592] device bridge_slave_0 left promiscuous mode [ 850.848028][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.856776][ T592] device veth1_macvtap left promiscuous mode [ 850.863040][ T592] device veth0_vlan left promiscuous mode [ 850.908441][ T24] audit: type=1400 audit(1786047967.039:706): avc: denied { set_context_mgr } for pid=16598 comm="syz.6.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 850.943722][ T24] audit: type=1400 audit(1786047967.067:707): avc: denied { map } for pid=16598 comm="syz.6.5577" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 851.162535][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5578'. [ 851.512392][ T287] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 851.642364][T16653] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 851.715408][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 851.790295][ T287] usb 6-1: Using ep0 maxpacket: 16 [ 851.918887][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.929863][ T287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 851.942781][ T287] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 851.951836][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.962007][ T287] usb 6-1: config 0 descriptor?? [ 852.100217][ T20] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 852.196411][ T20] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 852.378197][ T20] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 852.387359][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.395378][ T20] usb 2-1: Product: syz [ 852.399848][ T20] usb 2-1: Manufacturer: syz [ 852.404440][ T20] usb 2-1: SerialNumber: syz [ 852.475536][ T287] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 852.484538][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.492293][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.499984][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.507269][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.514478][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.521740][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.528975][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.536183][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.543404][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.550613][ T287] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 852.561664][ T287] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0001/input/input5 [ 852.574201][ T287] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 852.693397][ T6515] usb 6-1: USB disconnect, device number 2 [ 852.752241][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 853.137105][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.148053][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.157757][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 853.170775][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 853.179827][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.188263][ T20] usb 3-1: config 0 descriptor?? [ 853.244780][ T287] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 853.332705][T16707] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 853.341692][T16707] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 853.628865][ T287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.639844][ T287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.649663][ T287] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 853.662609][ T287] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 853.671722][ T287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.680390][ T287] usb 7-1: config 0 descriptor?? [ 853.686055][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.692929][ T6515] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 853.693536][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.708267][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.715767][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.723157][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.730562][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.738491][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.745880][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.753281][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.760695][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.768125][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.775516][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.782920][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.790316][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.797671][ T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.805275][ T20] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 853.814404][ T20] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 854.067151][ T6515] usb 6-1: not running at top speed; connect to a high speed hub [ 854.152698][ T6515] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.162803][ T6515] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 854.171765][ T6515] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 854.180794][ T6515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.196150][ T287] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 854.204264][ T287] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 854.212803][ T287] plantronics 0003:047F:FFFF.0003: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 854.228760][ T6515] uvcvideo: Found UVC 0.00 device (046d:0825) [ 854.237693][ T6515] uvcvideo: No valid video chain found. [ 854.446257][ T6515] usb 6-1: USB disconnect, device number 3 [ 854.517476][T15132] usb 3-1: USB disconnect, device number 2 [ 854.533067][T16715] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.5625'. [ 854.612108][ T287] usb 2-1: USB disconnect, device number 2 [ 854.829271][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'. [ 854.964015][ T287] usb 7-1: USB disconnect, device number 4 [ 855.345060][T16761] ------------[ cut here ]------------ [ 855.350809][T16761] kobject: '(null)' (ffff888114426800): is not initialized, yet kobject_get() is being called. [ 855.361437][T16761] WARNING: CPU: 0 PID: 16761 at lib/kobject.c:666 kobject_get+0x7c/0x120 [ 855.369917][T16761] Modules linked in: [ 855.374894][T16761] CPU: 0 PID: 16761 Comm: syz.2.5641 Not tainted syzkaller #0 [ 855.382404][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.393562][T16761] RIP: 0010:kobject_get+0x7c/0x120 [ 855.399033][T16761] Code: 0a ff 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 96 30 45 ff 48 8b 33 48 c7 c7 00 9d 41 85 48 89 da e8 04 06 1f 02 <0f> 0b eb 0c e8 5b bb 0a ff eb 4c e8 54 bb 0a ff 4c 8d 73 38 4c 89 [ 855.419812][T16761] RSP: 0018:ffffc90000bd7970 EFLAGS: 00010246 [ 855.426029][T16761] RAX: 53f932d0732e7400 RBX: ffff888114426800 RCX: 0000000000080000 [ 855.434119][T16761] RDX: ffffc90004106000 RSI: 0000000000003190 RDI: 0000000000003191 [ 855.442167][T16761] RBP: ffffc90000bd7988 R08: ffffc90000bd7307 R09: fffff5200017ae94 [ 855.450274][T16761] R10: dffffc0000000000 R11: fffff5200017ae61 R12: 0000000000000000 [ 855.458347][T16761] R13: ffff888117a2e068 R14: 0000000000000000 R15: dffffc0000000000 [ 855.466440][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 855.475512][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.482597][T16761] CR2: 00007f64d39667c0 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 855.490743][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.498891][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.506979][T16761] Call Trace: [ 855.510546][T16761] device_add+0x331/0xc00 [ 855.514904][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 855.520562][T16761] device_create+0x26c/0x300 [ 855.525364][T16761] ? root_device_unregister+0x80/0x80 [ 855.530908][T16761] create_function_device+0x60/0x70 [ 855.531743][ T287] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 855.536365][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 855.548677][T16761] usb_get_function_instance+0xe2/0x2f0 [ 855.554326][T16761] function_make+0x118/0x350 [ 855.558995][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 855.565589][T16761] ? mutex_trylock+0xb0/0xb0 [ 855.570303][T16761] ? configfs_mkdir+0x504/0xd90 [ 855.575258][T16761] configfs_mkdir+0x5d2/0xd90 [ 855.580158][T16761] ? show_sid+0x1b0/0x1b0 [ 855.584545][T16761] ? configfs_lookup+0x500/0x500 [ 855.589607][T16761] ? __lookup_hash+0x122/0x250 [ 855.594565][T16761] ? security_inode_mkdir+0xbd/0x110 [ 855.599990][T16761] vfs_mkdir+0x42c/0x600 [ 855.604291][T16761] do_mkdirat+0x14c/0x340 [ 855.608838][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 855.613726][T16761] do_syscall_64+0x31/0x40 [ 855.618252][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 855.624308][T16761] RIP: 0033:0x7f64d39190d9 [ 855.628798][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.648591][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 855.657117][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 855.665286][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 855.673363][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 855.681534][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.689574][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 855.697721][T16761] ---[ end trace 7255277bc559c6d5 ]--- [ 855.703260][T16761] ------------[ cut here ]------------ [ 855.708872][T16761] refcount_t: addition on 0; use-after-free. [ 855.715137][T16761] WARNING: CPU: 0 PID: 16761 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 855.724818][T16761] Modules linked in: [ 855.728804][T16761] CPU: 0 PID: 16761 Comm: syz.2.5641 Tainted: G W syzkaller #0 [ 855.738078][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.749049][T16757] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 