last executing test programs: 7.191179667s ago: executing program 1 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) shutdown(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000440)=""/2, 0xfffffffffffffff0) 6.884886647s ago: executing program 1 (id=122): r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x408, 0x2e3b) 6.033474083s ago: executing program 1 (id=128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000300)={0x2, 0x4e20}, 0x10) listen(r0, 0x89) 5.256733701s ago: executing program 1 (id=130): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x280400b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x23a, &(0x7f0000000080)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f00004b8000/0x10000)=nil, 0x10000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) 5.209387486s ago: executing program 1 (id=133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) 5.059958731s ago: executing program 1 (id=138): unshare(0x22020600) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_usb_connect(0x3, 0xc7, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200850, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x5a6, &(0x7f0000000280)="$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") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5.038947733s ago: executing program 32 (id=138): unshare(0x22020600) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_usb_connect(0x3, 0xc7, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200850, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x5a6, &(0x7f0000000280)="$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") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3.846234143s ago: executing program 4 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4076cbba9945d516, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x28}}, 0x0) 3.58273531s ago: executing program 4 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) 3.290540799s ago: executing program 3 (id=153): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.98069868s ago: executing program 3 (id=156): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mkdirat(0xffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f000000bec0)='./proc\x00', &(0x7f000000bf00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f000000bf40)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r0, &(0x7f000000bf80)=0x1, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000000bfc0)={0x0, 0x0, &(0x7f000000c000)={&(0x7f000000c040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.540446794s ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file1\x00', 0x8028c7, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0/file1\x00', 0x200) mount$overlay(0x0, &(0x7f0000000f40)='./bus\x00', &(0x7f0000000f80), 0x20000000, &(0x7f0000000fc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x101040, 0x0) 2.280333131s ago: executing program 3 (id=160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 2.148276654s ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 2.030292936s ago: executing program 3 (id=161): pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000000000000) syz_usb_connect(0x0, 0x62, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000019180)={0x0, 0x0, &(0x7f00000191c0)={&(0x7f0000019200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019340)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.029200966s ago: executing program 4 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1b, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001880)={@random="e904a200", @link_local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x5c5518258539fcad, @multicast, @empty, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001940)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0xd73, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e21, 0xd5f, 0x0, @opaque="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"}}}}}, 0x0) 2.029062506s ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 1.577656661s ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 1.417404187s ago: executing program 4 (id=164): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x0, 0x80000) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/45, 0x2d}], 0x1) 1.416901467s ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 1.239692805s ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 1.061690833s ago: executing program 0 (id=167): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000000000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b00)='smaps\x00') r1 = memfd_create(&(0x7f0000000b40)='v\xa6\xf5l(Z\x94\xd0\',\xc6\xd5\xdb]\xcbj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00\x00\x00\x004b#F\x86o\x06\xe3\'\xe05\x10\x81\xb7\xbe\xbc\xab\\\n\xeds\xbf\xd8\x0e\xb9z,\x92\x17\x11\x7fn\x9b\x00:Q\xc7qAx\xae\xb0\xa6T\x02\a\xdb\x06\xa5\x8d;\xcfz\xf5\xff\xc2ZTYd[BV\xa65.p\xcc\xeb\xb1\xf8/[\xfa\xbe\xb0\x1d\xb0\xe6%ttq\x8f\x9d\xd2\x15\xb6|\xbf+\xd6\xd3\xf9\x01\xc8dwejpbB(O\xaa\xd8\x9b\xdb\xdcF\x93\x1f\xe7r\x86\xce\xf0\xa5\x87^\x9e\x1b\xc1\xb8\xba\xbf\x9f\x97Kf\xfem38r\xe1\x89\xdb\x9dX\x85-\xf1\x1e\x99\xf0\x13\x87', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2067) 1.061540593s ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 807.865169ms ago: executing program 3 (id=168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c40)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0xe9af, 0x481, 0x0, 0xfffffffe, 0x19, "e31500000000000000000000000100"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001c40)={0x2020}, 0x2020) 807.670499ms ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 594.87166ms ago: executing program 0 (id=169): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) utimes(0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x4000031a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000780)=""/34, 0x22) 594.22989ms ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 408.064999ms ago: executing program 0 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000580)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000005c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640), 0x4) 407.908059ms ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 284.893471ms ago: executing program 4 (id=171): r0 = fsopen(&(0x7f0000000e00)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e40)='.