last executing test programs: 5m12.832622354s ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 5m12.743095776s ago: executing program 1 (id=8): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 5m12.674679587s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) close(r1) 5m12.56540789s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dummy_udc.0\n', 0xc) 4m57.526808694s ago: executing program 32 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dummy_udc.0\n', 0xc) 4m32.664421887s ago: executing program 3 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008180}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4m32.528450971s ago: executing program 3 (id=626): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 4m32.432874503s ago: executing program 3 (id=627): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x10000a0) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r3, &(0x7f0000004440)=""/4096, 0x1000) 4m32.432411233s ago: executing program 3 (id=628): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10801, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m32.16677563s ago: executing program 3 (id=631): getrusage(0x0, &(0x7f0000000300)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m32.038178023s ago: executing program 3 (id=635): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m31.939861115s ago: executing program 33 (id=635): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m56.088790539s ago: executing program 4 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x482, 0x0, 0xfff9fffe0401e172}]}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0xffff0000}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2m55.963905913s ago: executing program 4 (id=1535): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) 2m55.086089374s ago: executing program 4 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c708"], 0x168}}, 0x0) 2m54.749502782s ago: executing program 4 (id=1543): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]}) io_setup(0x239f, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 2m54.289510773s ago: executing program 4 (id=1549): sched_setscheduler(0x0, 0x2, 0x0) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 2m49.173540317s ago: executing program 4 (id=1569): unshare(0x6020480) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f00000004c0)="fa", 0x0, 0x0, 0x0, 0x2, r0}, 0x38) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0xf4240}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000001880)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) 2m49.142037148s ago: executing program 34 (id=1569): unshare(0x6020480) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f00000004c0)="fa", 0x0, 0x0, 0x0, 0x2, r0}, 0x38) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0xf4240}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000001880)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) 18.417160369s ago: executing program 7 (id=2659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x803, 0x0) userfaultfd(0x80001) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$unix(0x1, 0x5, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x200, 0x10fffff, 0x4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x145, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0xfffffffd, 0x34a}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 17.857420341s ago: executing program 7 (id=2661): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x1000, 0x0, r1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x1000, 0x0, r1, 0x4}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x3, 0xbc5d, 0xe, 0x4, 0x0, 0x9}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 16.391661853s ago: executing program 7 (id=2670): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16.314034805s ago: executing program 7 (id=2671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getresuid(&(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f0000000180)) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) chown(&(0x7f0000001480)='./file0\x00', r0, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) close(0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 13.398026658s ago: executing program 7 (id=2684): ioprio_set$pid(0x2, 0x0, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 13.31716973s ago: executing program 7 (id=2687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) write$bt_hci(r0, 0x0, 0x7a) 13.230993472s ago: executing program 35 (id=2687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) write$bt_hci(r0, 0x0, 0x7a) 8.892128517s ago: executing program 6 (id=2705): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, &(0x7f00000001c0)={@host}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd602abe00000c6c1288"], 0x0) 7.858356009s ago: executing program 2 (id=2706): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10001, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC], 0x9, 0x2db, &(0x7f0000000740)="$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") syz_open_dev$hiddev(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) creat(0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}], [], 0x6b}}) 6.712311114s ago: executing program 2 (id=2709): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) flock(r2, 0x2) ioctl$int_out(r2, 0x5460, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x53d8, 0x2, &(0x7f0000000180)) flock(r4, 0x1) flock(0xffffffffffffffff, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 6.711847044s ago: executing program 6 (id=2710): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f00000005c0)=0x5, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ec09ffff00009c0eaa00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) 5.475382741s ago: executing program 0 (id=2711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x4, 0x37a, &(0x7f0000000340)="$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") r3 = timerfd_create(0x8, 0x80000) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r3, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, 0x0) 5.474690571s ago: executing program 5 (id=2712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r5 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r6, &(0x7f0000000a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x3}], 0x1, 0x12102, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', 0xffffffffffffffff, 0x0, 0x400) 5.473995041s ago: executing program 2 (id=2713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfa, 0x10623, &(0x7f0000021040)="$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") ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x1, 0x1, 0xffffffff, 0x1, 0x4, 0x1000}) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100083, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = open(0x0, 0x109042, 0x9c) fallocate(r5, 0x10, 0x6, 0x7000000) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, 0x0) 5.473404991s ago: executing program 6 (id=2714): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.373436443s ago: executing program 6 (id=2715): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000240)={&(0x7f0000000140)=""/241, 0xf1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) 4.107407081s ago: executing program 5 (id=2716): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 4.074988242s ago: executing program 5 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.664767252s ago: executing program 0 (id=2718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 2.664257992s ago: executing program 5 (id=2719): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x81, 0x40000000, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 2.663318172s ago: executing program 2 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 2.662806102s ago: executing program 6 (id=2721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r3, 0x0, 0x0, 0xd1a) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$TIOCCBRK(r4, 0x5428) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000180)={0x800000b7, 0x98bb, 0x4, 0x5, 0x3, "67095f2539b105cf110000000000f6ff00", 0x3, 0x6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000028c0)={'filter\x00', 0x6001, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @multicast1, 0x8, 0xffffffff}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 1.138494436s ago: executing program 0 (id=2722): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000dc0)={0x1, 0x0, @ioapic={0x41000, 0xe2, 0x0, 0x1, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x7, '\x00', 0x79}, {0xfc, 0x13, 0x4}, {0x13, 0xb}, {0x0, 0x1, 0x0, '\x00', 0xfd}, {0xfe, 0x0, 0x6, '\x00', 0x2}, {0xfd, 0x0, 0x6, '\x00', 0x40}, {0x6f, 0x0, 0x0, '\x00', 0x8}, {0x8, 0x8f, 0xf5, '\x00', 0xfc}, {0xb8, 0x6, 0x0, '\x00', 0x1}, {0xb, 0x0, 0x0, '\x00', 0xd}, {0x0, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0x8, '\x00', 0x3}, {0xff, 0x2, 0x3, '\x00', 0x2}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x6, 0x84, '\x00', 0xff}, {0x8, 0x0, 0xec}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0xff, 0xd}, {0x0, 0x80, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0x1, 0x2, 0x9}, {0x4a, 0xff, 0x3}]}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x8182) r5 = dup3(r4, r3, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x28, 0x5, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.138177046s ago: executing program 5 (id=2723): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x2010, 0xffffffffffffffff, 0xb4545000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, &(0x7f0000000240)='./file0\x00') futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xffdd) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000440)={0xb0000009}) read$eventfd(r3, &(0x7f0000000400), 0x8) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) 1.137751576s ago: executing program 2 (id=2724): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r2}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) 1.104641136s ago: executing program 0 (id=2725): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000005b00)='./bus\x00') syz_clone3(&(0x7f0000000900)={0x23841000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x2007) unshare(0x42000000) io_setup(0x8, &(0x7f0000000600)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) 1.104061867s ago: executing program 2 (id=2726): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) socket(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 31.19949ms ago: executing program 0 (id=2727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="807efaa0498933df4b28869b891345f0c9bd6505cf7b052797361992955317b38cb689384974e000216774622dc68d00e0163d5df634d9a0979a9f9b1c3d8ad5725bd02293a69d81441ddfaceb91148f8492fb6a99511834f47a04e49a5df7fcf257bdbcd469ab8cf8554475a04b6709922bff58d303b098b86f3dc2bb383a3e8a47d5f37dead950503e0d8596ba76a2ae5ef13480c0b9676283e216f296ab03342c2cd48467899acb5b04e01c9ed5680fc1e1d8b606b0b22323c4e6bc46cc0d0359286ac8b8e498a0299ac90a8ca7306c66fa95a087d4766289a767"}], 0x0, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r0, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) r4 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x480, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.72968ms ago: executing program 5 (id=2728): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001b00)={'syz0\x00', {0x4, 0x7, 0x800, 0xfffa}, 0xf, [0x9, 0x4, 0x0, 0x3, 0x7, 0x7, 0x3, 0xe, 0x3ff, 0x53a8, 0x6a5b, 0xbb, 0x8, 0xfffffffa, 0x2, 0x9, 0x5, 0x0, 0xfffff000, 0x7, 0x7, 0x7, 0x44979c10, 0x2, 0x6, 0x5, 0x10000, 0x6cb, 0x719, 0x81, 0x1, 0x8, 0x6, 0x2, 0x4, 0x3, 0x1, 0x9, 0xc, 0x0, 0x2e, 0x7, 0x5, 0x4, 0x4, 0xffffffff, 0x235, 0x699, 0x4, 0x7, 0x3, 0x3, 0x1, 0x5d, 0x4f, 0x4, 0x6, 0xb0712d1, 0xda2f, 0x1, 0x5, 0x0, 0x10000, 0x8], [0x327, 0x7, 0x7fffffff, 0x9, 0x6, 0x34, 0x2, 0x3, 0x0, 0xd, 0x1e33, 0x3, 0x7, 0x6, 0x8, 0xffff, 0x7f, 0x3, 0x0, 0x10, 0xfffff000, 0x5, 0x9ef3, 0x8, 0x2bb7, 0x954, 0x5, 0x1, 0x4, 0xb5, 0x8, 0x8f3, 0x1, 0x8001, 0x2, 0x3, 0x80000001, 0x1, 0x40, 0x9, 0x6, 0x7f, 0x0, 0x5, 0x1, 0x71, 0x9, 0x5, 0x80, 0xfffff9db, 0x1, 0x5, 0x6, 0x6, 0x80, 0xa5, 0x6, 0x5, 0x2, 0x0, 0xf7c1, 0x400, 0x0, 0x4], [0x3, 0x5, 0x6, 0xffff8001, 0x3, 0x8, 0x3, 0x40, 0xc4, 0x10, 0x1, 0x1d, 0xa, 0xac6550c2, 0x3, 0x0, 0xf21, 0x40, 0x6, 0x400, 0x3, 0x9, 0x9, 0x2, 0x6, 0xfe, 0x5, 0xc1, 0x8, 0x4, 0x1, 0x3, 0x101, 0x1, 0x2, 0x0, 0x3, 0x5, 0x6, 0xfff, 0x3, 0x6, 0x8, 0x9, 0x5, 0x0, 0xfffffff7, 0x8000, 0x4, 0x2, 0x84, 0x7, 0xff, 0xffffffff, 0x3118000, 0x8, 0xcbd, 0x47, 0x40, 0xe, 0x80000000, 0xc, 0x1, 0x9], [0x3, 0x5, 0x8, 0x8, 0x99f, 0x7fb, 0x5, 0x0, 0x9, 0x7, 0x4, 0x3, 0x4e, 0x4, 0x1, 0x4, 0x3, 0x98, 0xffff, 0x0, 0x6, 0x8, 0x7, 0x67c, 0xf154, 0x7, 0x7f, 0x8, 0x8001, 0x9e, 0x9, 0x6, 0x8, 0x7, 0x9, 0x5, 0x6, 0x8, 0x2, 0x7, 0x4, 0x2, 0x2, 0xf56, 0xffffff83, 0x400, 0x1, 0x5, 0x3, 0xd37, 0x3, 0x0, 0x80000000, 0x0, 0xff, 0x4, 0x4, 0x6, 0x101, 0x3, 0xc, 0x9, 0x600, 0x6]}, 0x45c) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 30.32101ms ago: executing program 6 (id=2729): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0}) 30.09908ms ago: executing program 36 (id=2729): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=2730): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) timerfd_create(0x1, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xd209f6d814827b17) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x42) read(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x78) r4 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x29, 0x24, 0x0, 0x0) kernel console output (not intermixed with test programs): ed nomblk_io_submit option [ 98.496041][ T3403] fuse: Unknown parameter '0xffffffffffffffff¬rootmod000000000' [ 98.512808][ T3399] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 98.553381][ T3399] EXT4-fs (loop2): 1 truncate cleaned up [ 98.574156][ T3399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.621803][ T28] audit: type=1400 audit(1786396090.465:553): avc: denied { link } for pid=3398 comm="syz.2.1076" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.662590][ T291] EXT4-fs (loop2): unmounting filesystem. [ 99.704392][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 99.704402][ T28] audit: type=1400 audit(1786396091.545:555): avc: denied { append } for pid=3426 comm="syz.2.1085" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.781106][ T3429] overlayfs: refusing to follow metacopy origin for (/file1) [ 99.869077][ T28] audit: type=1400 audit(1786396091.575:556): avc: denied { ioctl } for pid=3426 comm="syz.2.1085" path="/208/tracing/uprobe_events" dev="tracefs" ino=1058 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.671653][ T3438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1090'. [ 101.686977][ T3431] loop2: detected capacity change from 0 to 40427 [ 101.735922][ T3431] F2FS-fs (loop2): invalid crc value [ 101.748088][ T3438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1090'. [ 101.775840][ T3431] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.868912][ T3431] F2FS-fs (loop2): Start checkpoint disabled! [ 101.895580][ T3431] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 101.947016][ T3431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 102.379632][ T3431] syz.2.1087: attempt to access beyond end of device [ 102.379632][ T3431] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 102.518552][ T3431] syz.2.1087: attempt to access beyond end of device [ 102.518552][ T3431] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 102.676599][ T3431] syz.2.1087: attempt to access beyond end of device [ 102.676599][ T3431] loop2: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 102.930316][ T2651] kworker/u4:138: attempt to access beyond end of device [ 102.930316][ T2651] loop2: rw=1, sector=77856, nr_sectors = 8 limit=40427 [ 102.974382][ T2651] kworker/u4:138: attempt to access beyond end of device [ 102.974382][ T2651] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 103.037616][ T3478] syz.4.1104 (3478): attempted to duplicate a private mapping with mremap. This is not supported. [ 103.078064][ T28] audit: type=1326 audit(1786396094.915:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.180757][ T3482] loop6: detected capacity change from 0 to 16 [ 103.224949][ T3482] erofs: Unknown parameter 'Ê' [ 103.230993][ T28] audit: type=1326 audit(1786396094.945:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.375329][ T28] audit: type=1326 audit(1786396094.945:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.552794][ T28] audit: type=1326 audit(1786396094.945:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.610003][ T3507] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1116'. [ 103.722423][ T28] audit: type=1326 audit(1786396094.945:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.866589][ T28] audit: type=1326 audit(1786396094.945:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 103.954946][ T3509] loop2: detected capacity change from 0 to 40427 [ 103.966664][ T28] audit: type=1326 audit(1786396094.945:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 104.002847][ T3509] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 104.035500][ T3509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 104.056061][ T3528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'. [ 104.066215][ T3509] F2FS-fs (loop2): invalid crc value [ 104.073806][ T28] audit: type=1326 audit(1786396094.945:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.4.1104" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff1d5b9e0d9 code=0x7ffc0000 [ 104.103314][ T3509] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 104.127608][ T3533] tipc: Failed to remove unknown binding: 66,0,0/4:2590283462/2590283464 [ 104.148194][ T3533] tipc: Failed to remove unknown binding: 66,0,0/4:2590283462/2590283463 [ 104.185779][ T3509] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 104.196287][ T3538] tipc: Failed to remove unknown binding: 66,0,0/4:2590283462/2590283464 [ 104.208413][ T3535] loop6: detected capacity change from 0 to 512 [ 104.214903][ T3509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.222699][ T3538] tipc: Failed to remove unknown binding: 66,0,0/4:2590283462/2590283463 [ 104.237296][ T3535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.274233][ T3535] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.315126][ T3535] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.345832][ T3535] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.1124: Allocating blocks 41-42 which overlap fs metadata [ 104.400272][ T3535] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1124: Failed to acquire dquot type 0 [ 104.412029][ T3535] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 104.426778][ T3535] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #12: comm syz.6.1124: corrupted inode contents [ 104.443387][ T3535] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #12: comm syz.6.1124: mark_inode_dirty error [ 104.476484][ T3535] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #12: comm syz.6.1124: corrupted inode contents [ 104.505741][ T3535] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.1124: mark_inode_dirty error [ 104.539724][ T3535] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #12: comm syz.6.1124: corrupted inode contents [ 104.570282][ T3535] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 104.579160][ T3535] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #12: comm syz.6.1124: corrupted inode contents [ 104.591842][ T3535] EXT4-fs error (device loop6): ext4_truncate:4327: inode #12: comm syz.6.1124: mark_inode_dirty error [ 104.604091][ T3535] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 104.613230][ T3535] EXT4-fs (loop6): 1 truncate cleaned up [ 104.618985][ T3535] EXT4-fs (loop6): pa ffff888132d73bd0: logic 1, phys. 41, len 23 [ 104.626894][ T3535] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 104.660542][ T3535] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 104.732812][ T2206] EXT4-fs (loop6): unmounting filesystem. [ 105.026266][ T3569] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1136'. [ 105.858228][ T3593] loop2: detected capacity change from 0 to 512 [ 105.890480][ T3593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.969998][ T3593] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.986405][ T3599] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1144'. [ 106.024405][ T3593] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.059903][ T3593] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1141: Allocating blocks 41-42 which overlap fs metadata [ 106.123194][ T3593] __quota_error: 5 callbacks suppressed [ 106.123413][ T3593] Quota error (device loop2): write_blk: dquota write failed [ 106.177701][ T3593] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.229947][ T3593] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.1141: Failed to acquire dquot type 0 [ 106.287445][ T3593] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.355999][ T3593] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.1141: corrupted inode contents [ 106.388380][ T3593] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #12: comm syz.2.1141: mark_inode_dirty error [ 106.405538][ T3593] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.1141: corrupted inode contents [ 106.423953][ T3593] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.1141: mark_inode_dirty error [ 106.454411][ T3593] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.1141: corrupted inode contents [ 106.497121][ T3593] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 106.526166][ T3593] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.1141: corrupted inode contents [ 106.559165][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'. [ 106.571312][ T3593] EXT4-fs error (device loop2): ext4_truncate:4327: inode #12: comm syz.2.1141: mark_inode_dirty error [ 106.595621][ T3593] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 106.606057][ T3613] bridge1: port 1(veth5) entered blocking state [ 106.612346][ T3613] bridge1: port 1(veth5) entered disabled state [ 106.618764][ T3593] EXT4-fs (loop2): 1 truncate cleaned up [ 106.624766][ T19] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 106.632715][ T3613] device veth5 entered promiscuous mode [ 106.638321][ T3593] EXT4-fs (loop2): pa ffff888132d73498: logic 1, phys. 41, len 23 [ 106.646169][ T3593] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 106.671208][ T3613] bridge1: port 2(veth0_to_bond) entered blocking state [ 106.685675][ T3613] bridge1: port 2(veth0_to_bond) entered disabled state [ 106.694805][ T28] audit: type=1400 audit(1786396098.535:568): avc: denied { getopt } for pid=3616 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.714905][ T3593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.724345][ T3613] device veth0_to_bond entered promiscuous mode [ 106.783278][ T291] EXT4-fs (loop2): unmounting filesystem. [ 106.790073][ T3621] VFS: Mount too revealing [ 106.842064][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.868187][ T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.902252][ T19] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 106.951047][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.980220][ T19] usb 7-1: SerialNumber: syz [ 107.003454][ T19] usb 7-1: 0:2 : does not exist [ 107.329404][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.354814][ T3648] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.444231][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.476945][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.552885][ T6] usb 7-1: USB disconnect, device number 4 [ 107.864504][ T3619] overlayfs: failed to clone upperpath [ 107.943088][ T3663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1166'. [ 109.067263][ T3669] loop6: detected capacity change from 0 to 131072 [ 109.078639][ T3669] F2FS-fs (loop6): invalid crc value [ 109.093046][ T3669] F2FS-fs (loop6): Found nat_bits in checkpoint [ 109.113083][ T3669] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 111.021794][ T3725] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 111.568273][ T3749] binder: 3748:3749 unknown command 0 [ 111.574982][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 111.584048][ T3749] binder: 3748:3749 ioctl c0306201 2000000004c0 returned -22 [ 111.630341][ T28] audit: type=1400 audit(1786396103.465:569): avc: denied { write } for pid=3753 comm="syz.0.1200" name="/" dev="configfs" ino=14821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.685041][ T28] audit: type=1400 audit(1786396103.495:570): avc: denied { audit_write } for pid=3753 comm="syz.0.1200" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.709468][ T3758] loop2: detected capacity change from 0 to 512 [ 111.740974][ T3758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.789711][ T3758] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 111.797494][ T3758] EXT4-fs (loop2): can't enable nombcache during remount [ 111.813028][ T291] EXT4-fs (loop2): unmounting filesystem. [ 113.476942][ T3841] 9pnet_fd: Insufficient options for proto=fd [ 114.269740][ T3860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.789651][ T3871] overlayfs: failed to clone upperpath [ 115.761012][ C0] sched: RT throttling activated [ 115.774352][ T28] audit: type=1400 audit(1786396107.615:571): avc: denied { watch watch_reads } for pid=3870 comm="syz.0.1243" path="/339/bus/file1" dev="tmpfs" ino=1831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.773091][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1245'. [ 117.862994][ T3895] loop6: detected capacity change from 0 to 512 [ 117.891254][ T3895] EXT4-fs (loop6): Test dummy encryption mode enabled [ 117.932270][ T3895] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1251: inode has both inline data and extents flags [ 117.977819][ T3895] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1251: couldn't read orphan inode 15 (err -117) [ 118.025583][ T3895] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 118.084966][ T3895] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 118.152533][ T3907] loop2: detected capacity change from 0 to 4096 [ 118.184112][ T3907] ext2: Unknown parameter 'subj_user' [ 118.334846][ T3913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1256'. [ 118.407021][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1256'. [ 118.790269][ T2206] EXT4-fs (loop6): unmounting filesystem. [ 118.852792][ T3928] loop6: detected capacity change from 0 to 512 [ 118.905422][ T3928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.940016][ T3930] netlink: 'syz.4.1263': attribute type 2 has an invalid length. [ 118.951964][ T28] audit: type=1400 audit(1786396110.795:572): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.993685][ T3928] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.011059][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 119.078125][ T3928] EXT4-fs (loop6): 1 truncate cleaned up [ 119.085521][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 119.101113][ T3928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 119.118261][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 119.201997][ T2206] EXT4-fs (loop6): unmounting filesystem. [ 119.329353][ T28] audit: type=1400 audit(1786396111.165:573): avc: denied { read } for pid=3950 comm="syz.6.1269" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.444741][ T3953] loop2: detected capacity change from 0 to 16 [ 119.459327][ T28] audit: type=1400 audit(1786396111.195:574): avc: denied { open } for pid=3950 comm="syz.6.1269" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.513843][ T3953] erofs: (device loop2): mounted with root inode @ nid 36. [ 119.716602][ T28] audit: type=1400 audit(1786396111.555:575): avc: denied { relabelfrom } for pid=3956 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.881186][ T28] audit: type=1400 audit(1786396111.575:576): avc: denied { relabelto } for pid=3956 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.024554][ T3967] loop2: detected capacity change from 0 to 512 [ 120.058895][ T3967] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 120.107460][ T3967] EXT4-fs (loop2): invalid journal inode [ 120.124096][ T3965] loop6: detected capacity change from 0 to 4096 [ 120.135496][ T3967] EXT4-fs (loop2): can't get journal size [ 120.159807][ T3967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 120.187002][ T3965] ext2: Unknown parameter 'subj_user' [ 120.203591][ T3967] System zones: 1-12, 13-13 [ 120.228115][ T3967] EXT4-fs (loop2): 1 truncate cleaned up [ 120.270498][ T3967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.353747][ T291] EXT4-fs (loop2): unmounting filesystem. [ 121.678657][ T4003] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 123.644943][ T28] audit: type=1400 audit(1786396115.485:577): avc: denied { setopt } for pid=4013 comm="syz.6.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.670727][ T4014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1290'. [ 123.681601][ T2651] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.787476][ T28] audit: type=1400 audit(1786396115.585:578): avc: denied { execmod } for pid=4005 comm="syz.0.1288" path="/346/cpu.stat" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.032561][ T4029] x_tables: duplicate underflow at hook 3 [ 124.098320][ T4022] loop2: detected capacity change from 0 to 40427 [ 124.149276][ T4022] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 124.212532][ T4022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 124.245468][ T4022] F2FS-fs (loop2): invalid crc value [ 124.276029][ T4022] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 124.337741][ T4022] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 124.368376][ T4022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.469791][ T28] audit: type=1326 audit(1786396116.305:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 124.661686][ T28] audit: type=1326 audit(1786396116.345:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.145169][ T28] audit: type=1326 audit(1786396116.345:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.171225][ T4057] loop2: detected capacity change from 0 to 128 [ 125.289588][ T28] audit: type=1326 audit(1786396116.345:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.348063][ T4061] device veth0 entered promiscuous mode [ 125.369764][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 125.455971][ T28] audit: type=1326 audit(1786396116.345:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.496489][ T4060] device veth0 left promiscuous mode [ 125.582152][ T28] audit: type=1326 audit(1786396116.345:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.696640][ T28] audit: type=1326 audit(1786396116.345:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 125.733418][ T4084] device bridge2 entered promiscuous mode [ 125.741144][ T4015] Bluetooth: hci0: command 0x1003 tx timeout [ 125.747157][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.781496][ T4069] FAULT_INJECTION: forcing a failure. [ 125.781496][ T4069] name failslab, interval 1, probability 1, space 0, times 10 [ 125.806275][ T332] FAULT_INJECTION: forcing a failure. [ 125.806275][ T332] name failslab, interval 1, probability 1, space 0, times 10 [ 125.820876][ T289] FAULT_INJECTION: forcing a failure. [ 125.820876][ T289] name failslab, interval 1, probability 1, space 0, times 10 [ 125.840219][ T4088] FAULT_INJECTION: forcing a failure. [ 125.840219][ T4088] name failslab, interval 1, probability 1, space 0, times 10 [ 125.857808][ T4089] FAULT_INJECTION: forcing a failure. [ 125.857808][ T4089] name failslab, interval 1, probability 1, space 0, times 10 [ 125.870501][ T4089] CPU: 0 PID: 4089 Comm: syz.2.1309 Not tainted syzkaller #0 [ 125.877855][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.887909][ T4089] Call Trace: [ 125.891162][ T4089] [ 125.894087][ T4089] __dump_stack+0x21/0x24 [ 125.898424][ T4089] dump_stack_lvl+0x110/0x170 [ 125.903076][ T4089] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.908077][ T4089] dump_stack+0x15/0x24 [ 125.912207][ T4089] should_fail_ex+0x3bf/0x510 [ 125.916860][ T4089] __should_failslab+0xac/0xf0 [ 125.921601][ T4089] should_failslab+0x9/0x20 [ 125.926100][ T4089] kmem_cache_alloc_node+0x42/0x330 [ 125.931274][ T4089] ? __alloc_skb+0xe8/0x4a0 [ 125.935751][ T4089] __alloc_skb+0xe8/0x4a0 [ 125.940052][ T4089] tipc_msg_create+0x4c/0x4f0 [ 125.944708][ T4089] tipc_sk_filter_rcv+0x13dc/0x3010 [ 125.949886][ T4089] ? tipc_sk_publish+0x440/0x440 [ 125.954796][ T4089] ? __kasan_check_write+0x14/0x20 [ 125.959880][ T4089] ? _raw_spin_lock_bh+0x94/0xf0 [ 125.964796][ T4089] tipc_sk_rcv+0x7e7/0x2c20 [ 125.969281][ T4089] ? do_syscall_64+0x4c/0xa0 [ 125.973853][ T4089] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 125.978767][ T4089] ? _copy_from_iter+0x2bd/0xfe0 [ 125.983698][ T4089] ? __cfi__copy_from_iter+0x10/0x10 [ 125.988959][ T4089] tipc_node_xmit+0x36f/0xd80 [ 125.993614][ T4089] ? memcpy+0x56/0x70 [ 125.997570][ T4089] ? __cfi_tipc_node_xmit+0x10/0x10 [ 126.002745][ T4089] ? __cfi____update_load_sum+0x10/0x10 [ 126.008264][ T4089] __tipc_sendstream+0xa6e/0x1190 [ 126.013270][ T4089] ? tsk_advance_rx_queue+0x250/0x250 [ 126.018617][ T4089] ? __cfi_woken_wake_function+0x10/0x10 [ 126.024243][ T4089] ? _raw_spin_unlock+0x4c/0x70 [ 126.029067][ T4089] ? finish_task_switch+0x16b/0x7c0 [ 126.034242][ T4089] tipc_send_packet+0x7c/0xa0 [ 126.038895][ T4089] ? __cfi_tipc_send_packet+0x10/0x10 [ 126.044242][ T4089] ____sys_sendmsg+0x5fb/0x9c0 [ 126.048986][ T4089] ? __sys_sendmsg_sock+0x40/0x40 [ 126.053989][ T4089] ? import_iovec+0x7c/0xb0 [ 126.058468][ T4089] ___sys_sendmsg+0x2a2/0x360 [ 126.063124][ T4089] ? ttwu_do_wakeup+0x468/0x490 [ 126.067968][ T4089] ? __sys_sendmsg+0x290/0x290 [ 126.072708][ T4089] ? try_to_wake_up+0x6c6/0x1250 [ 126.077627][ T4089] ? __fdget+0x19c/0x220 [ 126.081847][ T4089] __sys_sendmmsg+0x2cc/0x4e0 [ 126.086505][ T4089] ? __cfi___sys_sendmmsg+0x10/0x10 [ 126.091685][ T4089] ? fpregs_restore_userregs+0x128/0x260 [ 126.097292][ T4089] __x64_sys_sendmmsg+0xa0/0xb0 [ 126.102122][ T4089] x64_sys_call+0x3f5/0x9a0 [ 126.106605][ T4089] do_syscall_64+0x4c/0xa0 [ 126.110998][ T4089] ? clear_bhb_loop+0x30/0x80 [ 126.115647][ T4089] ? clear_bhb_loop+0x30/0x80 [ 126.120294][ T4089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.126174][ T4089] RIP: 0033:0x7f2efe19e0d9 [ 126.130570][ T4089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.150148][ T4089] RSP: 002b:00007f2eff09b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.158538][ T4089] RAX: ffffffffffffffda RBX: 00007f2efe426180 RCX: 00007f2efe19e0d9 [ 126.166483][ T4089] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000005 [ 126.174450][ T4089] RBP: 00007f2efe235024 R08: 0000000000000000 R09: 0000000000000000 [ 126.182394][ T4089] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 126.190343][ T4089] R13: 00007f2efe426218 R14: 00007f2efe426180 R15: 00007ffd5b252af8 [ 126.198311][ T4089] [ 126.202720][ T92] FAULT_INJECTION: forcing a failure. [ 126.202720][ T92] name failslab, interval 1, probability 1, space 0, times 9 [ 126.219166][ T4090] FAULT_INJECTION: forcing a failure. [ 126.219166][ T4090] name failslab, interval 1, probability 1, space 0, times 9 [ 126.231886][ T4069] CPU: 0 PID: 4069 Comm: syz.5.1310 Not tainted syzkaller #0 [ 126.239297][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.249337][ T4069] Call Trace: [ 126.252598][ T4069] [ 126.255510][ T4069] __dump_stack+0x21/0x24 [ 126.259824][ T4069] dump_stack_lvl+0x110/0x170 [ 126.264485][ T4069] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.269496][ T4069] ? __kasan_check_write+0x14/0x20 [ 126.274589][ T4069] ? mutex_unlock+0x8f/0x230 [ 126.279158][ T4069] ? __cfi_mutex_unlock+0x10/0x10 [ 126.284167][ T4069] dump_stack+0x15/0x24 [ 126.288301][ T4069] should_fail_ex+0x3bf/0x510 [ 126.292953][ T4069] __should_failslab+0xac/0xf0 [ 126.297699][ T4069] should_failslab+0x9/0x20 [ 126.302187][ T4069] __kmem_cache_alloc_node+0x3d/0x2d0 [ 126.307539][ T4069] ? io_req_prep_async+0x28c/0x6c0 [ 126.312624][ T4069] ? __get_task_ioprio+0xe6/0x1b0 [ 126.317629][ T4069] ? io_req_prep_async+0x28c/0x6c0 [ 126.322724][ T4069] __kmalloc+0xa4/0x1e0 [ 126.326874][ T4069] ? __cfi_io_readv_prep_async+0x10/0x10 [ 126.332481][ T4069] io_req_prep_async+0x28c/0x6c0 [ 126.337405][ T4069] io_queue_sqe_fallback+0x60/0x1b0 [ 126.342581][ T4069] io_submit_sqes+0x18eb/0x1ba0 [ 126.347411][ T4069] __se_sys_io_uring_enter+0x32c/0x1f50 [ 126.352936][ T4069] ? arch_do_signal_or_restart+0xd1/0x11c0 [ 126.358718][ T4069] ? __x64_sys_io_uring_enter+0x100/0x100 [ 126.364413][ T4069] ? _raw_spin_unlock+0x4c/0x70 [ 126.369245][ T4069] ? switch_mm_irqs_off+0x2f0/0x960 [ 126.374431][ T4069] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 126.380570][ T4069] ? preempt_schedule_irq+0xca/0x120 [ 126.385841][ T4069] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 126.391544][ T4069] ? __this_cpu_preempt_check+0x13/0x20 [ 126.397069][ T4069] ? xfd_validate_state+0x70/0x150 [ 126.402177][ T4069] ? __kasan_check_write+0x14/0x20 [ 126.407275][ T4069] __x64_sys_io_uring_enter+0xe5/0x100 [ 126.412717][ T4069] x64_sys_call+0x4b2/0x9a0 [ 126.417204][ T4069] do_syscall_64+0x4c/0xa0 [ 126.421626][ T4069] ? clear_bhb_loop+0x30/0x80 [ 126.426281][ T4069] ? clear_bhb_loop+0x30/0x80 [ 126.430931][ T4069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.436800][ T4069] RIP: 0033:0x7f58ec19e0d9 [ 