855.751812][T16761] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 855.764183][T16761] Code: 04 01 48 c7 c7 e0 4a 40 85 e8 b8 d3 3a 02 0f 0b eb df e8 0f 89 26 ff c6 05 ac 76 82 04 01 48 c7 c7 20 4a 40 85 e8 9c d3 3a 02 <0f> 0b eb c3 e8 f3 88 26 ff c6 05 91 76 82 04 01 48 c7 c7 80 4a 40 [ 855.784039][T16761] RSP: 0018:ffffc90000bd7950 EFLAGS: 00010246 [ 855.784414][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 855.784425][ T24] audit: type=1400 audit(1786047971.614:737): avc: denied { execute } for pid=16756 comm="syz.1.5644" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 855.790200][T16761] RAX: 53f932d0732e7400 RBX: 0000000000000002 RCX: 0000000000080000 [ 855.804303][ T24] audit: type=1400 audit(1786047971.614:738): avc: denied { remount } for pid=16756 comm="syz.1.5644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 855.818839][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 855.854097][T16761] RBP: ffffc90000bd7960 R08: ffffc90000bd72e7 R09: fffff5200017ae90 [ 855.862156][T16761] R10: dffffc0000000000 R11: fffff5200017ae5d R12: 0000000000000000 [ 855.870258][T16761] R13: ffff888117a2e068 R14: 0000000000000002 R15: 0000000000000000 [ 855.871237][T16757] EXT4-fs (loop1): re-mounted. Opts: (null) [ 855.878362][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 855.893383][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.900102][T16761] CR2: 00007ffdf0a0afa8 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 855.908201][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.916258][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.925222][T16761] Call Trace: [ 855.929948][T16761] kobject_get+0xfb/0x120 [ 855.934668][T16761] device_add+0x331/0xc00 [ 855.943915][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 855.950039][T16761] device_create+0x26c/0x300 [ 855.954784][T16761] ? root_device_unregister+0x80/0x80 [ 855.960729][T16761] create_function_device+0x60/0x70 [ 855.966072][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 855.971788][ T287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.982859][T16761] usb_get_function_instance+0xe2/0x2f0 [ 855.988463][ T287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.000096][T16761] function_make+0x118/0x350 [ 856.004864][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 856.011341][ T287] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 856.025448][T16761] ? mutex_trylock+0xb0/0xb0 [ 856.030103][T16761] ? configfs_mkdir+0x504/0xd90 [ 856.035498][T16761] configfs_mkdir+0x5d2/0xd90 [ 856.040345][ T287] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 856.050241][T16761] ? show_sid+0x1b0/0x1b0 [ 856.054709][T16761] ? configfs_lookup+0x500/0x500 [ 856.060406][ T287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.069175][T16761] ? __lookup_hash+0x122/0x250 [ 856.074412][T16761] ? security_inode_mkdir+0xbd/0x110 [ 856.091643][ T287] usb 7-1: config 0 descriptor?? [ 856.102414][T16761] vfs_mkdir+0x42c/0x600 [ 856.112733][T16761] do_mkdirat+0x14c/0x340 [ 856.121728][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 856.132212][T16761] do_syscall_64+0x31/0x40 [ 856.142297][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 856.166442][T16761] RIP: 0033:0x7f64d39190d9 [ 856.175318][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.196367][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 856.206101][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 856.214089][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 856.222185][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 856.230496][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.238549][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 856.258527][T16761] ---[ end trace 7255277bc559c6d6 ]--- [ 856.264007][T16761] ================================================================== [ 856.272070][T16761] BUG: KASAN: slab-out-of-bounds in get_device_parent+0x71/0x410 [ 856.279778][T16761] Read of size 8 at addr ffff888114426b00 by task syz.2.5641/16761 [ 856.287649][T16761] [ 856.289958][T16761] CPU: 1 PID: 16761 Comm: syz.2.5641 Tainted: G W syzkaller #0 [ 856.298773][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.308809][T16761] Call Trace: [ 856.312158][T16761] __dump_stack+0x21/0x24 [ 856.316466][T16761] dump_stack_lvl+0x1a7/0x208 [ 856.321121][T16761] ? show_regs_print_info+0x18/0x18 [ 856.326297][T16761] ? thaw_kernel_threads+0x220/0x220 [ 856.331556][T16761] print_address_description+0x7f/0x2c0 [ 856.337079][T16761] ? get_device_parent+0x71/0x410 [ 856.342141][T16761] kasan_report+0x100/0x140 [ 856.346625][T16761] ? get_device_parent+0x71/0x410 [ 856.351624][T16761] __asan_report_load8_noabort+0x14/0x20 [ 856.357236][T16761] get_device_parent+0x71/0x410 [ 856.362064][T16761] device_add+0x349/0xc00 [ 856.366367][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 856.371820][T16761] device_create+0x26c/0x300 [ 