\x00', 0x8880, 0x4) lseek(r2, 0x103, 0x0) getdents(r2, 0x0, 0x18) 284.617201ms ago: executing program 0 (id=172): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) 284.447991ms ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 158.866764ms ago: executing program 0 (id=173): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 158.665794ms ago: executing program 5 (id=139): r0 = memfd_create(&(0x7f00000001c0)='-B\xd5Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xb2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x93\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x1c\xe8\xd9\xc58\x88\xfbP7aS\xf6\xbe\xec\\j\x04\xa2\xacHX\xda\xab\xea\xf9\x87}\x88 \'\xe8\xe0\x92\xb1\x1fu\xed+\x83\xfc\xeb.\x16ec\xda8\x89\xb7\xa7_\xdb\x94\t\x85>\xb7\x93p&\x14\x8aF\xe1\xbdk\xf6\xe7\xca\x8b\x1f\xa5\xbe>_\x9cq*\xbe\x1ctq\xc0E\xa2\x81\xdat\xc77\xd3\x15\xbd\xc8Z\xa8\xf3D\x98\x1b\x83\xb6\xfd\xfcX\xa9\xe2\x81\xb3\xea\xdcQ\x13h\xc3\xcd\xab\x91\x01H3x\xc1\xf3\x8dt\xcd\x15\x916\\dMn\x04\x0e\xdb\x82[ \x00\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400), 0xfdef) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xffffffffffffff7f, 0x5) splice(r1, 0x0, r0, 0x0, 0x4010d00, 0x0) 452.05µs ago: executing program 4 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x0, 0xdddd1000, 0x4, 0x9, 0x5, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x4000, 0x3, 0x4, 0x40, 0x5, 0xd8, 0x6, 0x5, 0x3, 0x3, 0xfd}, {0xeeef0000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x4, 0x4}, {0x25000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xed, 0x80, 0x7, 0x2, 0xdb, 0x1}, {0x60000, 0x3ff8, 0x10, 0x7, 0xb1, 0x4, 0x21, 0xd0, 0x9, 0xff, 0x1}, {0x1ffe, 0x8000000, 0x3, 0x7, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0x7, 0xb0, 0x9}, {0x10000, 0x1000}, {0x5000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x100000000, 0x80, 0xfff]}) 138.51µs ago: executing program 0 (id=175): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000003c0)={0x1008}) 0s ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 24.292394][ T28] audit: type=1400 audit(1794329480.920:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.295741][ T278] cgroup: Unknown subsys name 'net' [ 24.315069][ T28] audit: type=1400 audit(1794329480.920:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.342405][ T28] audit: type=1400 audit(1794329480.960:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.342793][ T278] cgroup: Unknown subsys name 'devices' [ 24.490144][ T278] cgroup: Unknown subsys name 'hugetlb' [ 24.495780][ T278] cgroup: Unknown subsys name 'rlimit' [ 24.601701][ T28] audit: type=1400 audit(1794329481.230:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.624927][ T28] audit: type=1400 audit(1794329481.230:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.649885][ T28] audit: type=1400 audit(1794329481.230:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.680302][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.689135][ T28] audit: type=1400 audit(1794329481.320:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.714576][ T28] audit: type=1400 audit(1794329481.320:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.748832][ T28] audit: type=1400 audit(1794329481.380:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.750059][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.774431][ T28] audit: type=1400 audit(1794329481.380:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.040557][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.047646][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.055435][ T286] device bridge_slave_0 entered promiscuous mode [ 26.063814][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.070930][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.078461][ T286] device bridge_slave_1 entered promiscuous mode [ 26.158959][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.166037][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.173578][ T287] device bridge_slave_0 entered promiscuous mode [ 26.182187][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.189378][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.196785][ T287] device bridge_slave_1 entered promiscuous mode [ 26.219454][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.226541][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.234094][ T288] device bridge_slave_0 entered promiscuous mode [ 26.256380][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.263490][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.270995][ T288] device bridge_slave_1 entered promiscuous mode [ 26.324076][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.331182][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.338819][ T289] device bridge_slave_0 entered promiscuous mode [ 26.379215][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.386292][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.393781][ T289] device bridge_slave_1 entered promiscuous mode [ 26.433211][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.440406][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.447841][ T290] device bridge_slave_0 entered promiscuous mode [ 26.477979][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.485078][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.492782][ T290] device bridge_slave_1 entered promiscuous mode [ 26.567349][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.574440][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.581781][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.588834][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.603788][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.610880][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.618179][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.625218][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.648281][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.655392][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.662736][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.669814][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.737228][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.744904][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.752457][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.760073][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.767456][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.775030][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.783468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.790941