last executing test programs: 3m41.997135144s ago: executing program 32 (id=608): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e5f"], 0x0, 0x43}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0xfffffffffffffffd}, 0x10) 3m39.484381384s ago: executing program 33 (id=675): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) 3m31.160685134s ago: executing program 34 (id=890): socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000009300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000009340)) timer_settime(0x0, 0x0, &(0x7f0000009380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) readv(r1, &(0x7f00000093c0)=[{&(0x7f0000009400)=""/33, 0x21}], 0x1) 3m31.013275557s ago: executing program 35 (id=893): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92f6, 0x1000, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x6, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x20000000000000dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m18.37912829s ago: executing program 36 (id=1216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 3m16.515015284s ago: executing program 37 (id=1278): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x2, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x9ffffffc, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x881, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x0, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0x1, 0x0, 0x4, 0x10, 0x5, 0xfffffffe, 0xfff, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r0, 0x5501) read$usbmon(r1, &(0x7f0000000140)=""/47, 0x2f) 3m15.980129797s ago: executing program 38 (id=1294): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='}m', 0x2}, {&(0x7f00000001c0)="69ad52", 0x3}], 0x2) 3m15.155382317s ago: executing program 39 (id=1305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/207, 0xcf}, 0x1}, {{&(0x7f0000000600)=@nfc, 0xfffffffffffffedd, &(0x7f00000014c0), 0x0, &(0x7f0000001500)=""/186, 0xba}, 0xfffffffb}], 0x2, 0x10020, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m10.929363998s ago: executing program 40 (id=1425): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000540)={0x0, 0xb4a7, 0x0, 0xfffffffe, 0x20000}, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m49.372629475s ago: executing program 41 (id=1965): syz_genetlink_get_family_id$tipc2(&(0x7f0000006180), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0x2000884, &(0x7f0000000400)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="94b9fec34de487419241", @ANYBLOB="067f3c8857bfcaf4e8e710f8e564a243ed26ec659147d24358dac8fd036df9211a851697989e38c933e795b8c800ae34"], 0x1, 0x28d, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m36.23752169s ago: executing program 42 (id=2335): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000000)={0x4, 0xf7, 0x80000}, 0x20) 2m33.111885364s ago: executing program 2 (id=2438): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000440)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x8, 0x5, 0x400, 0x3df655c1, 0x6, 0x1, 0x180, 0x8}, 0x0, 0x0, 0x0, 0x0) 2m33.043867126s ago: executing program 2 (id=2439): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000003c0)={0x2002, {{0x2, 0x4e25, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) 2m33.026967166s ago: executing program 2 (id=2440): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0xa9, 0x5, 0xfffff034}, {0x6, 0xfa, 0x2, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000280)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m33.005234097s ago: executing program 2 (id=2441): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2c2, &(0x7f0000000ec0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mount$bind(0x0, &(0x7f0000001280)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2200000, &(0x7f0000000540)={[{@discard}, {@journal_dev}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x2, 0x583, &(0x7f0000001580)="$eJzs3V9rW+UfAPDvSZvu7++3DsZQL6SwCydz6dr6Z4KweSk6HOj9DG1WRtNlNOlY62DbhQPxRoYg4kB8Ad57OXwB+ioGOhgyil54UznpyRbbpEm7jHY7nw+c7XlyTvOcJ8/5PvmecxISQG6Npf8UIl6OiK+TiENt64YjWzm2tt3Ko+vT6ZLE6uonfyaRZI+1tk+y/w9klZci4pcvIk4UNrZbX1qeK1erlYWsPt6YvzJeX1o+eWm+PFuZrVyenJo6/dbU5LvvvD2wvr5+/u/vPr73wemvjq18+9ODw3eSOBsHs3Xt/ehqT88tbrZXxmIse02KcXbdhhNb2fHnQLLTO8C2DGVxXox0DjgUQ1nUAy++GxGxCuRUIv4hp1p5QOvcvq/z4BfIw/fXToA29n947dpI7G2eG+1fSf5zZpSe744OoP20jZ//uHsnXaLHdYgbA2gPoOXmrYg4NTy8cf5Lsvmvk5G+nvtU8+Lx5ta3kbf3H9hJ99L8541O+U/hcf4THfKfAx1idzt6x3/hwQCa6SrN/97rmP8+nrpGh7La/5o5XzG5eKlaORUR/4+I41Hck9Y3u59zeuX+ard17flfuqTtt3LBbD8eDK+77zRTbpSfps/tHt6KeOVJ/pvEhvl/bzPXXT/+6etxPi38+mXPNo5W7r7abV3v/rcbfAa8+mPEax3H/8kdrWTz+5PjzeNhvHVUbPTX7aO/dWt/a/0fvHT892/e/9Gk/X5tfett/LD3n0q3dds9/keST5vlViZyrdxoLExEjCQfbXx88snftuqt7dP+Hz+2+fzX6fjfFxGf9dn/20dud910N4z/zJbGf+uF+x9+/n239vsb/zebpePZI/3Mf/3u4NO8dgAAAAAAALDbFCLiYCSF0uNyoVAqrX2+40jsL1Rr9caJi7XFyzPR/K7saBQLrTvdh9o+DzGRfR62VZ9cV5+KiMMR8c3Qvma9NF2rzux05wEAAAAAAAAAAAAAAAAAAGCXONDl+/+p34d2eu+AZ85PfkN+9Yz/QfzSE7Aref+H/BL/kF/iH3KpeYlf/EN+iX/IL/EP+SX+Ib/EPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAzU+XPn0mV15dH16bQ+c3Vpca529eRIRJTmF6dL07WFK6XZWm22WilN1+Z7PV+1VrsyMRmL18YblXpjvL60fGG+tni5ceHSfHm2cqFSbG1YfNY9AwAAAAAAAAAAAAAAAAAAgOdHfWl5rlytVhYUuhbOxK7YjW0Xkl6jfCY7GObK1ZHo95kjKwzvfAcVnkFhhycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjzbwAAAP//2MgyXA==") openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file1\x00', 0x80342, 0xcc) 2m32.937404128s ago: executing program 2 (id=2444): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write(r1, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c5640101026401010104d204d2000003e800000001501003e81194000061616161", 0x3a) 2m32.823254141s ago: executing program 2 (id=2445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r3, &(0x7f0000000540)=""/4114, 0x6e3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000500)=@arm64={0xc4, 0x8, 0x40, '\x00', 0x7e9ab0ca}) 2m32.822481631s ago: executing program 43 (id=2445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r3, &(0x7f0000000540)=""/4114, 0x6e3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000500)=@arm64={0xc4, 0x8, 0x40, '\x00', 0x7e9ab0ca}) 2m18.547850913s ago: executing program 5 (id=2750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 2m18.24978552s ago: executing program 5 (id=2754): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m18.195829302s ago: executing program 5 (id=2757): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m15.178224674s ago: executing program 5 (id=2809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "421980", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) socket(0x80000000000000a, 0x2, 0x0) 2m15.112829166s ago: executing program 5 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000380)={0x1522a900, 0x0, 0x0, 0xfffffffffffffffd, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000400)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2m15.004165298s ago: executing program 5 (id=2817): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000040), 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000080)="010000010200000000000000", 0xc) socket$key(0xf, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m0.008628968s ago: executing program 44 (id=2817): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000040), 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000080)="010000010200000000000000", 0xc) socket$key(0xf, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m54.569003678s ago: executing program 7 (id=3212): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f00000004c0)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000007c0)) 1m54.227316946s ago: executing program 7 (id=3216): r0 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x6, 0x0, 0x2180bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r4, r2, 0x15, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r3}}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r5, 0x107, 0xd, 0x0, 0xffffffffffffffff) 1m54.147224778s ago: executing program 7 (id=3217): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'xfrm0\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.105731139s ago: executing program 7 (id=3219): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1a00444, &(0x7f0000000a40)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x100, 0x62) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='27', 0x2) write$P9_RGETLOCK(r0, &(0x7f0000000300)=ANY=[], 0x200002e6) 1m53.64398305s ago: executing program 7 (id=3223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x97, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d00), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000d40)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000d80)=r0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000000f00)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000001080)=r3, 0x4) 1m53.509111053s ago: executing program 7 (id=3231): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0x3, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x2, 0x4237, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2404c081, &(0x7f00000003c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) 1m53.412427976s ago: executing program 45 (id=3231): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0x3, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x2, 0x4237, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2404c081, &(0x7f00000003c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) 1m47.641334704s ago: executing program 0 (id=3344): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') statx(r2, &(0x7f0000000280)='./file0\x00', 0x1000, 0x80, 0x0) 1m47.517468477s ago: executing program 0 (id=3345): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000001280), &(0x7f00000012c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000001300)) chdir(&(0x7f0000001340)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001380)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000013c0)=@v2={0x2, @aes128, 0x3, '\x00', @b}) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 1m47.179139455s ago: executing program 0 (id=3352): unshare(0x24020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000012c0)={'bridge0\x00', &(0x7f0000001300)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) 1m46.98204743s ago: executing program 0 (id=3355): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000bc0)='./bus\x00', 0x182) mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c40)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000540)="d422e306701960a0eed1010293fd34b59fc9300589751a7027ab2a65824d7c0b5d1f753f6ba0172568db62d9115451656dafed4e796e9602531040cf18e4c6ad789acf18b9adf19d1224c5d2b24913b66e6533f66fdbc3e0892383966abc1ce7a2c0680092d80bcff638bdad008d99638f5a1d1ec29d681ddcee35b3c6510d1e707c5d", 0x83) sendfile(r2, r1, 0x0, 0x3ffff) fallocate(r0, 0x0, 0x0, 0x2000402) 1m42.735462932s ago: executing program 0 (id=3372): mount(0x0, 0x0, &(0x7f0000000140)='bpf\x00', 0x14011, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) mount$tmpfs(0x0, 0x0, 0x0, 0x2210081, &(0x7f0000001900)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x2, 0x2}) 1m42.291098652s ago: executing program 0 (id=3384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m42.247665623s ago: executing program 46 (id=3384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m40.392391358s ago: executing program 1 (id=3420): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x67, 0x0, 0xf, 0x11, 0x0, @local, @empty=0xe0000001}, {0x4e04, 0x4e20, 0x8}}}}}, 0x0) 1m40.360635568s ago: executing program 1 (id=3423): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m39.46126131s ago: executing program 1 (id=3438): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000500)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e00)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000e40)={0x0, 0x1, 0x101, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000e80)={0x0, 0x0, 0x76, 0x6031}) fcntl$lock(r0, 0x25, &(0x7f0000000ec0)={0x0, 0x0, 0x76, 0x6031}) 1m39.333528583s ago: executing program 1 (id=3439): syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000980)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m39.239223405s ago: executing program 1 (id=3440): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) 1m39.103088159s ago: executing program 1 (id=3442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m38.954612672s ago: executing program 47 (id=3442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.151191914s ago: executing program 4 (id=5498): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000080)={0x8, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) 3.130025085s ago: executing program 8 (id=5500): r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x400017e) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) 3.091681135s ago: executing program 8 (id=5502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40010000100033062cbd708000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000050068a2fa020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d332000000000000000000000000000000000000010100000000000000030000000000000009000000000000000900000000000000010001000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a0000000000000001000000000000c000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/217], 0x140}, 0x1, 0x0, 0x0, 0x28044}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write(r1, 0x0, 0x0) 3.015139098s ago: executing program 8 (id=5504): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 2.947236579s ago: executing program 3 (id=5508): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2402c081}, 0x8010) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="f0490cf86d758378da664eb72398a067e0c7d8213f38bb0cfad62fe14e75d9e2d695575e72c52b9113b5200585ba14ee04dab121e2263e5f00f7747466d3e576e1c22c606dbb33367dbd53d7c23c86f362bc3f1e5ae11da10782f09d5f2d63d119cfeb08dfe47af6286e9ccfb9d552871fabebc1b77fe655305f3f3ed966c568df9b390ab35e69c08a9de44c9c3f269fd70bd78f8c6eac11cbe704", 0x9b}], 0x1}}], 0x1, 0x2090) 273.886414ms ago: executing program 9 (id=5513): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1, 0x4636}, {r2, 0xc198}, {r2, 0x8023}], 0x3, 0x0, 0x0, 0x0) close(r0) 273.480664ms ago: executing program 4 (id=5514): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) 273.221334ms ago: executing program 9 (id=5515): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/19, 0x13}, 0xfffffc00}], 0x1, 0x40000022, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x408003, &(0x7f0000000180)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@discard}, {@nouid32}, {@grpjquota}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400}, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000400)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000c080) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x4000)=nil) 272.419154ms ago: executing program 4 (id=5516): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xfe, 0x259, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101e42, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x400) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000540)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000001100)={0x2020}, 0x2020) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 271.306884ms ago: executing program 8 (id=5518): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0xfffffe41, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x6, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 271.188314ms ago: executing program 6 (id=5519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x10000008) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r1, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) 270.900964ms ago: executing program 8 (id=5520): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 270.665294ms ago: executing program 3 (id=5521): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 269.052884ms ago: executing program 8 (id=5522): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x149800, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 268.946554ms ago: executing program 6 (id=5523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10080) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x8000}, 0x4) 268.416204ms ago: executing program 4 (id=5524): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd1000688) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) 268.133524ms ago: executing program 3 (id=5525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @timestamp, @sack_perm], 0x8) sendmsg(r0, &(0x7f0000008500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="c8986d", 0x3}, {&(0x7f0000000240)="371d56d783ac89bc8ee8586606beb0e7f90aacc606a17b8df102ec397f69cbbde070410f883f442e4487645d2be9", 0x2e}], 0x2}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 267.103074ms ago: executing program 9 (id=5528): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xffffffff) userfaultfd(0x80001) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x4d, r4, 0x10, {0xef, 0x1f}, 0x81}, 0x1) 258.986714ms ago: executing program 6 (id=5526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 243.182754ms ago: executing program 3 (id=5527): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f0000044440)='./dev\x00', &(0x7f0000044480)='devtmpfs\x00', 0x0, 0x0) 232.036025ms ago: executing program 9 (id=5529): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 217.611845ms ago: executing program 6 (id=5530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 217.361245ms ago: executing program 4 (id=5531): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 206.179016ms ago: executing program 9 (id=5532): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x4800) setns(0xc9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 205.069485ms ago: executing program 3 (id=5542): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r2, 0x0, 0x0, 0x4000000}]) 189.397476ms ago: executing program 4 (id=5533): mkdirat(0xffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000006c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r0, &(0x7f0000000700)=0x1, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 188.152616ms ago: executing program 6 (id=5534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) 184.990006ms ago: executing program 9 (id=5535): r0 = gettid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) 93.803258ms ago: executing program 3 (id=5536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x81fd, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004100)=ANY=[@ANYBLOB="b41300001a0031032cbd7000fcdbdf2520010000000000000000000000000002fe80000000000000000000000000002e4e2300014e2100020a0080008b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d33c0000007f00000100000000000000000000000005000000000000004000000000000000070000000000000081000000000000000700000000000000ffffffffffffff7f0700000000000000000000800000000008000000000000006f0f00000000000008000000000000000500000000000000070a0000090000000900000028bd7000053500000a00040f01000000000000000c000f001ed20000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0700000028001a00fe8000000000000000000000000000aa7f00000100000000000000000000000002000200350101"], 0x13b4}}, 0x0) 0s ago: executing program 6 (id=5537): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f0000000080)='./sys\x00') r2 = open(&(0x7f0000000040)='./debug\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000002080)=""/4096, 0x1000) kernel console output (not intermixed with test programs): an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.203180][ T9391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.247608][ T28] audit: type=1400 audit(2000000121.130:7649): avc: denied { write } for pid=9390 comm="syz.4.3618" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.270582][ T9397] kvm [9396]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 184.285400][ T9397] kvm [9396]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 184.298285][ T28] audit: type=1400 audit(2000000121.150:7650): avc: denied { add_name } for pid=9390 comm="syz.4.3618" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.301189][ T9397] kvm [9396]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 184.332381][ T9397] kvm [9396]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 184.341236][ T9397] kvm [9396]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 184.354274][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 184.394224][ T9405] xt_hashlimit: size too large, truncated to 1048576 [ 184.449403][ T9410] overlayfs: failed to clone upperpath [ 184.458317][ T28] audit: type=1400 audit(2000000121.340:7651): avc: denied { mounton } for pid=9412 comm="syz.8.3626" path="/203/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.481037][ T9413] overlayfs: statfs failed on './file0' [ 184.502128][ T28] audit: type=1400 audit(2000000121.340:7652): avc: denied { getattr } for pid=9412 comm="syz.8.3626" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.540436][ T28] audit: type=1400 audit(2000000121.420:7653): avc: denied { unmount } for pid=6443 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.584710][ T9420] loop8: detected capacity change from 0 to 512 [ 184.619562][ T9420] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 184.660419][ T9420] EXT4-fs (loop8): 1 truncate cleaned up [ 184.671046][ T9420] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 184.862863][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 185.332017][ T9448] loop8: detected capacity change from 0 to 40427 [ 185.352311][ T9448] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 185.367842][ T9448] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 185.386487][ T9448] F2FS-fs (loop8): invalid crc value [ 185.407381][ T9448] F2FS-fs (loop8): Found nat_bits in checkpoint [ 185.516458][ T9448] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 185.523561][ T9448] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 187.073059][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'. [ 187.193297][ T9484] loop4: detected capacity change from 0 to 131072 [ 187.215918][ T9484] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 187.256614][ T9484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 187.275900][ T9484] F2FS-fs (loop4): invalid crc value [ 187.325674][ T9536] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 187.345870][ T9484] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.399794][ T9484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 187.409156][ T9484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 187.491843][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 187.524339][ T9550] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 187.906524][ T9564] ip_tables: iptables: counters copy to user failed while replacing table [ 188.321124][ T9584] FAULT_INJECTION: forcing a failure. [ 188.321124][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 188.370818][ T9584] CPU: 0 PID: 9584 Comm: syz.4.3673 Tainted: G W syzkaller #0 [ 188.379748][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.389862][ T9584] Call Trace: [ 188.393187][ T9584] [ 188.396158][ T9584] __dump_stack+0x21/0x24 [ 188.400663][ T9584] dump_stack_lvl+0x110/0x170 [ 188.405433][ T9584] ? __cfi_dump_stack_lvl+0x8/0x8 [ 188.410608][ T9584] dump_stack+0x15/0x24 [ 188.414826][ T9584] should_fail_ex+0x3bf/0x510 [ 188.419552][ T9584] ? __kernfs_new_node+0xe1/0x670 [ 188.424622][ T9584] __should_failslab+0xac/0xf0 [ 188.429440][ T9584] should_failslab+0x9/0x20 [ 188.433985][ T9584] kmem_cache_alloc+0x3b/0x320 [ 188.438793][ T9584] __kernfs_new_node+0xe1/0x670 [ 188.443695][ T9584] ? kernfs_new_node+0x260/0x260 [ 188.448761][ T9584] ? make_kgid+0x1c4/0x650 [ 188.453213][ T9584] ? __cfi_make_kgid+0x10/0x10 [ 188.458010][ T9584] ? sysfs_create_dir_ns+0x163/0x290 [ 188.463341][ T9584] ? __kasan_check_write+0x14/0x20 [ 188.468585][ T9584] ? _raw_spin_lock+0x94/0xf0 [ 188.473340][ T9584] kernfs_new_node+0x150/0x260 [ 188.478144][ T9584] __kernfs_create_file+0x4e/0x270 [ 188.483298][ T9584] sysfs_add_file_mode_ns+0x1ce/0x270 [ 188.488717][ T9584] sysfs_create_file_ns+0x128/0x1b0 [ 188.493957][ T9584] ? __cfi_sysfs_create_file_ns+0x10/0x10 [ 188.499724][ T9584] ? dev_fwnode+0x50/0x80 [ 188.504097][ T9584] device_add+0x4a2/0xec0 [ 188.508483][ T9584] netdev_register_kobject+0x18e/0x330 [ 188.514003][ T9584] ? raw_notifier_call_chain+0xfa/0x110 [ 188.519761][ T9584] register_netdevice+0xec9/0x1550 [ 188.524943][ T9584] ? __kmalloc_node+0xb2/0x1e0 [ 188.529752][ T9584] ? __cfi_register_netdevice+0x10/0x10 [ 188.535336][ T9584] ? alloc_netdev_mqs+0xb6d/0xfb0 [ 188.540410][ T9584] ? memcpy+0x56/0x70 [ 188.544428][ T9584] ? alloc_netdev_mqs+0xbea/0xfb0 [ 188.549486][ T9584] register_netdev+0x3e/0x50 [ 188.554119][ T9584] loopback_net_init+0x74/0x150 [ 188.559006][ T9584] ops_init+0x2ce/0x470 [ 188.563208][ T9584] setup_net+0x4b4/0xcd0 [ 188.567482][ T9584] ? copy_net_ns+0x5c0/0x5c0 [ 188.572115][ T9584] ? __kasan_kmalloc+0x95/0xb0 [ 188.576921][ T9584] ? copy_net_ns+0x185/0x5c0 [ 188.581556][ T9584] copy_net_ns+0x355/0x5c0 [ 188.586012][ T9584] create_new_namespaces+0x3a8/0x660 [ 188.591356][ T9584] unshare_nsproxy_namespaces+0x120/0x170 [ 188.597128][ T9584] ksys_unshare+0x4d5/0x850 [ 188.601707][ T9584] ? __cfi_ksys_unshare+0x10/0x10 [ 188.606808][ T9584] ? fpregs_restore_userregs+0x128/0x260 [ 188.612484][ T9584] __x64_sys_unshare+0x38/0x40 [ 188.617297][ T9584] x64_sys_call+0x767/0x9a0 [ 188.621846][ T9584] do_syscall_64+0x4c/0xa0 [ 188.626293][ T9584] ? clear_bhb_loop+0x30/0x80 [ 188.631004][ T9584] ? clear_bhb_loop+0x30/0x80 [ 188.635722][ T9584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.641661][ T9584] RIP: 0033:0x7f523e99e559 [ 188.646122][ T9584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.665759][ T9584] RSP: 002b:00007f523f7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.674216][ T9584] RAX: ffffffffffffffda RBX: 00007f523ec25fa0 RCX: 00007f523e99e559 [ 188.682228][ T9584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 188.690246][ T9584] RBP: 00007f523ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 188.698297][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.706305][ T9584] R13: 00007f523ec26038 R14: 00007f523ec25fa0 R15: 00007ffcc3064728 [ 188.714339][ T9584] [ 188.808386][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3688'. [ 188.829238][ T9595] device ip6gre1 entered promiscuous mode [ 188.852725][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.885843][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.895032][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.912320][ T9603] netlink: 'syz.9.3692': attribute type 12 has an invalid length. [ 189.463423][ T28] audit: type=1400 audit(2000000126.340:7654): avc: denied { wake_alarm } for pid=9653 comm="syz.8.3713" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.506254][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.692830][ T9669] overlayfs: failed to clone upperpath [ 189.746808][ T9676] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 189.778140][ T9678] overlayfs: failed to clone upperpath [ 189.926347][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.983689][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.000639][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 190.016211][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.036374][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 190.046767][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.055112][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.063914][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.072488][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.081069][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.089741][ T2265] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 190.579853][ T9719] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 190.638652][ T9721] SELinux: failed to load policy [ 190.812660][ T28] audit: type=1400 audit(2000000127.690:7655): avc: denied { remount } for pid=9744 comm="syz.4.3750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 190.861599][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 191.008276][ T9787] xt_hashlimit: size too large, truncated to 1048576 [ 191.343195][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3778'. [ 191.374431][ T9823] loop8: detected capacity change from 0 to 128 [ 191.394894][ T9823] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 191.420965][ T9823] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 191.430375][ T9823] FAT-fs (loop8): Filesystem has been set read-only [ 191.438348][ T9823] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 191.447462][ T9823] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 191.456353][ T9823] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 191.474253][ T6443] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 191.606548][ T28] audit: type=1326 audit(2000000128.490:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.6.3782" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f27c89982d7 code=0x0 [ 191.702085][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3789'. [ 191.722764][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3789'. [ 192.036691][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3798'. [ 192.556407][ T9942] loop4: detected capacity change from 0 to 1024 [ 192.586488][ T9942] EXT4-fs: Ignoring removed bh option [ 192.619025][ T9942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.649110][ T28] audit: type=1400 audit(2000000129.530:7657): avc: denied { map } for pid=9941 comm="syz.4.3827" path="/57/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.689065][ T9962] FAULT_INJECTION: forcing a failure. [ 192.689065][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 192.716289][ T9962] CPU: 1 PID: 9962 Comm: syz.8.3834 Tainted: G W syzkaller #0 [ 192.725221][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.735350][ T9962] Call Trace: [ 192.741792][ T9962] [ 192.744935][ T9962] __dump_stack+0x21/0x24 [ 192.749359][ T9962] dump_stack_lvl+0x110/0x170 [ 192.754107][ T9962] ? __cfi_dump_stack_lvl+0x8/0x8 [ 192.759222][ T9962] dump_stack+0x15/0x24 [ 192.763436][ T9962] should_fail_ex+0x3bf/0x510 [ 192.768155][ T9962] __should_failslab+0xac/0xf0 [ 192.772959][ T9962] should_failslab+0x9/0x20 [ 192.777534][ T9962] __kmem_cache_alloc_node+0x3d/0x2d0 [ 192.782954][ T9962] ? key_alloc+0x318/0xf00 [ 192.787420][ T9962] ? slab_post_alloc_hook+0x6d/0x2d0 [ 192.792788][ T9962] ? key_alloc+0x318/0xf00 [ 192.797253][ T9962] __kmalloc_node_track_caller+0xa1/0x1e0 [ 192.803105][ T9962] ? key_alloc+0x2d3/0xf00 [ 192.807568][ T9962] kmemdup+0x2b/0x60 [ 192.811503][ T9962] key_alloc+0x318/0xf00 [ 192.815802][ T9962] keyring_alloc+0x47/0xb0 [ 192.820255][ T9962] join_session_keyring+0x11d/0x430 [ 192.825510][ T9962] ? __se_sys_keyctl+0x931/0xe10 [ 192.830499][ T9962] __se_sys_keyctl+0xb2e/0xe10 [ 192.835322][ T9962] ? __x64_sys_keyctl+0xd0/0xd0 [ 192.840218][ T9962] ? do_futex+0x2e2/0x430 [ 192.844583][ T9962] ? __cfi_do_futex+0x10/0x10 [ 192.849471][ T9962] ? __kasan_check_write+0x14/0x20 [ 192.854624][ T9962] ? mutex_unlock+0x8f/0x230 [ 192.859269][ T9962] ? __se_sys_futex+0x136/0x310 [ 192.864171][ T9962] ? __this_cpu_preempt_check+0x13/0x20 [ 192.869762][ T9962] ? xfd_validate_state+0x70/0x150 [ 192.874923][ T9962] ? __kasan_check_write+0x14/0x20 [ 192.880080][ T9962] ? fpregs_restore_userregs+0x128/0x260 [ 192.885756][ T9962] __x64_sys_keyctl+0xbf/0xd0 [ 192.890483][ T9962] x64_sys_call+0x71a/0x9a0 [ 192.895025][ T9962] do_syscall_64+0x4c/0xa0 [ 192.899528][ T9962] ? clear_bhb_loop+0x30/0x80 [ 192.904249][ T9962] ? clear_bhb_loop+0x30/0x80 [ 192.908980][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.914914][ T9962] RIP: 0033:0x7f725999e559 [ 192.919366][ T9962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.939011][ T9962] RSP: 002b:00007f725a87d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 192.947467][ T9962] RAX: ffffffffffffffda RBX: 00007f7259c25fa0 RCX: 00007f725999e559 [ 192.955510][ T9962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 192.963527][ T9962] RBP: 00007f7259a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 192.971545][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.979562][ T9962] R13: 00007f7259c26038 R14: 00007f7259c25fa0 R15: 00007ffdec8c7158 [ 192.987584][ T9962] [ 193.212880][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 193.218724][ T28] audit: type=1326 audit(2000000130.100:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5425b9e559 code=0x7ffc0000 [ 193.278193][ T28] audit: type=1326 audit(2000000130.100:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5425b9e559 code=0x7ffc0000 [ 193.303156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.382462][ T28] audit: type=1326 audit(2000000130.100:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5425b9e559 code=0x7ffc0000 [ 193.451869][ T28] audit: type=1326 audit(2000000130.100:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5425b5ed8e code=0x7ffc0000 [ 193.507505][ T28] audit: type=1326 audit(2000000130.100:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5425b9e559 code=0x7ffc0000 [ 193.532765][ T28] audit: type=1326 audit(2000000130.100:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5425b5ed8e code=0x7ffc0000 [ 193.587319][ T9999] loop4: detected capacity change from 0 to 512 [ 194.235814][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 194.340027][T10022] overlayfs: failed to clone upperpath [ 194.947415][T10051] loop8: detected capacity change from 0 to 512 [ 195.009995][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3873'. [ 195.037146][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3873'. [ 195.414792][T10098] FAULT_INJECTION: forcing a failure. [ 195.414792][T10098] name fail_futex, interval 1, probability 0, space 0, times 1 [ 195.447431][T10098] CPU: 1 PID: 10098 Comm: syz.8.3888 Tainted: G W syzkaller #0 [ 195.456445][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.466532][T10098] Call Trace: [ 195.469843][T10098] [ 195.472818][T10098] __dump_stack+0x21/0x24 [ 195.477194][T10098] dump_stack_lvl+0x110/0x170 [ 195.481918][T10098] ? __cfi_dump_stack_lvl+0x8/0x8 [ 195.486987][T10098] ? __blk_mq_sched_dispatch_requests+0x32c/0x410 [ 195.493443][T10098] dump_stack+0x15/0x24 [ 195.497658][T10098] should_fail_ex+0x3bf/0x510 [ 195.502366][T10098] should_fail+0xb/0x10 [ 195.506550][T10098] get_futex_key+0x143/0xb10 [ 195.511179][T10098] ? blk_mq_sched_dispatch_requests+0x14d/0x1c0 [ 195.517456][T10098] ? __cfi_get_futex_key+0x10/0x10 [ 195.522618][T10098] futex_wake+0x150/0x8e0 [ 195.526991][T10098] ? __cfi_futex_wake+0x10/0x10 [ 195.531877][T10098] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 195.537381][T10098] ? perf_lock_task_context+0x3fd/0x4c0 [ 195.542973][T10098] ? perf_event_exit_event+0x530/0x530 [ 195.548466][T10098] ? mutex_unlock+0x8f/0x230 [ 195.553091][T10098] do_futex+0x2bf/0x430 [ 195.557278][T10098] ? __cfi_do_futex+0x10/0x10 [ 195.561988][T10098] ? __kasan_check_write+0x14/0x20 [ 195.567132][T10098] mm_release+0x195/0x2d0 [ 195.571489][T10098] ? exit_mm_release+0x30/0x30 [ 195.576270][T10098] ? futex_exit_release+0x119/0x1e0 [ 195.581483][T10098] exit_mm_release+0x25/0x30 [ 195.586097][T10098] do_exit+0x8de/0x29f0 [ 195.590279][T10098] ? __cfi_do_exit+0x10/0x10 [ 195.594891][T10098] ? plist_check_list+0x255/0x270 [ 195.599933][T10098] ? _raw_spin_lock+0x94/0xf0 [ 195.604635][T10098] ? cgroup_freezing+0x86/0xb0 [ 195.609442][T10098] do_group_exit+0x21b/0x2e0 [ 195.614057][T10098] ? __kasan_check_write+0x14/0x20 [ 195.619181][T10098] ? recalc_sigpending+0x168/0x1c0 [ 195.624308][T10098] get_signal+0x167c/0x1700 [ 195.628841][T10098] ? __cfi_get_signal+0x10/0x10 [ 195.633738][T10098] arch_do_signal_or_restart+0xd1/0x11c0 [ 195.639387][T10098] ? do_futex+0x2e2/0x430 [ 195.643749][T10098] ? __cfi_do_futex+0x10/0x10 [ 195.648434][T10098] ? __kasan_check_write+0x14/0x20 [ 195.653560][T10098] ? mutex_unlock+0x8f/0x230 [ 195.658165][T10098] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 195.664358][T10098] ? __se_sys_futex+0x136/0x310 [ 195.669227][T10098] exit_to_user_mode_loop+0x7a/0xb0 [ 195.674439][T10098] exit_to_user_mode_prepare+0x87/0xd0 [ 195.679910][T10098] syscall_exit_to_user_mode+0x1a/0x30 [ 195.685393][T10098] do_syscall_64+0x58/0xa0 [ 195.689816][T10098] ? clear_bhb_loop+0x30/0x80 [ 195.694510][T10098] ? clear_bhb_loop+0x30/0x80 [ 195.699204][T10098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.705110][T10098] RIP: 0033:0x7f725999e559 [ 195.709537][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.729159][T10098] RSP: 002b:00007f725a87d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 195.737590][T10098] RAX: fffffffffffffe00 RBX: 00007f7259c25fa8 RCX: 00007f725999e559 [ 195.745577][T10098] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7259c25fa8 [ 195.753589][T10098] RBP: 00007f7259c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 195.761573][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.769564][T10098] R13: 00007f7259c26038 R14: 00007ffdec8c7070 R15: 00007ffdec8c7158 [ 195.777554][T10098] [ 196.085762][ T6] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 196.224544][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 196.224562][ T28] audit: type=1400 audit(2000000133.100:7676): avc: denied { setattr } for pid=10136 comm="syz.4.3900" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.272745][T10139] loop4: detected capacity change from 0 to 512 [ 196.285391][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 196.293123][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.306156][T10139] EXT4-fs: Ignoring removed bh option [ 196.311728][T10139] EXT4-fs: Ignoring removed bh option [ 196.333015][T10142] xt_hashlimit: size too large, truncated to 1048576 [ 196.343788][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.362707][ T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.362731][T10139] EXT4-fs (loop4): Test dummy encryption mode enabled [ 196.362748][T10139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.390607][ T6] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.411830][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.438556][ T6] usb 9-1: config 0 descriptor?? [ 196.483444][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3907'. [ 196.495791][T10139] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.3901: inode has both inline data and extents flags [ 196.514919][T10151] bridge0: port 3(syz_tun) entered disabled state [ 196.525992][T10139] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3901: couldn't read orphan inode 15 (err -117) [ 196.539164][T10151] device syz_tun left promiscuous mode [ 196.544693][T10151] bridge0: port 3(syz_tun) entered disabled state [ 196.551501][T10139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.579891][T10139] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 196.641962][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 196.849201][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 196.866634][ T6] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 196.915780][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.000F/input/input17 [ 197.001011][T10175] overlayfs: failed to clone upperpath [ 197.017236][ T6] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 197.065954][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3915'. [ 197.070643][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.083051][T10179] device veth0 left promiscuous mode [ 197.099289][T10179] bridge0: port 4(veth0) entered disabled state [ 197.116975][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.127319][T10179] device bridge_slave_1 left promiscuous mode [ 197.136952][ T6] usb 9-1: USB disconnect, device number 8 [ 197.148059][ T28] audit: type=1326 audit(2000000134.030:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.3.3917" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43f4b9e559 code=0x0 [ 197.173673][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.189137][T10179] device bridge_slave_0 left promiscuous mode [ 197.195734][ C1] bridge0: port 3(syz_tun) entered learning state [ 197.206108][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.391821][T10196] loop4: detected capacity change from 0 to 512 [ 197.418641][T10196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.452674][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 197.823289][T10211] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 197.847832][T10214] ip_tables: iptables: counters copy to user failed while replacing table [ 197.992787][T10225] loop8: detected capacity change from 0 to 256 [ 198.016380][T10225] exfat: Deprecated parameter 'namecase' [ 198.023697][T10225] exfat: Deprecated parameter 'utf8' [ 198.034785][T10225] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 200.255703][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3953'. [ 200.337458][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3957'. [ 200.349068][T10284] ./dev/sda1: Can't open blockdev [ 200.406067][T10292] loop8: detected capacity change from 0 to 256 [ 200.439185][T10292] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 200.472460][T10296] xt_hashlimit: size too large, truncated to 1048576 [ 200.490121][ T28] audit: type=1400 audit(2000000137.370:7678): avc: denied { remove_name } for pid=10290 comm="syz.8.3963" name="file0" dev="loop8" ino=1049022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.532945][ T28] audit: type=1400 audit(2000000137.400:7679): avc: denied { rename } for pid=10290 comm="syz.8.3963" name="file0" dev="loop8" ino=1049022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.574958][T10299] loop4: detected capacity change from 0 to 256 [ 200.601919][T10299] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 200.616390][ T28] audit: type=1400 audit(2000000137.400:7680): avc: denied { rmdir } for pid=10290 comm="syz.8.3963" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=1049021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.964956][ T28] audit: type=1400 audit(2000000137.840:7681): avc: denied { mounton } for pid=10327 comm="syz.4.3980" path=2F38332FE91F7189591E9233614B dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 201.462393][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3991'. [ 201.608679][T10373] netlink: 'syz.3.3998': attribute type 4 has an invalid length. [ 201.622349][T10373] netlink: 'syz.3.3998': attribute type 4 has an invalid length. [ 201.635052][T10373] device lo entered promiscuous mode [ 201.655787][T10373] device tunl0 entered promiscuous mode [ 201.663175][T10373] device gre0 entered promiscuous mode [ 201.674918][T10373] device erspan0 entered promiscuous mode [ 201.683660][T10373] device ip_vti0 entered promiscuous mode [ 201.754740][T10386] overlayfs: failed to clone upperpath [ 201.864823][T10395] loop4: detected capacity change from 0 to 2048 [ 201.919899][T10395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.003405][T10395] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4006'. [ 202.022021][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 202.163585][ T28] audit: type=1400 audit(2000000139.040:7682): avc: denied { accept } for pid=10427 comm="syz.4.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 202.304460][T10448] tipc: Enabled bearer , priority 0 [ 202.313961][T10448] +: renamed from syzkaller0 [ 202.319006][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.329298][T10448] tipc: Disabling bearer [ 202.338373][T10431] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4021'. [ 202.432930][T10464] binder: 10463:10464 ioctl c0306201 2000000001c0 returned -11 [ 202.449754][ T28] audit: type=1326 audit(2000000139.330:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27c89982d7 code=0x50000 [ 202.450430][T10464] binder: 10463:10464 ioctl c0306201 200000000300 returned -14 [ 202.484338][ T28] audit: type=1326 audit(2000000139.360:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27c893f8d9 code=0x50000 [ 202.511444][ T28] audit: type=1326 audit(2000000139.360:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f27c893f99d code=0x50000 [ 202.542214][ T28] audit: type=1326 audit(2000000139.360:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.576649][ T28] audit: type=1326 audit(2000000139.360:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.606885][ T28] audit: type=1326 audit(2000000139.360:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.651903][ T28] audit: type=1326 audit(2000000139.360:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.687318][T10480] overlayfs: failed to clone upperpath [ 202.716056][ T28] audit: type=1326 audit(2000000139.360:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.777666][T10485] ip_tables: iptables: counters copy to user failed while replacing table [ 202.784978][ T28] audit: type=1326 audit(2000000139.360:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.6.4039" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c899e559 code=0x50000 [ 202.955801][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 203.056652][T10512] loop8: detected capacity change from 0 to 1024 [ 203.070749][T10515] loop4: detected capacity change from 0 to 256 [ 203.124953][T10512] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 203.139361][T10529] tipc: Enabled bearer , priority 0 [ 203.190767][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 203.225005][T10543] loop8: detected capacity change from 0 to 512 [ 203.250534][T10543] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.287070][T10543] EXT4-fs (loop8): 1 truncate cleaned up [ 203.303076][T10543] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 203.356383][ T1716] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.543713][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 203.557650][ T1716] usb 5-1: Using ep0 maxpacket: 16 [ 203.567896][ T1716] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 203.578820][ T1716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.598356][ T1716] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.611758][T10560] loop8: detected capacity change from 0 to 256 [ 203.615901][ T1716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.633604][ T1716] usb 5-1: Product: syz [ 203.638500][ T1716] usb 5-1: Manufacturer: syz [ 203.643940][ T1716] usb 5-1: SerialNumber: syz [ 203.644704][T10560] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.659789][T10560] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 203.674054][T10560] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xba97ad02, utbl_chksum : 0xe619d30d) [ 203.855133][ T1716] usb 5-1: 0:2 : does not exist [ 203.862445][ T1716] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 203.879505][ T1716] usb 5-1: USB disconnect, device number 10 [ 204.254172][T10587] overlayfs: failed to clone upperpath [ 204.354204][T10595] device batadv_slave_1 entered promiscuous mode [ 204.366746][T10593] device batadv_slave_1 left promiscuous mode [ 204.545391][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4102'. [ 204.581187][T10625] netlink: 'syz.3.4105': attribute type 4 has an invalid length. [ 204.590465][T10625] netlink: 'syz.3.4105': attribute type 4 has an invalid length. [ 204.659538][T10636] overlayfs: failed to clone upperpath [ 204.946929][T10664] netlink: 'syz.9.4121': attribute type 8 has an invalid length. [ 205.422255][T10697] tipc: Enabled bearer , priority 10 [ 205.429970][T10697] tipc: Enabled bearer , priority 10 [ 205.458534][T10700] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 205.537866][T10708] overlayfs: failed to clone lowerpath [ 205.752398][T10721] overlayfs: failed to clone upperpath [ 205.931954][T10731] tipc: Failed to remove unknown binding: 66,0,0/1:3387120413/3387120414 [ 206.067448][T10742] overlayfs: failed to clone upperpath [ 206.184601][T10755] netlink: 'syz.9.4158': attribute type 1 has an invalid length. [ 206.193872][T10755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10755 comm=syz.9.4158 [ 206.438019][T10785] overlayfs: failed to clone upperpath [ 207.067207][T10818] overlayfs: failed to clone upperpath [ 207.119119][T10832] loop4: detected capacity change from 0 to 512 [ 207.126205][T10832] EXT4-fs: Ignoring removed bh option [ 207.132162][T10832] EXT4-fs: Ignoring removed i_version option [ 207.147950][T10832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.157255][T10832] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.201530][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 207.201548][ T28] audit: type=1400 audit(2000000144.080:7755): avc: denied { append } for pid=10831 comm="syz.4.4188" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.255921][ T28] audit: type=1400 audit(2000000144.140:7756): avc: denied { create } for pid=10836 comm="syz.6.