856.376389][T16761] ? root_device_unregister+0x80/0x80 [ 856.381739][T16761] create_function_device+0x60/0x70 [ 856.386911][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 856.391847][T16761] usb_get_function_instance+0xe2/0x2f0 [ 856.397380][T16761] function_make+0x118/0x350 [ 856.401968][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 856.408292][T16761] ? mutex_trylock+0xb0/0xb0 [ 856.412951][T16761] ? configfs_mkdir+0x504/0xd90 [ 856.417778][T16761] configfs_mkdir+0x5d2/0xd90 [ 856.422435][T16761] ? show_sid+0x1b0/0x1b0 [ 856.426767][T16761] ? configfs_lookup+0x500/0x500 [ 856.431683][T16761] ? __lookup_hash+0x122/0x250 [ 856.436460][T16761] ? security_inode_mkdir+0xbd/0x110 [ 856.441734][T16761] vfs_mkdir+0x42c/0x600 [ 856.445972][T16761] do_mkdirat+0x14c/0x340 [ 856.450300][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 856.455039][T16761] do_syscall_64+0x31/0x40 [ 856.459429][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 856.465293][T16761] RIP: 0033:0x7f64d39190d9 [ 856.469682][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.489280][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 856.497670][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 856.505620][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 856.513566][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 856.521514][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.529467][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 856.537431][T16761] [ 856.539738][T16761] Allocated by task 16504: [ 856.544131][T16761] __kasan_kmalloc+0xd4/0x100 [ 856.548824][T16761] __kmalloc+0x19f/0x330 [ 856.553113][T16761] kvmalloc_node+0x88/0x130 [ 856.557637][T16761] alloc_netdev_mqs+0x88/0xca0 [ 856.562400][T16761] rtnl_create_link+0x242/0x930 [ 856.567225][T16761] rtnl_newlink+0x11ae/0x1830 [ 856.571877][T16761] rtnetlink_rcv_msg+0x9e9/0xca0 [ 856.576837][T16761] netlink_rcv_skb+0x1e9/0x430 [ 856.581581][T16761] rtnetlink_rcv+0x1c/0x20 [ 856.585971][T16761] netlink_unicast+0x86c/0xa30 [ 856.590725][T16761] netlink_sendmsg+0x949/0xb70 [ 856.595517][T16761] __sys_sendto+0x467/0x620 [ 856.599998][T16761] __x64_sys_sendto+0xe5/0x100 [ 856.604749][T16761] do_syscall_64+0x31/0x40 [ 856.609227][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 856.615087][T16761] [ 856.617392][T16761] The buggy address belongs to the object at ffff888114426000 [ 856.617392][T16761] which belongs to the cache kmalloc-4k of size 4096 [ 856.631424][T16761] The buggy address is located 2816 bytes inside of [ 856.631424][T16761] 4096-byte region [ffff888114426000, ffff888114427000) [ 856.644847][T16761] The buggy address belongs to the page: [ 856.650496][T16761] page:ffffea0004510800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114420 [ 856.660728][T16761] head:ffffea0004510800 order:3 compound_mapcount:0 compound_pincount:0 [ 856.669093][T16761] flags: 0x4000000000010200(slab|head) [ 856.674533][T16761] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 856.683092][T16761] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 856.691645][T16761] page dumped because: kasan: bad access detected [ 856.698052][T16761] page_owner tracks the page as allocated [ 856.703768][T16761] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16504, ts 847184134098, free_ts 847118113366 [ 856.726225][T16761] prep_new_page+0x176/0x190 [ 856.730793][T16761] get_page_from_freelist+0x225f/0x23f0 [ 856.736307][T16761] __alloc_pages_nodemask+0x29a/0x640 [ 856.741652][T16761] new_slab+0x84/0x3f0 [ 856.745698][T16761] ___slab_alloc+0x2f8/0x4c0 [ 856.750278][T16761] __slab_alloc+0x63/0xa0 [ 856.754590][T16761] __kmalloc+0x1f9/0x330 [ 856.758807][T16761] kvmalloc_node+0x88/0x130 [ 856.763288][T16761] alloc_netdev_mqs+0x88/0xca0 [ 856.768032][T16761] rtnl_create_link+0x242/0x930 [ 856.772863][T16761] rtnl_newlink+0x11ae/0x1830 [ 856.777521][T16761] rtnetlink_rcv_msg+0x9e9/0xca0 [ 856.782462][T16761] netlink_rcv_skb+0x1e9/0x430 [ 856.787202][T16761] rtnetlink_rcv+0x1c/0x20 [ 856.791596][T16761] netlink_unicast+0x86c/0xa30 [ 856.796336][T16761] netlink_sendmsg+0x949/0xb70 [ 856.801089][T16761] page last free stack trace: [ 856.805811][T16761] free_unref_page_prepare+0x2b7/0x2d0 [ 856.811247][T16761] __free_pages+0x146/0x390 [ 856.815726][T16761] __vunmap+0x801/0x980 [ 856.819865][T16761] vfree+0x61/0x90 [ 856.823586][T16761] kcov_mmap+0x8f/0x130 [ 856.827718][T16761] mmap_file+0x60/0xb0 [ 856.831759][T16761] mmap_region+0x11fd/0x19c0 [ 856.836319][T16761] do_mmap+0x85f/0xf50 [ 856.840361][T16761] vm_mmap_pgoff+0x1f4/0x350 [ 856.844920][T16761] ksys_mmap_pgoff+0x16f/0x1e0 [ 856.849738][T16761] __x64_sys_mmap+0xfa/0x110 [ 856.854306][T16761] do_syscall_64+0x31/0x40 [ 856.858692][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 856.864553][T16761] [ 856.866853][T16761] Memory state around the buggy address: [ 856.872460][T16761] ffff888114426a00: 00 