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.814823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.823251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.831734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.840777][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.847816][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.855374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.863819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.872020][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.879091][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.886509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.894883][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.902013][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.909454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.917608][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.924707][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.932238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.940602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.948744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.958741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.968983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.994204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.002568][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.010015][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.017549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.032641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.041599][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.048701][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.056349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.064721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.073053][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.080105][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.106051][ T286] device veth0_vlan entered promiscuous mode [ 27.115911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.124326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.133030][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.140114][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.149082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.157134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.165485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.173594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.181924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.190155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.198309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.206328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.214401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.222778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.231293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.239471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.247511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.255170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.282647][ T287] device veth0_vlan entered promiscuous mode [ 27.289367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.296922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.304528][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.313162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.321617][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.328734][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.336230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.344715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.353085][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.360174][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.367642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.376086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.384498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.392932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.401516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.409687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.417728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.425560][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.433163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.461088][ T288] device veth0_vlan entered promiscuous mode [ 27.468174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.476230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.484399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.494077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.502457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.510889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.519378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.527209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.535375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.543082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.550698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.558308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.568342][ T289] device veth0_vlan entered promiscuous mode [ 27.575929][ T286] device veth1_macvtap entered promiscuous mode [ 27.586264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.594612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.603080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.614753][ T287] device veth1_macvtap entered promiscuous mode [ 27.626307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.634679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.643045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.651501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.665304][ T290] device veth0_vlan entered promiscuous mode [ 27.675747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.683982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.691719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.699409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.707592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.716131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.724530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.732875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.741232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.749713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.758790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.773172][ T289] device veth1_macvtap entered promiscuous mode [ 27.781456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.789662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.798756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.810418][ T288] device veth1_macvtap entered promiscuous mode [ 27.821447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.829921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.838913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.865717][ T290] device veth1_macvtap entered promiscuous mode [ 27.876410][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 27.888871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.897311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.905646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.914315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.922802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.931278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.939749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.948357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.956606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.988807][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.998911][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.010879][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.020045][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.100570][ T322] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 28.117725][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 28.140895][ T328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.307633][ T318] loop0: detected capacity change from 0 to 40427 [ 28.330861][ T318] F2FS-fs (loop0): invalid crc value [ 28.366073][ T318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.449351][ T355] loop4: detected capacity change from 0 to 512 [ 28.457694][ T318] F2FS-fs (loop0): Start checkpoint disabled! [ 28.465037][ T318] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 28.472958][ T318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 28.492653][ T355] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.514230][ T355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 28.530872][ T359] FAULT_INJECTION: forcing a failure. [ 28.530872][ T359] name failslab, interval 1, probability 0, space 0, times 1 [ 28.553147][ T355] EXT4-fs (loop4): 1 truncate cleaned up [ 28.553651][ T359] CPU: 1 PID: 359 Comm: syz.2.19 Not tainted syzkaller #0 [ 28.559516][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 28.565979][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.573217][ T355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.583018][ T359] Call Trace: [ 28.583029][ T359] [ 28.583038][ T359] __dump_stack+0x21/0x24 [ 28.597321][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 28.597725][ T359] dump_stack_lvl+0x110/0x170 [ 28.614011][ T359] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.619086][ T359] dump_stack+0x15/0x24 [ 28.623334][ T359] should_fail_ex+0x3bf/0x510 [ 28.628072][ T359] __should_failslab+0xac/0xf0 [ 28.632889][ T359] should_failslab+0x9/0x20 [ 28.637439][ T359] __kmem_cache_alloc_node+0x3d/0x2d0 [ 28.642857][ T359] ? fib_default_rule_add+0x55/0x3d0 [ 28.648189][ T359] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.648646][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 28.653426][ T359] ? fib_default_rule_add+0x55/0x3d0 [ 28.653471][ T359] __kmalloc+0xa4/0x1e0 [ 28.670080][ T359] fib_default_rule_add+0x55/0x3d0 [ 28.675248][ T359] fib4_rules_init+0x49/0x170 [ 28.679975][ T359] fib_net_init+0x123/0x2e0 [ 28.684540][ T359] ? __cfi_fib_net_init+0x10/0x10 [ 28.689621][ T359] ? register_net_sysctl+0x23f/0x250 [ 28.694950][ T359] ? memcpy+0x56/0x70 [ 28.698974][ T359] ? devinet_init_net+0x377/0x5b0 [ 28.704052][ T359] ops_init+0x2ce/0x470 [ 28.708258][ T359] setup_net+0x4b4/0xcd0 [ 28.711810][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 28.712539][ T359] ? copy_net_ns+0x5c0/0x5c0 [ 28.712568][ T359] ? __kasan_kmalloc+0x95/0xb0 [ 28.729365][ T359] ? copy_net_ns+0x185/0x5c0 [ 28.733996][ T359] copy_net_ns+0x355/0x5c0 [ 28.738453][ T359] create_new_namespaces+0x3a8/0x660 [ 28.740627][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 28.743787][ T359] unshare_nsproxy_namespaces+0x120/0x170 [ 28.756931][ T359] ksys_unshare+0x4d5/0x850 [ 28.761487][ T359] ? __cfi_ksys_unshare+0x10/0x10 [ 28.766568][ T359] ? fpregs_restore_userregs+0x128/0x260 [ 28.772266][ T359] __x64_sys_unshare+0x38/0x40 [ 28.777079][ T359] x64_sys_call+0x767/0x9a0 [ 28.780337][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 28.781631][ T359] do_syscall_64+0x4c/0xa0 [ 28.793490][ T359] ? clear_bhb_loop+0x30/0x80 [ 28.798218][ T359] ? clear_bhb_loop+0x30/0x80 [ 28.802953][ T359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.808899][ T359] RIP: 0033:0x7ff9493a8f19 [ 28.809615][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 28.813366][ T359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.813388][ T359] RSP: 002b:00007ff94a315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.844834][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 28.848841][ T359] RAX: ffffffffffffffda RBX: 00007ff949625fa0 RCX: 00007ff9493a8f19 [ 28.848860][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 28.848874][ T359] RBP: 00007ff949437f6d R08: 0000000000000000 R09: 0000000000000000 [ 28.848892][ T359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.888257][ T359] R13: 00007ff949626038 R14: 00007ff949625fa0 R15: 00007fff65e04d68 [ 28.888284][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 28.896262][ T359] [ 28.930708][ T290] EXT4-fs (loop4): unmounting filesystem. [ 28.939344][ T364] syz.3.20 (364) used greatest stack depth: 21640 bytes left [ 28.979482][ T372] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 28.999395][ T374] loop4: detected capacity change from 0 to 256 [ 29.026507][ T374] exfat: Deprecated parameter 'utf8' [ 29.032373][ T374] exfat: Deprecated parameter 'namecase' [ 29.053132][ T374] exfat: Deprecated parameter 'utf8' [ 29.056720][ T308] kworker/u4:3: attempt to access beyond end of device [ 29.056720][ T308] loop0: rw=1, sector=45096, nr_sectors = 40 limit=40427 [ 29.074509][ T376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 29.084620][ T376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25'. [ 29.093897][ T10] kworker/u4:1: attempt to access beyond end of device [ 29.093897][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 29.108477][ T374] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 29.122921][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 29.141974][ T378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 29.247417][ T388] loop1: detected capacity change from 0 to 256 [ 29.282664][ T388] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.304023][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 29.304037][ T28] audit: type=1400 audit(1794329485.930:183): avc: denied { mount } for pid=387 comm="syz.1.30" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.350834][ T28] audit: type=1400 audit(1794329485.970:184): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.379613][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.472344][ T28] audit: type=1400 audit(1794329486.100:185): avc: denied { name_bind } for pid=405 comm="syz.2.36" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.517328][ T409] loop2: detected capacity change from 0 to 2048 [ 29.529778][ T28] audit: type=1400 audit(1794329486.160:186): avc: denied { write } for pid=411 comm="syz.1.39" name="igmp6" dev="proc" ino=4026532349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.560595][ T409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.569416][ T409] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.581875][ T28] audit: type=1400 audit(1794329486.210:187): avc: denied { watch watch_reads } for pid=415 comm="syz.1.40" path="/9/file1" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.605869][ T409] EXT4-fs (loop2): unmounting filesystem. [ 29.649699][ T28] audit: type=1326 audit(1794329486.280:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.1.42" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e63a8f19 code=0x7ffc0000 [ 29.674626][ T422] loop1: detected capacity change from 0 to 512 [ 29.680961][ T28] audit: type=1326 audit(1794329486.280:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.1.42" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e63a8f19 code=0x7ffc0000 [ 29.705850][ T28] audit: type=1326 audit(1794329486.290:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.1.42" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e63a8f19 code=0x7ffc0000 [ 29.718211][ T422] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.42: Unrecognised inode hash code 255 [ 29.731362][ T28] audit: type=1326 audit(1794329486.290:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.1.42" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79e63a8f19 code=0x7ffc0000 [ 29.743181][ T422] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.42: Corrupt directory, running e2fsck is recommended [ 29.767365][ T28] audit: type=1326 audit(1794329486.290:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.1.42" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79e63a8c82 code=0x7ffc0000 [ 29.781209][ T422] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 29.811425][ T422] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.42: corrupted in-inode xattr [ 29.823447][ T422] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.42: couldn't read orphan inode 15 (err -117) [ 29.835627][ T422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.865775][ T286] EXT4-fs (loop1): unmounting filesystem. [ 30.031603][ T434] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 30.058963][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.080691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.092125][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.101451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.109884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.126058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.134983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.143531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.153068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.234222][ T453] loop0: detected capacity change from 0 to 512 [ 30.259537][ T453] EXT4-fs (loop0): 1 orphan inode deleted [ 30.265576][ T453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.278522][ T453] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.289227][ T420] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 1 [ 30.302868][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.333110][ T438] loop4: detected capacity change from 0 to 40427 [ 30.343502][ T438] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 30.354302][ T438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.371787][ T438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.405920][ T289] EXT4-fs (loop0): unmounting filesystem. [ 30.442434][ T438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 30.450235][ T438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.510357][ T476] loop3: detected capacity change from 0 to 512 [ 30.526515][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 30.538714][ T482] ======================================================= [ 30.538714][ T482] WARNING: The mand mount option has been deprecated and [ 30.538714][ T482] and is ignored by this kernel. Remove the mand [ 30.538714][ T482] option from the mount to silence this warning. [ 30.538714][ T482] ======================================================= [ 30.787650][ T499] loop1: detected capacity change from 0 to 512 [ 30.806516][ T501] device bridge1 entered promiscuous mode [ 30.822094][ T499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.851728][ T499] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.895069][ T499] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.75: corrupted inode contents [ 30.908891][ T499] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.75: mark_inode_dirty error [ 30.963437][ T499] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.75: corrupted inode contents [ 30.993857][ T499] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.75: mark_inode_dirty error [ 31.048660][ T286] EXT4-fs (loop1): unmounting filesystem. [ 31.133378][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.141194][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.148863][ T508] device bridge_slave_0 entered promiscuous mode [ 31.161017][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.182387][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.206793][ T508] device bridge_slave_1 entered promiscuous mode [ 31.270643][ T420] device bridge_slave_1 left promiscuous mode [ 31.279827][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.307579][ T420] device bridge_slave_0 