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 207.314084][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 207.336640][T10846] loop4: detected capacity change from 0 to 512 [ 207.344688][T10846] EXT4-fs: Ignoring removed orlov option [ 207.351214][T10846] EXT4-fs: Ignoring removed oldalloc option [ 207.362922][T10846] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.377636][T10846] EXT4-fs (loop4): failed to initialize system zone (-117) [ 207.386464][T10846] EXT4-fs (loop4): mount failed [ 207.620673][ T28] audit: type=1400 audit(2000000144.500:7757): avc: denied { unmount } for pid=8964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 207.923843][T10890] loop8: detected capacity change from 0 to 256 [ 207.949375][T10890] exfat: Deprecated parameter 'namecase' [ 207.955613][T10890] exfat: Deprecated parameter 'namecase' [ 207.964161][T10890] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 208.132493][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 208.148590][T10904] device xfrm1 entered promiscuous mode [ 208.156009][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 208.196935][T10910] overlayfs: failed to clone upperpath [ 208.404840][T10933] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.610983][T10947] overlayfs: failed to clone upperpath [ 208.622948][T10947] overlayfs: failed to clone upperpath [ 208.629402][T10949] loop8: detected capacity change from 0 to 512 [ 208.779443][ T28] audit: type=1326 audit(2000000145.660:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.803920][T10963] loop8: detected capacity change from 0 to 512 [ 208.824863][ T28] audit: type=1326 audit(2000000145.660:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.851215][ T28] audit: type=1326 audit(2000000145.660:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.877042][ T28] audit: type=1326 audit(2000000145.660:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.910557][ T28] audit: type=1326 audit(2000000145.660:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.936091][ T28] audit: type=1326 audit(2000000145.660:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.963797][ T28] audit: type=1326 audit(2000000145.660:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.8.4241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725999e559 code=0x7ffc0000 [ 208.973761][T10971] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4244'. [ 209.027831][T10976] xt_hashlimit: size too large, truncated to 1048576 [ 209.436290][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4259'. [ 209.452763][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4259'. [ 209.478689][T11013] device syzkaller0 entered promiscuous mode [ 209.589991][T11037] netlink: 'syz.9.4272': attribute type 1 has an invalid length. [ 209.868104][T11051] device lo entered promiscuous mode [ 209.892419][T11051] device tunl0 entered promiscuous mode [ 209.911499][T11051] device gre0 entered promiscuous mode [ 209.931883][T11051] device gretap0 entered promiscuous mode [ 209.945816][T11051] device erspan0 entered promiscuous mode [ 209.957714][T11051] device ip_vti0 entered promiscuous mode [ 209.966285][T11051] device ip6_vti0 entered promiscuous mode [ 209.973667][T11051] device sit0 entered promiscuous mode [ 209.982470][T11051] device ip6tnl0 entered promiscuous mode [ 209.991183][T11051] device ip6gre0 entered promiscuous mode [ 210.007586][T11051] device syz_tun entered promiscuous mode [ 210.018343][T11051] device ip6gretap0 entered promiscuous mode [ 210.035779][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.043053][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.051044][T11051] device bridge0 entered promiscuous mode [ 210.066876][T11051] device vcan0 entered promiscuous mode [ 210.081200][T11051] device dummy0 entered promiscuous mode [ 210.089678][T11051] device veth0 entered promiscuous mode [ 210.097916][T11051] device veth1 entered promiscuous mode [ 210.106923][T11051] device wg0 entered promiscuous mode [ 210.122777][T11051] device wg1 entered promiscuous mode [ 210.133778][T11051] device wg2 entered promiscuous mode [ 210.140722][T11051] device veth0_to_bridge entered promiscuous mode [ 210.157151][T11051] device veth1_to_bridge entered promiscuous mode [ 210.168272][T11051] device veth0_to_bond entered promiscuous mode [ 210.186305][T11051] device bond_slave_0 entered promiscuous mode [ 210.193615][T11051] device veth1_to_bond entered promiscuous mode [ 210.207243][T11051] device bond_slave_1 entered promiscuous mode [ 210.224561][T11051] device veth0_to_team entered promiscuous mode [ 210.235203][T11051] device team_slave_0 entered promiscuous mode [ 210.246909][T11051] device veth1_to_team entered promiscuous mode [ 210.264888][T11051] device team_slave_1 entered promiscuous mode [ 210.274519][T11051] device veth0_to_batadv entered promiscuous mode [ 210.285763][T11051] device batadv_slave_0 entered promiscuous mode [ 210.300925][T11051] device veth1_to_batadv entered promiscuous mode [ 210.309190][T11051] device batadv_slave_1 entered promiscuous mode [ 210.317957][T11051] device xfrm0 entered promiscuous mode [ 210.324785][T11051] device veth0_to_hsr entered promiscuous mode [ 210.332551][T11051] device hsr_slave_0 entered promiscuous mode [ 210.340314][T11051] device veth1_to_hsr entered promiscuous mode [ 210.348142][T11051] device hsr_slave_1 entered promiscuous mode [ 210.357364][T11051] device veth1_virt_wifi entered promiscuous mode [ 210.366644][T11051] device veth0_virt_wifi entered promiscuous mode [ 210.376501][T11051] device veth1_vlan entered promiscuous mode [ 210.393703][T11051] device vlan0 entered promiscuous mode [ 210.400265][T11051] device vlan1 entered promiscuous mode [ 210.412531][T11051] device veth0_macvtap entered promiscuous mode [ 210.422214][T11051] device macsec0 entered promiscuous mode [ 210.430763][T11051] device syztnl1 entered promiscuous mode [ 210.438880][T11051] device gre1 entered promiscuous mode [ 210.461400][T11051] device sit1 entered promiscuous mode [ 210.600152][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4293'. [ 210.613313][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4293'. [ 210.807281][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4298'. [ 210.924963][T11116] overlayfs: failed to clone upperpath [ 210.944107][T11120] loop4: detected capacity change from 0 to 4096 [ 210.951570][T11120] EXT4-fs (loop4): Test dummy encryption mode enabled [ 210.989458][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 210.999177][T11120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.047721][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 211.309673][T11128] loop4: detected capacity change from 0 to 40427 [ 211.330576][T11128] F2FS-fs (loop4): invalid crc value [ 211.357005][T11128] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.421281][T11128] F2FS-fs (loop4): Start checkpoint disabled! [ 211.430167][T11128] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 211.442415][T11128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 211.570543][T11163] loop8: detected capacity change from 0 to 1024 [ 211.607169][T11163] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 211.622332][T11163] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.555759][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 212.562419][ C1] bridge0: topology change detected, propagating [ 213.222926][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 213.262797][ T8516] kworker/u4:13: attempt to access beyond end of device [ 213.262797][ T8516] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 213.482752][T11197] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 213.678825][T11217] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.702472][T11219] loop8: detected capacity change from 0 to 128 [ 213.712280][T11219] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 213.721279][T11219] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.746120][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 213.779624][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 213.779642][ T28] audit: type=1400 audit(2000000150.660:7872): avc: denied { read write } for pid=11224 comm="syz.8.4340" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 213.789768][T11225] netlink: 'syz.8.4340': attribute type 11 has an invalid length. [ 213.814665][ T28] audit: type=1400 audit(2000000150.660:7873): avc: denied { open } for pid=11224 comm="syz.8.4340" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 213.948717][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4343'. [ 214.377574][T11266] netlink: 'syz.4.4357': attribute type 4 has an invalid length. [ 214.426632][T11268] loop4: detected capacity change from 0 to 256 [ 214.458199][T11268] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.482123][T11268] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 214.504107][T11268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 214.542015][ T28] audit: type=1400 audit(2000000151.420:7874): avc: denied { rename } for pid=11267 comm="syz.4.4359" name="file0" dev="loop4" ino=1049029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.592535][T11273] ip_tables: iptables: counters copy to user failed while replacing table [ 214.700133][T11285] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 214.739925][T11254] loop8: detected capacity change from 0 to 131072 [ 214.760995][T11254] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 214.785764][T11254] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 214.804597][T11254] F2FS-fs (loop8): invalid crc value [ 214.821532][T11254] F2FS-fs (loop8): Found nat_bits in checkpoint [ 214.867110][T11254] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 214.874209][T11254] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 214.974823][T11301] loop4: detected capacity change from 0 to 256 [ 214.991331][T11301] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 215.094537][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4377'. [ 215.154810][T11315] device sit0 entered promiscuous mode [ 215.173842][T11315] netlink: 'syz.9.4379': attribute type 1 has an invalid length. [ 215.192189][T11315] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4379'. [ 215.234817][ T28] audit: type=1400 audit(2000000152.110:7875): avc: denied { mounton } for pid=11312 comm="syz.4.4378" path="/154/file0/proc_mnt" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 215.355429][T11339] tipc: Resetting bearer [ 215.361339][T11350] overlayfs: failed to clone upperpath [ 215.475663][T11363] mmap: syz.6.4398 (11363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.566050][T11372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.576806][T11372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.065847][ T6] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 216.275768][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 216.282561][ T6] usb 9-1: unable to get BOS descriptor or descriptor too short [ 216.294540][ T6] usb 9-1: config 8 has an invalid interface number: 94 but max is 0 [ 216.304141][ T6] usb 9-1: config 8 has no interface number 0 [ 216.324065][ T6] usb 9-1: config 8 interface 94 has no altsetting 0 [ 216.341387][ T6] usb 9-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 216.352271][T11418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4423'. [ 216.362108][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.370487][ T6] usb 9-1: Product: syz [ 216.380077][ T6] usb 9-1: Manufacturer: syz [ 216.384788][ T6] usb 9-1: SerialNumber: syz [ 216.571561][T11431] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1154391482/1154391484 [ 216.581433][T11431] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1154391482/1154391483 [ 216.645800][ T309] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.825871][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 216.832316][ T309] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.842841][ T309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.852719][ T309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 216.862058][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.870238][ T309] usb 5-1: SerialNumber: syz [ 216.881130][ T309] usb 5-1: 0:2 : does not exist [ 217.084759][ T309] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 217.097170][ T309] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 217.107638][ T309] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 217.126977][ T309] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 217.147175][ T309] usb 5-1: USB disconnect, device number 11 [ 217.467981][T11452] ./dev/sda1: Can't open blockdev [ 217.510866][ T6] usb 9-1: USB disconnect, device number 9 [ 217.717807][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4448'. [ 217.728536][ T28] audit: type=1400 audit(2000000154.610:7876): avc: denied { read write } for pid=11462 comm="syz.8.4444" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 217.760975][ T28] audit: type=1400 audit(2000000154.610:7877): avc: denied { open } for pid=11462 comm="syz.8.4444" path="/334/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 217.886764][T11494] loop4: detected capacity change from 0 to 128 [ 217.901286][T11494] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 217.914188][T11496] overlayfs: failed to clone upperpath [ 217.976448][T11502] ./dev/sda1: Can't open blockdev [ 218.233759][T11528] loop4: detected capacity change from 0 to 512 [ 218.248953][T11528] EXT4-fs: Ignoring removed i_version option [ 218.256191][T11528] EXT4-fs: Ignoring removed bh option [ 218.276972][T11528] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4473: inode #13: comm syz.4.4473: iget: illegal inode # [ 218.291088][T11528] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4473: couldn't read orphan inode 13 (err -117) [ 218.304071][T11528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 218.364711][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 218.404874][T11536] ip_tables: iptables: counters copy to user failed while replacing table [ 218.476752][T11541] loop4: detected capacity change from 0 to 1024 [ 218.514379][T11541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.545789][T11541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.583374][T11541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.598944][T11541] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.616961][T11541] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4477: bg 0: block 3: invalid block bitmap [ 218.672784][T11541] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 218.726897][T11541] EXT4-fs (loop4): This should not happen!! Data will be lost [ 218.726897][T11541] [ 218.766329][T11541] EXT4-fs (loop4): Total free blocks count 0 [ 218.782572][T11541] EXT4-fs (loop4): Free/Dirty block details [ 218.802937][T11541] EXT4-fs (loop4): free_blocks=0 [ 218.815838][T11541] EXT4-fs (loop4): dirty_blocks=64 [ 218.831301][ T28] audit: type=1400 audit(2000000155.710:7878): avc: denied { map } for pid=11560 comm="syz.9.4484" path="socket:[64023]" dev="sockfs" ino=64023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.835652][T11541] EXT4-fs (loop4): Block reservation details [ 218.897215][T11541] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 218.939914][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 219.007346][T11578] netlink: 'syz.9.4491': attribute type 4 has an invalid length. [ 219.030201][T11578] netlink: 'syz.9.4491': attribute type 4 has an invalid length. [ 219.245207][T11599] loop8: detected capacity change from 0 to 256 [ 219.273698][T11599] FAT-fs (loop8): Directory bread(block 64) failed [ 219.290606][T11599] FAT-fs (loop8): Directory bread(block 65) failed [ 219.306204][T11599] FAT-fs (loop8): Directory bread(block 66) failed [ 219.322966][T11599] FAT-fs (loop8): Directory bread(block 67) failed [ 219.329830][T11599] FAT-fs (loop8): Directory bread(block 68) failed [ 219.345895][T11599] FAT-fs (loop8): Directory bread(block 69) failed [ 219.362685][T11599] FAT-fs (loop8): Directory bread(block 70) failed [ 219.369435][T11599] FAT-fs (loop8): Directory bread(block 71) failed [ 219.385921][T11599] FAT-fs (loop8): Directory bread(block 72) failed [ 219.399131][T11599] FAT-fs (loop8): Directory bread(block 73) failed [ 219.506489][T11611] overlayfs: failed to