00 00 00 00 00 00 00 07 fc fc fc fc fc fc fc [ 856.880495][T16761] ffff888114426a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 856.888529][T16761] >ffff888114426b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 856.896566][T16761] ^ [ 856.900611][T16761] ffff888114426b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 856.908649][T16761] ffff888114426c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 856.916687][T16761] ================================================================== [ 856.924742][T16761] Disabling lock debugging due to kernel taint [ 856.931992][T16761] ------------[ cut here ]------------ [ 856.937523][T16761] kobject: '(null)' (ffff888114426800): is not initialized, yet kobject_get() is being called. [ 856.948097][T16761] WARNING: CPU: 1 PID: 16761 at lib/kobject.c:666 kobject_add_internal+0x12e/0xde0 [ 856.953447][ T24] audit: type=1400 audit(1786047972.689:739): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.957419][T16761] Modules linked in: [ 856.982560][T16761] CPU: 1 PID: 16761 Comm: syz.2.5641 Tainted: G B W syzkaller #0 [ 856.991653][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.001757][T16761] RIP: 0010:kobject_add_internal+0x12e/0xde0 [ 857.007805][T16761] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 15 18 45 ff 49 8b 34 24 48 c7 c7 00 9d 41 85 4c 89 e2 e8 82 ed 1e 02 <0f> 0b e9 04 01 00 00 e8 d6 a2 0a ff b8 fe ff ff ff e9 b0 09 00 00 [ 857.027509][T16761] RSP: 0018:ffffc90000bd77d8 EFLAGS: 00010246 [ 857.033781][T16761] RAX: 53f932d0732e7400 RBX: ffff888105788e00 RCX: 0000000000080000 [ 857.041962][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 857.050073][T16761] RBP: ffffc90000bd7830 R08: ffffc90000bd7167 R09: fffff5200017ae60 [ 857.058066][T16761] R10: dffffc0000000000 R11: fffff5200017ae2d R12: ffff888114426800 [ 857.066086][T16761] R13: ffff888105788e18 R14: 0000000000000000 R15: 1ffff11020af11c0 [ 857.074100][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 857.083074][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.089657][T16761] CR2: 0000001b3421aff8 CR3: 00000001113a7000 CR4: 00000000003506a0 [ 857.097655][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.105781][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 857.113788][T16761] Call Trace: [ 857.117111][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 857.122559][T16761] kobject_add+0x165/0x230 [ 857.127024][T16761] ? kobject_init+0x1d0/0x1d0 [ 857.131698][T16761] ? __kasan_check_write+0x14/0x20 [ 857.136812][T16761] ? kobject_init+0x83/0x1d0 [ 857.141397][T16761] get_device_parent+0x3a6/0x410 [ 857.146367][T16761] device_add+0x349/0xc00 [ 857.150719][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 857.156162][T16761] device_create+0x26c/0x300 [ 857.160766][T16761] ? root_device_unregister+0x80/0x80 [ 857.166136][T16761] create_function_device+0x60/0x70 [ 857.171485][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 857.172144][ T287] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 857.176543][T16761] usb_get_function_instance+0xe2/0x2f0 [ 857.184070][ T287] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 857.189701][T16761] function_make+0x118/0x350 [ 857.196825][ T287] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 857.201734][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 857.208884][ T287] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 857.215234][T16761] ? mutex_trylock+0xb0/0xb0 [ 857.222734][ T287] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 857.227276][T16761] ? configfs_mkdir+0x504/0xd90 [ 857.234831][ T287] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 857.239473][T16761] configfs_mkdir+0x5d2/0xd90 [ 857.251797][T16761] ? show_sid+0x1b0/0x1b0 [ 857.256186][T16761] ? configfs_lookup+0x500/0x500 [ 857.261137][T16761] ? __lookup_hash+0x122/0x250 [ 857.265986][T16761] ? security_inode_mkdir+0xbd/0x110 [ 857.271257][T16761] vfs_mkdir+0x42c/0x600 [ 857.275501][T16761] do_mkdirat+0x14c/0x340 [ 857.279858][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 857.284605][T16761] do_syscall_64+0x31/0x40 [ 857.289018][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 857.294898][T16761] RIP: 0033:0x7f64d39190d9 [ 857.299315][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.319012][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 857.327412][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 857.335391][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 857.343364][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 857.351341][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.359316][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 857.367307][T16761] ---[ end trace 7255277bc559c6d7 ]--- [ 857.372791][T16761] ------------[ cut here ]------------ [ 857.378234][T16761] refcount_t: saturated; leaking memory. [ 857.383952][T16761] WARNING: CPU: 1 PID: 16761 