last executing test programs: 3m23.936587285s ago: executing program 32 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@remote, r2}, 0x14) 3m17.801407839s ago: executing program 33 (id=187): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000040)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 3m16.717628807s ago: executing program 34 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m4.074121452s ago: executing program 35 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x9}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0xb, 0x4) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "01c019", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x850}, @window={0x3, 0x3, 0x1}]}}}}}}}}, 0x0) 3m1.844601635s ago: executing program 36 (id=383): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18010, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES8=r0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f00006df000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) 2m46.618871779s ago: executing program 37 (id=524): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xb) pread64(r2, &(0x7f0000007d80)=""/102377, 0x18fe9, 0x400) 2m23.316729711s ago: executing program 38 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x1000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/sys/vm/compact_memory\x00', 0x1, 0x4) write(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000700)={0x0, 0x0, 0x400000000003b, 0xfffffffffffffff8, 0x800000000000800, 0x3, 0x401, 0xfffffffffffffffc}, 0x0, &(0x7f0000000740)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0x0) 2m0.04122948s ago: executing program 39 (id=1149): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 1m59.04276889s ago: executing program 40 (id=1166): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000380)={r0}, 0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000071000000850000005000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 1m57.950885109s ago: executing program 41 (id=1183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) poll(&(0x7f0000000480)=[{r2, 0x80}, {r1, 0x2cfc08c20dafc34e}], 0x2, 0x101) 1m54.725699432s ago: executing program 42 (id=1254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 1m53.54819342s ago: executing program 43 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x8004) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000780)=""/269, 0x10d}, {&(0x7f00000008c0)=""/4093, 0xffd}, {&(0x7f00000018c0)=""/192, 0xc0}, {&(0x7f0000001980)=""/246, 0xf6}, {&(0x7f0000001a80)=""/180, 0xb4}], 0x5}, 0x2}], 0x1, 0x2080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m49.864768509s ago: executing program 0 (id=1321): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000a40)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000ac0), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m49.770381179s ago: executing program 0 (id=1314): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0xc7) close(r0) io_uring_setup(0x44d, &(0x7f0000000280)={0x0, 0xe9e3, 0x8, 0x0, 0x57}) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x4440, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m49.498196596s ago: executing program 0 (id=1325): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@usrquota}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x587, &(0x7f0000005100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005a00)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000005a40)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000005a80)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000005ac0)={0x2020}, 0xfffffeb1) 1m49.076807038s ago: executing program 0 (id=1340): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xc000000b}) tkill(r0, 0x11) 1m48.871468559s ago: executing program 0 (id=1347): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m33.760331403s ago: executing program 44 (id=1347): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m32.844159966s ago: executing program 9 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x80, &(0x7f0000000500)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 1m32.822698338s ago: executing program 9 (id=1503): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2df8d080}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) 1m32.70098606s ago: executing program 9 (id=1504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x4645f263424141f3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) 1m31.855097036s ago: executing program 9 (id=1528): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x210000, &(0x7f0000000400)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d80)='./bus\x00', &(0x7f0000000dc0), 0x2000008, &(0x7f0000000e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000e40)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) 1m31.676848994s ago: executing program 9 (id=1529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m30.92291464s ago: executing program 2 (id=1535): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x5, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000001600)=[{0x28, 0x20, 0x0, 0xfffff034}]}, 0x10) 1m30.901472002s ago: executing program 2 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="2e1221b23bb601c494d3df173e75feff000d9d4d7f700ccc8fd5bf1881de", 0x1e}, {&(0x7f00000002c0)='\x00', 0x1}], 0x2) 1m30.845739997s ago: executing program 9 (id=1538): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB='nr_inodes=4']) syz_mount_image$fuse(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x107002e, &(0x7f0000000e40)=ANY=[], 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000ec0)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x8, &(0x7f0000000f80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m30.845646627s ago: executing program 45 (id=1538): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB='nr_inodes=4']) syz_mount_image$fuse(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x107002e, &(0x7f0000000e40)=ANY=[], 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000ec0)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x8, &(0x7f0000000f80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m30.834286768s ago: executing program 2 (id=1541): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x16d) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000005c0)='7', 0x1) socket$key(0xf, 0x3, 0x2) 1m30.534527249s ago: executing program 2 (id=1544): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x210000, &(0x7f0000000400)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d80)='./bus\x00', &(0x7f0000000dc0), 0x2000008, &(0x7f0000000e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000e40)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) 1m30.395677793s ago: executing program 2 (id=1545): r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000002ec0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000002f00)='keyring\x00', &(0x7f0000002f40)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000002f80)='asymmetric\x00', 0x0, &(0x7f0000002fc0)="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", 0x559, r1) r3 = add_key$fscrypt_provisioning(&(0x7f0000003600), 0x0, 0x0, 0x0, r2) keyctl$search(0xa, r3, 0x0, &(0x7f0000003700)={'syz', 0x3}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000003540)={r2, 0x17f}, &(0x7f0000003580)=ANY=[], &(0x7f00000035c0)="929835e740d6a600000000000000010100000002000040", 0x0) 1m29.315329972s ago: executing program 2 (id=1552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x206080, 0x0) r1 = epoll_create(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x3000202a}) 1m29.272065066s ago: executing program 46 (id=1552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x206080, 0x0) r1 = epoll_create(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x3000202a}) 42.609020033s ago: executing program 1 (id=2756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001940)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000001980)={0xb, 0xfffffffc}, 0x8) 42.573496796s ago: executing program 1 (id=2757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000000c0), 0x8) 42.505272203s ago: executing program 1 (id=2758): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0046209, 0x0) 42.504921373s ago: executing program 1 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 42.504600783s ago: executing program 1 (id=2760): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000540)='./file0\x00', 0x8, &(0x7f00000067c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000006940)="$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") creat(&(0x7f000000bec0)='./bus\x00', 0x0) mount(&(0x7f000000bf80)=@loop={'/dev/loop', 0x0}, &(0x7f000000bfc0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f000000c000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000000c040)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x1f, 0x5, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d6020000ae3e0000000000000001", [0x1000, 0xffffffffffffffff]}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c140)='./file0\x00', 0x88243, 0xa) syncfs(r1) 41.867203568s ago: executing program 1 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x15) 41.771542037s ago: executing program 5 (id=2782): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000000)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0xa4c0, 0x0, 0x8001, 0x0, 0x0}, {[0x6, 0x4, 0x10, 0xf25]}, 0x2, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a00010100000009040000170202000005241a"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f00000001c0)="0000010000000000000001") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 40.096927496s ago: executing program 5 (id=2808): syz_mount_image$fuse(0x0, &(0x7f0000006880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000068c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000006900)='./file0\x00', 0x0, 0x14081, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000006740)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000067c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000006840)={r2, &(0x7f0000006880)}, 0x20) 40.013385755s ago: executing program 5 (id=2810): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x402, 0x0) write(r0, &(0x7f00000002c0)='270', 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x8, 0x400) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x49cdee) 38.86501787s ago: executing program 5 (id=2823): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2000094, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2d3, &(0x7f0000000b00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x1, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002ec0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002f40)="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", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)={0x90, 0x0, 0x4, {0x0, 0x0, 0x7fffffff, 0x2000000000002, 0xfffffffb, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x7ffe, 0x8, 0x123, 0x3, 0xa000, 0x0, r2, r3, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000005100)='./file0/file0\x00', 0x140, 0xe1) 38.600734677s ago: executing program 5 (id=2830): setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 37.97705583s ago: executing program 5 (id=2837): r0 = syz_create_resource$binfmt(&(0x7f0000001640)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 37.941743203s ago: executing program 47 (id=2837): r0 = syz_create_resource$binfmt(&(0x7f0000001640)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 26.924743675s ago: executing program 8 (id=2999): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f00000031c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x180c8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000480)="$eJzs3cFqE0EYB/CvaZKNvdizeFjw4qmoJ69BKogBIZKDgmCgemlF2F6ipzyGT+DBR/IxeipeVppdmza2xYRs1ia/H4T9yD+7mWFgZw8zyfv7nw4PPh9/zH9+i04njWbEOM8jdqMR21HYKo+NSd2Oi8Yxv9YC5wAAy9PvD7t1t4HFff+Hz2RZd3j2zJX8lQx+VNIoAAAAAAAAAAAAKnfV+v84rXb9PwBQL+v/11+WdYc75fPbZdb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU5zfO7+Q2vutsHACyf+R8ANo/5HwA2j/kfADbP6zdvX3Z7vf1+mnYiTsajwWhQHIv8+Yve/qN0Ynd61sloNNg+zx8XeXo5b8VOmT+5Mm/HwwdFfpY9e9WbyZM4qL77AAAAAAAAAAAAAAAAAAAA8F/YS9PJzv+4Zn//XhLl7v3ZvKgu/D7AzP79ZtxrrqwbAAAAAAAAAAAAAAAAAAAAcKsdf/l6ODw6+pDNUdxZ6Kxril95YWkXXLBIYsVfuhXn77TKwVjSleNptY1/165vmG4oYtUjuN7FnztEo76bEwAAAAAAAAAAAAAAAAAAbJjppt+6WwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Zn+/38FRVIUETHOC3V3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhjvwMAAP//cUGYlA==") read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004bc0)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c80)={0x90, 0x0, 0x7fffa, {0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x6, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0xc000, 0x1, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000006d80), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000006dc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa0000, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000006f00)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x2418, 0x0, 0x60, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'n', 0x20, '8'}}]}) 26.759777451s ago: executing program 48 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x15) 26.343194603s ago: executing program 8 (id=3008): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 25.968910111s ago: executing program 8 (id=3012): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6, 0x500}, [@RTA_TABLE={0x8, 0xf, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2000844, &(0x7f00000000c0)={[{@dots}, {@dots}, {@nodots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@gid}, {@fat=@tz_utc}, {@nodots}]}, 0x1, 0x26a, &(0x7f0000000300)="$eJzs3bGOElEUANDLLrCsiZHaWExiY7VRO0tiMDGSmGCm0EqS1WbXGNlmtJHP8Bv0j/wMKroxO4OCy6rRALM45yTk3bzLG+6j4FHcgZe33pwcvz17nX/9FJ1OEs2IScwiurEX+1FqzMfrRdyOZZMAAHbNcDjqVV0Da1R8WWvMlmYOI2LUioiDlSenn7dZGgAAAAAAAAAAAOvzh/7/otn/e///3k/9/+djd+V6jW0WDwD8E/3//7/xuPeufWlG/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnVme38h/86i6PgBg/Zz/AFA/zn8AqB/nPwDUz7PnL570BoP+MEk6EdNJlmZpOZb5R48H/btJoVtM7M0Xpq15MOjfK/PJ4qrTLEtbcW2+/v6l+XbcuV3mz3MPnw4u5A/ieOO7BwAAAAAAAAAAAAAAAAAAgKvhKPmhu5idZlm6X+aPfpUvo6XfB7hw/34zbja3tg0AAAAAAAAAAAAAAAAAAADYaWfvP5yMTk9fjQU7EuSNiE2/1mH89aovDzpxJd4fwXqCqj+ZAAAAAAAAAAAAAAAAAACgfhY3/a7mPlZREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUYPH//5sLqt4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUA/fAgAA//8agY8Y") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 24.897508219s ago: executing program 8 (id=3027): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x12148c5, &(0x7f0000002940)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@utf8}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x0, 0x2d9, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 24.676266002s ago: executing program 8 (id=3030): getpid() unshare(0x64000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x55}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) 24.344976345s ago: executing program 8 (id=3037): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0xe, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003780)={{r2}, &(0x7f00000037c0), &(0x7f0000003800)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000003840)={0x0, 0x6000, &(0x7f0000003880)=[{&(0x7f00000038c0)='U', 0xa00120}], 0x1}, 0x3) 24.229837237s ago: executing program 49 (id=3037): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0xe, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003780)={{r2}, &(0x7f00000037c0), &(0x7f0000003800)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000003840)={0x0, 0x6000, &(0x7f0000003880)=[{&(0x7f00000038c0)='U', 0xa00120}], 0x1}, 0x3) 21.52085747s ago: executing program 0 (id=3038): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x200000, &(0x7f0000000900)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 9.272434105s ago: executing program 7 (id=3122): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000002300)="a101000000000000") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000026c0)={0x1, &(0x7f0000002700)=[{0x6, 0x72, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.272022855s ago: executing program 6 (id=3123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000140)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f0000000200)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) 9.271586215s ago: executing program 4 (id=3124): r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000002800)=""/4096, 0x20001b80}, {&(0x7f0000003800)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r3 = io_uring_setup(0x70c3, &(0x7f0000003880)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 9.271317425s ago: executing program 3 (id=3125): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r2, 0x3, r0, 0xffff4e13, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000340)={r2, 0x5, 0x4000003}) 7.642849019s ago: executing program 7 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r0}, 0xc) 7.64248926s ago: executing program 6 (id=3127): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a514}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.6420424s ago: executing program 4 (id=3128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x24044c45) 7.6418518s ago: executing program 3 (id=3129): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x10b) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe000001a}) read$FUSE(r1, &(0x7f0000000900)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002940)={0x60000018}) epoll_pwait(r0, &(0x7f0000002980)=[{}], 0x1, 0xdf4, 0x0, 0x0) 5.872316568s ago: executing program 7 (id=3130): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000004c0)={@multicast2, @loopback, @empty}, 0xc) 5.872064108s ago: executing program 6 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0xa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.871944968s ago: executing program 4 (id=3132): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000280)=0x9, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0xffffff7e}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000b00)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 5.871790698s ago: executing program 3 (id=3133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 4.021865755s ago: executing program 7 (id=3134): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syslog(0x1, 0x0, 0x0) 4.021506825s ago: executing program 6 (id=3135): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 4.021344985s ago: executing program 4 (id=3136): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1229, &(0x7f00000005c0)="$eJzs3E1rXFUYB/AnY9q81Lyotdou9IAbcXFpsnAlSJAUJANKbYRWEG7NjQ4zzpS5Q2BErK7c+jlcuxP8Btn4Gdxl02UX4pXc6dQkpsZCmynp77fIfbjn/HPO4TIDZ5gze+/99HV7u8y280E0pqaicSci3U+RohFjb2yMrjdvbaw1m+vXU7q2dmPl3ZTS4pu/ffbtTERc+PSXxV9nYnf58717q3/sXtq9vPfXja9aZWqVqdsbpDzd7vUG+e3OYtpqle0spY87RV4WqdUti/6B9iJtvxMRw5R3txbm7/SLskx5d5jaxTANemnQH6b8y7zVTVmWpYX54JHOndxl8+f7VVVFVNW5OB9VVVVzMR8X4sVYiMX4PiJeipfjlbgYr8aleC1ej8t1r9OYPgAAAAAAAAAAAAAAAAAAADw//uv8/1Isn3D+f26ykwcAAAAAAAAAAAAAAAAAAIAz4pObtzbWms316ynNRnR+3Nnc2RxdR+3L+386UcTVWIo/oz79PzKqr33YXL+aasvxQ+fug/zdnc0X6vzaOL9S/5zAg/x03TbOr4zy6XB+Jub389vRqvOrsRQXjx9/9dj8bLz91oF8Fkvx+xfRi05s1WP/k/9uJaUPPmoeyV+p+wEAAMBZkKWHjt2/Z9mj2kf5h/vrkz8fOLK/no4r05NdOxHl8Jt23ugU/brojIvZf915ekWc4lhPtoi4V9XFzOGmxv/8P/sP4HEGbcTEl3ygmHo2pvEEivGL4VmZz0SKuTh8Z6JvS5yS8dM/P+mJAAAAAAAAAAAA8Fie8vcKp6Pol0fHfH8ySwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//9+2v1o=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001840), 0x208e24b) mlock2(&(0x7f0000213000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001880)='memory.events.local\x00', 0x275a, 0x0) 4.021124355s ago: executing program 3 (id=3137): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0xf) 2.061793842s ago: executing program 7 (id=3138): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r0, 0x0, 0xb8) 2.060891202s ago: executing program 6 (id=3139): socket$inet6(0xa, 0x803, 0x6) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002240)={@void, @val={0x1, 0x0, 0x9, 0x6, 0x16, 0xa}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x16, 0xfc0, 0x67, 0x0, 0x9, 0x6, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0xaa, 0x0, 0x6}]}}, "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"}}, 0xfca) 2.060153603s ago: executing program 4 (id=3140): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4800) 2.059907332s ago: executing program 3 (id=3141): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.15622ms ago: executing program 7 (id=3142): r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 632.86µs ago: executing program 6 (id=3143): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff3, 0x4031, 0xffffffffffffffff, 0x5d4da000) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) 229.38µs ago: executing program 4 (id=3144): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=3145): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) r0 = open(&(0x7f00000015c0)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): set=40, inode=14, rec_len=40, size=60 fake=0 [ 141.720570][ T4579] should_failslab+0x9/0x20 [ 141.720593][ T4579] slab_pre_alloc_hook+0x39/0xd0 [ 141.729815][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.731857][ T4579] __kmalloc+0x6d/0x2c0 [ 141.754776][ T4392] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 141.758255][ T4579] ? kmem_cache_alloc_trace+0x119/0x270 [ 141.758284][ T4579] ? alloc_pipe_info+0x1f7/0x4a0 [ 141.763674][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.769706][ T4579] alloc_pipe_info+0x1f7/0x4a0 [ 141.769726][ T4579] create_pipe_files+0x8d/0x6c0 [ 141.769749][ T4579] __do_pipe_flags+0x4f/0x200 [ 141.775830][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 141.793514][ T4579] do_pipe2+0xa7/0x190 [ 141.793537][ T4579] ? __x64_sys_futex+0x100/0x100 [ 141.793558][ T4579] ? pipe_fcntl+0x510/0x510 [ 141.800115][ T4392] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 141.804053][ T4579] ? __kasan_check_write+0x14/0x20 [ 141.804078][ T4579] ? switch_fpu_return+0x15d/0x2c0 [ 141.811544][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.815335][ T4579] __x64_sys_pipe2+0x5a/0x70 [ 141.815371][ T4579] x64_sys_call+0x354/0x9a0 [ 141.820735][ T4392] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 141.824898][ T4579] do_syscall_64+0x4c/0xa0 [ 141.824920][ T4579] ? clear_bhb_loop+0x50/0xa0 [ 141.840217][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.843125][ T4579] ? clear_bhb_loop+0x50/0xa0 [ 141.843150][ T4579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.849922][ T4392] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 141.852576][ T4579] RIP: 0033:0x7f1262d87b19 [ 141.852595][ T4579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.875712][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.879565][ T4579] RSP: 002b:00007f12617df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 141.879589][ T4579] RAX: ffffffffffffffda RBX: 00007f126300dfa0 RCX: 00007f1262d87b19 [ 141.885300][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 141.891182][ T4579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.891195][ T4579] RBP: 00007f1262e1fb70 R08: 0000000000000000 R09: 0000000000000000 [ 141.896775][ T4392] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 141.900286][ T4579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.900302][ T4579] R13: 00007f126300e038 R14: 00007f126300dfa0 R15: 00007ffe5c799cf8 [ 141.923516][ T4392] EXT4-fs (loop2): Remounting filesystem read-only [ 141.926601][ T4579] [ 142.093263][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.108220][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.122954][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.137997][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.153570][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.168296][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.183445][ T4392] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.198136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.208846][ T4562] device veth0_vlan entered promiscuous mode [ 142.220016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.228265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.236111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.247972][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.257468][ T4562] device veth1_macvtap entered promiscuous mode [ 142.267813][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.282498][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.356148][ T8] device bridge_slave_1 left promiscuous mode [ 142.372576][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.380831][ T8] device bridge_slave_0 left promiscuous mode [ 142.392120][ T4585] loop4: detected capacity change from 0 to 1024 [ 142.395130][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.407110][ T8] device veth1_macvtap left promiscuous mode [ 142.413139][ T8] device veth0_vlan left promiscuous mode [ 142.457883][ T4585] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.585110][ T435] Bluetooth: hci0: command 0x1001 tx timeout [ 142.591212][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 142.621818][ T4600] loop4: detected capacity change from 0 to 1024 [ 142.646810][ T4603] loop7: detected capacity change from 0 to 512 [ 142.658050][ T4600] EXT4-fs (loop4): Ignoring removed bh option [ 142.710441][ T4601] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.718940][ T4603] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 142.733479][ T4600] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 142.756127][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.763562][ T4601] device bridge_slave_0 entered promiscuous mode [ 142.770274][ T26] usb 8-1: USB disconnect, device number 9 [ 142.778831][ T4603] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.800867][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.813737][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 142.838602][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.854450][ T4601] device bridge_slave_1 entered promiscuous mode [ 142.865285][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 142.872176][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 142.894581][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 142.901541][ T4562] EXT4-fs error (device loop4): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 142.921525][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 142.945636][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 142.994893][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 143.040521][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.051438][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.058600][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.065889][ T4601] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.072921][ T4601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.080420][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 143.103430][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.114678][ T4562] EXT4-fs error (device loop4): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 143.134806][ T4582] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 143.143346][ T4582] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 143.164595][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.164902][ T4582] F2FS-fs (loop5): invalid crc value [ 143.171309][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.199203][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.208134][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.212668][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 143.219386][ T4582] F2FS-fs (loop5): Found nat_bits in checkpoint [ 143.238206][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.244551][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.254803][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 143.279018][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.286088][ T4562] EXT4-fs error (device loop4): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 143.306703][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.313273][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.327642][ T4562] EXT4-fs error (device loop4): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /3/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 143.350282][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.355200][ T4562] EXT4-fs (loop4): Remounting filesystem read-only [ 143.360329][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.366216][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.375873][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.389038][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.394108][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.394499][ T4582] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 143.413999][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.415959][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.424349][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.436967][ T4582] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 143.446723][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.459981][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.468966][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.485050][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.496951][ T4562] EXT4-fs warning (device loop4): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 143.502866][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.564667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.587306][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.607577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.616492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.634028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.643115][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.656337][ T4601] device veth0_vlan entered promiscuous mode [ 143.663296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.672700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.690396][ T4601] device veth1_macvtap entered promiscuous mode [ 143.697128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.705032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.712517][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.720971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.740106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.765528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.785878][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.794589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.803132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.862526][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.870464][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.895157][ T8] device bridge_slave_1 left promiscuous mode [ 143.902570][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.914558][ T8] device bridge_slave_0 left promiscuous mode [ 143.920988][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.929251][ T8] device veth1_macvtap left promiscuous mode [ 143.935455][ T8] device veth0_vlan left promiscuous mode [ 144.004007][ T4623] netlink: 'syz.3.1554': attribute type 16 has an invalid length. [ 144.022063][ T4623] netlink: 'syz.3.1554': attribute type 17 has an invalid length. [ 144.033846][ T4625] set_capacity_and_notify: 1 callbacks suppressed [ 144.033884][ T4625] loop7: detected capacity change from 0 to 1024 [ 144.055152][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.062236][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.086391][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.093556][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.110449][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0.257: link becomes ready [ 144.121442][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.122767][ T4625] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.137926][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.148612][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.156973][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.165664][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.174000][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.183270][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.191596][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.300998][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.318054][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.326409][ T4628] device bridge_slave_0 entered promiscuous mode [ 144.343058][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.350327][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.357855][ T4628] device bridge_slave_1 entered promiscuous mode [ 144.412649][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.419757][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.444681][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.455319][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.464016][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.478270][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.489827][ T4644] loop3: detected capacity change from 0 to 1024 [ 144.496560][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.505067][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.512142][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.528952][ T4644] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.542158][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.558628][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.565703][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.573870][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 144.606141][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.614469][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.633173][ T4628] device veth0_vlan entered promiscuous mode [ 144.653250][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.664707][ T435] Bluetooth: hci0: command 0x1009 tx timeout [ 144.671130][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.687816][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.702990][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.727061][ T4628] device veth1_macvtap entered promiscuous mode [ 144.734044][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.747755][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.762240][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.898777][ T4662] loop5: detected capacity change from 0 to 4096 [ 144.909618][ T4662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 144.916747][ T4662] EXT4-fs (loop5): Ignoring removed orlov option [ 144.923145][ T4662] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 144.939729][ T4662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 144.957864][ T4662] System zones: 0-5 [ 144.962468][ T4662] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,orlov,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 145.031611][ T4659] loop3: detected capacity change from 0 to 40427 [ 145.046316][ T4659] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.054388][ T4659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.065949][ T4659] F2FS-fs (loop3): invalid crc value [ 145.082200][ T4659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.095437][ T8] device bridge_slave_1 left promiscuous mode [ 145.104921][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.121242][ T8] device bridge_slave_0 left promiscuous mode [ 145.138994][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.151612][ T4659] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.159482][ T8] device veth1_macvtap left promiscuous mode [ 145.164881][ T4659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.165557][ T8] device veth0_vlan left promiscuous mode [ 145.202241][ T4675] loop7: detected capacity change from 0 to 4096 [ 145.278163][ T4675] EXT4-fs (loop7): Test dummy encryption mode enabled [ 145.294728][ T4675] EXT4-fs (loop7): Ignoring removed orlov option [ 145.301227][ T4675] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 145.328057][ T4682] attempt to access beyond end of device [ 145.328057][ T4682] loop3: rw=2049, want=79888, limit=40427 [ 145.333952][ T4675] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 145.347794][ T4675] System zones: 0-5 [ 145.352569][ T4675] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,orlov,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 145.364268][ T4682] attempt to access beyond end of device [ 145.364268][ T4682] loop3: rw=2049, want=81920, limit=40427 [ 145.389624][ T4684] attempt to access beyond end of device [ 145.389624][ T4684] loop3: rw=2049, want=49168, limit=40427 [ 145.422675][ T4682] attempt to access beyond end of device [ 145.422675][ T4682] loop3: rw=2049, want=53248, limit=40427 [ 145.441457][ T4682] attempt to access beyond end of device [ 145.441457][ T4682] loop3: rw=2049, want=58064, limit=40427 [ 145.535596][ T4601] attempt to access beyond end of device [ 145.535596][ T4601] loop3: rw=2049, want=40968, limit=40427 [ 145.553667][ T4689] loop5: detected capacity change from 0 to 1024 [ 145.563389][ T4689] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.587746][ T4689] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 145.838630][ T4693] loop7: detected capacity change from 0 to 40427 [ 145.868563][ T4693] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 145.878705][ T4693] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 145.887625][ T4693] F2FS-fs (loop7): invalid crc value [ 145.897828][ T4693] F2FS-fs (loop7): Found nat_bits in checkpoint [ 145.935923][ T4693] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 145.943151][ T4693] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 145.974408][ T4719] loop3: detected capacity change from 0 to 4096 [ 145.985090][ T4719] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.991944][ T4719] EXT4-fs (loop3): Ignoring removed orlov option [ 145.998388][ T4719] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 146.009014][ T4719] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 146.017192][ T4719] System zones: 0-5 [ 146.022126][ T4719] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,orlov,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 146.074565][ T4722] attempt to access beyond end of device [ 146.074565][ T4722] loop7: rw=2049, want=81920, limit=40427 [ 146.102236][ T4724] attempt to access beyond end of device [ 146.102236][ T4724] loop7: rw=2049, want=52040, limit=40427 [ 146.128358][ T4722] attempt to access beyond end of device [ 146.128358][ T4722] loop7: rw=2049, want=53248, limit=40427 [ 146.140247][ T435] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 146.146968][ T4722] attempt to access beyond end of device [ 146.146968][ T4722] loop7: rw=2049, want=58184, limit=40427 [ 146.191620][ T4728] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 146.213146][ T4728] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 146.504897][ T435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.516030][ T435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.525830][ T435] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.538781][ T435] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.547844][ T435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.556436][ T435] usb 6-1: config 0 descriptor?? [ 146.668300][ T4734] loop4: detected capacity change from 0 to 1024 [ 146.675075][ T4736] netlink: 'syz.7.1608': attribute type 4 has an invalid length. [ 146.685376][ T4734] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.701987][ T4736] netlink: 'syz.7.1608': attribute type 4 has an invalid length. [ 146.719657][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 146.730177][ T4742] loop3: detected capacity change from 0 to 1024 [ 146.814268][ T30] audit: type=1400 audit(1793911892.649:686): avc: denied { unmount } for pid=4743 comm="syz.7.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.853945][ T4742] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,bsdgroups,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 146.966094][ T30] audit: type=1400 audit(1793911892.809:687): avc: denied { create } for pid=4758 comm="syz.3.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.007352][ T30] audit: type=1400 audit(1793911892.829:688): avc: denied { connect } for pid=4758 comm="syz.3.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.007422][ T4756] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.040791][ T30] audit: type=1400 audit(1793911892.839:689): avc: denied { execute } for pid=4760 comm="syz.3.1609" name="file1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.047772][ T435] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 147.074474][ T30] audit: type=1400 audit(1793911892.839:690): avc: denied { execute_no_trans } for pid=4760 comm="syz.3.1609" path="/20/file1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.081091][ T4756] EXT4-fs (loop4): Ignoring removed orlov option [ 147.111971][ T435] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 147.126143][ T4756] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 147.147871][ T4756] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 147.161680][ T4756] System zones: 0-5 [ 147.172690][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,orlov,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 147.268158][ T4768] kvm: vcpu 1024: requested lapic timer restore with starting count register 0x390=3868095612 (7736191224 ns) > initial count (6304519390 ns). Using initial count to start timer. [ 147.320846][ T4777] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 147.333188][ T4777] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 149.086997][ T4787] set_capacity_and_notify: 1 callbacks suppressed [ 149.087016][ T4787] loop1: detected capacity change from 0 to 1024 [ 149.121765][ T4787] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.163373][ T4799] loop5: detected capacity change from 0 to 1024 [ 149.172226][ T4801] overlayfs: failed to clone upperpath [ 149.179090][ T4787] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.216379][ T4809] xt_hashlimit: size too large, truncated to 1048576 [ 149.219259][ T26] usb 6-1: USB disconnect, device number 9 [ 149.292198][ T4799] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,bsdgroups,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 149.355823][ T4822] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1632'. [ 149.412581][ T4826] ip_tables: iptables: counters copy to user failed while replacing table [ 149.435365][ T30] audit: type=1400 audit(1793911895.279:691): avc: denied { ioctl } for pid=4825 comm="syz.5.1633" path="socket:[38185]" dev="sockfs" ino=38185 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.581393][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:0) [ 149.688735][ T4854] loop1: detected capacity change from 0 to 1024 [ 149.697291][ T4854] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.711305][ T4856] ip_tables: iptables: counters copy to user failed while replacing table [ 149.726563][ T4854] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.883780][ T4865] loop1: detected capacity change from 0 to 512 [ 149.957038][ T4865] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 149.965699][ T4865] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 149.974103][ T4865] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.1650: corrupted in-inode xattr [ 149.986391][ T4865] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1650: couldn't read orphan inode 15 (err -117) [ 149.998513][ T4865] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 150.124154][ T4881] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1657'. [ 150.161668][ T30] audit: type=1400 audit(1793911895.999:692): avc: denied { append } for pid=4885 comm="syz.4.1658" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.185310][ T30] audit: type=1400 audit(1793911895.999:693): avc: denied { read open } for pid=4885 comm="syz.4.1658" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.208941][ T30] audit: type=1400 audit(1793911896.009:694): avc: denied { ioctl } for pid=4885 comm="syz.4.1658" path="/dev/ashmem" dev="devtmpfs" ino=265 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.233814][ T30] audit: type=1400 audit(1793911896.009:695): avc: denied { map } for pid=4885 comm="syz.4.1658" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.275775][ T4895] ip_tables: iptables: counters copy to user failed while replacing table [ 150.309810][ T4902] fuse: Bad value for 'fd' [ 150.378732][ T4910] netlink: 