clone upperpath [ 219.595798][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.755954][ T309] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.872684][T11655] overlayfs: failed to clone upperpath [ 219.892179][ T8517] kworker/u4:14: attempt to access beyond end of device [ 219.892179][ T8517] loop8: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 219.912429][ T8517] kworker/u4:14: attempt to access beyond end of device [ 219.912429][ T8517] loop8: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 219.935854][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 219.942735][ T309] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 219.955578][ T8517] kworker/u4:14: attempt to access beyond end of device [ 219.955578][ T8517] loop8: rw=1, sector=1960, nr_sectors = 14472 limit=256 [ 219.969683][ T309] usb 5-1: config 0 has no interface number 0 [ 219.977431][ T309] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 219.996764][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.004940][ T309] usb 5-1: Product: syz [ 220.011450][T11665] overlayfs: failed to resolve './file0': -2 [ 220.015178][ T8517] kworker/u4:14: attempt to access beyond end of device [ 220.015178][ T8517] loop8: rw=1, sector=16432, nr_sectors = 13104 limit=256 [ 220.031539][ T309] usb 5-1: Manufacturer: syz [ 220.037809][ T309] usb 5-1: SerialNumber: syz [ 220.043622][ T309] usb 5-1: config 0 descriptor?? [ 220.049834][ T309] smsc95xx v2.0.0 [ 220.061596][ T8517] kworker/u4:14: attempt to access beyond end of device [ 220.061596][ T8517] loop8: rw=1, sector=29536, nr_sectors = 4264 limit=256 [ 220.170523][T11682] xt_hashlimit: max too large, truncated to 1048576 [ 220.273319][T11690] loop8: detected capacity change from 0 to 512 [ 220.306427][ T1128] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.433322][T11705] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4545'. [ 220.516442][ T28] audit: type=1400 audit(2000000157.400:7879): avc: denied { checkpoint_restore } for pid=11710 comm="syz.8.4548" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.547639][ T28] audit: type=1400 audit(2000000157.430:7880): avc: denied { watch_reads } for pid=11712 comm="syz.8.4549" path="/" dev="configfs" ino=12938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.853521][T11609] loop4: detected capacity change from 0 to 512 [ 220.896544][T11609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.907021][T11609] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.119472][ T309] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 221.145756][ T309] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.175368][ T309] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 221.201064][ T309] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 221.206696][T11752] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4564'. [ 221.226837][ T309] usb 5-1: USB disconnect, device number 12 [ 221.597878][ T8516] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.612556][T11780] Bluetooth: hci0: Frame reassembly failed (-90) [ 221.631939][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 221.795837][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4583'. [ 221.839027][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4584'. [ 221.922488][T11804] tipc: Enabling of bearer rejected, failed to enable media [ 222.024244][T11819] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 222.051805][T11819] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 222.138090][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4590'. [ 222.634099][T11844] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4598'. [ 222.728931][T11823] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 222.758646][ T28] audit: type=1400 audit(2000000159.640:7881): avc: denied { relabelto } for pid=11822 comm="syz.3.4591" name="1057" dev="tmpfs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 222.850161][ T28] audit: type=1400 audit(2000000159.640:7882): avc: denied { associate } for pid=11822 comm="syz.3.4591" name="1057" dev="tmpfs" ino=5672 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 222.870418][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4604'. [ 222.912362][T11856] device xfrm1 entered promiscuous mode [ 222.925224][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4604'. [ 223.010906][ T28] audit: type=1400 audit(2000000159.890:7883): avc: denied { write } for pid=289 comm="syz-executor" name="1057" dev="tmpfs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.104354][ T28] audit: type=1400 audit(2000000159.920:7884): avc: denied { remove_name } for pid=289 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.162609][ T28] audit: type=1400 audit(2000000159.920:7885): avc: denied { rmdir } for pid=289 comm="syz-executor" name="1057" dev="tmpfs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.206667][ T2247] Bluetooth: hci0: command 0x1003 tx timeout [ 224.209332][ T2583] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.596012][ T28] audit: type=1326 audit(2000000163.480:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.670062][ T28] audit: type=1326 audit(2000000163.480:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.745869][ T28] audit: type=1326 audit(2000000163.480:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.798628][T11927] ip_tables: iptables: counters copy to user failed while replacing table [ 226.821258][ T28] audit: type=1326 audit(2000000163.480:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.861264][T11932] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 226.888645][ T28] audit: type=1326 audit(2000000163.490:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.919972][ T28] audit: type=1326 audit(2000000163.520:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 226.952476][ T28] audit: type=1326 audit(2000000163.520:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 227.009616][ T28] audit: type=1326 audit(2000000163.520:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 227.060260][ T28] audit: type=1326 audit(2000000163.540:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 227.117427][ T28] audit: type=1326 audit(2000000163.540:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.4.4636" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523e99e559 code=0x7ffc0000 [ 227.852516][T11968] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 228.455824][ T309] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.647007][ T309] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.661419][ T309] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 228.670573][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 228.678687][ T309] usb 5-1: Product: syz [ 228.682880][ T309] usb 5-1: Manufacturer: syz [ 228.687535][ T309] usb 5-1: SerialNumber: syz [ 228.871542][T12010] overlayfs: failed to resolve './file0': -2 [ 228.895290][ T309] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 228.926119][T12014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.946742][T12016] loop8: detected capacity change from 0 to 16 [ 228.961924][T12016] erofs: (device loop8): mounted with root inode @ nid 36. [ 229.152783][ C1] usblp0: nonzero write bulk status received: -71 [ 229.160054][ T3707] usb 5-1: USB disconnect, device number 13 [ 229.168449][ T3707] usblp0: removed [ 229.495782][T12042] device batadv_slave_1 entered promiscuous mode [ 229.503416][T12041] device batadv_slave_1 left promiscuous mode [ 229.533511][T12048] xt_hashlimit: size too large, truncated to 1048576 [ 229.831654][T12055] device lo entered promiscuous mode [ 229.837299][T12055] device tunl0 entered promiscuous mode [ 229.844147][T12055] device gre0 entered promiscuous mode [ 229.853517][T12055] device gretap0 entered promiscuous mode [ 229.861301][T12055] device erspan0 entered promiscuous mode [ 229.875862][T12055] device ip_vti0 entered promiscuous mode [ 229.884198][T12055] device ip6_vti0 entered promiscuous mode [ 229.893798][T12055] device ip6tnl0 entered promiscuous mode [ 229.906760][T12055] device ip6gre0 entered promiscuous mode [ 229.916317][T12055] device ip6gretap0 entered promiscuous mode [ 229.926865][T12055] device dummy0 entered promiscuous mode [ 229.936259][T12055] device veth0 entered promiscuous mode [ 229.946640][T12055] device veth1 entered promiscuous mode [ 229.956358][T12055] device wg0 entered promiscuous mode [ 229.966179][T12055] device wg1 entered promiscuous mode [ 229.975946][T12055] device wg2 entered promiscuous mode [ 229.985773][T12055] device veth0_to_bridge entered promiscuous mode [ 229.996157][T12055] device bridge_slave_0 entered promiscuous mode [ 230.004581][T12055] device veth1_to_bridge entered promiscuous mode [ 230.026241][T12055] device bridge_slave_1 entered promiscuous mode [ 230.033326][T12055] device veth0_to_bond entered promiscuous mode [ 230.045779][T12055] device bond_slave_0 entered promiscuous mode [ 230.053817][T12055] device veth1_to_bond entered promiscuous mode [ 230.061434][T12055] device bond_slave_1 entered promiscuous mode [ 230.068694][T12055] device veth0_to_team entered promiscuous mode [ 230.077283][T12055] device team_slave_0 entered promiscuous mode [ 230.084868][T12055] device veth1_to_team entered promiscuous mode [ 230.098942][T12055] device team_slave_1 entered promiscuous mode [ 230.106509][T12055] device veth0_to_batadv entered promiscuous mode [ 230.116402][T12055] device batadv_slave_0 entered promiscuous mode [ 230.124801][T12055] device veth1_to_batadv entered promiscuous mode [ 230.132598][T12055] device batadv_slave_1 entered promiscuous mode [ 230.139809][T12055] device xfrm0 entered promiscuous mode [ 230.146993][T12055] device veth0_to_hsr entered promiscuous mode [ 230.153999][T12055] device hsr_slave_0 entered promiscuous mode [ 230.161207][T12055] device veth1_to_hsr entered promiscuous mode [ 230.168954][T12055] device hsr_slave_1 entered promiscuous mode [ 230.176091][T12055] device veth1_virt_wifi entered promiscuous mode [ 230.183772][T12055] device veth0_virt_wifi entered promiscuous mode [ 230.191886][T12055] device veth1_vlan entered promiscuous mode [ 230.202254][T12055] device vlan0 entered promiscuous mode [ 230.208656][T12055] device vlan1 entered promiscuous mode [ 230.215541][T12055] device veth0_macvtap entered promiscuous mode [ 230.223246][T12055] device macsec0 entered promiscuous mode [ 230.231458][T12055] device gre1 entered promiscuous mode [ 230.238239][T12055] device bridge1 entered promiscuous mode [ 230.244768][T12055] device bridge2 entered promiscuous mode [ 230.251744][T12055] device ipip0 entered promiscuous mode [ 230.258637][T12055] device ip6erspan0 entered promiscuous mode [ 230.264934][T12055] device bridge0 entered promiscuous mode [ 230.272735][T12055] device ipip1 entered promiscuous mode [ 230.279842][T12055] device bridge3 entered promiscuous mode [ 230.286659][T12067] tipc: Enabled bearer , priority 10 [ 230.373391][T12081] device lo entered promiscuous mode [ 230.396373][T12081] device tunl0 entered promiscuous mode [ 230.432945][T12081] device gre0 entered promiscuous mode [ 230.440848][T12089] ip_tables: iptables: counters copy to user failed while replacing table [ 230.457227][T12081] device 30ªî{X¹¦ entered promiscuous mode [ 230.479120][T12081] device erspan0 entered promiscuous mode [ 230.491498][T12081] device ip_vti0 entered promiscuous mode [ 230.505769][T12081] device ip6_vti0 entered promiscuous mode [ 230.523138][T12081] device sit0 entered promiscuous mode [ 230.531348][T12081] device ip6tnl0 entered promiscuous mode [ 230.545750][T12081] device ip6gre0 entered promiscuous mode [ 230.563026][T12081] device ip6gretap0 entered promiscuous mode [ 230.575987][T12081] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.583273][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.596822][T12081] device bridge0 entered promiscuous mode [ 230.612878][T12081] device vcan0 entered promiscuous mode [ 230.620916][T12081] device dummy0 entered promiscuous mode [ 230.628994][T12081] device veth0 entered promiscuous mode [ 230.635918][T12081] device veth1 entered promiscuous mode [ 230.642747][T12081] device wg0 entered promiscuous mode [ 230.650631][T12081] device wg1 entered promiscuous mode [ 230.659361][T12081] device wg2 entered promiscuous mode [ 230.665627][T12081] device veth0_to_bridge entered promiscuous mode [ 230.675372][T12081] device veth1_to_bridge entered promiscuous mode [ 230.683822][T12081] device veth0_to_bond entered promiscuous mode [ 230.690794][T12081] device bond_slave_0 entered promiscuous mode [ 230.697524][T12081] device veth1_to_bond entered promiscuous mode [ 230.704520][T12081] device bond_slave_1 entered promiscuous mode [ 230.713089][T12081] device veth0_to_team entered promiscuous mode [ 230.720730][T12081] device team_slave_0 entered promiscuous mode [ 230.727496][T12081] device veth1_to_team entered promiscuous mode [ 230.734590][T12081] device team_slave_1 entered promiscuous mode [ 230.741406][T12081] device veth0_to_batadv entered promiscuous mode [ 230.749620][T12081] device batadv_slave_0 entered promiscuous mode [ 230.758086][T12081] device veth1_to_batadv entered promiscuous mode [ 230.766355][T12081] device batadv_slave_1 entered promiscuous mode [ 230.768442][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4693'. [ 230.781848][T12081] device xfrm0 entered promiscuous mode [ 230.788770][T12081] device veth0_to_hsr entered promiscuous mode [ 230.797149][T12081] device hsr_slave_0 entered promiscuous mode [ 230.804139][T12081] device veth1_to_hsr entered promiscuous mode [ 230.811731][T12081] device hsr_slave_1 entered promiscuous mode [ 230.818880][T12081] device veth1_virt_wifi entered promiscuous mode [ 230.826835][T12081] device veth0_virt_wifi entered promiscuous mode [ 230.834475][T12081] device veth1_vlan entered promiscuous mode [ 230.845352][T12081] device vlan0 entered promiscuous mode [ 230.851837][T12081] device vlan1 entered promiscuous mode [ 230.859436][T12081] device veth0_macvtap entered promiscuous mode [ 230.866971][T12081] device macsec0 entered promiscuous mode [ 230.873897][T12081] device bridge1 entered promiscuous mode [ 230.880630][T12081] device veth2 entered promiscuous mode [ 230.886592][T12081] device veth3 entered promiscuous mode [ 230.892271][T12081] device veth4 entered promiscuous mode [ 230.898253][T12081] device veth5 entered promiscuous mode [ 230.903938][T12081] device veth6 entered promiscuous mode [ 230.910021][T12081] device veth7 entered promiscuous mode [ 230.916552][T12081] device bridge2 entered promiscuous mode [ 230.923298][T12081] device bridge3 entered promiscuous mode [ 230.930287][T12081] device bridge4 entered promiscuous mode [ 230.937219][T12081] device gretap0 entered promiscuous mode [ 230.943901][T12081] device ipip0 entered promiscuous mode [ 230.951063][T12081] device sit1 entered promiscuous mode [ 231.006334][T12113] tipc: Enabling of bearer rejected, failed to enable media [ 231.026099][T12113] tipc: Enabled bearer , priority 10 [ 231.335188][T12160] loop4: detected capacity change from 0 to 128 [ 231.359896][T12160] ext4: Unknown parameter 'smackfsfloor' [ 231.398134][T11989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.555771][ T6] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 231.738253][ T6] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 231.748401][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.756766][ T6] usb 9-1: Product: syz [ 231.761261][ T6] usb 9-1: Manufacturer: syz [ 231.766298][ T6] usb 9-1: SerialNumber: syz [ 232.178489][ T6] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 232.236860][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 233.318349][T12239] overlayfs: failed to clone upperpath [ 233.553132][T12266] xt_limit: Overflow, try lower: 167772/2147483648 [ 233.684312][T12290] loop4: detected capacity change from 0 to 512 [ 233.721218][T12290] EXT4-fs (loop4): orphan cleanup on readonly fs [ 233.728955][T12293] netlink: 'syz.9.4771': attribute type 49 has an invalid length. [ 233.749099][T12290] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.775911][T12290] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.4769: corrupted inode contents [ 233.802501][T12290] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #15: comm syz.4.4769: mark_inode_dirty