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 857.393419][T16761] Modules linked in: [ 857.397299][T16761] CPU: 1 PID: 16761 Comm: syz.2.5641 Tainted: G B W syzkaller #0 [ 857.406143][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.416214][T16761] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 857.422347][T16761] Code: 04 01 48 c7 c7 a0 49 40 85 e8 64 d3 3a 02 0f 0b eb 8b e8 bb 88 26 ff c6 05 57 76 82 04 01 48 c7 c7 a0 49 40 85 e8 48 d3 3a 02 <0f> 0b e9 6c ff ff ff e8 9c 88 26 ff c6 05 3c 76 82 04 01 48 c7 c7 [ 857.441970][T16761] RSP: 0018:ffffc90000bd77b8 EFLAGS: 00010246 [ 857.448374][T16761] RAX: 53f932d0732e7400 RBX: 0000000000000001 RCX: 0000000000080000 [ 857.456637][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 857.464696][T16761] RBP: ffffc90000bd77c8 R08: ffffc90000bd7147 R09: fffff5200017ae5c [ 857.472716][T16761] R10: dffffc0000000000 R11: fffff5200017ae29 R12: 00000000c0000000 [ 857.480696][T16761] R13: ffff888105788e18 R14: 0000000000000001 R15: ffff888114426838 [ 857.488695][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 857.497625][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.504207][T16761] CR2: 000055556d144988 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 857.512187][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.520166][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 857.528123][T16761] Call Trace: [ 857.531425][T16761] kobject_add_internal+0xc44/0xde0 [ 857.536613][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 857.542094][T16761] kobject_add+0x165/0x230 [ 857.546512][T16761] ? kobject_init+0x1d0/0x1d0 [ 857.551173][T16761] ? __kasan_check_write+0x14/0x20 [ 857.556284][T16761] ? kobject_init+0x83/0x1d0 [ 857.560864][T16761] get_device_parent+0x3a6/0x410 [ 857.565896][T16761] device_add+0x349/0xc00 [ 857.570225][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 857.575689][T16761] device_create+0x26c/0x300 [ 857.580282][T16761] ? root_device_unregister+0x80/0x80 [ 857.585659][T16761] create_function_device+0x60/0x70 [ 857.590855][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 857.595808][T16761] usb_get_function_instance+0xe2/0x2f0 [ 857.601345][T16761] function_make+0x118/0x350 [ 857.605957][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 857.612276][T16761] ? mutex_trylock+0xb0/0xb0 [ 857.616908][T16761] ? configfs_mkdir+0x504/0xd90 [ 857.621748][T16761] configfs_mkdir+0x5d2/0xd90 [ 857.626407][T16761] ? show_sid+0x1b0/0x1b0 [ 857.630760][T16761] ? configfs_lookup+0x500/0x500 [ 857.635699][T16761] ? __lookup_hash+0x122/0x250 [ 857.640486][T16761] ? security_inode_mkdir+0xbd/0x110 [ 857.645861][T16761] vfs_mkdir+0x42c/0x600 [ 857.650112][T16761] do_mkdirat+0x14c/0x340 [ 857.654428][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 857.659209][T16761] do_syscall_64+0x31/0x40 [ 857.663620][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 857.669496][T16761] RIP: 0033:0x7f64d39190d9 [ 857.673914][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.693526][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 857.702035][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 857.710031][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 857.718015][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 857.726004][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.734000][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 857.741963][T16761] ---[ end trace 7255277bc559c6d8 ]--- [ 857.747430][T16761] ------------[ cut here ]------------ [ 857.752878][T16761] kobject: '(null)' (ffff888114426800): is not initialized, yet kobject_put() is being called. [ 857.763412][T16761] WARNING: CPU: 1 PID: 16761 at lib/kobject.c:760 kobject_put+0x8a/0x270 [ 857.771950][T16761] Modules linked in: [ 857.775896][T16761] CPU: 0 PID: 16761 Comm: syz.2.5641 Tainted: G B W syzkaller #0 [ 857.784799][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.794898][T16761] RIP: 0010:kobject_put+0x8a/0x270 [ 857.800025][T16761] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 68 2f 45 ff 48 8b 33 48 c7 c7 80 9d 41 85 48 89 da e8 d6 04 1f 02 <0f> 0b eb 0f e8 2d ba 0a ff e9 7c 01 00 00 e8 23 ba 0a ff 4c 8d 7b [ 857.819659][T16761] RSP: 0018:ffffc90000bd77a0 EFLAGS: 00010246 [ 857.825709][T16761] RAX: 53f932d0732e7400 RBX: ffff888114426800 RCX: 0000000000080000 [ 857.833688][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 857.841674][T16761] RBP: ffffc90000bd77c8 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 857.849674][T16761] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff888114426800 [ 857.857663][T16761] R13: ffff88811442683c R14: 1ffff11022884d07 R15: 0000000000000000 [ 857.865655][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 857.874605][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.881180][T16761] CR2: 00007f560513eff8 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 