'syz.4.1667': attribute type 6 has an invalid length. [ 150.494812][ T4907] loop5: detected capacity change from 0 to 40427 [ 150.514713][ T4907] F2FS-fs (loop5): fault_injection options not supported [ 150.522088][ T4907] F2FS-fs (loop5): fault_type options not supported [ 150.529958][ T4907] F2FS-fs (loop5): invalid crc value [ 150.552462][ T4907] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.588869][ T4907] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 150.613393][ T4907] handle_bad_sector: 1 callbacks suppressed [ 150.613405][ T4907] attempt to access beyond end of device [ 150.613405][ T4907] loop5: rw=2049, want=45104, limit=40427 [ 150.666970][ T4928] loop1: detected capacity change from 0 to 8192 [ 150.797313][ T4935] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1677'. [ 151.282194][ T442] kernel write not supported for file bpf-prog (pid: 442 comm: kworker/0:5) [ 151.729617][ T4960] netlink: 'syz.1.1684': attribute type 6 has an invalid length. [ 151.934660][ T435] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.047835][ T4983] IPv6: addrconf: prefix option has invalid lifetime [ 152.085291][ T4989] netlink: 'syz.5.1702': attribute type 6 has an invalid length. [ 152.141627][ T4991] loop5: detected capacity change from 0 to 512 [ 152.215441][ T4991] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback. [ 152.240517][ T4991] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.294765][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.307686][ T435] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 152.320654][ T435] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 152.329784][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.339007][ T435] usb 5-1: config 0 descriptor?? [ 152.416397][ T4998] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1705'. [ 152.760835][ T5026] IPv6: addrconf: prefix option has invalid lifetime [ 152.779921][ T5030] loop1: detected capacity change from 0 to 512 [ 152.803261][ T6] kernel write not supported for file bpf-prog (pid: 6 comm: kworker/0:0) [ 152.806677][ T5030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.823356][ T435] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0012/input/input23 [ 152.836353][ T435] sony 0003:054C:03D5.0012: input,hidraw0: USB HID v0.05 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 152.844940][ T5030] EXT4-fs (loop1): 1 truncate cleaned up [ 152.854412][ T5030] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 153.030924][ T435] usb 5-1: USB disconnect, device number 3 [ 153.572515][ T5047] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1732'. [ 153.602533][ T5050] loop4: detected capacity change from 0 to 8192 [ 153.671471][ T5042] loop1: detected capacity change from 0 to 40427 [ 153.702468][ T5042] F2FS-fs (loop1): invalid crc value [ 153.726678][ T5042] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 153.770966][ T5042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.814657][ T435] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.184982][ T435] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.204727][ T435] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 154.216315][ T435] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.229698][ T435] usb 6-1: config 0 interface 0 has no altsetting 0 [ 154.238041][ T1717] attempt to access beyond end of device [ 154.238041][ T1717] loop1: rw=2049, want=45104, limit=40427 [ 154.257048][ T435] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 154.270581][ T435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.288093][ T435] usb 6-1: config 0 descriptor?? [ 154.304723][ T5045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.545899][ T5076] IPv6: addrconf: prefix option has invalid lifetime [ 154.590665][ T5086] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1736'. [ 154.765575][ T435] dragonrise 0003:0079:0006.0013: unbalanced collection at end of report description [ 154.777604][ T435] dragonrise 0003:0079:0006.0013: parse failed [ 154.783815][ T435] dragonrise: probe of 0003:0079:0006.0013 failed with error -22 [ 154.864651][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.967758][ T20] usb 6-1: USB disconnect, device number 10 [ 155.284719][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.301078][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 155.328022][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 155.345779][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.366783][ T6] usb 2-1: config 0 descriptor?? [ 155.564467][ T5126] loop4: detected capacity change from 0 to 512 [ 155.661105][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback. [ 155.707969][ T5126] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.757266][ T5129] loop5: detected capacity change from 0 to 40427 [ 155.799099][ T5129] F2FS-fs (loop5): invalid crc value [ 155.831543][ T5129] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 155.857812][ T6] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0014/input/input24 [ 155.880643][ T6] sony 0003:054C:03D5.0014: input,hidraw0: USB HID v0.05 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 155.892892][ T5129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 156.063377][ T6] usb 2-1: USB disconnect, device number 6 [ 156.261982][ T3533] attempt to access beyond end of device [ 156.261982][ T3533] loop5: rw=2049, want=45104, limit=40427 [ 156.508501][ T5169] loop5: detected capacity change from 0 to 512 [ 156.557533][ T5169] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.568859][ T5169] EXT4-fs (loop5): 1 truncate cleaned up [ 156.574561][ T5169] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 156.598674][ T5172] loop1: detected capacity change from 0 to 512 [ 156.626566][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback. [ 156.641904][ T5172] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.732392][ T5177] loop1: detected capacity change from 0 to 16 [ 156.742184][ T5177] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ3>Õü¤ýÉÚAÜU%£.«Íò"oX×»Ú €qZ‡RdDö”ÂKÉÜÞ{#²Tá' [ 156.863922][ T5187] loop5: detected capacity change from 0 to 8192 [ 156.902380][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1777'. [ 157.052427][ T5196] loop4: detected capacity change from 0 to 40427 [ 157.061892][ T5196] F2FS-fs (loop4): invalid crc value [ 157.069927][ T5196] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 157.105008][ T5196] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.375433][ T4628] attempt to access beyond end of device [ 157.375433][ T4628] loop4: rw=2049, want=45104, limit=40427 [ 157.641493][ T5221] loop4: detected capacity change from 0 to 512 [ 157.705663][ T5221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.720629][ T5221] EXT4-fs (loop4): 1 truncate cleaned up [ 157.726356][ T5221] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 157.864014][ T5234] loop5: detected capacity change from 0 to 512 [ 157.919419][ T5234] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 157.936704][ T5234] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.943106][ T5234] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 157.952864][ T5234] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1788: attempt to clear invalid blocks 2 len 1 [ 157.965908][ T5234] EXT4-fs (loop5): Remounting filesystem read-only [ 157.972496][ T5234] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 157.989356][ T5234] EXT4-fs (loop5): Remounting filesystem read-only [ 157.995961][ T5234] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1788: invalid indirect mapped block 1819239214 (level 0) [ 158.020032][ T5234] EXT4-fs (loop5): Remounting filesystem read-only [ 158.031060][ T5234] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1788: invalid indirect mapped block 1819239214 (level 1) [ 158.054713][ T5234] EXT4-fs (loop5): Remounting filesystem read-only [ 158.062275][ T5234] EXT4-fs (loop5): 1 truncate cleaned up [ 158.093961][ T5234] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,debug_want_extra_isize=0x000000000000000a,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 158.108636][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 158.298358][ T5284] loop1: detected capacity change from 0 to 512 [ 158.338912][ T5284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.353454][ T5284] EXT4-fs (loop1): 1 truncate cleaned up [ 158.360159][ T5284] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 158.407018][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1808'. [ 158.408237][ T5290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.417486][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1808'. [ 158.456314][ T5290] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.495332][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 158.495344][ T30] audit: type=1326 audit(1793911904.339:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.1.1811" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5281ee9b19 code=0x0 [ 158.576675][ T30] audit: type=1400 audit(1793911904.399:701): avc: denied { append } for pid=5320 comm="syz.5.1813" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.722159][ T5340] device syzkaller1 entered promiscuous mode [ 158.745456][ T5343] device veth1_to_bond entered promiscuous mode [ 158.767422][ T5343] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1821'. [ 158.827536][ T5343] device veth1_to_bond left promiscuous mode [ 158.873579][ T5325] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.894725][ T5325] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.107717][ T5372] device vlan0 entered promiscuous mode [ 159.119793][ T5371] device vlan0 left promiscuous mode [ 159.276664][ T5383] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none. [ 159.302022][ T30] audit: type=1400 audit(1793911905.139:702): avc: denied { setattr } for pid=5382 comm="syz.5.1833" name="freezer.parent_freezing" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.336171][ T5389] input: syz1 as /devices/virtual/input/input25 [ 159.383766][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 159.410368][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 159.442302][ T5397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5397 comm=syz.5.1839 [ 159.973166][ T5421] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 159.973166][ T5421] Q&|xù [ 160.279284][ T5418] F2FS-fs (loop5): invalid crc value [ 160.315452][ T5418] F2FS-fs (loop5): Found nat_bits in checkpoint [ 160.356372][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.373960][ T5418] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 160.390682][ T5418] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 160.413766][ T5418] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 160.679094][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.686379][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.707616][ T5467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.870695][ T30] audit: type=1326 audit(1793911906.709:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 160.901035][ T30] audit: type=1326 audit(1793911906.709:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 160.926108][ T30] audit: type=1326 audit(1793911906.739:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 160.957383][ T30] audit: type=1326 audit(1793911906.739:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 160.983507][ T30] audit: type=1326 audit(1793911906.739:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 161.030911][ T30] audit: type=1326 audit(1793911906.799:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 161.057096][ T30] audit: type=1326 audit(1793911906.799:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7ffc0000 [ 161.321631][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1892'. [ 161.555839][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1904'. [ 161.565741][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1904'. [ 161.673428][ T5566] overlayfs: failed to clone upperpath [ 161.784334][ T5583] 9pnet: Insufficient options for proto=fd [ 161.821840][ T5589] netlink: 'syz.7.1919': attribute type 16 has an invalid length. [ 161.830328][ T5589] netlink: 'syz.7.1919': attribute type 17 has an invalid length. [ 161.855012][ T5589] device ip6gre1 left promiscuous mode [ 161.861623][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 161.873153][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.890484][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 161.901351][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.909733][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.918060][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.927391][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.935752][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.424714][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 162.430810][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 162.514657][ T435] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.691460][ T5639] device syzkaller1 entered promiscuous mode [ 162.904974][ T435] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.922339][ T435] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.974872][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1949'. [ 163.091523][ T5683] FAULT_INJECTION: forcing a failure. [ 163.091523][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 163.104376][ T435] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 163.114807][ T5683] CPU: 0 PID: 5683 Comm: syz.5.1954 Tainted: G W syzkaller #0 [ 163.123618][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 163.133680][ T5683] Call Trace: [ 163.136974][ T5683] [ 163.139910][ T5683] __dump_stack+0x21/0x30 [ 163.144245][ T5683] dump_stack_lvl+0x110/0x170 [ 163.148922][ T5683] ? show_regs_print_info+0x20/0x20 [ 163.154128][ T5683] ? memset+0x35/0x40 [ 163.158114][ T5683] dump_stack+0x15/0x20 [ 163.162299][ T5683] should_fail+0x3ab/0x500 [ 163.166736][ T5683] __should_failslab+0xa4/0xe0 [ 163.171532][ T5683] should_failslab+0x9/0x20 [ 163.176047][ T5683] slab_pre_alloc_hook+0x39/0xd0 [ 163.181008][ T5683] kmem_cache_alloc_trace+0x48/0x270 [ 163.186293][ T5683] ? ip_rt_ioctl+0x97e/0xfa0 [ 163.190886][ T5683] ip_rt_ioctl+0x97e/0xfa0 [ 163.195300][ T5683] ? fib_validate_source+0x1370/0x1370 [ 163.200754][ T5683] ? avc_flush+0x2b0/0x2b0 [ 163.205167][ T5683] ? do_futex+0xdd3/0x2800 [ 163.209597][ T5683] ? __kasan_check_write+0x14/0x20 [ 163.214719][ T5683] ? _copy_from_user+0x95/0xd0 [ 163.219509][ T5683] inet_ioctl+0x3b4/0x480 [ 163.223836][ T5683] ? inet_shutdown+0x3d0/0x3d0 [ 163.228611][ T5683] ? ioctl_has_perm+0x3ab/0x4f0 [ 163.233462][ T5683] ? security_file_permission+0x79/0xa0 [ 163.239010][ T5683] sock_do_ioctl+0x103/0x310 [ 163.243707][ T5683] ? sock_show_fdinfo+0xa0/0xa0 [ 163.248597][ T5683] ? selinux_file_ioctl+0x3ad/0x4c0 [ 163.253811][ T5683] sock_ioctl+0x459/0x6d0 [ 163.258148][ T5683] ? sock_poll+0x3f0/0x3f0 [ 163.262594][ T5683] ? __fget_files+0x2e1/0x340 [ 163.267283][ T5683] ? security_file_ioctl+0x84/0xa0 [ 163.272403][ T5683] ? sock_poll+0x3f0/0x3f0 [ 163.276834][ T5683] __se_sys_ioctl+0x121/0x1a0 [ 163.281518][ T5683] __x64_sys_ioctl+0x7b/0x90 [ 163.286140][ T5683] x64_sys_call+0x2f/0x9a0 [ 163.290568][ T5683] do_syscall_64+0x4c/0xa0 [ 163.294992][ T5683] ? clear_bhb_loop+0x50/0xa0 [ 163.299673][ T5683] ? clear_bhb_loop+0x50/0xa0 [ 163.304373][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.310292][ T5683] RIP: 0033:0x7f1262d87b19 [ 163.314711][ T5683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.334343][ T5683] RSP: 002b:00007f12617df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.342782][ T5683] RAX: ffffffffffffffda RBX: 00007f126300dfa0 RCX: 00007f1262d87b19 [ 163.350760][ T5683] RDX: 00002000000005c0 RSI: 000000000000890b RDI: 0000000000000003 [ 163.358745][ T5683] RBP: 00007f1262e1fb70 R08: 0000000000000000 R09: 0000000000000000 [ 163.366714][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.374704][ T5683] R13: 00007f126300e038 R14: 00007f126300dfa0 R15: 00007ffe5c799cf8 [ 163.382705][ T5683] [ 163.389721][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.397962][ T435] usb 5-1: Product: syz [ 163.402214][ T435] usb 5-1: Manufacturer: syz [ 163.406991][ T435] usb 5-1: SerialNumber: syz [ 163.466005][ T435] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 163.498332][ T435] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 163.498332][ T435] Please send a copy of this message to and [ 163.518898][ T5698] set_capacity_and_notify: 4 callbacks suppressed [ 163.518942][ T5698] loop5: detected capacity change from 0 to 512 [ 163.585978][ T5698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.615582][ T5698] EXT4-fs (loop5): 1 truncate cleaned up [ 163.621457][ T5698] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 163.639333][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 163.639344][ T30] audit: type=1400 audit(1793911909.479:743): avc: denied { map } for pid=5695 comm="syz.7.1960" path="socket:[40529]" dev="sockfs" ino=40529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 163.726907][ T5717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1967'. [ 163.736264][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 163.836021][ T5739] overlayfs: failed to clone upperpath [ 163.850495][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1978'. [ 163.873898][ T30] audit: type=1326 audit(1793912165.705:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.5.1980" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1262d87b19 code=0x0 [ 164.044760][ T5763] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.148082][ T435] ums-sddr09: probe of 5-1:1.0 failed with error -32 [ 164.315006][ T5788] netlink: 'syz.7.1996': attribute type 8 has an invalid length. [ 164.368067][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2001'. [ 164.377237][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2001'. [ 164.505142][ T883] Bluetooth: hci0: command 0x1001 tx timeout [ 164.511265][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 164.624424][ T883] usb 5-1: USB disconnect, device number 4 [ 164.690452][ T5829] overlayfs: failed to clone upperpath [ 164.722558][ T30] audit: type=1400 audit(1793912166.555:745): avc: denied { associate } for pid=5833 comm="syz.3.2017" name="bus" dev="tmpfs" ino=521 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 164.769118][ T30] audit: type=1400 audit(1793912166.585:746): avc: denied { rename } for pid=5833 comm="syz.3.2017" name="bus" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 164.838479][ T30] audit: type=1400 audit(1793912166.675:747): avc: denied { append } for pid=5853 comm="syz.4.2026" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.037510][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2028'. [ 165.133626][ T30] audit: type=1326 audit(1793912166.965:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.2030" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ef13b19 code=0x7ffc0000 [ 165.158484][ T30] audit: type=1326 audit(1793912166.965:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.2030" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ef13b19 code=0x7ffc0000 [ 165.183293][ T30] audit: type=1326 audit(1793912166.975:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.2030" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ef13b19 code=0x7ffc0000 [ 165.208280][ T30] audit: type=1326 audit(1793912166.975:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.2030" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2b5ef13b19 code=0x7ffc0000 [ 165.233328][ T30] audit: type=1326 audit(1793912166.975:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.2030" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ef13b19 code=0x7ffc0000 [ 166.009726][ T5910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5910 comm=syz.3.2049 [ 166.048178][ T5914] fuse: Bad value for 'fd' [ 166.175766][ T5934] overlayfs: failed to clone lowerpath [ 166.271602][ T5948] fuse: Bad value for 'fd' [ 166.368242][ T5955] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2070'. [ 166.513614][ T5974] fuse: Bad value for 'fd' [ 166.544109][ T5929] loop4: detected capacity change from 0 to 131072 [ 166.556935][ T5929] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 166.575663][ T5929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 166.584785][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 166.593524][ T5929] F2FS-fs (loop4): invalid crc value [ 166.628081][ T5929] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.679565][ T5929] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 166.686740][ T5929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 167.127172][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 167.147953][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 167.284989][ T6057] overlayfs: failed to clone upperpath [ 167.332731][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2118'. [ 167.348424][ T6062] device ip6erspan0 entered promiscuous mode [ 167.392205][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 167.702239][ T6117] syz.3.2142[6117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.702335][ T6117] syz.3.2142[6117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.851967][ T6129] SELinux: failed to load policy [ 168.090659][ T6155] device vlan0 entered promiscuous mode [ 168.097073][ T6154] device vlan0 left promiscuous mode [ 168.177152][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 168.199491][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 168.210172][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 168.256533][ T6179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2569 sclass=netlink_xfrm_socket pid=6179 comm=syz.3.2168 [ 168.327982][ T6189] netlink: 'syz.4.2173': attribute type 15 has an invalid length. [ 168.360112][ T6193] FAULT_INJECTION: forcing a failure. [ 168.360112][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 168.373677][ T6193] CPU: 1 PID: 6193 Comm: syz.4.2175 Tainted: G W syzkaller #0 [ 168.382459][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.392623][ T6193] Call Trace: [ 168.395918][ T6193] [ 168.398877][ T6193] __dump_stack+0x21/0x30 [ 168.403240][ T6193] dump_stack_lvl+0x110/0x170 [ 168.407949][ T6193] ? show_regs_print_info+0x20/0x20 [ 168.413172][ T6193] ? x64_sys_call+0x442/0x9a0 [ 168.417874][ T6193] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.423964][ T6193] dump_stack+0x15/0x20 [ 168.428139][ T6193] should_fail+0x3ab/0x500 [ 168.432580][ T6193] __should_failslab+0xa4/0xe0 [ 168.437377][ T6193] should_failslab+0x9/0x20 [ 168.441910][ T6193] slab_pre_alloc_hook+0x39/0xd0 [ 168.446875][ T6193] ? __proc_create+0x376/0x8f0 [ 168.451661][ T6193] kmem_cache_alloc+0x44/0x260 [ 168.456480][ T6193] __proc_create+0x376/0x8f0 [ 168.461092][ T6193] ? proc_symlink+0x1f0/0x1f0 [ 168.465800][ T6193] ? __kasan_check_write+0x14/0x20 [ 168.470994][ T6193] proc_create_reg+0x96/0x110 [ 168.475704][ T6193] proc_create_net_data+0x95/0x1a0 [ 168.480836][ T6193] ? bpf_iter_fini_seq_net+0xb0/0xb0 [ 168.486149][ T6193] nf_log_net_init+0x64/0x590 [ 168.490945][ T6193] ? netfilter_net_init+0x342/0x370 [ 168.496194][ T6193] ops_init+0x2c0/0x470 [ 168.500497][ T6193] setup_net+0x331/0xa30 [ 168.504770][ T6193] ? copy_net_ns+0x5c0/0x5c0 [ 168.509379][ T6193] copy_net_ns+0x355/0x5c0 [ 168.513812][ T6193] create_new_namespaces+0x3a8/0x660 [ 168.519126][ T6193] unshare_nsproxy_namespaces+0x120/0x170 [ 168.524977][ T6193] ksys_unshare+0x4d7/0x810 [ 168.529502][ T6193] ? sighand_ctor+0x60/0x60 [ 168.534024][ T6193] ? __kasan_check_write+0x14/0x20 [ 168.539149][ T6193] ? switch_fpu_return+0x15d/0x2c0 [ 168.544281][ T6193] __x64_sys_unshare+0x38/0x40 [ 168.549062][ T6193] x64_sys_call+0x442/0x9a0 [ 168.553619][ T6193] do_syscall_64+0x4c/0xa0 [ 168.558078][ T6193] ? clear_bhb_loop+0x50/0xa0 [ 168.562776][ T6193] ? clear_bhb_loop+0x50/0xa0 [ 168.567491][ T6193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.573411][ T6193] RIP: 0033:0x7f2b5ef13b19 [ 168.577850][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.597472][ T6193] RSP: 002b:00007f2b5d96b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.605929][ T6193] RAX: ffffffffffffffda RBX: 00007f2b5f199fa0 RCX: 00007f2b5ef13b19 [ 168.613919][ T6193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 168.621908][ T6193] RBP: 00007f2b5efabb70 R08: 0000000000000000 R09: 0000000000000000 [ 168.629893][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.637891][ T6193] R13: 00007f2b5f19a038 R14: 00007f2b5f199fa0 R15: 00007ffd26c436f8 [ 168.645903][ T6193] [ 168.744099][ T30] kauditd_printk_skb: 8104 callbacks suppressed [ 168.744114][ T30] audit: type=1326 audit(1793912170.575:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.7.2179" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.775739][ T30] audit: type=1326 audit(1793912170.615:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.7.2179" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.800780][ T30] audit: type=1326 audit(1793912170.615:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.7.2179" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.830134][ T30] audit: type=1326 audit(1793912170.615:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.854458][ T30] audit: type=1326 audit(1793912170.615:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.878649][ T30] audit: type=1326 audit(1793912170.615:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.903221][ T30] audit: type=1326 audit(1793912170.615:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.927860][ T30] audit: type=1326 audit(1793912170.615:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.952240][ T30] audit: type=1326 audit(1793912170.615:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 168.976304][ T30] audit: type=1326 audit(1793912170.615:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm=05 exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 170.546932][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.554098][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.561420][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.568487][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.051979][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 171.061332][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 171.076126][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 171.083784][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 171.093504][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 171.101480][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 171.109888][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 171.118364][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 171.180295][ T6318] loop1: detected capacity change from 0 to 512 [ 171.198843][ T5038] udevd[5038]: symlink '../../loop1' '/dev/disk/by-diskseq/593.tmp-b7:1' failed: Read-only file system [ 171.211749][ T6318] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 171.221275][ T6318] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 171.231376][ T6318] FAT-fs (loop1): Filesystem has been set read-only [ 171.311863][ T5038] udevd[5038]: symlink '../../loop1' '/dev/disk/by-diskseq/593.tmp-b7:1' failed: Read-only file system [ 171.326757][ T5038] udevd[5038]: symlink '../../loop1' '/dev/disk/by-diskseq/593.tmp-b7:1' failed: Read-only file system [ 171.403170][ T6329] device ip6gre1 entered promiscuous mode [ 171.409420][ T435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.417117][ T435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.421264][ T6329] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.439629][ T435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.486021][ T6343] xt_hashlimit: size too large, truncated to 1048576 [ 171.542702][ T6352] loop4: detected capacity change from 0 to 256 [ 171.583802][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/595.tmp-b7:4' failed: Read-only file system [ 171.600246][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/595.tmp-b7:4' failed: Read-only file system [ 171.650796][ T6366] fuse: Bad value for 'fd' [ 171.750645][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/595.tmp-b7:4' failed: Read-only file system [ 171.775715][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/595.tmp-b7:4' failed: Read-only file system [ 172.081970][ T6388] fuse: Bad value for 'fd' [ 172.264707][ T435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.344781][ T435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.670488][ T6412] tipc: Started in network mode [ 172.680139][ T6412] tipc: Node identity 1001001, cluster identity 4711 [ 172.690559][ T6413] ip_tables: iptables: counters copy to user failed while replacing table [ 172.699270][ T6412] tipc: Node number set to 16781313 [ 172.706204][ T6412] tipc: Enabled bearer , priority 0 [ 172.744203][ T6419] tipc: Enabled bearer , priority 10 [ 172.759800][ T6419] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 172.789843][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 172.817479][ T6408] loop4: detected capacity change from 0 to 40427 [ 172.828701][ T6408] F2FS-fs (loop4): invalid crc value [ 172.836257][ T6408] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 172.854926][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/597.tmp-b7:4' failed: Read-only file system [ 172.875566][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 172.902644][ T6408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.921900][ T5038] udevd[5038]: symlink '../../loop4' '/dev/disk/by-diskseq/597.tmp-b7:4' failed: Read-only file system [ 172.949200][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2278'. [ 172.974646][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2278'. [ 172.997231][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2279'. [ 173.084025][ T6445] bridge: RTM_NEWNEIGH with invalid ether address [ 173.094091][ T6445] bridge: RTM_NEWNEIGH with invalid ether address [ 173.154311][ T6453] fuse: Bad value for 'fd' [ 173.180533][ T4628] attempt to access beyond end of device [ 173.180533][ T4628] loop4: rw=2049, want=45104, limit=40427 [ 173.684466][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.698687][ T6494] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.747747][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 173.747770][ T30] audit: type=1400 audit(1793912175.585:8875): avc: denied { lock } for pid=6497 comm="syz.7.2306" path="socket:[42653]" dev="sockfs" ino=42653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 173.908779][ T30] audit: type=1326 audit(1793912175.745:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 173.939299][ T30] audit: type=1326 audit(1793912175.775:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 173.970613][ T30] audit: type=1326 audit(1793912175.775:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 173.995805][ T30] audit: type=1326 audit(1793912175.775:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.020950][ T30] audit: type=1326 audit(1793912175.775:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.048646][ T30] audit: type=1326 audit(1793912175.775:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.084379][ T30] audit: type=1326 audit(1793912175.775:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.109865][ T30] audit: type=1326 audit(1793912175.775:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.139140][ T30] audit: type=1326 audit(1793912175.775:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.7.