126.441208][ T4069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.460789][ T4069] RSP: 002b:00007f58eabf6f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 126.469180][ T4069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ec19e0d9 [ 126.477125][ T4069] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 126.485074][ T4069] RBP: 00000000000000b8 R08: 0000000000000000 R09: 0000000000000008 [ 126.493032][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000940 [ 126.500992][ T4069] R13: 0000200000000948 R14: 00000000000003c9 R15: 0000000000000002 [ 126.508940][ T4069] [ 126.512363][ T332] CPU: 0 PID: 332 Comm: udevd Not tainted syzkaller #0 [ 126.519200][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.529227][ T332] Call Trace: [ 126.532480][ T332] [ 126.535388][ T332] __dump_stack+0x21/0x24 [ 126.539697][ T332] dump_stack_lvl+0x110/0x170 [ 126.544348][ T332] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.549345][ T332] ? __kasan_slab_free+0x11/0x20 [ 126.554258][ T332] dump_stack+0x15/0x24 [ 126.558384][ T332] should_fail_ex+0x3bf/0x510 [ 126.563031][ T332] ? getname_flags+0xba/0x510 [ 126.567679][ T332] __should_failslab+0xac/0xf0 [ 126.572415][ T332] should_failslab+0x9/0x20 [ 126.576895][ T332] kmem_cache_alloc+0x3b/0x320 [ 126.581632][ T332] getname_flags+0xba/0x510 [ 126.586123][ T332] user_path_at_empty+0x2f/0x1c0 [ 126.591034][ T332] do_utimes+0x12e/0x2a0 [ 126.595249][ T332] ? __cfi_do_utimes+0x10/0x10 [ 126.599985][ T332] __x64_sys_utimensat+0x15b/0x240 [ 126.605067][ T332] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 126.610670][ T332] ? fput+0x15b/0x1a0 [ 126.614627][ T332] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 126.620668][ T332] x64_sys_call+0x3e0/0x9a0 [ 126.625143][ T332] do_syscall_64+0x4c/0xa0 [ 126.629534][ T332] ? clear_bhb_loop+0x30/0x80 [ 126.634179][ T332] ? clear_bhb_loop+0x30/0x80 [ 126.638827][ T332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.644710][ T332] RIP: 0033:0x7f3010115a1a [ 126.649097][ T332] Code: 77 06 c3 0f 1f 44 00 00 48 8b 15 d9 b3 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 41 89 ca b8 18 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 8b 15 a9 b3 0d 00 f7 [ 126.668688][ T332] RSP: 002b:00007ffd50db5db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 126.677071][ T332] RAX: ffffffffffffffda RBX: 0000000000006180 RCX: 00007f3010115a1a [ 126.685017][ T332] RDX: 0000000000000000 RSI: 000055829b66fed0 RDI: 00000000ffffff9c [ 126.692963][ T332] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055829b668960 [ 126.700906][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.708847][ T332] R13: 0000000000000000 R14: 000055829b66fed0 R15: 000055829b671ce0 [ 126.716793][ T332] [ 126.729459][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 126.736909][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.746936][ T289] Call Trace: [ 126.750190][ T289] [ 126.753094][ T289] __dump_stack+0x21/0x24 [ 126.757399][ T289] dump_stack_lvl+0x110/0x170 [ 126.762051][ T289] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.767049][ T289] ? rwsem_write_trylock+0x136/0x300 [ 126.772309][ T289] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 126.779652][ T289] dump_stack+0x15/0x24 [ 126.783781][ T289] should_fail_ex+0x3bf/0x510 [ 126.788427][ T289] ? anon_vma_fork+0xef/0x510 [ 126.793077][ T289] __should_failslab+0xac/0xf0 [ 126.797814][ T289] should_failslab+0x9/0x20 [ 126.802287][ T289] kmem_cache_alloc+0x3b/0x320 [ 126.807024][ T289] anon_vma_fork+0xef/0x510 [ 126.811498][ T289] ? dup_userfaultfd+0x21b/0x7d0 [ 126.816410][ T289] copy_mm+0xcab/0x1ad0 [ 126.820541][ T289] ? copy_signal+0x630/0x630 [ 126.825099][ T289] ? _raw_spin_lock+0x94/0xf0 [ 126.829751][ T289] ? __init_rwsem+0x11b/0x1f0 [ 126.834404][ T289] ? copy_signal+0x4eb/0x630 [ 126.838964][ T289] copy_process+0x12d8/0x3500 [ 126.843618][ T289] ? cgroup_rstat_updated+0xf0/0x360 [ 126.848876][ T289] ? idle_dummy+0x10/0x10 [ 126.853179][ T289] ? __count_memcg_events+0x8f/0xe0 [ 126.858349][ T289] kernel_clone+0x22f/0x7f0 [ 126.862842][ T289] ? __kasan_check_write+0x14/0x20 [ 126.867926][ T289] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 126.873445][ T289] ? __cfi_kernel_clone+0x10/0x10 [ 126.878444][ T289] ? recalc_sigpending+0x168/0x1c0 [ 126.883528][ T289] __x64_sys_clone+0x193/0x200 [ 126.888268][ T289] ? __cfi___x64_sys_clone+0x10/0x10 [ 126.893527][ T289] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 126.899566][ T289] x64_sys_call+0x990/0x9a0 [ 126.904045][ T289] do_syscall_64+0x4c/0xa0 [ 126.908435][ T289] ? clear_bhb_loop+0x30/0x80 [ 126.913083][ T289] ? clear_bhb_loop+0x30/0x80 [ 126.917730][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.923596][ T289] RIP: 0033:0x7f31f3fc6b52 [ 126.927985][ T289] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 126.947561][ T289] RSP: 002b:00007ffc1f74f090 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 126.955961][ T289] RAX: ffffffffffffffda RBX: 00007ffc1f74f090 RCX: 00007f31f3fc6b52 [ 126.963908][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 126.971866][ T289] RBP: 00007ffc1f74f21c R08: 0000000000000000 R09: 0000000000000001 [ 126.979812][ T289] R10: 000055555cd8c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 126.987754][ T289] R13: 00000000000927c0 R14: 000000000001ea20 R15: 00007ffc1f74f270 [ 126.995708][ T289] [ 126.998882][ T92] CPU: 0 PID: 92 Comm: klogd Not tainted syzkaller #0 [ 127.005620][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.015646][ T92] Call Trace: [ 127.018897][ T92] [ 127.021803][ T92] __dump_stack+0x21/0x24 [ 127.026108][ T92] dump_stack_lvl+0x110/0x170 [ 127.030760][ T92] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.035759][ T92] dump_stack+0x15/0x24 [ 127.039888][ T92] should_fail_ex+0x3bf/0x510 [ 127.044554][ T92] __should_failslab+0xac/0xf0 [ 127.049295][ T92] should_failslab+0x9/0x20 [ 127.053772][ T92] kmem_cache_alloc_node+0x42/0x330 [ 127.058959][ T92] ? __alloc_skb+0xe8/0x4a0 [ 127.063434][ T92] __alloc_skb+0xe8/0x4a0 [ 127.067734][ T92] alloc_skb_with_frags+0xa8/0x620 [ 127.072816][ T92] ? memcpy+0x56/0x70 [ 127.076770][ T92] sock_alloc_send_pskb+0x87f/0x9a0 [ 127.081943][ T92] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 127.087639][ T92] ? __kasan_check_write+0x14/0x20 [ 127.092737][ T92] ? _raw_spin_lock+0x94/0xf0 [ 127.097390][ T92] ? __cfi__raw_spin_lock+0x10/0x10 [ 127.102576][ T92] unix_dgram_sendmsg+0x5c1/0x1710 [ 127.107667][ T92] ? selinux_socket_sendmsg+0x22f/0x340 [ 127.113184][ T92] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 127.119048][ T92] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 127.124587][ T92] ? security_socket_sendmsg+0x93/0xb0 [ 127.130021][ T92] __sys_sendto+0x4ac/0x660 [ 127.134510][ T92] ? __cfi___sys_sendto+0x10/0x10 [ 127.139508][ T92] ? __cfi_do_syslog+0x10/0x10 [ 127.144249][ T92] __x64_sys_sendto+0xe5/0x100 [ 127.148984][ T92] x64_sys_call+0x83/0x9a0 [ 127.153637][ T92] do_syscall_64+0x4c/0xa0 [ 127.158027][ T92] ? clear_bhb_loop+0x30/0x80 [ 127.162676][ T92] ? clear_bhb_loop+0x30/0x80 [ 127.167325][ T92] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.173191][ T92] RIP: 0033:0x7fd0b96bf407 [ 127.177578][ T92] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.197155][ T92] RSP: 002b:00007ffdf6799c90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 127.205538][ T92] RAX: ffffffffffffffda RBX: 00007fd0b956fc80 RCX: 00007fd0b96bf407 [ 127.213481][ T92] RDX: 0000000000000053 RSI: 00007ffdf6799dd0 RDI: 0000000000000003 [ 127.221426][ T92] RBP: 00007ffdf679a200 R08: 0000000000000000 R09: 0000000000000000 [ 127.229372][ T92] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdf679a218 [ 127.237314][ T92] R13: 00007ffdf6799dd0 R14: 0000000000000038 R15: 00007ffdf6799dd0 [ 127.245260][ T92] [ 127.248769][ T4088] CPU: 0 PID: 4088 Comm: syz.6.1318 Not tainted syzkaller #0 [ 127.256126][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.266153][ T4088] Call Trace: [ 127.269406][ T4088] [ 127.272312][ T4088] __dump_stack+0x21/0x24 [ 127.276619][ T4088] dump_stack_lvl+0x110/0x170 [ 127.281288][ T4088] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.286286][ T4088] dump_stack+0x15/0x24 [ 127.290433][ T4088] should_fail_ex+0x3bf/0x510 [ 127.295087][ T4088] ? vm_area_dup+0x27/0x280 [ 127.299563][ T4088] __should_failslab+0xac/0xf0 [ 127.304300][ T4088] should_failslab+0x9/0x20 [ 127.308774][ T4088] kmem_cache_alloc+0x3b/0x320 [ 127.313511][ T4088] vm_area_dup+0x27/0x280 [ 127.317812][ T4088] ? __split_vma+0x1b0/0x980 [ 127.322401][ T4088] __split_vma+0x1c6/0x980 [ 127.326792][ T4088] ? __vm_enough_memory+0x11a/0x360 [ 127.331962][ T4088] split_vma+0x7c/0xd0 [ 127.336093][ T4088] mprotect_fixup+0x4ce/0x940 [ 127.340743][ T4088] ? __cfi_mprotect_fixup+0x10/0x10 [ 127.345914][ T4088] ? security_file_mprotect+0x95/0xc0 [ 127.351275][ T4088] do_mprotect_pkey+0x80a/0xbe0 [ 127.356099][ T4088] ? prot_none_test+0x10/0x10 [ 127.360746][ T4088] ? vm_mmap_pgoff+0x14d/0x3f0 [ 127.365484][ T4088] ? __x64_sys_rt_sigprocmask+0xb0/0xb0 [ 127.371005][ T4088] ? debug_smp_processor_id+0x17/0x20 [ 127.376366][ T4088] __x64_sys_mprotect+0x80/0x90 [ 127.381192][ T4088] x64_sys_call+0x997/0x9a0 [ 127.385670][ T4088] do_syscall_64+0x4c/0xa0 [ 127.390058][ T4088] ? clear_bhb_loop+0x30/0x80 [ 127.394710][ T4088] ? clear_bhb_loop+0x30/0x80 [ 127.399373][ T4088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.405242][ T4088] RIP: 0033:0x7f30b039ded7 [ 127.409630][ T4088] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.429208][ T4088] RSP: 002b:00007ffd4b791958 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 127.437595][ T4088] RAX: ffffffffffffffda RBX: 00007f30b13366c0 RCX: 00007f30b039ded7 [ 127.445538][ T4088] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f30b1317000 [ 127.453480][ T4088] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 127.461421][ T4088] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd4b791ab0 [ 127.469366][ T4088] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 127.477338][ T4088] [ 127.481228][ T28] audit: type=1326 audit(1786396116.345:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 127.506060][ T4090] CPU: 0 PID: 4090 Comm: syz.4.1320 Not tainted syzkaller #0 [ 127.513408][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.523435][ T4090] Call Trace: [ 127.526689][ T4090] [ 127.529603][ T4090] __dump_stack+0x21/0x24 [ 127.533945][ T4090] dump_stack_lvl+0x110/0x170 [ 127.538603][ T4090] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.543609][ T4090] ? unwind_get_return_address+0x4d/0x90 [ 127.549222][ T4090] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 127.555378][ T4090] dump_stack+0x15/0x24 [ 127.559517][ T4090] should_fail_ex+0x3bf/0x510 [ 127.564186][ T4090] ? mas_alloc_nodes+0x2d8/0x850 [ 127.569100][ T4090] __should_failslab+0xac/0xf0 [ 127.573841][ T4090] should_failslab+0x9/0x20 [ 127.578328][ T4090] kmem_cache_alloc+0x3b/0x320 [ 127.583083][ T4090] mas_alloc_nodes+0x2d8/0x850 [ 127.587823][ T4090] mas_preallocate+0xe3d/0x1430 [ 127.592665][ T4090] ? __cfi_mas_preallocate+0x10/0x10 [ 127.597927][ T4090] __vma_adjust+0x622/0x1f10 [ 127.602496][ T4090] ? __kasan_slab_alloc+0x72/0x80 [ 127.607496][ T4090] ? __cfi___vma_adjust+0x10/0x10 [ 127.612498][ T4090] ? rwsem_write_trylock+0x136/0x300 [ 127.617765][ T4090] __split_vma+0x725/0x980 [ 127.622179][ T4090] split_vma+0x7c/0xd0 [ 127.626228][ T4090] mprotect_fixup+0x4ce/0x940 [ 127.630878][ T4090] ? __cfi_mprotect_fixup+0x10/0x10 [ 127.636050][ T4090] ? security_file_mprotect+0x95/0xc0 [ 127.641397][ T4090] do_mprotect_pkey+0x80a/0xbe0 [ 127.646221][ T4090] ? prot_none_test+0x10/0x10 [ 127.650884][ T4090] ? vm_mmap_pgoff+0x14d/0x3f0 [ 127.655620][ T4090] ? __x64_sys_rt_sigprocmask+0xb0/0xb0 [ 127.661144][ T4090] ? debug_smp_processor_id+0x17/0x20 [ 127.666488][ T4090] __x64_sys_mprotect+0x80/0x90 [ 127.671311][ T4090] x64_sys_call+0x997/0x9a0 [ 127.675786][ T4090] do_syscall_64+0x4c/0xa0 [ 127.680173][ T4090] ? clear_bhb_loop+0x30/0x80 [ 127.684820][ T4090] ? clear_bhb_loop+0x30/0x80 [ 127.689470][ T4090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.695363][ T4090] RIP: 0033:0x7ff1d5b9ded7 [ 127.699751][ T4090] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.719325][ T4090] RSP: 002b:00007fffd19e9438 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 127.727714][ T4090] RAX: ffffffffffffffda RBX: 00007ff1d6af96c0 RCX: 00007ff1d5b9ded7 [ 127.735656][ T4090] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff1d6ada000 [ 127.743599][ T4090] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 127.751541][ T4090] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffd19e9590 [ 127.759482][ T4090] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 127.767432][ T4090] [ 127.771835][ T28] audit: type=1326 audit(1786396116.345:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 127.796507][ T28] audit: type=1326 audit(1786396116.345:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.2.1292" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 127.826005][ T103] FAULT_INJECTION: forcing a failure. [ 127.826005][ T103] name failslab, interval 1, probability 1, space 0, times 7 [ 127.850872][ T103] CPU: 0 PID: 103 Comm: udevd Not tainted syzkaller #0 [ 127.857721][ T103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.867749][ T103] Call Trace: [ 127.871003][ T103] [ 127.873910][ T103] __dump_stack+0x21/0x24 [ 127.878219][ T103] dump_stack_lvl+0x110/0x170 [ 127.882869][ T103] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.887866][ T103] ? putname+0x111/0x160 [ 127.892080][ T103] ? kmem_cache_free+0x12d/0x300 [ 127.896993][ T103] dump_stack+0x15/0x24 [ 127.901123][ T103] should_fail_ex+0x3bf/0x510 [ 127.905772][ T103] ? getname_flags+0xba/0x510 [ 127.910418][ T103] __should_failslab+0xac/0xf0 [ 127.915157][ T103] should_failslab+0x9/0x20 [ 127.919632][ T103] kmem_cache_alloc+0x3b/0x320 [ 127.924369][ T103] getname_flags+0xba/0x510 [ 127.928844][ T103] getname+0x19/0x20 [ 127.932711][ T103] do_sys_openat2+0xeb/0x820 [ 127.937277][ T103] ? do_sys_open+0xe0/0xe0 [ 127.941668][ T103] ? fput+0x15b/0x1a0 [ 127.945621][ T103] __x64_sys_openat+0x136/0x160 [ 127.950446][ T103] x64_sys_call+0x783/0x9a0 [ 127.954930][ T103] do_syscall_64+0x4c/0xa0 [ 127.959321][ T103] ? clear_bhb_loop+0x30/0x80 [ 127.963977][ T103] ? clear_bhb_loop+0x30/0x80 [ 127.968625][ T103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.974493][ T103] RIP: 0033:0x7f3010115c3a [ 127.978882][ T103] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 127.998460][ T103] RSP: 002b:00007ffd50db6468 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 128.006845][ T103] RAX: ffffffffffffffda RBX: 000055829b681660 RCX: 00007f3010115c3a [ 128.014789][ T103] RDX: 0000000000090800 RSI: 000055829b65fb30 RDI: 00000000ffffff9c [ 128.022740][ T103] RBP: 000055829b65fb30 R08: 0000000000000000 R09: 0000000000000000 [ 128.030685][ T103] R10: 0000000000000000 R11: 0000000000000206 R12: 000055829b66f160 [ 128.038648][ T103] R13: 00000000000000ff R14: 000055826238ebe0 R15: 00007ffd50db66f0 [ 128.046602][ T103] [ 128.049682][ C0] FAULT_INJECTION: forcing a failure. [ 128.049682][ C0] name failslab, interval 1, probability 1, space 0, times 7 [ 128.062258][ C0] CPU: 0 PID: 103 Comm: udevd Not tainted syzkaller #0 [ 128.069079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.079104][ C0] Call Trace: [ 128.082361][ C0] [ 128.085179][ C0] __dump_stack+0x21/0x24 [ 128.089489][ C0] dump_stack_lvl+0x110/0x170 [ 128.094138][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.099134][ C0] ? stack_trace_save+0xa6/0xf0 [ 128.103964][ C0] dump_stack+0x15/0x24 [ 128.108094][ C0] should_fail_ex+0x3bf/0x510 [ 128.112760][ C0] ? dst_alloc+0x16a/0x1e0 [ 128.117154][ C0] __should_failslab+0xac/0xf0 [ 128.121893][ C0] should_failslab+0x9/0x20 [ 128.126369][ C0] kmem_cache_alloc+0x3b/0x320 [ 128.131107][ C0] ? handle_softirqs+0x1d7/0x600 [ 128.136017][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 128.140669][ C0] ? __cfi_ip6_dst_gc+0x10/0x10 [ 128.145493][ C0] dst_alloc+0x16a/0x1e0 [ 128.149707][ C0] icmp6_dst_alloc+0xf8/0x510 [ 128.154361][ C0] ndisc_send_skb+0x2ad/0xcd0 [ 128.159008][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 128.164179][ C0] ? memcpy+0x56/0x70 [ 128.168133][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 128.173737][ C0] ndisc_send_rs+0x66a/0x870 [ 128.178317][ C0] addrconf_rs_timer+0x35a/0x600 [ 128.183228][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 128.188656][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 128.194174][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 128.199604][ C0] call_timer_fn+0x46/0x2a0 [ 128.204081][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 128.209511][ C0] __run_timers+0x646/0x9b0 [ 128.214076][ C0] ? calc_index+0x200/0x200 [ 128.218588][ C0] ? asm_common_interrupt+0x27/0x40 [ 128.223775][ C0] run_timer_softirq+0x6a/0xf0 [ 128.228536][ C0] handle_softirqs+0x1d7/0x600 [ 128.233289][ C0] __irq_exit_rcu+0x52/0xf0 [ 128.237788][ C0] irq_exit_rcu+0x9/0x10 [ 128.242024][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 128.247635][ C0] [ 128.250556][ C0] [ 128.253462][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 128.259428][ C0] RIP: 0010:dump_stack_lvl+0x144/0x170 [ 128.264863][ C0] Code: e6 00 02 00 00 31 ff e8 ea 56 77 fc 49 81 e5 00 02 00 00 75 07 e8 1c 52 77 fc eb 06 e8 15 52 77 fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 [ 128.284440][ C0] RSP: 0018:ffffc900009f7b80 EFLAGS: 00000293 [ 128.290479][ C0] RAX: ffffffff84fa142b RBX: ffffffff860afda0 RCX: ffff8881106a1440 [ 128.298436][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 128.306377][ C0] RBP: ffffc900009f7c08 R08: 0000000000000003 R09: 0000000000000004 [ 128.314322][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 128.322267][ C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff9200013ef70 [ 128.330213][ C0] ? dump_stack_lvl+0x13b/0x170 [ 128.335053][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.340051][ C0] ? putname+0x111/0x160 [ 128.344266][ C0] ? kmem_cache_free+0x12d/0x300 [ 128.349178][ C0] dump_stack+0x15/0x24 [ 128.353316][ C0] should_fail_ex+0x3bf/0x510 [ 128.357983][ C0] ? getname_flags+0xba/0x510 [ 128.362637][ C0] __should_failslab+0xac/0xf0 [ 128.367378][ C0] should_failslab+0x9/0x20 [ 128.371862][ C0] kmem_cache_alloc+0x3b/0x320 [ 128.376617][ C0] getname_flags+0xba/0x510 [ 128.381105][ C0] getname+0x19/0x20 [ 128.384976][ C0] do_sys_openat2+0xeb/0x820 [ 128.389566][ C0] ? do_sys_open+0xe0/0xe0 [ 128.393960][ C0] ? fput+0x15b/0x1a0 [ 128.397920][ C0] __x64_sys_openat+0x136/0x160 [ 128.402751][ C0] x64_sys_call+0x783/0x9a0 [ 128.407278][ C0] do_syscall_64+0x4c/0xa0 [ 