857.889161][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.897297][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 857.905275][T16761] Call Trace: [ 857.908561][T16761] kobject_add_internal+0xb52/0xde0 [ 857.913736][T16761] kobject_add+0x165/0x230 [ 857.918155][T16761] ? kobject_init+0x1d0/0x1d0 [ 857.922831][T16761] ? __kasan_check_write+0x14/0x20 [ 857.927949][T16761] ? kobject_init+0x83/0x1d0 [ 857.932536][T16761] get_device_parent+0x3a6/0x410 [ 857.937484][T16761] device_add+0x349/0xc00 [ 857.941805][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 857.947243][T16761] device_create+0x26c/0x300 [ 857.951838][T16761] ? root_device_unregister+0x80/0x80 [ 857.957205][T16761] create_function_device+0x60/0x70 [ 857.962429][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 857.967357][T16761] usb_get_function_instance+0xe2/0x2f0 [ 857.972899][T16761] function_make+0x118/0x350 [ 857.977482][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 857.983817][T16761] ? mutex_trylock+0xb0/0xb0 [ 857.988403][T16761] ? configfs_mkdir+0x504/0xd90 [ 857.993261][T16761] configfs_mkdir+0x5d2/0xd90 [ 857.997946][T16761] ? show_sid+0x1b0/0x1b0 [ 858.002313][T16761] ? configfs_lookup+0x500/0x500 [ 858.007258][T16761] ? __lookup_hash+0x122/0x250 [ 858.012045][T16761] ? security_inode_mkdir+0xbd/0x110 [ 858.017325][T16761] vfs_mkdir+0x42c/0x600 [ 858.021545][T16761] do_mkdirat+0x14c/0x340 [ 858.025887][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 858.030650][T16761] do_syscall_64+0x31/0x40 [ 858.035075][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 858.040985][T16761] RIP: 0033:0x7f64d39190d9 [ 858.045646][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.065381][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 858.073786][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 858.081781][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 858.089768][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 858.097770][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.105735][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 858.113735][T16761] ---[ end trace 7255277bc559c6d9 ]--- [ 858.119204][T16761] ------------[ cut here ]------------ [ 858.124642][T16761] refcount_t: underflow; use-after-free. [ 858.130738][T16761] WARNING: CPU: 0 PID: 16761 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 858.140226][T16761] Modules linked in: [ 858.144119][T16761] CPU: 0 PID: 16761 Comm: syz.2.5641 Tainted: G B W syzkaller #0 [ 858.152966][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.163043][T16761] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 858.169180][T16761] Code: 04 01 48 c7 c7 20 4a 40 85 e8 9c d3 3a 02 0f 0b eb c3 e8 f3 88 26 ff c6 05 91 76 82 04 01 48 c7 c7 80 4a 40 85 e8 80 d3 3a 02 <0f> 0b eb a7 e8 d7 88 26 ff c6 05 72 76 82 04 01 48 c7 c7 a0 49 40 [ 858.188810][T16761] RSP: 0018:ffffc90000bd7780 EFLAGS: 00010246 [ 858.194907][T16761] RAX: 53f932d0732e7400 RBX: 0000000000000003 RCX: 0000000000080000 [ 858.202870][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 858.210876][T16761] RBP: ffffc90000bd7790 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 858.218864][T16761] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 00000000c0000000 [ 858.226843][T16761] R13: ffff88811442683c R14: 0000000000000003 R15: ffff888114426838 [ 858.234837][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 858.243798][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.250386][T16761] CR2: 00007f560513eff8 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 858.258373][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 858.266340][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 858.274321][T16761] Call Trace: [ 858.277601][T16761] kobject_put+0x231/0x270 [ 858.282026][T16761] kobject_add_internal+0xb52/0xde0 [ 858.287222][T16761] kobject_add+0x165/0x230 [ 858.291657][T16761] ? kobject_init+0x1d0/0x1d0 [ 858.296328][T16761] ? __kasan_check_write+0x14/0x20 [ 858.301516][T16761] ? kobject_init+0x83/0x1d0 [ 858.306096][T16761] get_device_parent+0x3a6/0x410 [ 858.311061][T16761] device_add+0x349/0xc00 [ 858.315390][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 858.320824][T16761] device_create+0x26c/0x300 [ 858.325432][T16761] ? root_device_unregister+0x80/0x80 [ 858.330799][T16761] create_function_device+0x60/0x70 [ 858.336022][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 858.340968][T16761] usb_get_function_instance+0xe2/0x2f0 [ 858.346513][T16761] function_make+0x118/0x350 [ 858.351110][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 858.357447][T16761] ? mutex_trylock+0xb0/0xb0 [ 858.362024][T16761] ? configfs_mkdir+0x504/0xd90 [ 858.366885][T16761] configfs_mkdir+0x5d2/0xd90 [ 858.371565][T16761] ? show_sid+0x1b0/0x1b0 [ 858.375901][T16761] ? configfs_lookup+0x500/0x500 [ 858.380832][T16761] ? __lookup_hash+0x122/0x250 [ 858.385576][T16761] ? security_inode_mkdir+0xbd/0x110 [ 858.390868][T16761] vfs_mkdir+0x42c/0x600 [ 858.395112][T16761] do_mkdirat+0x14c/0x340 [ 858.399493][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 858.404274][T16761] do_syscall_64+0x31/0x40 [ 858.408706][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 858.414589][T16761] RIP: 0033:0x7f64d39190d9 [ 858.419005][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.438618][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 858.447033][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 858.455017][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 858.463003][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 858.470967][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.478955][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 858.486957][T16761] ---[ end trace 7255277bc559c6da ]--- [ 858.492408][T16761] kobject_add_internal failed for android_usb (error: -2 parent: (null)) [ 858.500917][T16761] ------------[ cut here ]------------ [ 858.502143][ T287] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 858.518720][T16761] kobject: '(null)' (ffff888114426800): is not initialized, yet kobject_put() is being called. [ 858.518819][T16761] WARNING: CPU: 0 PID: 16761 at lib/kobject.c:760 kobject_put+0x8a/0x270 [ 858.537484][T16761] Modules linked in: [ 858.541396][T16761] CPU: 0 PID: 16761 Comm: syz.2.5641 Tainted: G B W syzkaller #0 [ 858.550291][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.562114][T16761] RIP: 0010:kobject_put+0x8a/0x270 [ 858.567346][T16761] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 68 2f 45 ff 48 8b 33 48 c7 c7 80 9d 41 85 48 89 da e8 d6 04 1f 02 <0f> 0b eb 0f e8 2d ba 0a ff e9 7c 01 00 00 e8 23 ba 0a ff 4c 8d 7b [ 858.587088][T16761] RSP: 0018:ffffc90000bd7960 EFLAGS: 00010246 [ 858.593851][T16761] RAX: 53f932d0732e7400 RBX: ffff888114426800 RCX: 0000000000080000 [ 858.601848][T16761] RDX: ffffc90004106000 RSI: 000000000007ffff RDI: 0000000000080000 [ 858.609824][T16761] RBP: ffffc90000bd7988 R08: 0000000000000003 R09: 0000000000000004 [ 858.618285][T16761] R10: dffffc0000000000 R11: fffff5200017aecc R12: fffffffffffffffe [ 858.631028][T16761] R13: ffff88811442683c R14: 1ffff11022884d07 R15: 0000000000000000 [ 858.639066][T16761] FS: 00007f64d23726c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 858.648364][T16761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.654985][T16761] CR2: 00007f560513eff8 CR3: 00000001113a7000 CR4: 00000000003506b0 [ 858.662956][T16761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 858.670966][T16761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 858.679026][T16761] Call Trace: [ 858.682377][T16761] device_add+0x36f/0xc00 [ 858.686763][T16761] ? kobject_set_name_vargs+0xca/0x110 [ 858.692264][T16761] device_create+0x26c/0x300 [ 858.699604][T16761] ? root_device_unregister+0x80/0x80 [ 858.705043][T16761] create_function_device+0x60/0x70 [ 858.710303][T16761] f_midi_alloc_inst+0x1a8/0x380 [ 858.715263][T16761] usb_get_function_instance+0xe2/0x2f0 [ 858.720886][T16761] function_make+0x118/0x350 [ 858.725501][T16761] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 858.731935][T16761] ? mutex_trylock+0xb0/0xb0 [ 858.736617][T16761] ? configfs_mkdir+0x504/0xd90 [ 858.741539][T16761] configfs_mkdir+0x5d2/0xd90 [ 858.746282][T16761] ? show_sid+0x1b0/0x1b0 [ 858.753431][T16761] ? configfs_lookup+0x500/0x500 [ 858.758439][T16761] ? __lookup_hash+0x122/0x250 [ 858.763264][T16761] ? security_inode_mkdir+0xbd/0x110 [ 858.768570][T16761] vfs_mkdir+0x42c/0x600 [ 858.772875][T16761] do_mkdirat+0x14c/0x340 [ 858.777235][T16761] __x64_sys_mkdirat+0x7b/0x90 [ 858.782067][T16761] do_syscall_64+0x31/0x40 [ 858.786524][T16761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 858.792772][T16761] RIP: 0033:0x7f64d39190d9 [ 858.799404][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.820013][T16761] RSP: 002b:00007f64d2372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 858.828574][T16761] RAX: ffffffffffffffda RBX: 00007f64d3ba0fa0 RCX: 00007f64d39190d9 [ 858.836767][T16761] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 858.844790][T16761] RBP: 00007f64d39b0024 R08: 0000000000000000 R09: 0000000000000000 [ 858.857914][ T20] usb 7-1: USB disconnect, device number 5 [ 858.858324][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.871766][T16761] R13: 00007f64d3ba1038 R14: 00007f64d3ba0fa0 R15: 00007fff7d2b7fc8 [ 858.879798][T16761] ---[ end trace 7255277bc559c6db ]--- [ 859.177498][ T9] device bridge_slave_1 left promiscuous mode [ 859.183653][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.191454][ T9] device bridge_slave_0 left promiscuous mode [ 859.197705][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.206167][ T9] device veth1_macvtap left promiscuous mode [ 859.212246][ T9] device veth0_vlan left promiscuous mode