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e81c6db19 code=0x7ffc0000 [ 174.206523][ T6524] netlink: 'syz.7.2318': attribute type 1 has an invalid length. [ 174.214288][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2318'. [ 174.383370][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 174.824651][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.857219][ T6573] fuse: Bad value for 'fd' [ 175.148713][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 175.160786][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 175.194719][ T311] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 175.205074][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.294751][ T311] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.304273][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.312688][ T311] usb 2-1: SerialNumber: syz [ 175.499383][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 175.605276][ T311] usb 2-1: 0:2 : does not exist [ 175.612300][ T311] usb 2-1: USB disconnect, device number 7 [ 175.714683][ T883] Bluetooth: hci0: command 0x1003 tx timeout [ 175.720803][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 175.864748][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.155684][ T6697] SELinux: policydb table sizes (201326592,4194304) do not match mine (6,6) [ 176.165138][ T6697] SELinux: failed to load policy [ 176.715601][ T6756] fuse: Bad value for 'fd' [ 177.113234][ T6770] loop1: detected capacity change from 0 to 40427 [ 177.165181][ T6770] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 177.172643][ T6770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.186536][ T6770] F2FS-fs (loop1): invalid crc value [ 177.192912][ T6770] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.219630][ T6770] F2FS-fs (loop1): Start checkpoint disabled! [ 177.226947][ T6770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.234107][ T6770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 177.336303][ T6778] loop4: detected capacity change from 0 to 512 [ 177.385300][ T6778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.397176][ T6778] EXT4-fs (loop4): 1 truncate cleaned up [ 177.402882][ T6778] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 177.524143][ T6797] fuse: Bad value for 'fd' [ 177.784684][ T883] Bluetooth: hci0: command 0x1001 tx timeout [ 177.791023][ T6817] Bluetooth: hci0: sending frame failed (-49) [ 177.881991][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2421'. [ 178.567263][ T6875] FAULT_INJECTION: forcing a failure. [ 178.567263][ T6875] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 178.580675][ T6875] CPU: 1 PID: 6875 Comm: syz.1.2445 Tainted: G W syzkaller #0 [ 178.589455][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 178.599503][ T6875] Call Trace: [ 178.602771][ T6875] [ 178.605693][ T6875] __dump_stack+0x21/0x30 [ 178.610026][ T6875] dump_stack_lvl+0x110/0x170 [ 178.614700][ T6875] ? show_regs_print_info+0x20/0x20 [ 178.619901][ T6875] dump_stack+0x15/0x20 [ 178.624044][ T6875] should_fail+0x3ab/0x500 [ 178.628458][ T6875] should_fail_alloc_page+0x55/0x80 [ 178.633758][ T6875] prepare_alloc_pages+0x13f/0x590 [ 178.638882][ T6875] ? __alloc_pages_bulk+0xab0/0xab0 [ 178.644083][ T6875] __alloc_pages+0x11d/0x460 [ 178.648664][ T6875] ? zone_watermark_fast+0x250/0x250 [ 178.653940][ T6875] ? __kmalloc+0x13d/0x2c0 [ 178.658348][ T6875] ? bpf_map_area_alloc+0x49/0xe0 [ 178.663368][ T6875] bpf_ringbuf_alloc+0x171/0x470 [ 178.668298][ T6875] ringbuf_map_alloc+0x1e5/0x310 [ 178.673224][ T6875] map_create+0x3f4/0x1fa0 [ 178.677637][ T6875] __sys_bpf+0x2ff/0x7d0 [ 178.681866][ T6875] ? bpf_link_show_fdinfo+0x330/0x330 [ 178.687231][ T6875] ? __kasan_check_write+0x14/0x20 [ 178.692332][ T6875] ? switch_fpu_return+0x15d/0x2c0 [ 178.697429][ T6875] __x64_sys_bpf+0x7c/0x90 [ 178.701838][ T6875] x64_sys_call+0x4b9/0x9a0 [ 178.706331][ T6875] do_syscall_64+0x4c/0xa0 [ 178.710738][ T6875] ? clear_bhb_loop+0x50/0xa0 [ 178.715439][ T6875] ? clear_bhb_loop+0x50/0xa0 [ 178.720123][ T6875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.726019][ T6875] RIP: 0033:0x7f5281ee9b19 [ 178.730427][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.750030][ T6875] RSP: 002b:00007f5280941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.758447][ T6875] RAX: ffffffffffffffda RBX: 00007f528216ffa0 RCX: 00007f5281ee9b19 [ 178.766415][ T6875] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 178.774379][ T6875] RBP: 00007f5281f81b70 R08: 0000000000000000 R09: 0000000000000000 [ 178.782341][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.790305][ T6875] R13: 00007f5282170038 R14: 00007f528216ffa0 R15: 00007ffc8346ab98 [ 178.798276][ T6875] [ 178.815489][ T6877] ip_tables: iptables: counters copy to user failed while replacing table [ 178.854408][ T6881] syz.7.2448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.966973][ T6901] ip_tables: iptables: counters copy to user failed while replacing table [ 179.061257][ T6916] overlayfs: failed to clone upperpath [ 179.310590][ T6885] loop1: detected capacity change from 0 to 131072 [ 179.400885][ T6885] F2FS-fs (loop1): Unrecognized mount option "AçhX¡ïASYšœg†"RpZ{;" or missing value [ 179.460930][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2474'. [ 179.522739][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2478'. [ 179.730548][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'. [ 179.755492][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 179.755505][ T30] audit: type=1400 audit(1793912182.594:8896): avc: denied { map } for pid=6964 comm="syz.1.2486" path="socket:[44377]" dev="sockfs" ino=44377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 179.864964][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 179.903279][ T6976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.937928][ T6981] FAULT_INJECTION: forcing a failure. [ 179.937928][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 179.950585][ T6981] CPU: 1 PID: 6981 Comm: syz.1.2492 Tainted: G W syzkaller #0 [ 179.959364][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 179.969459][ T6981] Call Trace: [ 179.972767][ T6981] [ 179.975716][ T6981] __dump_stack+0x21/0x30 [ 179.980069][ T6981] dump_stack_lvl+0x110/0x170 [ 179.984771][ T6981] ? show_regs_print_info+0x20/0x20 [ 179.989993][ T6981] dump_stack+0x15/0x20 [ 179.994161][ T6981] should_fail+0x3ab/0x500 [ 179.998603][ T6981] __should_failslab+0xa4/0xe0 [ 180.003386][ T6981] should_failslab+0x9/0x20 [ 180.007910][ T6981] slab_pre_alloc_hook+0x39/0xd0 [ 180.012857][ T6981] ? __alloc_skb+0xe4/0x730 [ 180.017365][ T6981] kmem_cache_alloc+0x44/0x260 [ 180.022136][ T6981] __alloc_skb+0xe4/0x730 [ 180.026470][ T6981] tipc_buf_acquire+0x2b/0xe0 [ 180.031162][ T6981] tipc_named_publish+0x2fd/0x8a0 [ 180.036193][ T6981] tipc_nametbl_publish+0x1f4/0x350 [ 180.041398][ T6981] tipc_sk_publish+0x1f7/0x440 [ 180.046198][ T6981] ? tipc_sk_withdraw+0x630/0x630 [ 180.051233][ T6981] ? tipc_nametbl_build_group+0x3ad/0x400 [ 180.056949][ T6981] ? tipc_group_create+0x3c5/0x590 [ 180.062061][ T6981] tipc_sk_join+0x3a0/0x680 [ 180.066568][ T6981] ? __tipc_sendstream+0x1190/0x1190 [ 180.071877][ T6981] ? __kasan_check_write+0x14/0x20 [ 180.076994][ T6981] ? _copy_from_user+0x95/0xd0 [ 180.081765][ T6981] tipc_setsockopt+0x6b8/0x960 [ 180.086544][ T6981] ? tipc_shutdown+0x3f0/0x3f0 [ 180.091335][ T6981] ? security_socket_setsockopt+0x82/0xa0 [ 180.097071][ T6981] ? tipc_shutdown+0x3f0/0x3f0 [ 180.101854][ T6981] __sys_setsockopt+0x2e9/0x470 [ 180.106708][ T6981] ? __kasan_check_write+0x14/0x20 [ 180.111820][ T6981] ? __ia32_sys_recv+0xb0/0xb0 [ 180.116583][ T6981] ? ksys_write+0x1fa/0x260 [ 180.121108][ T6981] ? __kasan_check_write+0x14/0x20 [ 180.126221][ T6981] __x64_sys_setsockopt+0xbf/0xd0 [ 180.131255][ T6981] x64_sys_call+0x982/0x9a0 [ 180.135766][ T6981] do_syscall_64+0x4c/0xa0 [ 180.140186][ T6981] ? clear_bhb_loop+0x50/0xa0 [ 180.144865][ T6981] ? clear_bhb_loop+0x50/0xa0 [ 180.149556][ T6981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.155457][ T6981] RIP: 0033:0x7f5281ee9b19 [ 180.159877][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.179480][ T6981] RSP: 002b:00007f5280941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.187895][ T6981] RAX: ffffffffffffffda RBX: 00007f528216ffa0 RCX: 00007f5281ee9b19 [ 180.195872][ T6981] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 180.203860][ T6981] RBP: 00007f5281f81b70 R08: 000000000000002e R09: 0000000000000000 [ 180.211832][ T6981] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 180.219804][ T6981] R13: 00007f5282170038 R14: 00007f528216ffa0 R15: 00007ffc8346ab98 [ 180.227788][ T6981] [ 180.230875][ T6981] tipc: Publication distribution failure [ 180.283869][ T6990] xt_hashlimit: size too large, truncated to 1048576 [ 181.537884][ T7041] device sit1 entered promiscuous mode [ 181.554101][ T7043] ip_tables: iptables: counters copy to user failed while replacing table [ 181.619750][ T30] audit: type=1400 audit(1793912184.454:8897): avc: denied { setopt } for pid=7054 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.892474][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.899813][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.989477][ T7068] device sit1 left promiscuous mode [ 182.248692][ T7085] fuse: Bad value for 'fd' [ 182.369842][ T7110] loop1: detected capacity change from 0 to 512 [ 182.381771][ T7110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.401499][ T7110] EXT4-fs (loop1): 1 truncate cleaned up [ 182.407264][ T7110] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,inlinecrypt,nojournal_checksum,usrquota,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 182.436825][ T7110] EXT4-fs (loop1): shut down requested (2) [ 182.445642][ T30] audit: type=1400 audit(1793912185.284:8898): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 182.471973][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 182.480853][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 182.489912][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 182.491943][ T30] audit: type=1400 audit(1793912185.284:8899): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.499208][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 182.529287][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 182.538230][ T7110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 182.538922][ T30] audit: type=1400 audit(1793912185.284:8900): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.576964][ T30] audit: type=1400 audit(1793912185.284:8901): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.605579][ T30] audit: type=1400 audit(1793912185.284:8902): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.626413][ T30] audit: type=1400 audit(1793912185.284:8903): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.649669][ T30] audit: type=1400 audit(1793912185.284:8904): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.908839][ T7136] fuse: Bad value for 'fd' [ 184.050547][ T7167] tipc: Enabling of bearer rejected, failed to enable media [ 184.135616][ T7145] loop1: detected capacity change from 0 to 131072 [ 184.153328][ T7145] F2FS-fs (loop1): Test dummy encryption mode enabled [ 184.170278][ T7145] F2FS-fs (loop1): invalid crc value [ 184.188245][ T7145] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.236291][ T7145] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.376489][ T7183] loop5: detected capacity change from 0 to 128 [ 184.401050][ T7183] EXT4-fs (loop5): Test dummy encryption mode enabled [ 184.420522][ T7183] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 184.448033][ T7183] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.600771][ T7176] overlayfs: failed to clone upperpath [ 184.623528][ T30] audit: type=1400 audit(1793912187.454:8905): avc: denied { write } for pid=7187 comm="syz.7.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.845534][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2588'. [ 184.862503][ T7218] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2589'. [ 184.904680][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.925593][ T30] audit: type=1400 audit(1793912187.764:8906): avc: denied { read } for pid=7225 comm="syz.1.