left promiscuous mode [ 31.337259][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.370027][ T420] device veth1_macvtap left promiscuous mode [ 31.381329][ T420] device veth0_vlan left promiscuous mode [ 31.480931][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 31.517416][ T549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.552966][ T546] syz.3.91 (546) used greatest stack depth: 20480 bytes left [ 31.585408][ T289] EXT4-fs (loop0): unmounting filesystem. [ 31.599667][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 31.625594][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 31.649773][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 31.754678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.764247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.783478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.812070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.831332][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.838460][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.881396][ T561] device vlan2 entered promiscuous mode [ 31.898363][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.908675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.923800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.953867][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.960979][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.986630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.998400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.015153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.033012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.067624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.081430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.113675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.132010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.148526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.166235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.174880][ T508] device veth0_vlan entered promiscuous mode [ 32.188611][ T570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 32.223172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.237765][ T508] device veth1_macvtap entered promiscuous mode [ 32.254759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.268251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.289175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.305444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.557577][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 32.578999][ T580] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.585836][ T580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.605471][ T580] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 32.662962][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 32.689406][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 32.868969][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 32.888829][ T420] device bridge_slave_1 left promiscuous mode [ 32.896073][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.914781][ T589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.938228][ T420] device bridge_slave_0 left promiscuous mode [ 32.944441][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.946860][ T589] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.967498][ T420] device veth1_macvtap left promiscuous mode [ 32.988194][ T420] device veth0_vlan left promiscuous mode [ 33.113591][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.136340][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 33.163137][ T463] udevd[463]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 33.318460][ T623] set_capacity_and_notify: 3 callbacks suppressed [ 33.318477][ T623] loop1: detected capacity change from 0 to 512 [ 33.335511][ T623] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 33.338867][ T463] udevd[463]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 33.907786][ T630] FAULT_INJECTION: forcing a failure. [ 33.907786][ T630] name failslab, interval 1, probability 0, space 0, times 0 [ 33.925730][ T628] netlink: 64 bytes leftover after parsing attributes in process `syz.0.117'. [ 33.941174][ T630] CPU: 0 PID: 630 Comm: syz.1.118 Not tainted syzkaller #0 [ 33.948440][ T630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 33.958533][ T630] Call Trace: [ 33.961842][ T630] [ 33.964815][ T630] __dump_stack+0x21/0x24 [ 33.969186][ T630] dump_stack_lvl+0x110/0x170 [ 33.973901][ T630] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.978968][ T630] dump_stack+0x15/0x24 [ 33.983162][ T630] should_fail_ex+0x3bf/0x510 [ 33.987881][ T630] __should_failslab+0xac/0xf0 [ 33.992692][ T630] should_failslab+0x9/0x20 [ 33.997257][ T630] __kmem_cache_alloc_node+0x3d/0x2d0 [ 34.002671][ T630] ? shmem_initxattrs+0xcd/0x1e0 [ 34.007640][ T630] ? shmem_initxattrs+0xcd/0x1e0 [ 34.012607][ T630] __kmalloc+0xa4/0x1e0 [ 34.016803][ T630] shmem_initxattrs+0xcd/0x1e0 [ 34.021601][ T630] security_inode_init_security+0x295/0x3c0 [ 34.027534][ T630] ? __cfi_shmem_initxattrs+0x10/0x10 [ 34.032975][ T630] ? __cfi_security_inode_init_security+0x10/0x10 [ 34.039435][ T630] ? __kasan_check_write+0x14/0x20 [ 34.044586][ T630] ? set_cached_acl+0xdd/0x180 [ 34.049387][ T630] ? simple_acl_create+0x191/0x1c0 [ 34.054538][ T630] shmem_mknod+0xb8/0x1d0 [ 34.058913][ T630] ? shmem_mkdir+0x17/0x60 [ 34.063385][ T630] shmem_mkdir+0x2f/0x60 [ 34.067678][ T630] vfs_mkdir+0x39c/0x580 [ 34.071961][ T630] do_mkdirat+0x174/0x4d0 [ 34.076336][ T630] __x64_sys_mkdirat+0x89/0xa0 [ 34.081141][ T630] x64_sys_call+0x73d/0x9a0 [ 34.085674][ T630] do_syscall_64+0x4c/0xa0 [ 34.090135][ T630] ? clear_bhb_loop+0x30/0x80 [ 34.094833][ T630] ? clear_bhb_loop+0x30/0x80 [ 34.099534][ T630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.105534][ T630] RIP: 0033:0x7f79e63a8f19 [ 34.109964][ T630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.129594][ T630] RSP: 002b:00007f79e726e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 34.138025][ T630] RAX: ffffffffffffffda RBX: 00007f79e6625fa0 RCX: 00007f79e63a8f19 [ 34.146017][ T630] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 34.154009][ T630] RBP: 00007f79e6437f6d R08: 0000000000000000 R09: 0000000000000000 [ 34.161998][ T630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.169988][ T630] R13: 00007f79e6626038 R14: 00007f79e6625fa0 R15: 00007ffc052d4f18 [ 34.177989][ T630] [ 