128.411686][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.416344][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.421001][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.426874][ C0] RIP: 0033:0x7f3010115c3a [ 128.431264][ C0] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 128.450930][ C0] RSP: 002b:00007ffd50db6468 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 128.459315][ C0] RAX: ffffffffffffffda RBX: 000055829b681660 RCX: 00007f3010115c3a [ 128.467260][ C0] RDX: 0000000000090800 RSI: 000055829b65fb30 RDI: 00000000ffffff9c [ 128.475204][ C0] RBP: 000055829b65fb30 R08: 0000000000000000 R09: 0000000000000000 [ 128.483148][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000055829b66f160 [ 128.491094][ C0] R13: 00000000000000ff R14: 000055826238ebe0 R15: 00007ffd50db66f0 [ 128.499043][ C0] [ 128.502341][ C0] FAULT_INJECTION: forcing a failure. [ 128.502341][ C0] name failslab, interval 1, probability 1, space 0, times 6 [ 128.514934][ C0] CPU: 0 PID: 298 Comm: kworker/0:2 Not tainted syzkaller #0 [ 128.522276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.532303][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 128.538260][ C0] Call Trace: [ 128.541513][ C0] [ 128.544333][ C0] __dump_stack+0x21/0x24 [ 128.548639][ C0] dump_stack_lvl+0x110/0x170 [ 128.553289][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.558291][ C0] ? inet_gro_receive+0xcc5/0x1060 [ 128.563395][ C0] dump_stack+0x15/0x24 [ 128.567539][ C0] should_fail_ex+0x3bf/0x510 [ 128.572186][ C0] ? build_skb+0x2a/0x220 [ 128.576489][ C0] __should_failslab+0xac/0xf0 [ 128.581247][ C0] should_failslab+0x9/0x20 [ 128.585725][ C0] kmem_cache_alloc+0x3b/0x320 [ 128.590466][ C0] build_skb+0x2a/0x220 [ 128.594594][ C0] page_to_skb+0x12d/0xb50 [ 128.598987][ C0] receive_buf+0x469/0x4890 [ 128.603465][ C0] ? virtnet_poll_tx+0x550/0x550 [ 128.608376][ C0] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 128.614003][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 128.619435][ C0] ? detach_buf_split+0x890/0xa90 [ 128.624436][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 128.629364][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 128.634810][ C0] virtnet_poll+0x5c9/0x1150 [ 128.639380][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 128.644380][ C0] __napi_poll+0xcd/0x5d0 [ 128.648686][ C0] net_rx_action+0x4a3/0xa90 [ 128.653252][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 128.658336][ C0] handle_softirqs+0x1d7/0x600 [ 128.663071][ C0] __do_softirq+0xb/0xd [ 128.667198][ C0] do_softirq+0xdc/0x130 [ 128.671412][ C0] [ 128.674315][ C0] [ 128.677247][ C0] ? __cfi_do_softirq+0x10/0x10 [ 128.682073][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 128.686986][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 128.692416][ C0] ? __perf_event_task_sched_in+0x2ab/0x320 [ 128.698300][ C0] ? __kasan_check_read+0x11/0x20 [ 128.703316][ C0] __local_bh_enable_ip+0x75/0x80 [ 128.708316][ C0] _raw_spin_unlock_bh+0x50/0x60 [ 128.713247][ C0] addrconf_dad_work+0x28a/0x14a0 [ 128.718243][ C0] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 128.724543][ C0] ? __cfi_addrconf_dad_work+0x10/0x10 [ 128.729977][ C0] ? __schedule+0xbea/0x14b0 [ 128.734542][ C0] process_one_work+0x717/0xc30 [ 128.739390][ C0] worker_thread+0xa4d/0x11d0 [ 128.744041][ C0] kthread+0x281/0x320 [ 128.748102][ C0] ? __cfi_worker_thread+0x10/0x10 [ 128.753195][ C0] ? __cfi_kthread+0x10/0x10 [ 128.757761][ C0] ret_from_fork+0x1f/0x30 [ 128.762151][ C0] [ 128.771272][ T92] FAULT_INJECTION: forcing a failure. [ 128.771272][ T92] name failslab, interval 1, probability 1, space 0, times 4 [ 128.798639][ T92] CPU: 0 PID: 92 Comm: klogd Not tainted syzkaller #0 [ 128.805400][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.815442][ T92] Call Trace: [ 128.818694][ T92] [ 128.821606][ T92] __dump_stack+0x21/0x24 [ 128.825912][ T92] dump_stack_lvl+0x110/0x170 [ 128.830563][ T92] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.835563][ T92] dump_stack+0x15/0x24 [ 128.839693][ T92] should_fail_ex+0x3bf/0x510 [ 128.844341][ T92] __should_failslab+0xac/0xf0 [ 128.849079][ T92] should_failslab+0x9/0x20 [ 128.853553][ T92] kmem_cache_alloc_node+0x42/0x330 [ 128.858736][ T92] ? __alloc_skb+0xe8/0x4a0 [ 128.863210][ T92] ? __kasan_check_write+0x14/0x20 [ 128.868294][ T92] __alloc_skb+0xe8/0x4a0 [ 128.872599][ T92] alloc_skb_with_frags+0xa8/0x620 [ 128.877683][ T92] ? memcpy+0x56/0x70 [ 128.881643][ T92] sock_alloc_send_pskb+0x87f/0x9a0 [ 128.886818][ T92] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 128.892510][ T92] ? __kasan_check_write+0x14/0x20 [ 128.897590][ T92] ? _raw_spin_lock+0x94/0xf0 [ 128.902238][ T92] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.907407][ T92] unix_dgram_sendmsg+0x5c1/0x1710 [ 128.912492][ T92] ? selinux_socket_sendmsg+0x22f/0x340 [ 128.918011][ T92] ? __cfi_lockref_put_or_lock+0x10/0x10 [ 128.923635][ T92] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 128.929498][ T92] ? selinux_socket_unix_may_send+0x1e6/0x2c0 [ 128.935553][ T92] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 128.941077][ T92] ? security_socket_sendmsg+0x93/0xb0 [ 128.946509][ T92] __sys_sendto+0x4ac/0x660 [ 128.950988][ T92] ? __cfi___sys_sendto+0x10/0x10 [ 128.955982][ T92] ? security_unix_may_send+0x8c/0xb0 [ 128.961328][ T92] ? __sys_connect+0x267/0x460 [ 128.966063][ T92] __x64_sys_sendto+0xe5/0x100 [ 128.970798][ T92] x64_sys_call+0x83/0x9a0 [ 128.975190][ T92] do_syscall_64+0x4c/0xa0 [ 128.979580][ T92] ? clear_bhb_loop+0x30/0x80 [ 128.984243][ T92] ? clear_bhb_loop+0x30/0x80 [ 128.988896][ T92] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.994766][ T92] RIP: 0033:0x7fd0b96bf407 [ 128.999156][ T92] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.018737][ T92] RSP: 002b:00007ffdf6799c90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 129.027135][ T92] RAX: ffffffffffffffda RBX: 00007fd0b956fc80 RCX: 00007fd0b96bf407 [ 129.035078][ T92] RDX: 0000000000000053 RSI: 00007ffdf6799dd0 RDI: 0000000000000003 [ 129.043021][ T92] RBP: 00007ffdf679a200 R08: 0000000000000000 R09: 0000000000000000 [ 129.050966][ T92] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdf679a218 [ 129.058909][ T92] R13: 00007ffdf6799dd0 R14: 0000000000000038 R15: 00007ffdf6799dd0 [ 129.066856][ T92] [ 129.070620][ T4091] FAULT_INJECTION: forcing a failure. [ 129.070620][ T4091] name failslab, interval 1, probability 1, space 0, times 4 [ 129.093420][ T292] FAULT_INJECTION: forcing a failure. [ 129.093420][ T292] name failslab, interval 1, probability 1, space 0, times 2 [ 129.111894][ T3158] tipc: Disabling bearer [ 129.117403][ T4091] CPU: 0 PID: 4091 Comm: syz.6.1321 Not tainted syzkaller #0 [ 129.124763][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.134792][ T4091] Call Trace: [ 129.138045][ T4091] [ 129.140949][ T4091] __dump_stack+0x21/0x24 [ 129.145255][ T4091] dump_stack_lvl+0x110/0x170 [ 129.149906][ T4091] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.154905][ T4091] ? get_page_from_freelist+0x2ca9/0x2d20 [ 129.160602][ T4091] dump_stack+0x15/0x24 [ 129.164730][ T4091] should_fail_ex+0x3bf/0x510 [ 129.169380][ T4091] __should_failslab+0xac/0xf0 [ 129.174120][ T4091] should_failslab+0x9/0x20 [ 129.178598][ T4091] kmem_cache_alloc_node+0x42/0x330 [ 129.183770][ T4091] ? dup_task_struct+0x5a/0x7e0 [ 129.188592][ T4091] dup_task_struct+0x5a/0x7e0 [ 129.193240][ T4091] ? __kasan_check_write+0x14/0x20 [ 129.198339][ T4091] copy_process+0x5e7/0x3500 [ 129.202902][ T4091] ? __alloc_pages+0x610/0x610 [ 129.207640][ T4091] ? __cfi_gfp_zone+0x10/0x10 [ 129.212309][ T4091] ? cgroup_rstat_updated+0xf0/0x360 [ 129.217567][ T4091] ? cgroup_rstat_updated+0xf0/0x360 [ 129.222828][ T4091] ? idle_dummy+0x10/0x10 [ 129.227132][ T4091] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 129.232929][ T4091] kernel_clone+0x22f/0x7f0 [ 129.237408][ T4091] ? __delayed_free_task+0x20/0x20 [ 129.242493][ T4091] ? __cfi_kernel_clone+0x10/0x10 [ 129.247507][ T4091] __x64_sys_clone3+0x2ce/0x360 [ 129.252368][ T4091] ? __kasan_check_write+0x14/0x20 [ 129.257477][ T4091] ? __cfi___x64_sys_clone3+0x10/0x10 [ 129.262838][ T4091] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 129.268888][ T4091] x64_sys_call+0x4ce/0x9a0 [ 129.273376][ T4091] do_syscall_64+0x4c/0xa0 [ 129.277787][ T4091] ? clear_bhb_loop+0x30/0x80 [ 129.282438][ T4091] ? clear_bhb_loop+0x30/0x80 [ 129.287089][ T4091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.292961][ T4091] RIP: 0033:0x7f30b039eec9 [ 129.297348][ T4091] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 129.316949][ T4091] RSP: 002b:00007ffd4b791878 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 129.325335][ T4091] RAX: ffffffffffffffda RBX: 00007f30b035a460 RCX: 00007f30b039eec9 [ 129.333540][ T4091] RDX: 00007f30b035a460 RSI: 0000000000000058 RDI: 00007ffd4b7918d0 [ 129.341486][ T4091] RBP: 00007f30b13156c0 R08: 00007f30b13156c0 R09: 00007ffd4b7919b7 [ 129.349444][ T4091] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 129.357388][ T4091] R13: 000000000000006e R14: 00007ffd4b7918d0 R15: 00007ffd4b7919b8 [ 129.365348][ T4091] [ 129.368442][ C0] FAULT_INJECTION: forcing a failure. [ 129.368442][ C0] name failslab, interval 1, probability 1, space 0, times 2 [ 129.381038][ C0] CPU: 0 PID: 4091 Comm: syz.6.1321 Not tainted syzkaller #0 [ 129.388411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.398442][ C0] Call Trace: [ 129.401710][ C0] [ 129.404534][ C0] __dump_stack+0x21/0x24 [ 129.408845][ C0] dump_stack_lvl+0x110/0x170 [ 129.413503][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.418500][ C0] dump_stack+0x15/0x24 [ 129.422626][ C0] should_fail_ex+0x3bf/0x510 [ 129.427277][ C0] __should_failslab+0xac/0xf0 [ 129.432021][ C0] should_failslab+0x9/0x20 [ 129.436496][ C0] kmem_cache_alloc_node+0x42/0x330 [ 129.441669][ C0] ? __alloc_skb+0xe8/0x4a0 [ 129.446145][ C0] __alloc_skb+0xe8/0x4a0 [ 129.450466][ C0] ndisc_send_rs+0x31d/0x870 [ 129.455029][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 129.459956][ C0] addrconf_rs_timer+0x35a/0x600 [ 129.464868][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 129.470299][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 129.475297][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 129.480814][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 129.487029][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 129.492458][ C0] call_timer_fn+0x46/0x2a0 [ 129.496937][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 129.502367][ C0] __run_timers+0x646/0x9b0 [ 129.506846][ C0] ? calc_index+0x200/0x200 [ 129.511326][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 129.516502][ C0] run_timer_softirq+0x6a/0xf0 [ 129.521238][ C0] handle_softirqs+0x1d7/0x600 [ 129.525977][ C0] __irq_exit_rcu+0x52/0xf0 [ 129.530454][ C0] irq_exit_rcu+0x9/0x10 [ 129.534673][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 129.540285][ C0] [ 129.543206][ C0] [ 129.546111][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 129.552066][ C0] RIP: 0010:dump_stack_lvl+0x144/0x170 [ 129.557498][ C0] Code: e6 00 02 00 00 31 ff e8 ea 56 77 fc 49 81 e5 00 02 00 00 75 07 e8 1c 52 77 fc eb 06 e8 15 52 77 fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 [ 129.577084][ C0] RSP: 0018:ffffc90001cd7860 EFLAGS: 00000293 [ 129.583142][ C0] RAX: ffffffff84fa142b RBX: ffffffff860afda0 RCX: ffff8881196f6540 [ 129.591113][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 129.599058][ C0] RBP: ffffc90001cd7900 R08: 0000000000000003 R09: 0000000000000004 [ 129.607000][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 129.614948][ C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff9200039af0c [ 129.622892][ C0] ? dump_stack_lvl+0x13b/0x170 [ 129.627722][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.632721][ C0] ? get_page_from_freelist+0x2ca9/0x2d20 [ 129.638417][ C0] dump_stack+0x15/0x24 [ 129.642545][ C0] should_fail_ex+0x3bf/0x510 [ 129.647194][ C0] __should_failslab+0xac/0xf0 [ 129.651930][ C0] should_failslab+0x9/0x20 [ 129.656404][ C0] kmem_cache_alloc_node+0x42/0x330 [ 129.661576][ C0] ? dup_task_struct+0x5a/0x7e0 [ 129.666403][ C0] dup_task_struct+0x5a/0x7e0 [ 129.671066][ C0] ? __kasan_check_write+0x14/0x20 [ 129.676167][ C0] copy_process+0x5e7/0x3500 [ 129.680739][ C0] ? __alloc_pages+0x610/0x610 [ 129.685481][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 129.690131][ C0] ? cgroup_rstat_updated+0xf0/0x360 [ 129.695420][ C0] ? cgroup_rstat_updated+0xf0/0x360 [ 129.700675][ C0] ? idle_dummy+0x10/0x10 [ 129.704999][ C0] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 129.710778][ C0] kernel_clone+0x22f/0x7f0 [ 129.715256][ C0] ? __delayed_free_task+0x20/0x20 [ 129.720354][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 129.725353][ C0] __x64_sys_clone3+0x2ce/0x360 [ 129.730197][ C0] ? __kasan_check_write+0x14/0x20 [ 129.735278][ C0] ? __cfi___x64_sys_clone3+0x10/0x10 [ 129.740627][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 129.746668][ C0] x64_sys_call+0x4ce/0x9a0 [ 129.751146][ C0] do_syscall_64+0x4c/0xa0 [ 129.755538][ C0] ? clear_bhb_loop+0x30/0x80 [ 129.760201][ C0] ? clear_bhb_loop+0x30/0x80 [ 129.764848][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.770718][ C0] RIP: 0033:0x7f30b039eec9 [ 129.775105][ C0] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 129.794689][ C0] RSP: 002b:00007ffd4b791878 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 129.803076][ C0] RAX: ffffffffffffffda RBX: 00007f30b035a460 RCX: 00007f30b039eec9 [ 129.811020][ C0] RDX: 00007f30b035a460 RSI: 0000000000000058 RDI: 00007ffd4b7918d0 [ 129.818965][ C0] RBP: 00007f30b13156c0 R08: 00007f30b13156c0 R09: 00007ffd4b7919b7 [ 129.826912][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 129.834854][ C0] R13: 000000000000006e R14: 00007ffd4b7918d0 R15: 00007ffd4b7919b8 [ 129.842800][ C0] [ 129.846070][ C0] FAULT_INJECTION: forcing a failure. [ 129.846070][ C0] name failslab, interval 1, probability 1, space 0, times 1 [ 129.858649][ C0] CPU: 0 PID: 4091 Comm: syz.6.1321 Not tainted syzkaller #0 [ 129.865989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.876016][ C0] Call Trace: [ 129.879268][ C0] [ 129.882089][ C0] __dump_stack+0x21/0x24 [ 129.886400][ C0] dump_stack_lvl+0x110/0x170 [ 129.891049][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.896044][ C0] ? __kmem_cache_free+0xb7/0x1b0 [ 129.901043][ C0] dump_stack+0x15/0x24 [ 129.905172][ C0] should_fail_ex+0x3bf/0x510 [ 129.909822][ C0] __should_failslab+0xac/0xf0 [ 129.914560][ C0] should_failslab+0x9/0x20 [ 129.919036][ C0] kmem_cache_alloc_node+0x42/0x330 [ 129.924208][ C0] ? __alloc_skb+0xe8/0x4a0 [ 129.928682][ C0] __alloc_skb+0xe8/0x4a0 [ 129.932983][ C0] __pskb_copy_fclone+0xa7/0xf60 [ 129.937892][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 129.943236][ C0] tipc_udp_send_msg+0x224/0x340 [ 129.948146][ C0] tipc_bearer_xmit_skb+0x28e/0x380 [ 129.953319][ C0] ? __kasan_check_write+0x14/0x20 [ 129.958400][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 129.964091][ C0] tipc_disc_timeout+0x70c/0x8b0 [ 129.969010][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 129.974442][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 129.980224][ C0] ? __kasan_check_write+0x14/0x20 [ 129.985306][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 129.990307][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 129.995823][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 130.001257][ C0] call_timer_fn+0x46/0x2a0 [ 130.005732][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 130.011165][ C0] __run_timers+0x646/0x9b0 [ 130.015645][ C0] ? calc_index+0x200/0x200 [ 130.020120][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 130.025296][ C0] run_timer_softirq+0x6a/0xf0 [ 130.030033][ C0] handle_softirqs+0x1d7/0x600 [ 130.034768][ C0] __irq_exit_rcu+0x52/0xf0 [ 130.039239][ C0] irq_exit_rcu+0x9/0x10 [ 130.043449][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 130.049058][ C0] [ 130.051961][ C0] [ 130.054865][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 130.060820][ C0] RIP: 0010:dump_stack_lvl+0x144/0x170 [ 130.066252][ C0] Code: e6 00 02 00 00 31 ff e8 ea 56 77 fc 49 81 e5 00 02 00 00 75 07 e8 1c 52 77 fc eb 06 e8 15 52 77 fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 [ 130.085931][ C0] RSP: 0018:ffffc90001cd7860 EFLAGS: 00000293 [ 130.091986][ C0] RAX: ffffffff84fa142b RBX: ffffffff860afda0 RCX: ffff8881196f6540 [ 130.099929][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 130.107873][ C0] RBP: ffffc90001cd7900 R08: 0000000000000003 R09: 0000000000000004 [ 130.115833][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 130.123778][ C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff9200039af0c [ 130.131721][ C0] ? dump_stack_lvl+0x13b/0x170 [ 130.136548][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.141548][ C0] ? get_page_from_freelist+0x2ca9/0x2d20 [ 130.147243][ C0] dump_stack+0x15/0x24 [ 130.151371][ C0] should_fail_ex+0x3bf/0x510 [ 130.156019][ C0] __should_failslab+0xac/0xf0 [ 130.160758][ C0] should_failslab+0x9/0x20 [ 130.165233][ C0] kmem_cache_alloc_node+0x42/0x330 [ 130.170404][ C0] ? dup_task_struct+0x5a/0x7e0 [ 130.175226][ C0] dup_task_struct+0x5a/0x7e0 [ 130.179888][ C0] ? __kasan_check_write+0x14/0x20 [ 130.184986][ C0] copy_process+0x5e7/0x3500 [ 130.189639][ C0] ? __alloc_pages+0x610/0x610 [ 130.194377][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 130.199027][ C0] ? cgroup_rstat_updated+0xf0/0x360 [ 130.204284][ C0] ? cgroup_rstat_updated+0xf0/0x360 [ 130.209546][ C0] ? idle_dummy+0x10/0x10 [ 130.213853][ C0] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 130.219717][ C0] kernel_clone+0x22f/0x7f0 [ 130.224197][ C0] ? __delayed_free_task+0x20/0x20 [ 130.229366][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 130.234390][ C0] __x64_sys_clone3+0x2ce/0x360 [ 130.239221][ C0] ? __kasan_check_write+0x14/0x20 [ 130.244306][ C0] ? __cfi___x64_sys_clone3+0x10/0x10 [ 130.249655][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 130.255697][ C0] x64_sys_call+0x4ce/0x9a0 [ 130.260171][ C0] do_syscall_64+0x4c/0xa0 [ 130.264559][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.269205][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.273885][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.279770][ C0] RIP: 0033:0x7f30b039eec9 [ 130.284170][ C0] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 130.303776][ C0] RSP: 002b:00007ffd4b791878 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 130.312186][ C0] RAX: ffffffffffffffda RBX: 00007f30b035a460 RCX: 00007f30b039eec9 [ 130.320132][ C0] RDX: 00007f30b035a460 RSI: 0000000000000058 RDI: 00007ffd4b7918d0 [ 130.328078][ C0] RBP: 00007f30b13156c0 R08: 00007f30b13156c0 R09: 00007ffd4b7919b7 [ 130.336038][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 