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.177409][ T30] audit: type=1400 audit(1793912188.014:8907): avc: denied { link } for pid=7254 comm="syz.5.2606" name="#69" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.200707][ T30] audit: type=1400 audit(1793912188.014:8908): avc: denied { rename } for pid=7254 comm="syz.5.2606" name="#6a" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.524198][ T7289] loop5: detected capacity change from 0 to 4096 [ 185.548610][ T7289] EXT4-fs (loop5): Test dummy encryption mode enabled [ 185.565981][ T7293] overlayfs: failed to clone upperpath [ 185.576178][ T7289] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c198, mo2=0002] [ 185.589792][ T7289] System zones: 0-5 [ 185.598106][ T7289] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,noload,nodioread_nolock,block_validity,lazytime,nojournal_checksum,minixdf,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 185.624010][ T7289] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 185.633976][ T7289] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c198, mo2=0002] [ 185.643185][ T7289] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 185.677879][ T7300] loop1: detected capacity change from 0 to 8192 [ 186.587364][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2651'. [ 186.647143][ T7372] loop5: detected capacity change from 0 to 512 [ 186.698773][ T30] audit: type=1400 audit(1793912189.534:8909): avc: denied { mounton } for pid=7370 comm="syz.5.2654" path="/file0" dev="ramfs" ino=45465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 186.732349][ T7372] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 186.752735][ T7372] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.826451][ T7372] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 94 vs 41 free clusters [ 186.844700][ T7372] Quota error (device loop5): write_blk: dquota write failed [ 186.855385][ T7372] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 186.873806][ T7372] Quota error (device loop5): write_blk: dquota write failed [ 186.881384][ T7372] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 186.891323][ T7372] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.2654: Failed to acquire dquot type 1 [ 186.904093][ T7372] EXT4-fs (loop5): 1 truncate cleaned up [ 186.909885][ T7372] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,quota,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 187.019151][ T30] audit: type=1400 audit(1793912189.854:8910): avc: denied { ioctl } for pid=7403 comm="syz.3.2669" path="socket:[45503]" dev="sockfs" ino=45503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.062919][ T30] audit: type=1326 audit(1793912189.894:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.5.2670" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1262d87b19 code=0x7ffc0000 [ 187.732863][ T7436] overlayfs: failed to clone upperpath [ 187.797324][ T7446] xt_hashlimit: size too large, truncated to 1048576 [ 188.124609][ T7480] loop5: detected capacity change from 0 to 512 [ 188.482795][ T7522] overlayfs: failed to clone upperpath [ 188.553792][ T7530] loop4: detected capacity change from 0 to 1024 [ 188.635447][ T7530] EXT4-fs (loop4): Ignoring removed bh option [ 188.669012][ T7530] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 188.686720][ T7530] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.703111][ T7530] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: block 3: comm syz.4.2724: lblock 3 mapped to illegal pblock 3 (length 3) [ 188.718652][ T7530] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 188.731173][ T7530] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.731173][ T7530] [ 188.747671][ T7530] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.2724: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 188.766259][ T7530] EXT4-fs error (device loop4): ext4_evict_inode:296: comm syz.4.2724: couldn't truncate inode 15 (err -117) [ 188.975142][ T7569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.535246][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2765'. [ 189.594817][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2765'. [ 189.618163][ T7614] loop1: detected capacity change from 0 to 40427 [ 189.690829][ T7614] F2FS-fs (loop1): fault_injection options not supported [ 189.700633][ T7614] F2FS-fs (loop1): fault_type options not supported [ 189.715063][ T7614] F2FS-fs (loop1): invalid crc value [ 189.740469][ T7614] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.810464][ T7614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.874697][ T7614] loop1: detected capacity change from 40427 to 0 [ 189.949274][ T7655] netlink: 'syz.7.2778': attribute type 27 has an invalid length. [ 190.002693][ T7655] device ip6erspan0 left promiscuous mode [ 190.019386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 190.030594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 190.216994][ T7674] devtmpfs: Unknown parameter '´ËAJQ|ÕÉ ŠQZ¡3&LvªPÎ@ÃùëLT´bqBÖbã‚.¼žöŒ µzV~Yµ£éð [ 190.216994][ T7674] 4Ôìö! x¾¼ñyþ}äj' [ 190.354677][ T7075] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 190.534088][ T30] kauditd_printk_skb: 670 callbacks suppressed [ 190.534103][ T30] audit: type=1400 audit(1793912193.364:9582): avc: denied { write } for pid=7679 comm="syz.4.2788" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 190.784711][ T7075] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.803811][ T7075] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.944735][ T7075] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.958244][ T7075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.973893][ T7075] usb 6-1: SerialNumber: syz [ 191.035316][ T7075] hub 6-1:1.0: bad descriptor, ignoring hub [ 191.042385][ T7075] hub: probe of 6-1:1.0 failed with error -5 [ 191.354719][ T7075] usb 6-1: USB disconnect, device number 11 [ 191.464140][ T30] audit: type=1400 audit(1793912194.294:9583): avc: denied { mounton } for pid=7712 comm="syz.4.2802" path=2F3137322FE91F7189591E9233614B dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 191.777021][ T7728] overlayfs: failed to resolve './file0': -2 [ 191.800876][ T7730] FAULT_INJECTION: forcing a failure. [ 191.800876][ T7730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.857628][ T7730] CPU: 1 PID: 7730 Comm: syz.5.2810 Tainted: G W syzkaller #0 [ 191.866433][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 191.876506][ T7730] Call Trace: [ 191.879796][ T7730] [ 191.882729][ T7730] __dump_stack+0x21/0x30 [ 191.887065][ T7730] dump_stack_lvl+0x110/0x170 [ 191.891747][ T7730] ? show_regs_print_info+0x20/0x20 [ 191.896949][ T7730] dump_stack+0x15/0x20 [ 191.901115][ T7730] should_fail+0x3ab/0x500 [ 191.905563][ T7730] should_fail_alloc_page+0x55/0x80 [ 191.910799][ T7730] prepare_alloc_pages+0x13f/0x590 [ 191.915925][ T7730] ? __alloc_pages_bulk+0xab0/0xab0 [ 191.921130][ T7730] __alloc_pages+0x11d/0x460 [ 191.925736][ T7730] ? kasan_poison+0x62/0x70 [ 191.930253][ T7730] ? zone_watermark_fast+0x250/0x250 [ 191.935548][ T7730] ? kmalloc_order+0xb9/0x160 [ 191.940241][ T7730] ? kmalloc_order_trace+0x18/0xb0 [ 191.945359][ T7730] ? __kmalloc+0x199/0x2c0 [ 191.949794][ T7730] get_zeroed_page+0x1b/0x40 [ 191.954400][ T7730] mon_bin_ioctl+0x5e3/0xd60 [ 191.959004][ T7730] ? mon_bin_poll+0x150/0x150 [ 191.963713][ T7730] ? __fget_files+0x2e1/0x340 [ 191.968433][ T7730] ? security_file_ioctl+0x84/0xa0 [ 191.973566][ T7730] ? mon_bin_poll+0x150/0x150 [ 191.978253][ T7730] __se_sys_ioctl+0x121/0x1a0 [ 191.982961][ T7730] __x64_sys_ioctl+0x7b/0x90 [ 191.987568][ T7730] x64_sys_call+0x2f/0x9a0 [ 191.992002][ T7730] do_syscall_64+0x4c/0xa0 [ 191.996431][ T7730] ? clear_bhb_loop+0x50/0xa0 [ 192.001133][ T7730] ? clear_bhb_loop+0x50/0xa0 [ 192.005826][ T7730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.011735][ T7730] RIP: 0033:0x7f1262d87b19 [ 192.016165][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.035812][ T7730] RSP: 002b:00007f12617df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.044245][ T7730] RAX: ffffffffffffffda RBX: 00007f126300dfa0 RCX: 00007f1262d87b19 [ 192.052246][ T7730] RDX: 000000000049cdee RSI: 0000000000009204 RDI: 0000000000000004 [ 192.060234][ T7730] RBP: 00007f1262e1fb70 R08: 0000000000000000 R09: 0000000000000000 [ 192.068213][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.076332][ T7730] R13: 00007f126300e038 R14: 00007f126300dfa0 R15: 00007ffe5c799cf8 [ 192.084328][ T7730] [ 192.360870][ T7747] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 192.394773][ T7747] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 192.668976][ T7745] loop4: detected capacity change from 0 to 40427 [ 192.788984][ T7745] F2FS-fs (loop4): invalid crc value [ 192.824940][ T7745] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 192.906921][ T7745] F2FS-fs (loop4): Start checkpoint disabled! [ 192.927546][ T7745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 192.987502][ T7762] loop5: detected capacity change from 0 to 128 [ 193.066672][ T7765] SELinux: Context : is not valid (left unmapped). [ 193.073592][ T30] audit: type=1400 audit(1793912195.904:9584): avc: denied { relabelto } for pid=7764 comm="syz.3.2825" name="rdma.current" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 193.106525][ T7762] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.119928][ T8] attempt to access beyond end of device [ 193.119928][ T8] loop4: rw=2049, want=40968, limit=40427 [ 193.142035][ T7762] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.151485][ T30] audit: type=1400 audit(1793912195.944:9585): avc: denied { associate } for pid=7764 comm="syz.3.2825" name="rdma.current" dev="tmpfs" ino=1769 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 193.244173][ T3533] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 193.251878][ T30] audit: type=1400 audit(1793912195.954:9586): avc: denied { unlink } for pid=4601 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 193.285017][ T3533] FAT-fs (loop5): Filesystem has been set read-only [ 193.306058][ T3533] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 193.431116][ T7778] tipc: Started in network mode [ 193.464641][ T7778] tipc: Node identity 1001001, cluster identity 4711 [ 193.475307][ T7778] tipc: Node number set to 16781313 [ 193.503053][ T7778] tipc: Enabled bearer , priority 0 [ 193.551633][ T30] audit: type=1400 audit(1793912196.384:9587): avc: denied { write } for pid=7779 comm="syz.4.2833" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 193.620092][ T30] audit: type=1400 audit(1793912196.384:9588): avc: denied { open } for pid=7779 comm="syz.4.2833" path="/176/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 193.684779][ T30] audit: type=1400 audit(1793912196.384:9589): avc: denied { read } for pid=7779 comm="syz.4.2833" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 194.111737][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.128578][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.143618][ T7795] device bridge_slave_0 entered promiscuous mode [ 194.161620][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.182818][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.204252][ T7795] device bridge_slave_1 entered promiscuous mode [ 194.386611][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.393681][ T7795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.400994][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.408068][ T7795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.484377][ T10] device bridge_slave_1 left promiscuous mode [ 194.490760][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.509527][ T10] device bridge_slave_0 left promiscuous mode [ 194.534723][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.565635][ T10] device veth1_macvtap left promiscuous mode [ 194.571789][ T10] device veth0_vlan left promiscuous mode [ 194.734793][ T7815] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2845'. [ 194.780388][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2845'. [ 194.831113][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.850002][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.874688][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.902055][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.932537][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.954872][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.962005][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.994694][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.014955][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.054921][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.061989][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.098112][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.118491][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.144933][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.183559][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.210593][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.224901][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.259735][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.284871][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.313127][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.343350][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.354480][ T7795] device veth0_vlan entered promiscuous mode [ 195.382709][ T7795] device veth1_macvtap entered promiscuous mode [ 195.404374][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.424203][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.450962][ T7820] loop4: detected capacity change from 0 to 40427 [ 195.457710][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.490658][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.520120][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.535088][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.553478][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.578824][ T7820] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.674700][ T7820] F2FS-fs (loop4): Start checkpoint disabled! [ 195.692795][ T7820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 195.783512][ T7820] attempt to access beyond end of device [ 195.783512][ T7820] loop4: rw=2049, want=53256, limit=40427 [ 195.811239][ T7820] attempt to access beyond end of device [ 195.811239][ T7820] loop4: rw=2049, want=53264, limit=40427 [ 195.873535][ T308] attempt to access beyond end of device [ 195.873535][ T308] loop4: rw=2049, want=41008, limit=40427 [ 196.385803][ T30] audit: type=1326 audit(1793912199.224:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7867 comm="syz.7.2876" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e81c6db19 code=0x0 [ 196.527828][ T7879] bridge0: port 3(syz_tun) entered blocking state [ 196.560304][ T7879] bridge0: port 3(syz_tun) entered disabled state [ 196.600775][ T7879] device syz_tun entered promiscuous mode [ 196.738922][ T30] audit: type=1400 audit(1793912199.574:9591): avc: denied { setopt } for pid=7896 comm="syz.3.