34.237706][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 34.331777][ T646] netlink: 'syz.3.123': attribute type 7 has an invalid length. [ 34.339526][ T646] netlink: 'syz.3.123': attribute type 5 has an invalid length. [ 34.347190][ T646] netlink: 17 bytes leftover after parsing attributes in process `syz.3.123'. [ 34.350574][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 34.350606][ T28] audit: type=1326 audit(1794329490.970:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d949a8f19 code=0x7ffc0000 [ 34.386789][ T28] audit: type=1326 audit(1794329490.970:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d949a8c82 code=0x7ffc0000 [ 34.411502][ T28] audit: type=1326 audit(1794329490.980:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6d949a8d17 code=0x7ffc0000 [ 34.436247][ T28] audit: type=1326 audit(1794329490.980:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d94965c11 code=0x7ffc0000 [ 34.460779][ T28] audit: type=1326 audit(1794329490.980:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d949a9d09 code=0x7ffc0000 [ 34.485375][ T28] audit: type=1326 audit(1794329490.980:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d94965c7b code=0x7ffc0000 [ 34.509874][ T28] audit: type=1326 audit(1794329490.980:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d949a8f19 code=0x7ffc0000 [ 34.534709][ T28] audit: type=1326 audit(1794329490.980:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d949a8f19 code=0x7ffc0000 [ 34.559505][ T28] audit: type=1326 audit(1794329490.980:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6d9496536c code=0x7ffc0000 [ 34.584359][ T28] audit: type=1326 audit(1794329490.980:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d949653ce code=0x7ffc0000 [ 34.840819][ T651] loop0: detected capacity change from 0 to 512 [ 34.848658][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 34.860238][ T651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.875611][ T651] EXT4-fs (loop0): 1 truncate cleaned up [ 34.881511][ T651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.956857][ T656] loop3: detected capacity change from 0 to 1024 [ 34.975026][ T656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e118, mo2=0000] [ 34.987670][ T656] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.127: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.002256][ T656] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.127: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.019083][ T656] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.127: Failed to acquire dquot type 0 [ 35.033336][ T656] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 35.063215][ T656] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.127: mark_inode_dirty error [ 35.132204][ T656] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 35.144295][ T656] EXT4-fs (loop3): 1 orphan inode deleted [ 35.150127][ T656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.158661][ T308] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.173112][ T308] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 35.207296][ T289] EXT4-fs (loop0): unmounting filesystem. [ 35.228992][ T287] EXT4-fs (loop3): unmounting filesystem. [ 35.234922][ T287] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.248112][ T287] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 35.257702][ T287] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 35.841587][ T668] loop1: detected capacity change from 0 to 16 [ 35.852758][ T668] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.879768][ T286] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 35.892283][ T286] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 35.908089][ T286] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 35.933555][ T676] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use) [ 36.062315][ T686] loop4: detected capacity change from 0 to 512 [ 36.078514][ T686] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.129637][ T686] EXT4-fs (loop4): 1 truncate cleaned up [ 36.138644][ T686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.305231][ T696] loop0: detected capacity change from 0 to 16 [ 36.326413][ T696] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.404783][ T290] EXT4-fs (loop4): unmounting filesystem. [ 36.448898][ T701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.647968][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 36.766630][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.790327][ T711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 36.819755][ T711] device bridge_slave_1 left promiscuous mode [ 36.825883][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.840854][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 36.852674][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.873047][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.911753][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.932701][ T715] loop3: detected capacity change from 0 to 512 [ 36.940222][ T24] usb 1-1: Found UVC 1.00 device (046d:0825) [ 36.943511][ T463] udevd[463]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 36.959813][ T715] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.148: inode has both inline data and extents flags [ 36.971856][ T24] usb 1-1: No streaming interface found for terminal 2. [ 36.974959][ T715] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.148: couldn't read orphan inode 15 (err -117) [ 36.992313][ T715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.005953][ T715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.148: bg 0: block 13: invalid block bitmap [ 37.064435][ T715] EXT4-fs (loop3): unmounting filesystem. [ 37.072435][ T680] udevd[680]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 37.083686][ T680] udevd[680]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 37.141479][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.150821][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.519611][ T732] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 37.525512][ T732] syzkaller1: Refused to change device type [ 37.688453][ T680] udevd[680]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 37.699772][ T309] usb 1-1: USB disconnect, device number 2 [ 37.707076][ T680] udevd[680]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 37.800619][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.997964][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 