130.343994][ C0] R13: 000000000000006e R14: 00007ffd4b7918d0 R15: 00007ffd4b7919b8 [ 130.351952][ C0] [ 130.369455][ T292] CPU: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 [ 130.376922][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.386958][ T292] Call Trace: [ 130.390221][ T292] [ 130.393133][ T292] __dump_stack+0x21/0x24 [ 130.397439][ T292] dump_stack_lvl+0x110/0x170 [ 130.402090][ T292] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.407092][ T292] dump_stack+0x15/0x24 [ 130.411221][ T292] should_fail_ex+0x3bf/0x510 [ 130.415869][ T292] ? security_file_alloc+0x33/0x130 [ 130.421042][ T292] __should_failslab+0xac/0xf0 [ 130.425805][ T292] should_failslab+0x9/0x20 [ 130.430284][ T292] kmem_cache_alloc+0x3b/0x320 [ 130.435035][ T292] ? __alloc_file+0x28/0x2a0 [ 130.439609][ T292] security_file_alloc+0x33/0x130 [ 130.444608][ T292] __alloc_file+0xb5/0x2a0 [ 130.448998][ T292] alloc_empty_file+0x97/0x180 [ 130.453739][ T292] alloc_file+0x59/0x600 [ 130.457953][ T292] ? _raw_spin_unlock+0x4c/0x70 [ 130.462778][ T292] alloc_file_pseudo+0x180/0x200 [ 130.467686][ T292] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 130.473120][ T292] ? _raw_spin_unlock+0x4c/0x70 [ 130.477941][ T292] ? alloc_fd+0x4c1/0x570 [ 130.482243][ T292] sock_alloc_file+0xba/0x270 [ 130.486895][ T292] __sys_socket+0x138/0x1a0 [ 130.491368][ T292] __x64_sys_socket+0x7a/0x90 [ 130.496016][ T292] x64_sys_call+0x449/0x9a0 [ 130.500490][ T292] do_syscall_64+0x4c/0xa0 [ 130.504890][ T292] ? clear_bhb_loop+0x30/0x80 [ 130.509537][ T292] ? clear_bhb_loop+0x30/0x80 [ 130.514186][ T292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.520058][ T292] RIP: 0033:0x7ff1d5b9f947 [ 130.524445][ T292] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.544019][ T292] RSP: 002b:00007fffd19e9108 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 130.552408][ T292] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007ff1d5b9f947 [ 130.560350][ T292] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 130.568292][ T292] RBP: 00007fffd19e983c R08: 0000000000000000 R09: 0000000000000000 [ 130.576234][ T292] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ff1d5dede00 [ 130.584176][ T292] R13: 00000000000927c0 R14: 000000000001ecf5 R15: 00007ff1d5deffc0 [ 130.592123][ T292] [ 130.651711][ T4103] device veth1_to_bond entered promiscuous mode [ 132.307867][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.323122][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.338183][ T4107] device bridge_slave_0 entered promiscuous mode [ 132.352274][ T4107] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.368488][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.382971][ T4107] device bridge_slave_1 entered promiscuous mode [ 132.390400][ T4116] loop2: detected capacity change from 0 to 2048 [ 132.454440][ T4116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.528754][ T332] udevd[332]: incorrect ext4 checksum on /dev/loop2 [ 132.542033][ T4116] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1332: Unrecognised inode hash code 20 [ 132.562711][ T4107] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.569749][ T4107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.576983][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.583988][ T4107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.601850][ T4116] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1332: Corrupt directory, running e2fsck is recommended [ 132.632659][ T332] udevd[332]: incorrect ext4 checksum on /dev/loop2 [ 132.651776][ T291] EXT4-fs (loop2): unmounting filesystem. [ 132.701310][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.711718][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.729127][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.753252][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.804831][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.841687][ T2651] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.848712][ T2651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.952986][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 132.962895][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.001112][ T2651] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.008154][ T2651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.015969][ T4138] ip_tables: iptables: counters copy to user failed while replacing table [ 133.042162][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.072879][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.102097][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.116439][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.143282][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.160210][ T4107] device veth0_vlan entered promiscuous mode [ 133.177404][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.192049][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.222850][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.234359][ T4138] ip_tables: iptables: counters copy to user failed while replacing table [ 133.267408][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.275443][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.301244][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.319144][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.338921][ T4107] device veth1_macvtap entered promiscuous mode [ 133.355737][ T4137] ip_tables: iptables: counters copy to user failed while replacing table [ 133.381621][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.411214][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.450986][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.491147][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.524801][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.552169][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.579420][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.606151][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.632103][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.728047][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.751842][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.777076][ T4139] device bridge_slave_0 entered promiscuous mode [ 133.799129][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1345'. [ 133.842148][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.857879][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.882253][ T4139] device bridge_slave_1 entered promiscuous mode [ 134.057225][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 134.057236][ T28] audit: type=1400 audit(1786396125.895:594): avc: denied { name_bind } for pid=4167 comm="syz.5.1347" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 134.095545][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'. [ 134.164391][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.183267][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.213116][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.222704][ T28] audit: type=1400 audit(1786396126.065:595): avc: denied { accept } for pid=4169 comm="syz.5.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.261254][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.287382][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.294434][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.349763][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.373251][ T4177] loop2: detected capacity change from 0 to 512 [ 134.389828][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.420378][ T4177] EXT4-fs (loop2): 1 truncate cleaned up [ 134.431577][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.438615][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.447038][ T4177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.484477][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1348'. [ 134.500441][ T4171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1348'. [ 134.528309][ T4139] device veth0_vlan entered promiscuous mode [ 134.536739][ T291] EXT4-fs (loop2): unmounting filesystem. [ 134.612965][ T28] audit: type=1400 audit(1786396126.450:596): avc: denied { connect } for pid=4187 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.637861][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.677902][ T4191] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.685850][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.720607][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.741854][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.752736][ T4194] loop2: detected capacity change from 0 to 512 [ 134.778203][ T4194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.802596][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.841756][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.851457][ T4194] EXT4-fs (loop2): can't mount with commit=4194313, fs mounted w/o journal [ 134.883327][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.926397][ T4139] device veth1_macvtap entered promiscuous mode [ 134.965538][ T4200] loop2: detected capacity change from 0 to 512 [ 134.982535][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.027325][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.052504][ T332] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.063242][ T4200] loop2: detected capacity change from 0 to 256 [ 135.090650][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.121602][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.170602][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.414468][ T4202] loop6: detected capacity change from 0 to 40427 [ 135.441828][ T4202] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 135.455051][ T4219] xt_hashlimit: size too large, truncated to 1048576 [ 135.471126][ T4202] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 135.518419][ T4202] F2FS-fs (loop6): invalid crc value [ 135.554678][ T4202] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 135.583254][ T28] audit: type=1400 audit(1786396127.420:597): avc: denied { map } for pid=4196 comm="syz.0.1357" path="socket:[34494]" dev="sockfs" ino=34494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.665968][ T4202] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 135.694137][ T4202] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 135.701992][ T28] audit: type=1400 audit(1786396127.450:598): avc: denied { read accept } for pid=4196 comm="syz.0.1357" path="socket:[34494]" dev="sockfs" ino=34494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.778883][ T4228] device syzkaller0 entered promiscuous mode [ 136.122249][ T4241] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 137.829310][ T4253] loop0: detected capacity change from 0 to 512 [ 137.867267][ T4253] EXT4-fs (loop0): Test dummy encryption mode enabled [ 137.903267][ T4253] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1375: inode has both inline data and extents flags [ 137.973003][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1376'. [ 138.024102][ T4253] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1375: couldn't read orphan inode 15 (err -117) [ 138.057205][ T4243] loop4: detected capacity change from 0 to 40427 [ 138.098573][ T4253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.112633][ T4243] F2FS-fs (loop4): invalid crc value [ 138.151468][ T4243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.249033][ T4243] F2FS-fs (loop4): Start checkpoint disabled! [ 138.286176][ T4243] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 138.329703][ T4243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 138.337821][ T4107] EXT4-fs (loop0): unmounting filesystem. [ 138.452876][ T4275] input: syz0 as /devices/virtual/input/input8 [ 138.543415][ T28] audit: type=1400 audit(2000000000.240:599): avc: denied { create } for pid=4279 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.594926][ T2945] kworker/u4:144: attempt to access beyond end of device [ 138.594926][ T2945] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 139.672262][ T4291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1386'. [ 139.752338][ T4298] loop0: detected capacity change from 0 to 256 [ 139.792398][ T4298] FAT-fs (loop0): Directory bread(block 64) failed [ 139.819125][ T4298] FAT-fs (loop0): Directory bread(block 65) failed [ 139.847524][ T4298] FAT-fs (loop0): Directory bread(block 66) failed [ 139.884611][ T4298] FAT-fs (loop0): Directory bread(block 67) failed [ 139.913901][ T4298] FAT-fs (loop0): Directory bread(block 68) failed [ 139.940823][ T4298] FAT-fs (loop0): Directory bread(block 69) failed [ 139.970472][ T4298] FAT-fs (loop0): Directory bread(block 70) failed [ 140.001536][ T4298] FAT-fs (loop0): Directory bread(block 71) failed [ 140.074161][ T4298] FAT-fs (loop0): Directory bread(block 72) failed [ 140.080673][ T4298] FAT-fs (loop0): Directory bread(block 73) failed [ 140.633954][ T4298] syz.0.1390: attempt to access beyond end of device [ 140.633954][ T4298] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 140.693165][ T4298] syz.0.1390: attempt to access beyond end of device [ 140.693165][ T4298] loop0: rw=524288, sector=1224, nr_sectors = 4 limit=256 [ 140.750932][ T4298] syz.0.1390: attempt to access beyond end of device [ 140.750932][ T4298] loop0: rw=0, sector=1224, nr_sectors = 4 limit=256 [ 140.847721][ T4313] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.290932][ T28] audit: type=1400 audit(2000000002.980:600): avc: denied { getopt } for pid=4330 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.319151][ T4331] loop0: detected capacity change from 0 to 2048 [ 141.406439][ T28] audit: type=1400 audit(2000000003.010:601): avc: denied { create } for pid=4330 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 141.430280][ T4331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.465319][ T4331] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.642662][ T4336] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1402: bg 0: block 345: padding at end of block bitmap is not set [ 141.728161][ T4336] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 811 with error 28 [ 141.792703][ T4336] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.792703][ T4336] [ 141.841796][ T4311] loop4: detected capacity change from 0 to 131072 [ 141.858454][ T4336] EXT4-fs (loop0): Total free blocks count 0 [ 141.875035][ T4336] EXT4-fs (loop0): Free/Dirty block details [ 141.884458][ T4311] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 141.919939][ T4336] EXT4-fs (loop0): free_blocks=0 [ 141.935613][ T4311] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 141.950419][ T4336] EXT4-fs (loop0): dirty_blocks=816 [ 141.981069][ T4336] EXT4-fs (loop0): Block reservation details [ 141.989274][ T4311] F2FS-fs (loop4): invalid crc value [ 142.009882][ T4336] EXT4-fs (loop0): i_reserved_data_blocks=51 [ 142.026808][ T4311] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.075174][ T2654] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 827 with max blocks 1 with error 28 [ 142.137136][ T4311] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.164709][ T4311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 142.847811][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 143.493749][ T4384] loop0: detected capacity change from 0 to 512 [ 143.529200][ T4384] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.591095][ T4384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 143.631049][ T4384] System zones: 1-12 [ 143.635228][ T4384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.682612][ T4384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1419: bg 0: block 361: padding at end of block bitmap is not set [ 143.751158][ T4384] EXT4-fs (loop0): Remounting filesystem read-only [ 143.793872][ T4384] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 143.803384][ T4389] netlink: 'syz.5.1421': attribute type 4 has an invalid length. [ 143.841157][ T4384] EXT4-fs (loop0): Remounting filesystem read-only [ 143.847656][ T4384] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1419: invalid indirect mapped block 12 (level 1) [ 143.861770][ T4389] netlink: 'syz.5.1421': attribute type 4 has an invalid length. [ 143.931169][ T4384] EXT4-fs (loop0): Remounting filesystem read-only [ 143.937688][ T4384] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1419: invalid indirect mapped block 2 (level 2) [ 144.022877][ T4384] EXT4-fs (loop0): Remounting filesystem read-only [ 144.063977][ T4384] EXT4-fs (loop0): 1 truncate cleaned up [ 144.069766][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.519124][ T4401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1419'. [ 144.538680][ T4378] loop2: detected capacity change from 0 to 131072 [ 144.563097][ T4378] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 144.617841][ T4378] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.656733][ T4378] F2FS-fs (loop2): invalid crc value [ 144.690500][ T4378] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.771464][ T4107] EXT4-fs (loop0): unmounting filesystem. [ 144.784467][ T4378] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.818200][ T4378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 147.540243][ T28] audit: type=1400 audit(2000000009.230:602): avc: denied { write } for pid=4453 comm="syz.2.1435" name="file2" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.605751][ T28] audit: type=1400 audit(2000000009.260:603): avc: denied { open } for pid=4453 comm="syz.2.1435" path="/270/file2" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.683644][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 147.704017][ T28] audit: type=1400 audit(2000000009.260:604): avc: denied { read } for pid=4453 comm="syz.2.1435" name="file2" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.754148][ T4457] net_ratelimit: 1 callbacks suppressed [ 147.754181][ T4457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.777746][ T4463] binder: 4461:4463 unknown command 0 [ 147.789598][ T4463] binder: 4461:4463 ioctl c0306201 200000000080 returned -22 [ 147.849767][ T28] audit: type=1400 audit(2000000009.260:605): avc: denied { ioctl } for pid=4453 comm="syz.2.1435" path="/270/file2" dev="tmpfs" ino=1507 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.902360][ T4469] fuse: Bad value for 'fd' [ 147.964295][ T4472] device syzkaller0 entered promiscuous mode [ 149.675175][ T4481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1454'. [ 149.738522][ T4489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4489 comm=syz.5.1454 [ 149.830947][ T4493] tun0: tun_chr_ioctl cmd 1074025680 [ 149.867868][ T4481] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1454'. [ 149.972800][ T28] audit: type=1400 audit(2000000011.670:606): avc: denied { override_creds } for pid=4502 