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.809295][ T7903] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 196.838898][ T7901] loop8: detected capacity change from 0 to 4096 [ 196.909459][ T7901] EXT4-fs (loop8): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 196.998159][ T7911] af_packet: packet size is too long (4294967292 > 2016) [ 197.759881][ T7941] smpboot: CPU 1 is now offline [ 197.910781][ T7943] loop8: detected capacity change from 0 to 4096 [ 197.918033][ T7945] ip_tables: iptables: counters copy to user failed while replacing table [ 198.030215][ T7943] EXT4-fs (loop8): Ignoring removed orlov option [ 198.078567][ T7943] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 199.970127][ T8022] ip_tables: iptables: counters copy to user failed while replacing table [ 200.098061][ T8022] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 200.186375][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 200.224902][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.233086][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 200.333084][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.377249][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.425812][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.433986][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.497614][ T7964] loop8: detected capacity change from 0 to 131072 [ 200.516137][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.544652][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.941285][ T30] audit: type=1326 audit(1793912204.774:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.4.2954" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b5ef13b19 code=0x0 [ 202.883862][ T8124] loop4: detected capacity change from 0 to 4096 [ 202.946267][ T8124] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 203.624233][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2977'. [ 204.405919][ T8188] loop4: detected capacity change from 0 to 512 [ 204.496490][ T8188] EXT4-fs error (device loop4): ext4_get_journal_inode:5178: comm syz.4.2996: inode #134217728: comm syz.4.2996: iget: illegal inode # [ 204.580630][ T8192] tipc: Resetting bearer [ 204.596625][ T8188] EXT4-fs (loop4): no journal found [ 204.601830][ T8188] EXT4-fs (loop4): can't get journal size [ 204.626886][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.634120][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.662862][ T8188] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 204.700557][ T8188] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 204.742742][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,bsdgroups,errors=continue,,errors=continue. Quota mode: writeback. [ 204.946698][ T8197] loop8: detected capacity change from 0 to 256 [ 204.995012][ T8188] EXT4-fs (loop4): Cannot specify journal on remount [ 205.035168][ T8197] exfat: Deprecated parameter 'utf8' [ 205.040481][ T8197] exfat: Deprecated parameter 'namecase' [ 205.095693][ T8197] exfat: Deprecated parameter 'namecase' [ 205.151071][ T8197] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 205.195944][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3004'. [ 205.285954][ T8203] tipc: Disabling bearer [ 205.299066][ T8197] block device autoloading is deprecated and will be removed. [ 205.335402][ T8197] device-mapper: table: 253:1: snapshot: COW device cannot be the same as origin device [ 205.407031][ T8197] device-mapper: ioctl: error adding target to table [ 205.502396][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.562169][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.608854][ T8207] device bridge_slave_0 entered promiscuous mode [ 205.655203][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.684035][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.714231][ T8207] device bridge_slave_1 entered promiscuous mode [ 205.891330][ T8230] loop8: detected capacity change from 0 to 512 [ 205.946158][ T8230] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 205.997125][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.013907][ T8230] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 206.039893][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.067715][ T8230] FAT-fs (loop8): Filesystem has been set read-only [ 206.089192][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.139298][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.171315][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.178396][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.239230][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.278328][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.318395][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.325500][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.380719][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.426087][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.436154][ T8252] xt_hashlimit: size too large, truncated to 1048576 [ 206.457267][ T20] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 206.475586][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.501486][ T20] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.526452][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.572493][ T8260] overlayfs: failed to clone upperpath [ 206.612591][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.619755][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.915497][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.923087][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.967364][ T8268] loop8: detected capacity change from 0 to 128 [ 207.013529][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.046161][ T8268] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 207.078601][ T8207] device veth0_vlan entered promiscuous mode [ 207.100279][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.130797][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.199306][ T8207] device veth1_macvtap entered promiscuous mode [ 207.213894][ T8274] overlayfs: failed to clone upperpath [ 207.256093][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.263504][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.301422][ T6] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 207.314397][ T8276] loop4: detected capacity change from 0 to 4096 [ 207.325719][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.333792][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.349576][ T6] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.427572][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.448814][ T8283] fido_id[8283]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.516085][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.564412][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.629305][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.667265][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.001389][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.084642][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.104800][ T8300] device bridge_slave_0 entered promiscuous mode [ 208.125513][ T308] device bridge_slave_1 left promiscuous mode [ 208.131640][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.185471][ T308] device bridge_slave_0 left promiscuous mode [ 208.222905][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.446694][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.474787][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.511657][ T8300] device bridge_slave_1 entered promiscuous mode [ 208.804185][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.811246][ T8300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.818519][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.825534][ T8300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.996487][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.024917][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.106287][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.137234][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.192447][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.252803][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.296016][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.303074][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.313819][ T8360] xt_hashlimit: size too large, truncated to 1048576 [ 209.386935][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.417759][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.469461][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.476531][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.561546][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.604872][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.644841][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.680907][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.728141][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.766280][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.808788][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.861579][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.897767][ T8300] device veth0_vlan entered promiscuous mode [ 209.922254][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.939519][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.981495][ T8300] device veth1_macvtap entered promiscuous mode [ 210.009404][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.034863][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.070268][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.104362][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.144132][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.181158][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.219926][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.338950][ T8384] loop4: detected capacity change from 0 to 16 [ 210.406126][ T8384] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.485565][ T30] audit: type=1400 audit(1793912213.324:9593): avc: denied { read } for pid=8383 comm="syz.4.3074" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.581741][ T30] audit: type=1400 audit(1793912213.354:9594): avc: denied { open } for pid=8383 comm="syz.4.3074" path="/226/bus/file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.990022][ T8397] netlink: 'syz.3.3077': attribute type 4 has an invalid length. [ 211.022753][ T4626] device bridge_slave_1 left promiscuous mode [ 211.037489][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.057701][ T4626] device bridge_slave_0 left promiscuous mode [ 211.076308][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.092847][ T4626] device veth1_macvtap left promiscuous mode [ 211.105389][ T4626] device veth0_vlan left promiscuous mode [ 211.200235][ T8397] netlink: 'syz.3.3077': attribute type 4 has an invalid length. [ 212.157176][ T8416] device erspan1 entered promiscuous mode [ 212.934557][ T8427] overlayfs: failed to clone upperpath [ 214.743993][ T8452] ip_tables: iptables: counters copy to user failed while replacing table [ 216.953757][ T8471] loop4: detected capacity change from 0 to 1024 [ 216.961008][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3105'. [ 217.026209][ T8471] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 217.065184][ T8471] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 217.095655][ T8471] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.3107: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 217.144747][ T8471] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.3107: couldn't read orphan inode 11 (err -117) [ 217.174708][ T8471] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 217.225206][ T8471] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3107: Invalid block bitmap block 0 in block_group 0 [ 217.274982][ T8471] Quota error (device loop4): write_blk: dquota write failed [ 217.282378][ T8471] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 217.314647][ T8471] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.3107: Failed to acquire dquot type 0 [ 217.347024][ T8471] Quota error (device loop4): write_blk: dquota write failed [ 217.354441][ T8471] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 217.394643][ T8471] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.3107: Failed to acquire dquot type 0 [ 217.455275][ T4626] Quota error (device loop4): remove_tree: Getting block too big (0 >= 10) [ 217.463877][ T4626] EXT4-fs error (device loop4): ext4_release_dquot:6263: comm kworker/u4:6: Failed to release dquot type 0 [ 221.077647][ T8509] ip_tables: iptables: counters copy to user failed while replacing table [ 222.681147][ T30] audit: type=1326 audit(1793912225.514:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.3125" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7fc00000 [ 222.731792][ T30] audit: type=1326 audit(1793912225.514:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.3125" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4299f09b19 code=0x7fc00000 [ 222.788185][ T30] audit: type=1326 audit(1793912225.514:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.3125" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f09b19 code=0x7fc00000 [ 224.215365][ T8524] device bridge1 entered promiscuous mode [ 225.983526][ T8538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.999245][ T8539] netlink: 'syz.7.3130': attribute type 4 has an invalid length. [ 226.040871][ T8539] netlink: 'syz.7.3130': attribute type 4 has an invalid length. [ 227.829266][ T8545] loop6: detected capacity change from 0 to 1024 [ 227.889829][ T8549] loop4: detected capacity change from 0 to 8192 [ 227.906262][ T8545] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 227.940495][ T8545] EXT4-fs (loop6): invalid journal inode [ 227.947125][ T8549] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.970359][ T8545] EXT4-fs (loop6): can't get journal size [ 227.985272][ T8545] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 229.805013][ T8562] overlayfs: failed to clone upperpath [ 229.820948][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 229.854889][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.880076][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 229.904958][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.923257][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.943419][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.951703][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.969902][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.855883][ T8570] ip_tables: iptables: counters copy to user failed while replacing table SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=3038 state=1 status=67 (errno 11: Resource temporarily unavailable) [ 231.884636][ T30] audit: type=1400 audit(1793912234.714:9598): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14095]" dev="pipefs" ino=14095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 232.105287][ T8569] device syz_tun left promiscuous mode [ 232.110861][ T8569] bridge0: port 3(syz_tun) entered disabled state [ 232.164679][ T8090] tipc: Resetting bearer [ 232.186075][ T8090] tipc: Disabling bearer [ 232.375151][ T4626] device bridge_slave_1 left promiscuous mode [ 232.381267][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.404884][ T4626] device bridge_slave_0 left promiscuous mode [ 232.411101][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.435370][ T4626] device veth1_macvtap left promiscuous mode [ 232.441380][ T4626] device veth0_vlan left promiscuous mode [ 233.034955][ T4626] device bridge_slave_1 left promiscuous mode [ 233.041097][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.064861][ T4626] device bridge_slave_0 left promiscuous mode [ 233.071060][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state