error [ 233.832490][T12290] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.4769: corrupted inode contents [ 233.847940][T12290] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2947: inode #15: comm syz.4.4769: mark_inode_dirty error [ 233.865874][T12290] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.4769: mark inode dirty (error -117) [ 233.888895][T12290] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 233.908918][T12290] EXT4-fs (loop4): 1 orphan inode deleted [ 233.914707][T12290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.997099][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 234.088616][ T6] usb 9-1: USB disconnect, device number 10 [ 234.103933][T12222] usblp0: removed [ 234.119128][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 234.119145][ T28] audit: type=1400 audit(2000000426.994:7921): avc: denied { mounton } for pid=12331 comm="syz.8.4785" path="/373/file0" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 234.157162][T12330] tipc: Resetting bearer [ 234.164213][T12330] bridge0: port 3(syz_tun) entered disabled state [ 234.172258][T12330] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.179533][T12330] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.991114][T12379] loop8: detected capacity change from 0 to 512 [ 235.076271][T12379] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 235.085421][T12379] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.106969][T12379] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.4805: corrupted inode contents [ 235.127818][T12379] EXT4-fs (loop8): Remounting filesystem read-only [ 235.151748][T12379] EXT4-fs error (device loop8): ext4_dirty_inode:6158: inode #2: comm syz.8.4805: mark_inode_dirty error [ 235.184813][T12379] EXT4-fs (loop8): Remounting filesystem read-only [ 235.207635][T12379] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.4805: corrupted inode contents [ 235.248520][T12379] EXT4-fs (loop8): Remounting filesystem read-only [ 235.263925][T12379] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.4805: mark_inode_dirty error [ 235.279146][T12379] EXT4-fs (loop8): Remounting filesystem read-only [ 235.289311][T12393] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.4805: corrupted inode contents [ 235.304815][T12393] EXT4-fs (loop8): Remounting filesystem read-only [ 235.312569][T12393] EXT4-fs error (device loop8): ext4_dirty_inode:6158: inode #2: comm syz.8.4805: mark_inode_dirty error [ 235.337585][T12393] EXT4-fs (loop8): Remounting filesystem read-only [ 235.346084][T12393] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.4805: corrupted inode contents [ 235.358732][T12393] EXT4-fs (loop8): Remounting filesystem read-only [ 235.372427][T12398] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #2: comm syz.8.4805: corrupted inode contents [ 235.387905][T12398] EXT4-fs (loop8): Remounting filesystem read-only [ 235.395503][T12398] EXT4-fs error (device loop8): ext4_append:88: inode #2: comm syz.8.4805: mark_inode_dirty error [ 235.409034][T12398] EXT4-fs (loop8): Remounting filesystem read-only [ 235.417464][T12398] EXT4-fs error (device loop8) in ext4_append:100: Corrupt filesystem [ 235.473113][T12402] loop8: detected capacity change from 0 to 128 [ 235.514957][T12402] FAT-fs (loop8): bogus logical sector size 0 [ 235.525029][T12402] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 235.538856][T12402] FAT-fs (loop8): Can't find a valid FAT filesystem [ 235.620422][T12402] loop8: detected capacity change from 0 to 1024 [ 235.644150][T12402] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 235.653424][T12402] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 235.663149][T12402] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.4813: Failed to acquire dquot type 0 [ 235.675146][T12402] EXT4-fs error (device loop8): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 235.693694][T12402] EXT4-fs (loop8): 1 truncate cleaned up [ 235.700810][T12402] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 235.755886][ T6443] EXT4-fs (loop8): unmounting filesystem. [ 235.937421][T12436] ip_tables: iptables: counters copy to user failed while replacing table [ 236.264171][T12435] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 236.279492][T12435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 236.415751][T12490] netlink: 'syz.3.4848': attribute type 4 has an invalid length. [ 236.432949][T12490] netlink: 'syz.3.4848': attribute type 4 has an invalid length. [ 236.456049][T12490] device lo left promiscuous mode [ 236.562058][T12498] loop8: detected capacity change from 0 to 512 [ 236.612890][T12498] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.4852: iget: bad i_size value: 38620345925642 [ 236.657022][T12508] ip_tables: iptables: counters copy to user failed while replacing table [ 236.699523][T12498] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.4852: couldn't read orphan inode 15 (err -117) [ 236.737614][T12498] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 236.797062][ T28] audit: type=1326 audit(2000000429.674:7922): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.4859" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f4b9e559 code=0x0 [ 236.838477][T12477] FAULT_INJECTION: forcing a failure. [ 236.838477][T12477] name failslab, interval 1, probability 0, space 0, times 0 [ 236.886809][ T8162] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm kworker/u4:9: bg 0: block 5: invalid block bitmap [ 236.899993][T12477] CPU: 0 PID: 12477 Comm: syz.4.4845 Tainted: G W syzkaller #0 [ 236.908990][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.919253][T12477] Call Trace: [ 236.922564][T12477] [ 236.925522][T12477] __dump_stack+0x21/0x24 [ 236.929908][T12477] dump_stack_lvl+0x110/0x170 [ 236.934679][T12477] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.939749][T12477] ? vfs_write+0xa51/0xd00 [ 236.944207][T12477] dump_stack+0x15/0x24 [ 236.948409][T12477] should_fail_ex+0x3bf/0x510 [ 236.953128][T12477] ? copy_fs_struct+0x4c/0x220 [ 236.955419][ T8162] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 236.957940][T12477] __should_failslab+0xac/0xf0 [ 236.957976][T12477] should_failslab+0x9/0x20 [ 236.957999][T12477] kmem_cache_alloc+0x3b/0x320 [ 236.984326][T12477] copy_fs_struct+0x4c/0x220 [ 236.988975][T12477] ksys_unshare+0x392/0x850 [ 236.993533][T12477] ? __cfi_ksys_unshare+0x10/0x10 [ 236.993847][ T8162] EXT4-fs (loop8): This should not happen!! Data will be lost [ 236.993847][ T8162] [ 236.998608][T12477] ? fpregs_restore_userregs+0x128/0x260 [ 236.998642][T12477] __x64_sys_unshare+0x38/0x40 [ 237.018786][T12477] x64_sys_call+0x767/0x9a0 [ 237.023337][T12477] do_syscall_64+0x4c/0xa0 [ 237.027791][T12477] ? clear_bhb_loop+0x30/0x80 [ 237.032506][T12477] ? clear_bhb_loop+0x30/0x80 [ 237.037204][T12477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.043140][T12477] RIP: 0033:0x7f523e99e559 [ 237.047572][T12477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.067196][T12477] RSP: 002b:00007f523f7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 237.075631][T12477] RAX: ffffffffffffffda RBX: 00007f523ec25fa0 RCX: 00007f523e99e559 [ 237.083616][T12477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 237.091607][T12477] RBP: 00007f523ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 237.099590][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.107572][T12477] R13: 00007f523ec26038 R14: 00007f523ec25fa0 R15: 00007ffcc3064728 [ 237.115570][T12477] [ 237.127316][ T8162] EXT4-fs (loop8): Total free blocks count 0 [ 237.133491][ T8162] EXT4-fs (loop8): Free/Dirty block details [ 237.139617][ T8162] EXT4-fs (loop8): free_blocks=0 [ 237.144689][ T8162] EXT4-fs (loop8): dirty_blocks=39 [ 237.150170][ T8162] EXT4-fs (loop8): Block reservation details [ 237.156305][ T8162] EXT4-fs (loop8): i_reserved_data_blocks=19 [ 237.162687][ T8162] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 18 with error 28 [ 237.495944][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4868'. [ 237.838963][T12573] loop4: detected capacity change from 0 to 1024 [ 237.845829][T12573] EXT4-fs: Ignoring removed oldalloc option [ 237.855855][T12573] EXT4-fs: Ignoring removed oldalloc option [ 237.862203][T12573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.876939][T12573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.944063][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 237.967205][T12588] loop4: detected capacity change from 0 to 512 [ 237.973932][T12588] EXT4-fs: Ignoring removed nobh option [ 237.993127][T12588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.002599][T12588] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.015078][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.029623][T12588] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.4885: mark_inode_dirty error [ 238.043153][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.056549][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.068947][T12588] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.4885: mark_inode_dirty error [ 238.080942][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.093369][T12588] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4885: mark_inode_dirty error [ 238.105239][T12588] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.117772][T12588] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.4885: mark_inode_dirty error [ 238.142853][T12599] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.4885: corrupted inode contents [ 238.191121][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 238.270330][T12609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4892'. [ 238.305833][T12609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4892'. [ 238.326052][T12609] netlink: 4428 bytes leftover after parsing attributes in process `syz.4.4892'. [ 238.713292][T12645] overlayfs: failed to clone upperpath [ 238.736830][T12648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.812818][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.825963][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.833822][T12649] device bridge_slave_0 entered promiscuous mode [ 238.842302][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.849787][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.857568][T12649] device bridge_slave_1 entered promiscuous mode [ 238.936180][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.943317][T12649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.950682][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.957778][T12649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.987247][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.994926][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.006472][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.014210][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.031202][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.039969][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.047077][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.054757][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.064298][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.071407][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.087559][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.095796][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.108685][T12656] loop4: detected capacity change from 0 to 512 [ 239.121228][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.139781][T12649] device veth0_vlan entered promiscuous mode [ 239.147377][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.155667][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.163571][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.182009][T12649] device veth1_macvtap entered promiscuous mode [ 239.193379][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.204786][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4909'. [ 239.225305][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.234984][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.253942][ T28] audit: type=1400 audit(2000000432.124:7923): avc: denied { mounton } for pid=12649 comm="syz-executor" path="/root/syzkaller.xsmR49/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 239.283379][ T28] audit: type=1400 audit(2000000432.154:7924): avc: denied { mounton } for pid=12649 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 239.517907][T12674] device lo entered promiscuous mode [ 239.539639][T12674] device tunl0 entered promiscuous mode [ 239.555296][T12674] device gre0 entered promiscuous mode [ 239.570831][T12674] device gretap0 entered promiscuous mode [ 239.576850][T12674] device erspan0 entered promiscuous mode [ 239.582758][T12674] device ip_vti0 entered promiscuous mode [ 239.588886][T12674] device ip6_vti0 entered promiscuous mode [ 239.594892][T12674] device sit0 entered promiscuous mode [ 239.600587][T12674] device ip6tnl0 entered promiscuous mode [ 239.609029][T12674] device ip6gre0 entered promiscuous mode [ 239.615130][T12674] device ip6gretap0 entered promiscuous mode [ 239.621539][T12674] device bridge0 entered promiscuous mode [ 239.645477][T12674] device dummy0 entered promiscuous mode [ 239.660999][T12674] device veth0 entered promiscuous mode [ 239.667118][T12674] device veth1 entered promiscuous mode [ 239.672874][T12674] device wg0 entered promiscuous mode [ 239.679778][T12674] device wg1 entered promiscuous mode [ 239.685316][T12674] device wg2 entered promiscuous mode [ 239.690923][T12674] device veth0_to_bridge entered promiscuous mode [ 239.699048][T12674] device veth1_to_bridge entered promiscuous mode [ 239.705982][T12674] device veth0_to_bond entered promiscuous mode [ 239.731624][T12674] device bond_slave_0 entered promiscuous mode [ 239.748538][T12674] device veth1_to_bond entered promiscuous mode [ 239.756241][T12674] device bond_slave_1 entered promiscuous mode [ 239.775861][T12674] device veth0_to_team entered promiscuous mode [ 239.782359][T12674] device team_slave_0 entered promiscuous mode [ 239.788712][T12674] device veth1_to_team entered promiscuous mode [ 239.795143][T12674] device team_slave_1 entered promiscuous mode [ 239.801517][T12674] device veth0_to_batadv entered promiscuous mode [ 239.808319][T12674] device batadv_slave_0 entered promiscuous mode [ 239.815012][T12674] device veth1_to_batadv entered promiscuous mode [ 239.821701][T12674] device batadv_slave_1 entered promiscuous mode [ 239.828292][T12674] device xfrm0 entered promiscuous mode [ 239.834152][T12674] device veth0_to_hsr entered promiscuous mode [ 239.840936][T12674] device hsr_slave_0 entered promiscuous mode [ 239.847537][T12674] device veth1_to_hsr entered promiscuous mode [ 239.854048][T12674] device hsr_slave_1 entered promiscuous mode [ 239.860484][T12674] device veth1_virt_wifi entered promiscuous mode [ 239.867242][T12674] device veth0_virt_wifi entered promiscuous mode [ 239.874034][T12674] device veth1_vlan entered promiscuous mode [ 239.880430][T12674] device vlan0 entered promiscuous mode [ 239.886437][T12674] device vlan1 entered promiscuous mode [ 239.892568][T12674] device veth0_macvtap entered promiscuous mode [ 239.899337][T12674] device macsec0 entered promiscuous mode [ 239.905362][T12674] device sit1 entered promiscuous mode [ 239.911355][T12674] device ip6erspan0 entered promiscuous mode [ 239.917988][T12674] device ip6gretap1 entered promiscuous mode [ 239.924356][T12674] device gre1 entered promiscuous mode [ 239.930131][T12674] device bridge1 entered promiscuous mode [ 239.936242][T12674] device bridge2 entered promiscuous mode [ 239.942180][T12674] device veth2 entered promiscuous mode [ 239.947952][T12674] device veth3 entered promiscuous mode [ 239.953748][T12674] device veth4 entered promiscuous mode [ 239.959517][T12674] device veth5 entered promiscuous mode [ 239.965308][T12674] device gre2 entered promiscuous mode [ 239.970988][T12674] device gre3 entered promiscuous mode [ 239.976873][T12674] device bridge3 entered promiscuous mode [ 239.982768][T12674] device ip6erspan1 entered promiscuous mode [ 239.994800][T12674] device gre4 entered promiscuous mode [ 240.059411][T12681] netlink: 'syz.9.4917': attribute type 4 has an invalid length. [ 240.080280][T12681] netlink: 'syz.9.4917': attribute type 4 has an invalid