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.289615][ T4501] loop2: detected capacity change from 0 to 40427 [ 150.348041][ T4501] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 150.385620][ T4501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 150.422895][ T4501] F2FS-fs (loop2): invalid crc value [ 150.451128][ T4501] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.531186][ T4501] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 150.562812][ T4501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.571130][ T3888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.616490][ T4501] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 150.768142][ T28] audit: type=1326 audit(2000000012.460:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.1466" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 150.793845][ T3888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.823171][ T3888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.850470][ T3888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.870440][ T28] audit: type=1326 audit(2000000012.490:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.1466" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 150.903756][ T3888] usb 5-1: config 0 descriptor?? [ 150.961486][ T28] audit: type=1326 audit(2000000012.500:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.1466" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 151.017624][ T28] audit: type=1326 audit(2000000012.500:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.1466" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 151.074951][ T4523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 151.097927][ T28] audit: type=1326 audit(2000000012.500:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.2.1466" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efe19e0d9 code=0x7ffc0000 [ 152.612391][ T4545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.648937][ T4545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.690853][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 152.762107][ T4550] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1475'. [ 152.911445][ T4559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.918672][ T4559] IPv6: NLM_F_CREATE should be set when creating new route [ 153.039784][ T4571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.047027][ T4571] IPv6: NLM_F_CREATE should be set when creating new route [ 153.163555][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.170722][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.561032][ T309] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.775657][ T28] kauditd_printk_skb: 3976 callbacks suppressed [ 153.775668][ T28] audit: type=1326 audit(2000000015.470:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.1487" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2efe19e0d9 code=0x0 [ 154.767063][ T309] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 154.905848][ T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.944240][ T309] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.979961][ T309] usb 1-1: config 1 has no interface number 1 [ 155.004372][ T309] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.063481][ T309] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.096656][ T4599] Bluetooth: ISO socket layer initialized [ 155.123837][ T28] audit: type=1400 audit(2000000016.820:4589): avc: denied { accept } for pid=4598 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.158069][ T3888] usb 5-1: USB disconnect, device number 5 [ 155.165432][ T309] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.256236][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.274467][ T28] audit: type=1400 audit(2000000016.840:4590): avc: denied { create } for pid=4600 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.765194][ T309] usb 1-1: Product: syz [ 156.775793][ T309] usb 1-1: Manufacturer: syz [ 156.846634][ T309] usb 1-1: SerialNumber: syz [ 156.882884][ T309] usb 1-1: can't set config #1, error -71 [ 156.923065][ T309] usb 1-1: USB disconnect, device number 3 [ 157.254181][ T28] audit: type=1326 audit(2000000018.950:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.1501" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f191799e0d9 code=0x0 [ 157.404517][ T4612] loop0: detected capacity change from 0 to 40427 [ 157.429781][ T4630] netlink: 'syz.5.1499': attribute type 32 has an invalid length. [ 157.453950][ T4612] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 157.498456][ T4612] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.538168][ T4612] F2FS-fs (loop0): invalid crc value [ 157.570625][ T4612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.668832][ T4612] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 157.701044][ T4612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.735298][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 159.511602][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'. [ 160.288053][ T28] audit: type=1400 audit(2000000021.980:4592): avc: denied { write } for pid=4690 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.310255][ T4691] loop0: detected capacity change from 0 to 512 [ 160.339548][ T4691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.356060][ T4691] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.397987][ T4107] EXT4-fs (loop0): unmounting filesystem. [ 162.661570][ T4709] loop4: detected capacity change from 0 to 512 [ 162.705348][ T4709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.822938][ T4709] EXT4-fs (loop4): 1 truncate cleaned up [ 162.828607][ T4709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.895168][ T4709] bridge0: port 3(veth0_vlan) entered blocking state [ 162.938532][ T4709] bridge0: port 3(veth0_vlan) entered disabled state [ 162.947744][ T4709] bridge0: port 3(veth0_vlan) entered blocking state [ 162.954437][ T4709] bridge0: port 3(veth0_vlan) entered forwarding state [ 162.972734][ T4727] xt_hashlimit: size too large, truncated to 1048576 [ 163.012175][ T4139] EXT4-fs (loop4): unmounting filesystem. [ 163.028818][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1532'. [ 163.072748][ T4730] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1532'. [ 163.086790][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 163.201036][ T298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.333465][ T4743] loop2: detected capacity change from 0 to 128 [ 163.399200][ T4745] loop2: detected capacity change from 0 to 4096 [ 163.406621][ T298] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 163.431665][ T4745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.441031][ T298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.471574][ T298] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 163.493477][ T298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.511195][ T298] usb 1-1: Product: syz [ 163.519161][ T298] usb 1-1: Manufacturer: syz [ 163.528034][ T298] usb 1-1: SerialNumber: syz [ 163.562742][ T291] EXT4-fs (loop2): unmounting filesystem. [ 163.743825][ T298] usb 1-1: unit 47 not found! [ 163.755021][ T298] usb 1-1: unit 102 not found! [ 163.778189][ T298] usb 1-1: USB disconnect, device number 4 [ 164.273451][ T4762] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1542'. [ 164.282529][ T4762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 164.479919][ T4765] loop4: detected capacity change from 0 to 512 [ 164.505322][ T4765] EXT4-fs (loop4): 1 orphan inode deleted [ 164.558616][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.599058][ T4765] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.672302][ T28] audit: type=1400 audit(2000000026.370:4593): avc: denied { unlink } for pid=4764 comm="syz.4.1543" name="#27" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.771525][ T4139] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 164.797461][ T4775] netlink: 'syz.0.1547': attribute type 16 has an invalid length. [ 164.815677][ T4775] netlink: 'syz.0.1547': attribute type 17 has an invalid length. [ 164.832226][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 164.841369][ T4139] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 164.867197][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 164.882356][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 164.895674][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 164.909848][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 164.926129][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 164.934734][ T4139] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 164.962952][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 164.978788][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 164.992860][ T4139] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.013852][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 165.030324][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 165.046097][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 165.054782][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 165.073683][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 165.086232][ T4139] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.111344][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 165.128099][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.143520][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.152949][ T4139] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.177854][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 165.195305][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wg0: link becomes ready [ 165.207563][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 165.223470][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 165.239457][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 165.248620][ T4139] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.281883][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): xfrm0: link becomes ready [ 165.299046][ T4775] device veth0_vlan left promiscuous mode [ 165.308299][ T4139] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.331256][ T4775] device veth0_vlan entered promiscuous mode [ 165.344072][ T4775] device veth1_macvtap left promiscuous mode [ 165.357658][ T4775] device veth1_macvtap entered promiscuous mode [ 165.366186][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 165.397319][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): syztnl1: link becomes ready [ 165.426185][ T4139] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.449805][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.471741][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.499437][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.538270][ T4139] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 165.575572][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.582613][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.671121][ T4794] loop0: detected capacity change from 0 to 256 [ 165.683587][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.086094][ T4794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 166.102409][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 166.117120][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.145433][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 166.159589][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.166643][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.215100][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 166.235937][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.268989][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 166.280748][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 166.312438][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.356957][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 166.383974][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 166.399262][ T4139] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 167.739881][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.754254][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.779224][ T4809] loop0: detected capacity change from 0 to 128 [ 167.944724][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.970120][ T28] audit: type=1400 audit(2000000029.660:4594): avc: denied { mounton } for pid=4808 comm="syz.0.1559" path="/50/file1/file0" dev="loop0" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 168.000712][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.028279][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.037155][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.078713][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.156015][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.164596][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.172973][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.181094][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.189182][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.197195][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.682877][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.691710][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.699935][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.707935][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.715794][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.723248][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.731486][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.739599][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.747769][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.756095][ T4796] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 169.765396][ T4796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 169.852347][ T4139] EXT4-fs (loop4): unmounting filesystem. [ 169.865339][ T4814] device syzkaller0 entered promiscuous mode [ 169.901807][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.930346][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.988586][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 170.114591][ T4850] fuse: Bad value for 'fd' [ 170.169158][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 170.201871][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 170.224101][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 170.241648][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 170.268379][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 170.292662][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 170.316253][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 170.341055][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 170.365792][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 170.416423][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'. [ 170.475612][ T4863] loop2: detected capacity change from 0 to 512 [ 170.502631][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.509869][ T4863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.528508][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.541537][ T4863] EXT4-fs (loop2): 1 truncate cleaned up [ 170.550966][ T4859] device bridge_slave_0 entered promiscuous mode [ 170.559730][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.575398][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.604324][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.627007][ T4859] device bridge_slave_1 entered promiscuous mode [ 170.749458][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.756542][ T4859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.763781][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.770781][ T4859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.904415][ T1227] bridge0: port 3(veth0_vlan) entered disabled state [ 170.920316][ T1227] device bridge_slave_1 left promiscuous mode [ 170.939100][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.963248][ T1227] device bridge_slave_0 left promiscuous mode [ 170.982856][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.004874][ T4855] syz.6.1574 (4855) used greatest stack depth: 16000 bytes left [ 171.016789][ T1227] device veth1_macvtap left promiscuous mode [ 171.051462][ T1227] device veth0_vlan left promiscuous mode [ 171.711069][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.735778][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.752538][ T4885] 9pnet_fd: Insufficient options for proto=fd [ 171.768279][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.806561][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.841325][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.867024][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.874102][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.895723][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.925692][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.952376][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.959447][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.011676][ T4901] overlayfs: failed to clone upperpath [ 172.044630][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.078272][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.110854][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.144698][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.182557][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.214927][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.253563][ T4859] device veth0_vlan entered promiscuous mode [ 172.270788][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.295530][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.331317][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.361445][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.385926][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.412079][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.438472][ T4859] device veth1_macvtap entered promiscuous mode [ 172.460129][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.478537][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.503739][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.536872][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.555881][ T291] EXT4-fs (loop2): unmounting filesystem. [ 172.567548][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.602920][ T4908] netlink: 'syz.2.1593': attribute type 13 has an invalid length. [ 172.629974][ T4908] netlink: 'syz.2.1593': attribute type 17 has an invalid length. [ 172.645454][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.661435][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.680417][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 172.703882][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 172.726141][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.757638][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.782900][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 