38.004340][ T24] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 38.012493][ T24] usb 5-1: config 2 has no interface number 0 [ 38.018646][ T24] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.030155][ T24] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.045703][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 38.054845][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.064131][ T24] usb 5-1: Product: syz [ 38.068371][ T24] usb 5-1: Manufacturer: syz [ 38.073013][ T24] usb 5-1: SerialNumber: syz [ 38.122820][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.132733][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.140815][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 38.148668][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 38.156166][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 38.164019][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 38.171432][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 38.179049][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 38.186557][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 38.194215][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 38.201928][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 38.209731][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 38.217248][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 38.225159][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 38.236011][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.243652][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.276307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.284624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.293286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.301874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.303717][ T24] usb 5-1: USB disconnect, device number 2 [ 38.311885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.326463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.337866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.346224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.558249][ T764] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.077812][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.085115][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.148324][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 39.156319][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 39.163915][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 39.171980][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 39.179713][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 39.187748][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 39.197176][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 39.210438][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.228239][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.235337][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.244371][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.251575][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.270835][ T779] device veth0_vlan left promiscuous mode [ 39.277338][ T779] device veth0_vlan entered promiscuous mode [ 39.284972][ T779] device veth1_macvtap left promiscuous mode [ 39.292755][ T779] device veth1_macvtap entered promiscuous mode [ 39.323110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.331561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.340070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.349860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.358884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.367405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.376377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.385086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.393900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.402861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.411983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.420597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.429188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.438136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.446764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.514744][ T28] kauditd_printk_skb: 996 callbacks suppressed [ 39.514759][ T28] audit: type=1400 audit(1794329496.140:1294): avc: denied { create } for pid=783 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.541753][ T28] audit: type=1400 audit(1794329496.140:1295): avc: denied { getopt } for pid=783 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.096168][ T799] mmap: syz.0.167 (799) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.497778][ T809] loop0: detected capacity change from 0 to 128 [ 40.505714][ T680] udevd[680]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 40.529005][ T28] audit: type=1400 audit(1794329497.160:1296): avc: denied { watch watch_reads } for pid=808 comm="syz.0.169" path="/42/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 40.567448][ T680] udevd[680]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 40.583255][ T680] udevd[680]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory SYZFAIL: mount(dev) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=71 state=3 status=67 (errno 32: Broken pipe) [ 41.093264][ T28] audit: type=1400 audit(1794329497.710:1297): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[15420]" dev="pipefs" ino=15420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 41.979240][ T308] device bridge_slave_0 left promiscuous mode [ 41.985380][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.993565][ T308] device bridge_slave_1 left promiscuous mode [ 41.999748][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.007212][ T308] device bridge_slave_0 left promiscuous mode [ 42.013487][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.021571][ T308] device bridge_slave_1 left promiscuous mode [ 42.027704][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.035290][ T308] device bridge_slave_0 left promiscuous mode [ 42.041560][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.050298][ T308] device veth1_macvtap left promiscuous mode [ 42.056316][ T308] device veth0_vlan left promiscuous mode [ 42.062460][ T308] device veth1_macvtap left promiscuous mode [ 42.068520][ T308] device veth0_vlan left promiscuous mode [ 42.074595][ T308] device veth1_macvtap left promiscuous mode [ 42.080694][ T308] device veth0_vlan left promiscuous mode