length. [ 240.101302][T12681] device lo left promiscuous mode [ 240.288980][T12714] loop8: detected capacity change from 0 to 128 [ 240.304298][T12716] device lo entered promiscuous mode [ 240.334364][T12714] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 240.337343][T12716] device ip6_vti0 entered promiscuous mode [ 240.349500][T12714] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.366023][T12716] device sit0 entered promiscuous mode [ 240.372142][T12716] device ip6tnl0 entered promiscuous mode [ 240.378387][T12716] device ip6gre0 entered promiscuous mode [ 240.385075][T12716] device ip6gretap0 entered promiscuous mode [ 240.391399][T12716] device vcan0 entered promiscuous mode [ 240.397527][T12716] device dummy0 entered promiscuous mode [ 240.403800][T12716] device veth0 entered promiscuous mode [ 240.410195][T12716] device veth1 entered promiscuous mode [ 240.417460][T12716] device wg0 entered promiscuous mode [ 240.423172][T12716] device wg1 entered promiscuous mode [ 240.428968][T12716] device wg2 entered promiscuous mode [ 240.434514][T12716] device veth0_to_bridge entered promiscuous mode [ 240.446328][T12716] device bridge_slave_0 entered promiscuous mode [ 240.452796][T12716] device veth1_to_bridge entered promiscuous mode [ 240.459753][T12716] device bridge_slave_1 entered promiscuous mode [ 240.466452][T12716] device veth0_to_bond entered promiscuous mode [ 240.472946][T12716] device bond_slave_0 entered promiscuous mode [ 240.479912][T12716] device veth0_to_team entered promiscuous mode [ 240.483060][T12723] overlayfs: failed to clone upperpath [ 240.486982][T12716] device team_slave_0 entered promiscuous mode [ 240.503454][T12716] device veth1_to_team entered promiscuous mode [ 240.510219][T12716] device team_slave_1 entered promiscuous mode [ 240.516816][T12716] device veth0_to_batadv entered promiscuous mode [ 240.523532][T12716] device batadv_slave_0 entered promiscuous mode [ 240.531016][T12716] device veth1_to_batadv entered promiscuous mode [ 240.537992][T12716] device batadv_slave_1 entered promiscuous mode [ 240.544599][T12716] device xfrm0 entered promiscuous mode [ 240.550961][T12716] device veth0_to_hsr entered promiscuous mode [ 240.557861][T12716] device hsr_slave_0 entered promiscuous mode [ 240.564143][T12716] device veth1_to_hsr entered promiscuous mode [ 240.570700][T12716] device hsr_slave_1 entered promiscuous mode [ 240.582644][T12716] device veth1_virt_wifi entered promiscuous mode [ 240.591485][T12716] device veth0_virt_wifi entered promiscuous mode [ 240.666950][T12716] device veth1_vlan entered promiscuous mode [ 240.673377][T12716] device vlan0 entered promiscuous mode [ 240.693676][T12716] device vlan1 entered promiscuous mode [ 240.699847][T12716] device veth0_macvtap entered promiscuous mode [ 240.725895][T12716] device macsec0 entered promiscuous mode [ 240.731879][T12716] device ipip0 entered promiscuous mode [ 240.758166][T12716] device gre1 entered promiscuous mode [ 240.788964][T12716] device bridge1 entered promiscuous mode [ 240.820043][T12716] device ip6erspan0 entered promiscuous mode [ 240.828981][T12649] EXT4-fs (loop8): unmounting filesystem. [ 240.844139][T12716] device veth2 entered promiscuous mode [ 240.855185][T12716] device veth3 entered promiscuous mode [ 240.870090][T12716] device syztnl1 entered promiscuous mode [ 240.882724][T12716] device vlan2 entered promiscuous mode [ 240.894368][T12716] device sit1 entered promiscuous mode [ 240.907583][T12716] device veth4 entered promiscuous mode [ 240.920974][T12716] device veth5 entered promiscuous mode [ 240.929328][T12716] device veth6 entered promiscuous mode [ 240.942852][T12716] device veth7 entered promiscuous mode [ 240.948822][T12716] device veth8 entered promiscuous mode [ 240.954627][T12716] device veth9 entered promiscuous mode [ 240.960968][T12716] device sit2 entered promiscuous mode [ 240.966960][T12716] device bridge2 entered promiscuous mode [ 240.973025][T12716] device bridge0 entered promiscuous mode [ 240.980100][T12716] device bridge3 entered promiscuous mode [ 240.987055][T12716] device sit3 entered promiscuous mode [ 241.058151][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4931'. [ 241.104568][T12750] netlink: 'syz.8.4933': attribute type 4 has an invalid length. [ 241.124597][ T28] audit: type=1326 audit(2000000433.994:7925): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.9.4942" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5425b9e559 code=0x0 [ 241.167427][T12752] netlink: 'syz.8.4933': attribute type 4 has an invalid length. [ 242.619343][ T309] kernel write not supported for file /newroot/951/file0 (pid: 309 comm: kworker/1:3) [ 242.690732][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4966'. [ 242.891628][T12825] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4971'. [ 246.171905][T12850] ./dev/sda1: Can't open blockdev [ 246.391994][T12883] overlayfs: failed to clone upperpath [ 246.448722][T12893] device pim6reg1 entered promiscuous mode [ 248.346824][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5022'. [ 248.564097][T12948] loop8: detected capacity change from 0 to 40427 [ 248.586561][T12948] F2FS-fs (loop8): fault_injection options not supported [ 248.605991][T12948] F2FS-fs (loop8): invalid crc value [ 248.624723][T12948] F2FS-fs (loop8): Found nat_bits in checkpoint [ 248.686049][T12948] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 248.755173][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5035'. [ 249.116217][T12996] ip_tables: iptables: counters copy to user failed while replacing table [ 249.162674][ T28] audit: type=1400 audit(2000000442.034:7926): avc: denied { mounton } for pid=12999 comm="syz.9.5046" path="/sys/dev" dev="proc" ino=69585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_dev_t tclass=dir permissive=1 [ 249.232652][T13005] device tunl0 left promiscuous mode [ 249.238593][T13005] device gre0 left promiscuous mode [ 249.244801][T13005] device gretap0 left promiscuous mode [ 249.251609][T13005] device erspan0 left promiscuous mode [ 249.260368][T13005] device ip_vti0 left promiscuous mode [ 249.266395][T13005] device ip6_vti0 left promiscuous mode [ 249.272739][T13005] device sit0 left promiscuous mode [ 249.280998][T13005] device ip6tnl0 left promiscuous mode [ 249.294288][T13005] device ip6gre0 left promiscuous mode [ 249.300921][T13005] device ip6gretap0 left promiscuous mode [ 249.316632][T13005] device dummy0 left promiscuous mode [ 249.329729][T13005] device veth0 left promiscuous mode [ 249.336253][T13005] device veth1 left promiscuous mode [ 249.348163][T13005] device wg0 left promiscuous mode [ 249.354868][T13005] device wg1 left promiscuous mode [ 249.361902][T13005] device wg2 left promiscuous mode [ 249.367993][T13005] device veth0_to_bridge left promiscuous mode [ 249.374908][T13005] device bridge_slave_0 left promiscuous mode [ 249.382016][T13005] device veth1_to_bridge left promiscuous mode [ 249.388926][T13005] device bridge_slave_1 left promiscuous mode [ 249.395602][T13005] device veth0_to_bond left promiscuous mode [ 249.402390][T13005] device bond_slave_0 left promiscuous mode [ 249.408696][T13005] device veth1_to_bond left promiscuous mode [ 249.415651][T13005] device bond_slave_1 left promiscuous mode [ 249.421948][T13005] device veth0_to_team left promiscuous mode [ 249.428701][T13005] device team_slave_0 left promiscuous mode [ 249.435551][T13005] device veth1_to_team left promiscuous mode [ 249.442328][T13005] device team_slave_1 left promiscuous mode [ 249.448732][T13005] device veth0_to_batadv left promiscuous mode [ 249.455671][T13005] device batadv_slave_0 left promiscuous mode [ 249.462312][T13005] device veth1_to_batadv left promiscuous mode [ 249.469503][T13005] device batadv_slave_1 left promiscuous mode [ 249.476246][T13005] device xfrm0 left promiscuous mode [ 249.482310][T13005] device veth0_to_hsr left promiscuous mode [ 249.490632][T13005] device hsr_slave_0 left promiscuous mode [ 249.496910][T13005] device veth1_to_hsr left promiscuous mode [ 249.503611][T13005] device hsr_slave_1 left promiscuous mode [ 249.509915][T13005] device veth1_virt_wifi left promiscuous mode [ 249.516833][T13005] device veth0_virt_wifi left promiscuous mode [ 249.523547][T13005] device veth1_vlan left promiscuous mode [ 249.531462][T13005] device vlan0 left promiscuous mode [ 249.537298][T13005] device vlan1 left promiscuous mode [ 249.542981][T13005] device veth1_macvtap left promiscuous mode [ 249.549767][T13005] device veth0_macvtap left promiscuous mode [ 249.556281][T13005] device veth1_macvtap entered promiscuous mode [ 249.562791][T13005] device macsec0 left promiscuous mode [ 249.568901][T13005] device gre1 left promiscuous mode [ 249.574787][T13005] device bridge1 left promiscuous mode [ 249.580975][T13005] device bridge2 left promiscuous mode [ 249.587175][T13005] device ipip0 left promiscuous mode [ 249.592924][T13005] device ip6gre1 left promiscuous mode [ 249.599129][T13005] device ip6erspan0 left promiscuous mode [ 249.605459][T13005] device bridge0 left promiscuous mode [ 249.612006][T13005] device ipip1 left promiscuous mode [ 249.618425][T13005] device bridge3 left promiscuous mode [ 249.624774][T13005] device xfrm1 left promiscuous mode [ 249.633400][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.641699][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.657349][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.658044][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.687057][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.691593][T13034] ip_tables: iptables: counters copy to user failed while replacing table [ 249.703698][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.716081][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.724758][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.733606][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.742517][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 249.750977][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.760285][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 249.768778][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.777463][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.786007][ T2265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.793789][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.802458][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.811154][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.819620][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.828208][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.837542][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.846021][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.854485][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.862855][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.871511][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.879668][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.887929][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.896701][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.905043][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.913259][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.921292][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.928787][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.936407][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.944595][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.952896][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.964739][T13022] device lo left promiscuous mode [ 249.980721][T13024] device syzkaller0 entered promiscuous mode [ 250.135842][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.182802][T13059] binder: 13058:13059 ioctl c0306201 200000000140 returned -14 [ 250.203998][T13059] binder: 13058:13059 ioctl c0306201 200000000240 returned -14 [ 250.220343][T13059] binder: 13058:13059 unknown command 0 [ 250.230843][T13059] binder: 13058:13059 ioctl c0306201 2000000002c0 returned -22 [ 250.243701][T13062] overlayfs: failed to clone upperpath [ 250.415760][ T37] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 250.558295][ T28] audit: type=1400 audit(2000000443.434:7927): avc: denied { watch watch_reads } for pid=13079 comm="syz.9.5076" path="/" dev="ramfs" ino=70324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 250.607035][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.625912][ T37] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.648219][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.666898][ T37] usb 5-1: config 0 descriptor?? [ 250.876522][ T37] usbhid 5-1:0.0: can't add hid device: -71 [ 250.882579][ T37] usbhid: probe of 5-1:0.0 failed with error -71 [ 250.906820][ T37] usb 5-1: USB disconnect, device number 14 [ 251.248259][ T28] audit: type=1400 audit(2000000444.124:7928): avc: denied { watch } for pid=13101 comm="syz.6.5085" path="/trace" dev="bpf" ino=70350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 251.385792][ T6] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 251.475755][ T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 251.567132][ T6] usb 9-1: config 0 has no interfaces? [ 251.583202][ T6] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.598504][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.618911][ T6] usb 9-1: config 0 descriptor?? [ 251.676779][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.687970][ T37] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 251.698001][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.707144][ T37] usb 5-1: config 0 descriptor?? [ 251.847573][ T309] usb 9-1: USB disconnect, device number 11 [ 252.031524][T13116] fuse: Bad value for 'fd' [ 252.065140][T13123] tipc: Enabling of bearer rejected, already enabled [ 252.415891][ T309] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 252.526183][ T37] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 252.533775][ T37] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 252.596896][ T309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.622753][ T309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.650367][ T309] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.687195][ T309] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.711824][ T309] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.740613][ T309] usb 9-1: config 0 descriptor?? [ 252.844021][ T3707] usb 5-1: USB disconnect, device number 15 [ 252.844205][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 253.148495][ T309] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 253.178335][ T309] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 253.686954][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5112'. [ 253.755795][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.788944][T13179] overlayfs: failed to clone upperpath [ 254.489353][T13222] overlayfs: failed to clone upperpath [ 254.510925][T13224] overlayfs: failed to clone upperpath [ 255.067557][T13294] netlink: 352 bytes leftover after parsing attributes in process `syz.8.5166'. [ 255.346156][ T37] usb 9-1: USB disconnect, device number 12 [ 255.742020][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5183'. [ 255.946780][T13360] overlayfs: failed to clone upperpath [ 256.031746][T13366] 9pnet_fd: p9_fd_create_tcp (13366): problem connecting socket to 127.0.0.1 [ 256.078044][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5193'. [ 256.088525][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5193'. [ 256.110229][T13370] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 256.117929][T13370] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 256.324765][T13380] ip_tables: iptables: counters copy to user failed while replacing table [ 256.334605][T13380] 9pnet_fd: p9_fd_create_tcp (13380): problem connecting socket to 127.0.0.1 [ 256.408428][T13386] _swap_info_get: Bad swap file entry 7800000000000001 [ 256.793039][T13423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.298221][T13511] ip_tables: iptables: counters copy to user failed while replacing table [ 258.377296][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5253'. [ 258.474918][T13535] overlayfs: failed to clone upperpath [ 258.483002][T13535] overlayfs: failed to clone upperpath [ 258.636058][ T6] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 258.705894][ T3707] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 258.717301][T13549] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 258.825803][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 258.832285][ T6] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.840504][ T6] usb 9-1: config 0 has no interface number 0 [ 258.848325][ T6] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.857496][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.865554][ T6] usb 9-1: Product: syz [ 258.870136][ T6] usb 9-1: Manufacturer: syz [ 258.874761][ T6] usb 9-1: SerialNumber: syz [ 258.885891][ T3707] usb 5-1: Using ep0 maxpacket: 8 [ 258.895472][ T6] usb 9-1: config 0 descriptor?? [ 258.900598][ T3707] usb 5-1: config 0 has an invalid descriptor of length 126, skipping remainder of the config [ 258.910987][ T3707] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.920634][ T6] smsc95xx v2.0.0 [ 258.925171][ T3707] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 258.934467][ T3707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.946450][ T3707] usb 5-1: config 0 descriptor?? [ 258.991962][T13575] ip_tables: iptables: counters copy to user failed while replacing table [ 259.009648][T13578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5279'. [ 259.319713][ T28] audit: type=1400 audit(2000000452.203:7929): avc: denied { ioctl } for pid=13609 comm="syz.6.5294" path="socket:[71585]" dev="sockfs" ino=71585 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.344881][ T6] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 259.356064][ T6] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.506112][T13615] device lo left promiscuous mode [ 259.511379][T13615] device tunl0 left promiscuous mode [ 259.526028][T13615] device gre0 left promiscuous mode [ 259.531491][T13615] device gretap0 left promiscuous mode [ 259.541594][T13615] device erspan0 left promiscuous mode [ 259.551735][T13615] device ip_vti0 left promiscuous mode [ 259.562836][T13615] device ip6_vti0 left promiscuous mode [ 259.576259][T13615] device sit0 left promiscuous mode [ 259.585947][T13615] device ip6tnl0 left promiscuous mode [ 259.591524][T13615] device ip6gre0 left promiscuous mode [ 259.606113][T13615] device syz_tun left promiscuous mode [ 259.613663][T13615] device ip6gretap0 left promiscuous mode [ 259.624579][T13615] device bridge0 left promiscuous mode [ 259.630389][T13615] device vcan0 left promiscuous mode [ 259.635892][T13615] device dummy0 left promiscuous mode [ 259.641392][T13615] device veth0 left promiscuous mode [ 259.647265][T13615] device veth1 left promiscuous mode [ 259.652664][T13615] device wg0 left promiscuous mode [ 259.658003][T13615] device wg1 left promiscuous mode [ 259.663235][T13615] device wg2 left promiscuous mode [ 259.673215][T13615] device veth0_to_bridge left promiscuous mode [ 259.679754][T13615] device veth1_to_bridge left promiscuous mode [ 259.686295][T13615] device veth0_to_bond left promiscuous mode [ 259.692390][T13615] device bond_slave_0 left promiscuous mode [ 259.698510][T13615] device veth1_to_bond left promiscuous mode [ 259.704622][T13615] device bond_slave_1 left promiscuous mode [ 259.715832][T13615] device veth0_to_team left promiscuous mode [ 259.721963][T13615] device team_slave_0 left promiscuous mode [ 259.728099][T13615] device veth1_to_team left promiscuous mode [ 259.734203][T13615] device team_slave_1 left promiscuous mode [ 259.740341][T13615] device veth0_to_batadv left promiscuous mode [ 259.746922][T13615] device batadv_slave_0 left promiscuous mode [ 259.753189][T13615] device veth1_to_batadv left promiscuous mode [ 259.759521][T13615] device batadv_slave_1 left promiscuous mode [ 259.765822][T13615] device xfrm0 left promiscuous mode [ 259.771350][T13615] device veth0_to_hsr left promiscuous mode [ 259.777467][T13615] device hsr_slave_0 left promiscuous mode [ 259.783429][T13615] device veth1_to_hsr left promiscuous mode [ 259.789547][T13615] device hsr_slave_1 left promiscuous mode [ 259.795464][T13615] device veth1_virt_wifi left promiscuous mode [ 259.801829][T13615] device veth0_virt_wifi left promiscuous mode [ 259.808123][T13615] device veth1_vlan left promiscuous mode [ 259.814111][T13615] device vlan0 left promiscuous mode [ 259.819617][T13615] device vlan1 left promiscuous mode [ 259.836432][T13615] device veth0_macvtap left promiscuous mode [ 259.842592][T13615] device macsec0 left promiscuous mode [ 259.848343][T13615] device syztnl1 left promiscuous mode [ 259.853978][T13615] device gre1 left promiscuous mode [ 259.859724][T13615] device sit1 left promiscuous mode [ 259.865186][T13615] device xfrm1 left promiscuous mode [ 260.396540][ T561] device bridge_slave_1 left promiscuous mode [ 260.404014][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.418311][ T561] device bridge_slave_0 left promiscuous mode [ 260.429991][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.445126][ T561] device veth1_macvtap left promiscuous mode [ 260.455645][ T561] device veth0_vlan left promiscuous mode [ 260.583107][ T6] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 260.610749][ T6] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 260.632231][ T6] usb 9-1: USB disconnect, device number 13 [ 260.706851][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5319'. [ 260.748933][ T28] audit: type=1400 audit(2000000453.633:7930): avc: denied { watch } for pid=13692 comm="syz.6.5321" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 261.178108][T13729] ./dev/sda1: Can't open blockdev [ 261.445961][ T1716] usb 5-1: USB disconnect, device number 16 [ 261.485752][ T3707] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 261.648929][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5350'. [ 261.677370][ T3707] usb 9-1: config 0 has no interfaces? [ 261.690158][ T3707] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 261.705563][ T3707] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.720713][T13771] netlink: 165 bytes leftover after parsing attributes in process `syz.6.5353'. [ 261.757467][ T3707] usb 9-1: config 0 descriptor?? [ 261.835791][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.117747][T13789] device bridge0 entered promiscuous mode [ 262.162875][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5371'. [ 262.499940][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5375'. [ 263.910809][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5407'. [ 264.223159][ T6] usb 9-1: USB disconnect, device number 14 [ 264.246873][T13957] overlayfs: failed to clone upperpath [ 265.133340][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5429'. [ 265.155953][T14008] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.885957][T14037] device batadv_slave_0 entered promiscuous mode [ 265.928586][T14036] device batadv_slave_0 left promiscuous mode [ 266.086586][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5454'. [ 267.286164][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5467'. [ 267.355440][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5471'. [ 268.100538][ T28] audit: type=1326 audit(2000000460.983:7931): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.9.5487" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5425b9e559 code=0x0 [ 268.175155][T14151] ip_tables: iptables: counters copy to user failed while replacing table [ 268.207977][ T6] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 268.222221][ T6] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.244401][T14154] loop4: detected capacity change from 0 to 4096 [ 268.258170][T14154] EXT4-fs: Ignoring removed orlov option [ 268.280776][T14154] EXT4-fs (loop4): Test dummy encryption mode enabled [ 268.291198][T14154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.312254][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 268.391638][T14174] FAULT_INJECTION: forcing a failure. [ 268.391638][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 268.404388][T14174] CPU: 1 PID: 14174 Comm: syz.4.5496 Tainted: G W syzkaller #0 [ 268.413332][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.423391][T14174] Call Trace: [ 268.426675][T14174] [ 268.429610][T14174] __dump_stack+0x21/0x24 [ 268.433974][T14174] dump_stack_lvl+0x110/0x170 [ 268.438677][T14174] ? __cfi_dump_stack_lvl+0x8/0x8 [ 268.443715][T14174] dump_stack+0x15/0x24 [ 268.447885][T14174] should_fail_ex+0x3bf/0x510 [ 268.452573][T14174] ? __alloc_file+0x28/0x2a0 [ 268.457174][T14174] __should_failslab+0xac/0xf0 [ 268.461949][T14174] should_failslab+0x9/0x20 [ 268.466459][T14174] kmem_cache_alloc+0x3b/0x320 [ 268.471242][T14174] ? __cfi__raw_spin_lock+0x10/0x10 [ 268.476477][T14174] __alloc_file+0x28/0x2a0 [ 268.480907][T14174] alloc_empty_file+0x97/0x180 [ 268.485698][T14174] alloc_file+0x59/0x600 [ 268.489969][T14174] ? _raw_spin_unlock+0x4c/0x70 [ 268.494917][T14174] alloc_file_pseudo+0x180/0x200 [ 268.499870][T14174] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 268.505354][T14174] ? shmem_get_inode+0x7f3/0xba0 [ 268.510318][T14174] ? __kasan_check_write+0x14/0x20 [ 268.515435][T14174] ? clear_nlink+0x8a/0xe0 [ 268.519872][T14174] __shmem_file_setup+0x1df/0x2b0 [ 268.524917][T14174] shmem_zero_setup+0x8c/0x130 [ 268.529708][T14174] mmap_region+0x13a6/0x2130 [ 268.534321][T14174] ? __cfi_mmap_region+0x10/0x10 [ 268.539287][T14174] ? __kasan_check_read+0x11/0x20 [ 268.544322][T14174] ? cap_mmap_addr+0x165/0x2e0 [ 268.549129][T14174] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 268.555735][T14174] ? get_unmapped_area+0x30c/0x370 [ 268.560876][T14174] do_mmap+0x858/0xdd0 [ 268.564981][T14174] ? __cfi_do_mmap+0x10/0x10 [ 268.569599][T14174] ? do_futex+0x2e2/0x430 [ 268.573947][T14174] vm_mmap_pgoff+0x206/0x3f0 [ 268.578567][T14174] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 268.583688][T14174] ? __x64_sys_futex+0x100/0x100 [ 268.588632][T14174] ? ksys_write+0x1fa/0x260 [ 268.593143][T14174] ksys_mmap_pgoff+0xf6/0x1d0 [ 268.597833][T14174] ? __kasan_check_write+0x14/0x20 [ 268.602976][T14174] __x64_sys_mmap+0xfa/0x110 [ 268.607577][T14174] x64_sys_call+0x8fd/0x9a0 [ 268.612092][T14174] do_syscall_64+0x4c/0xa0 [ 268.616550][T14174] ? clear_bhb_loop+0x30/0x80 [ 268.621241][T14174] ? clear_bhb_loop+0x30/0x80 [ 268.625943][T14174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.631843][T14174] RIP: 0033:0x7f523e99e559 [ 268.636299][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.655912][T14174] RSP: 002b:00007f523f7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 268.664334][T14174] RAX: ffffffffffffffda RBX: 00007f523ec25fa0 RCX: 00007f523e99e559 [ 268.672316][T14174] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 268.680293][T14174] RBP: 00007f523ea358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 268.688294][T14174] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 268.696270][T14174] R13: 00007f523ec26038 R14: 00007f523ec25fa0 R15: 00007ffcc3064728 [ 268.704266][T14174] [ 268.791218][ T28] audit: type=1400 audit(2000000461.673:7932): avc: denied { accept } for pid=14175 comm="syz.6.5497" path="socket:[73268]" dev="sockfs" ino=73268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.846461][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5502'. [ 269.688474][T14214] loop4: detected capacity change from 0 to 128 [ 269.726319][T14214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.751141][T14214] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.789495][T14224] loop8: detected capacity change from 0 to 256 [ 269.811621][T14224] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 269.858008][ T28] audit: type=1400 audit(2000000462.743:7933): avc: denied { associate } for pid=14223 comm="syz.8.5520" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 269.881158][T14224] exFAT-fs (loop8): hint_cluster is invalid (1) [ 269.888528][T14224] exFAT-fs (loop8): error, invalid access to exfat cache (entry 0x00000000) [ 269.897626][ T28] audit: type=1400 audit(2000000462.763:7934): avc: denied { read write } for pid=14223 comm="syz.8.5520" name="file1" dev="loop8" ino=1049052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.921431][T14224] exFAT-fs (loop8): Filesystem has been set read-only [ 269.937142][T14224] exFAT-fs (loop8): error, failed to bmap (inode : ffff8881334d00d0 iblock : 9, err : -5) [ 269.945480][ T28] audit: type=1400 audit(2000000462.763:7935): avc: denied { open } for pid=14223 comm="syz.8.5520" path="/52/file1/file1" dev="loop8" ino=1049052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.949894][T14224] syz.8.5520: attempt to access beyond end of device [ 269.949894][T14224] loop8: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 270.007595][ T8964] EXT4-fs (loop4): unmounting filesystem. [ 271.743953][T14258] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.760237][T14258] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.776541][T14258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.783886][T14258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.807499][T14258] device veth0_vlan left promiscuous mode [ 271.813617][T14258] device veth0_vlan entered promiscuous mode [ 271.830870][T14258] device veth1_macvtap left promiscuous mode [ 271.840415][T14258] device veth1_macvtap entered promiscuous mode [ 271.873681][ T37] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 271.888020][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.900662][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.928876][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.945336][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.952485][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.960500][T14270] netlink: 4428 bytes leftover after parsing attributes in process `syz.3.5536'. [ 271.984795][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.993754][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.002227][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.009337][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.016920][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.025417][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 272.034027][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.042390][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 272.050707][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.059019][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.067266][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.075444][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.083706][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.092007][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.101221][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.109687][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.118010][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.126495][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.134499][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.142726][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.150890][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.159083][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.167488][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.175937][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.184091][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.192198][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.199800][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.207294][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.215479][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.223811][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.231552][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.239624][ T3707] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 272.247343][ T3707] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 272.254993][T14267] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5536'. [ 272.264048][T14267] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5536'. [ 272.273226][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 272.355896][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 272.755883][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 276.556061][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 277.836298][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!