172.813596][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 172.842090][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 172.869141][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 172.940968][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.054840][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 173.089369][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 173.129693][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 173.163551][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.207602][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 173.251280][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.308017][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.357453][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.414197][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.456454][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.497342][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.533783][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.541721][ T4934] fuse: Bad value for 'fd' [ 173.823243][ T4941] device veth1_to_bond entered promiscuous mode [ 173.848077][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 173.928303][ T4941] device veth1_to_bond left promiscuous mode [ 173.947512][ T4944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1603'. [ 175.097322][ T4960] ip_tables: iptables: counters copy to user failed while replacing table [ 175.857362][ T4977] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1616'. [ 175.897609][ T4980] futex_wake_op: syz.0.1618 tries to shift op by 144; fix this program [ 176.906226][ T4998] loop7: detected capacity change from 0 to 256 [ 177.013475][ T4998] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.177608][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 177.286895][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 179.011137][ T5028] loop7: detected capacity change from 0 to 4096 [ 179.042001][ T5028] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.073436][ T5028] EXT4-fs (loop7): Test dummy encryption mode enabled [ 179.107797][ T5028] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 179.143293][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 179.298386][ T5028] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 179.513605][ T4859] EXT4-fs (loop7): unmounting filesystem. [ 179.745111][ T5042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1637'. [ 179.993164][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.014863][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.065396][ T5050] netlink: 'syz.2.1638': attribute type 16 has an invalid length. [ 180.166281][ T5050] netlink: 'syz.2.1638': attribute type 17 has an invalid length. [ 180.231337][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.272897][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.292958][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 180.388878][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 180.416713][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 180.834084][ T28] audit: type=1400 audit(2000000042.490:4595): avc: denied { nlmsg_tty_audit } for pid=5062 comm="syz.5.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 180.893595][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 180.928080][ T28] audit: type=1107 audit(2000000042.490:4596): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 180.948920][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.970429][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.978590][ T5071] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5071 comm=syz.7.1644 [ 181.007370][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 181.032292][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 181.055416][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 181.077525][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 181.108600][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 181.136229][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 181.170759][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.197867][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.228123][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.235174][ T5050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.265497][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.272540][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.322851][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 181.337970][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 181.356412][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 181.373584][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1644'. [ 181.403188][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 181.920614][ T5083] device batadv_slave_0 entered promiscuous mode [ 181.934726][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1649'. [ 183.355417][ T28] audit: type=1400 audit(2000000045.050:4597): avc: denied { connect } for pid=5106 comm="syz.2.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.402619][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 183.608218][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.2.1665 [ 183.644076][ T5131] device gretap1 entered promiscuous mode [ 184.492223][ T5144] loop2: detected capacity change from 0 to 512 [ 185.428251][ T5144] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.479615][ T5144] EXT4-fs (loop2): 1 truncate cleaned up [ 185.485303][ T5144] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.617053][ T291] EXT4-fs (loop2): unmounting filesystem. [ 186.769840][ T5158] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.153814][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.628354][ T5158] netlink: 'syz.7.1675': attribute type 16 has an invalid length. [ 187.662387][ T5158] netlink: 'syz.7.1675': attribute type 17 has an invalid length. [ 187.712386][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.745315][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.777856][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.784917][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.826245][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.833299][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.888422][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 187.922840][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 188.002327][ T28] audit: type=1400 audit(2000000049.700:4598): avc: denied { create } for pid=5185 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.035065][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.563320][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 189.601543][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.684580][ T28] audit: type=1404 audit(2000000051.380:4599): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 189.700957][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.709254][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.737600][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.754047][ T28] audit: type=1400 audit(2000000051.420:4600): avc: denied { shutdown } for pid=5190 comm="syz.7.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 189.784199][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.811422][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 189.836559][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 189.851051][ T28] audit: type=1400 audit(2000000051.420:4601): avc: denied { read } for pid=5198 comm="syz.2.1687" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 189.904569][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 189.937488][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 189.972635][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 189.983261][ T28] audit: type=1400 audit(2000000051.420:4602): avc: denied { name_bind } for pid=5198 comm="syz.2.1687" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 190.028555][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 190.059751][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 190.089699][ T28] audit: type=1400 audit(2000000051.580:4603): avc: denied { execmem } for pid=5205 comm="syz.6.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 190.169373][ T28] audit: type=1400 audit(2000000051.780:4604): avc: denied { read write } for pid=4859 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.270655][ T28] audit: type=1400 audit(2000000051.810:4605): avc: denied { create } for pid=5212 comm="syz.7.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 190.334345][ T28] audit: type=1400 audit(2000000051.920:4606): avc: denied { associate } for pid=5187 comm="syz.5.1685" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=0 [ 190.510552][ T28] audit: type=1400 audit(2000000052.200:4607): avc: denied { create } for pid=5218 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.544755][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 191.450413][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1698'. [ 192.201071][ T5269] device ip6gretap0 entered promiscuous mode [ 192.213566][ T5269] device vlan3 entered promiscuous mode [ 192.242996][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1711'. [ 192.285178][ T5271] device team_slave_1 entered promiscuous mode [ 192.311355][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.341861][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.861043][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.24 [ 193.011048][ T28] kauditd_printk_skb: 2992 callbacks suppressed [ 193.011057][ T28] audit: type=1400 audit(2000000054.710:7600): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.053703][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.080395][ T142] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 193.104570][ T142] audit: backlog limit exceeded [ 193.125942][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.136801][ T28] audit: type=1400 audit(2000000054.740:7601): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.173136][ T142] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 193.211027][ T142] audit: backlog limit exceeded [ 193.226130][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.251028][ T28] audit: type=1400 audit(2000000054.740:7602): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.073946][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.115710][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.183253][ T5315] netlink: 'syz.6.1721': attribute type 16 has an invalid length. [ 194.286197][ T5315] netlink: 'syz.6.1721': attribute type 17 has an invalid length. [ 194.367881][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.439621][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.482082][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.529425][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.536487][ T5315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.619690][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.626749][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.746838][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 194.848150][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 194.875206][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.941710][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 195.000666][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.054962][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.098441][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.991061][ T5352] netlink: 'syz.0.1741': attribute type 12 has an invalid length. [ 196.098089][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 196.275621][ T5378] futex_wake_op: syz.0.1751 tries to shift op by 32; fix this program [ 197.991988][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.021502][ T28] kauditd_printk_skb: 19336 callbacks suppressed [ 198.021512][ T28] audit: type=1400 audit(2000000059.720:24018): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.064951][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.071649][ T5437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.083543][ T5438] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.098651][ T142] audit: audit_lost=977 audit_rate_limit=0 audit_backlog_limit=64 [ 198.139177][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 198.147534][ T142] audit: backlog limit exceeded [ 198.153655][ T5439] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.169857][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.181782][ T28] audit: type=1400 audit(2000000059.750:24019): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.206936][ T5438] audit: audit_lost=978 audit_rate_limit=0 audit_backlog_limit=64 [ 198.243951][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 198.315521][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 198.392964][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 198.431615][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 198.466068][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 198.529048][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.589055][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 198.732517][ T5456] mmap: syz.2.1781 (5456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.793758][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1782'. [ 199.176427][ T5475] ip6t_rpfilter: unknown options [ 199.245630][ T5475] x_tables: unsorted underflow at hook 2 [ 200.327940][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1798'. [ 200.382313][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1798'. [ 201.033301][ T5508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.030994][ T28] kauditd_printk_skb: 19698 callbacks suppressed [ 203.031006][ T28] audit: type=1400 audit(2000000064.720:41323): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.084466][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.123524][ T142] audit: audit_lost=1778 audit_rate_limit=0 audit_backlog_limit=64 [ 203.134402][ T5558] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.166032][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.176276][ T5558] audit: audit_lost=1779 audit_rate_limit=0 audit_backlog_limit=64 [ 203.186142][ T142] audit: backlog limit exceeded [ 203.209310][ T291] audit: audit_lost=1780 audit_rate_limit=0 audit_backlog_limit=64 [ 203.221112][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.228775][ T28] audit: type=1400 audit(2000000064.760:41324): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.694823][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1830'. [ 204.704121][ T5589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5589 comm=syz.0.1831 [ 205.275994][ T5601] netlink: 'syz.2.1836': attribute type 12 has an invalid length. [ 206.381952][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 206.422421][ T5625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1844'. [ 208.041050][ T28] kauditd_printk_skb: 17928 callbacks suppressed [ 208.041060][ T28] audit: type=1400 audit(2000000069.740:57365): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.082782][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.126757][ T142] audit: audit_lost=2410 audit_rate_limit=0 audit_backlog_limit=64 [ 208.175687][ T142] audit: backlog limit exceeded [ 208.214955][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.227716][ T28] audit: type=1400 audit(2000000069.770:57366): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.280183][ T142] audit: audit_lost=2411 audit_rate_limit=0 audit_backlog_limit=64 [ 208.326481][ T142] audit: backlog limit exceeded [ 208.365980][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.384513][ T28] audit: type=1400 audit(2000000069.770:57367): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.113679][ T5715] xt_CT: No such helper "netbios-ns" [ 213.051086][ T28] kauditd_printk_skb: 18829 callbacks suppressed [ 213.051096][ T28] audit: type=1400 audit(2000000074.740:73765): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.079439][ T5788] lo: Caught tx_queue_len zero misconfig [ 213.098442][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.136535][ T142] audit: audit_lost=3223 audit_rate_limit=0 audit_backlog_limit=64 [ 213.188375][ T142] audit: backlog limit exceeded [ 213.220438][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.238256][ T28] audit: type=1400 audit(2000000074.790:73766): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.284650][ T142] audit: audit_lost=3224 audit_rate_limit=0 audit_backlog_limit=64 [ 213.336950][ T142] audit: backlog limit exceeded [ 213.370770][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.411099][ T28] audit: type=1400 audit(2000000074.790:73767): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.537351][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 215.393480][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 215.463010][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 216.141126][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.24 [ 216.150705][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.24 [ 217.697862][ T5912] ip_tables: iptables: counters copy to user failed while replacing table [ 218.061077][ T28] kauditd_printk_skb: 18923 callbacks suppressed [ 218.061087][ T28] audit: type=1400 audit(2000000079.760:90415): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.094838][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.138916][ T142] audit: audit_lost=3984 audit_rate_limit=0 audit_backlog_limit=64 [ 218.191104][ T142] audit: backlog limit exceeded [ 218.196114][ T5919] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.232404][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.240857][ T5919] audit: audit_lost=3985 audit_rate_limit=0 audit_backlog_limit=64 [ 218.248915][ T28] audit: type=1400 audit(2000000079.790:90416): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.290249][ T142] audit: audit_lost=3986 audit_rate_limit=0 audit_backlog_limit=64 [ 218.311894][ T5919] audit: backlog limit exceeded [ 218.861670][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 219.069609][ T5931] futex_wake_op: syz.0.1956 tries to shift op by 144; fix this program [ 219.711500][ T5962] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.954680][ T5941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.070985][ T28] kauditd_printk_skb: 16541 callbacks suppressed [ 223.070995][ T28] audit: type=1400 audit(2000000084.760:105526): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.123921][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.155804][ T142] audit: audit_lost=4464 audit_rate_limit=0 audit_backlog_limit=64 [ 223.195483][ T142] audit: backlog limit exceeded [ 223.231105][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.254711][ T28] audit: type=1400 audit(2000000084.800:105527): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.279383][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.295834][ T142] audit: audit_lost=4465 audit_rate_limit=0 audit_backlog_limit=64 [ 223.341475][ T142] audit: backlog limit exceeded [ 223.371932][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.084127][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 225.903791][ T6094] printk: syz.7.2015 (6094): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 226.665277][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 227.501020][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.24 [ 228.081357][ T28] kauditd_printk_skb: 18686 callbacks suppressed [ 228.081367][ T28] audit: type=1400 audit(2000000089.780:124210): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.121795][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.162820][ T142] audit: audit_lost=4468 audit_rate_limit=0 audit_backlog_limit=64 [ 228.212721][ T142] audit: backlog limit exceeded [ 228.233169][ T6153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.247268][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.263168][ T28] audit: type=1400 audit(2000000089.810:124211): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.295269][ T6153] audit: audit_lost=4469 audit_rate_limit=0 audit_backlog_limit=64 [ 228.305967][ T142] audit: audit_lost=4470 audit_rate_limit=0 audit_backlog_limit=64 [ 228.346068][ T6153] audit: backlog limit exceeded [ 228.541349][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 229.345472][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.387406][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.454661][ T6174] device gretap1 left promiscuous mode [ 229.489214][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 229.539767][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 230.687919][ T6210] device veth0_vlan left promiscuous mode [ 230.741861][ T6210] device veth0_vlan entered promiscuous mode [ 230.817267][ T6210] device veth1_macvtap left promiscuous mode [ 230.889408][ T6210] device veth1_macvtap entered promiscuous mode [ 230.997033][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.027371][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.073558][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.126978][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.134048][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.221622][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.278229][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.331431][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.338492][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.422853][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.483996][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 231.532587][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.580508][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 231.639259][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.701286][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.750286][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.793242][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.838398][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.893940][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.942882][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.002568][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.053668][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.101087][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.143739][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.191638][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.229995][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.291888][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.320875][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.371676][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.409470][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.451089][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.495839][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.533554][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.578798][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.624002][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.663165][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 232.704839][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 232.744989][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 232.779313][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 232.813882][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 232.846917][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 232.884608][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.955864][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.992035][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2067'. [ 233.091152][ T28] kauditd_printk_skb: 19248 callbacks suppressed [ 233.091161][ T28] audit: type=1400 audit(2000000094.780:142157): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.137972][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.154364][ T6248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.172926][ T142] audit: audit_lost=4905 audit_rate_limit=0 audit_backlog_limit=64 [ 233.187248][ T6248] audit: audit_lost=4906 audit_rate_limit=0 audit_backlog_limit=64 [ 233.200611][ T6252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.209328][ T142] audit: backlog limit exceeded [ 233.217304][ T6253] futex_wake_op: syz.5.2073 tries to shift op by 144; fix this program [ 233.226895][ T6248] audit: backlog limit exceeded [ 233.235074][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.245927][ T28] audit: type=1400 audit(2000000094.820:142158): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.704618][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.847317][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 238.101027][ T28] kauditd_printk_skb: 17676 callbacks suppressed [ 238.101036][ T28] audit: type=1400 audit(2000000099.800:157401): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.138179][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.159754][ T142] audit: audit_lost=5719 audit_rate_limit=0 audit_backlog_limit=64 [ 238.183734][ T142] audit: backlog limit exceeded [ 238.198284][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.209148][ T28] audit: type=1400 audit(2000000099.830:157402): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.246423][ T6353] bridge0: port 3(syz_tun) entered blocking state [ 238.265328][ T142] audit: audit_lost=5720 audit_rate_limit=0 audit_backlog_limit=64 [ 238.293681][ T6353] bridge0: port 3(syz_tun) entered disabled state [ 238.305656][ T4859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.312286][ T142] audit: backlog limit exceeded [ 238.319165][ T6348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.331574][ T6353] device syz_tun entered promiscuous mode [ 238.372497][ T6353] bridge0: port 3(syz_tun) entered blocking state [ 238.378936][ T6353] bridge0: port 3(syz_tun) entered forwarding state [ 239.046481][ T6369] device ip6_vti0 entered promiscuous mode [ 241.698476][ T6454] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.2148'. [ 242.229672][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.313445][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.440568][ T6477] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 243.111916][ T28] kauditd_printk_skb: 15766 callbacks suppressed [ 243.111928][ T28] audit: type=1400 audit(2000000104.800:172481): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.160194][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.194676][ T142] audit: audit_lost=5951 audit_rate_limit=0 audit_backlog_limit=64 [ 243.235725][ T142] audit: backlog limit exceeded [ 243.260006][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.275207][ T28] audit: type=1400 audit(2000000104.840:172482): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.315702][ T142] audit: audit_lost=5952 audit_rate_limit=0 audit_backlog_limit=64 [ 243.355636][ T142] audit: backlog limit exceeded [ 243.381871][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.403343][ T28] audit: type=1400 audit(2000000104.840:172483): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 244.205353][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 244.256845][ T6504] device bridge_slave_0 left promiscuous mode [ 244.302818][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.343465][ T6504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 247.477452][ T6571] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 247.638255][ T6581] can0: slcan on ttyS3. [ 247.691075][ T6581] can0 (unregistered): slcan off ttyS3. [ 248.121016][ T28] kauditd_printk_skb: 18857 callbacks suppressed [ 248.121026][ T28] audit: type=1400 audit(2000000109.820:188624): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.171990][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.201988][ T142] audit: audit_lost=6859 audit_rate_limit=0 audit_backlog_limit=64 [ 248.240131][ T142] audit: backlog limit exceeded [ 248.262961][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.290813][ T28] audit: type=1400 audit(2000000109.850:188625): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.321753][ T142] audit: audit_lost=6860 audit_rate_limit=0 audit_backlog_limit=64 [ 248.359885][ T142] audit: backlog limit exceeded [ 248.384487][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.408197][ T28] audit: type=1400 audit(2000000109.850:188626): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.620999][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 251.033673][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 251.085918][ T6644] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2210'. [ 253.131063][ T28] kauditd_printk_skb: 18335 callbacks suppressed [ 253.131081][ T28] audit: type=1400 audit(2000000114.830:203975): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.170245][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.222445][ T142] audit: audit_lost=7857 audit_rate_limit=0 audit_backlog_limit=64 [ 253.240233][ T4859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.267830][ T142] audit: backlog limit exceeded [ 253.281112][ T4859] audit: audit_lost=7858 audit_rate_limit=0 audit_backlog_limit=64 [ 253.301266][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.315042][ T28] audit: type=1400 audit(2000000114.860:203976): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.353389][ T4859] audit: backlog limit exceeded [ 253.360372][ T142] audit: audit_lost=7859 audit_rate_limit=0 audit_backlog_limit=64 [ 256.207376][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2238'. [ 256.403132][ T6726] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 258.141102][ T28] kauditd_printk_skb: 17741 callbacks suppressed [ 258.141112][ T28] audit: type=1400 audit(2000002697.844:220301): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.181763][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.212333][ T142] audit: audit_lost=8332 audit_rate_limit=0 audit_backlog_limit=64 [ 258.231472][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.261074][ T291] audit: audit_lost=8333 audit_rate_limit=0 audit_backlog_limit=64 [ 258.273183][ T142] audit: backlog limit exceeded [ 258.292213][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.306444][ T28] audit: type=1400 audit(2000002697.864:220302): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.331694][ T291] audit: backlog limit exceeded [ 258.344096][ T6753] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.418882][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2248'. [ 258.490065][ T6761] ip_tables: iptables: counters copy to user failed while replacing table [ 259.650234][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.722564][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.796305][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 259.834728][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 262.045628][ T6833] futex_wake_op: syz.5.2271 tries to shift op by 144; fix this program [ 262.121134][ T6834] device wireguard0 entered promiscuous mode [ 262.918860][ T6853] netlink: 'syz.7.2278': attribute type 3 has an invalid length. [ 263.150469][ T28] kauditd_printk_skb: 19873 callbacks suppressed [ 263.150480][ T28] audit: type=1400 audit(2000002702.855:237481): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.192986][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.206946][ T6866] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.236405][ T142] audit: audit_lost=9233 audit_rate_limit=0 audit_backlog_limit=64 [ 263.250447][ T6866] audit: audit_lost=9234 audit_rate_limit=0 audit_backlog_limit=64 [ 263.278612][ T142] audit: backlog limit exceeded [ 263.288572][ T6866] audit: backlog limit exceeded [ 263.301742][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.310641][ T28] audit: type=1400 audit(2000002702.875:237482): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.335895][ T6868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.841999][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.880449][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2307'. [ 268.159788][ T28] kauditd_printk_skb: 19318 callbacks suppressed [ 268.159797][ T28] audit: type=1400 audit(2000002707.865:254253): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 268.204434][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.236608][ T142] audit: audit_lost=10085 audit_rate_limit=0 audit_backlog_limit=64 [ 268.277683][ T142] audit: backlog limit exceeded [ 268.303960][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.317979][ T28] audit: type=1400 audit(2000002707.885:254254): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 268.358289][ T142] audit: audit_lost=10086 audit_rate_limit=0 audit_backlog_limit=64 [ 268.397205][ T142] audit: backlog limit exceeded [ 268.423370][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.444850][ T28] audit: type=1400 audit(2000002707.885:254255): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 268.836033][ T6984] futex_wake_op: syz.6.2324 tries to shift op by 144; fix this program [ 271.260755][ T7032] netlink: 'syz.7.2340': attribute type 3 has an invalid length. [ 271.542003][ T7042] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 273.169241][ T28] kauditd_printk_skb: 18636 callbacks suppressed [ 273.169254][ T28] audit: type=1400 audit(2000002712.876:270145): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 273.208652][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.264512][ T142] audit: audit_lost=11003 audit_rate_limit=0 audit_backlog_limit=64 [ 273.305381][ T142] audit: backlog limit exceeded [ 273.338147][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.351310][ T28] audit: type=1400 audit(2000002712.896:270146): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 273.399144][ T142] audit: audit_lost=11004 audit_rate_limit=0 audit_backlog_limit=64 [ 273.451367][ T142] audit: backlog limit exceeded [ 273.470863][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.503165][ T28] audit: type=1400 audit(2000002712.896:270147): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.128296][ T7109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.180535][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2374'. [ 277.376836][ T7143] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 277.832293][ T7148] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.178635][ T28] kauditd_printk_skb: 19846 callbacks suppressed [ 278.178646][ T28] audit: type=1400 audit(2000002717.876:287061): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.219402][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.246404][ T142] audit: audit_lost=11983 audit_rate_limit=0 audit_backlog_limit=64 [ 278.279323][ T142] audit: backlog limit exceeded [ 278.300375][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.313339][ T28] audit: type=1400 audit(2000002717.906:287062): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.348415][ T142] audit: audit_lost=11984 audit_rate_limit=0 audit_backlog_limit=64 [ 278.383398][ T142] audit: backlog limit exceeded [ 278.403400][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.417480][ T28] audit: type=1400 audit(2000002717.906:287063): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.915203][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.922343][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.965065][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.015993][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 283.086919][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 283.142704][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 283.187988][ T28] kauditd_printk_skb: 17970 callbacks suppressed [ 283.187998][ T28] audit: type=1400 audit(2000002722.887:302284): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 283.221849][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 283.244155][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.252155][ T7265] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.288336][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 283.295726][ T142] audit: audit_lost=12902 audit_rate_limit=0 audit_backlog_limit=64 [ 283.304088][ T7265] audit: audit_lost=12903 audit_rate_limit=0 audit_backlog_limit=64 [ 283.329726][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 283.338055][ T142] audit: backlog limit exceeded [ 283.358021][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.369896][ T28] audit: type=1400 audit(2000002722.917:302285): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 283.423632][ T142] audit: audit_lost=12904 audit_rate_limit=0 audit_backlog_limit=64 [ 283.433315][ T7265] audit: backlog limit exceeded [ 283.579993][ T7276] futex_wake_op: syz.7.2416 tries to shift op by 144; fix this program [ 285.312842][ T7325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.320169][ T7325] IPv6: NLM_F_CREATE should be set when creating new route [ 285.468259][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.035134][ T7339] futex_wake_op: syz.2.2438 tries to shift op by 32; fix this program [ 286.627723][ T2652] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.958626][ T7388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.197343][ T28] kauditd_printk_skb: 18576 callbacks suppressed [ 288.197353][ T28] audit: type=1400 audit(2000002727.898:319529): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 288.242379][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.267315][ T142] audit: audit_lost=13349 audit_rate_limit=0 audit_backlog_limit=64 [ 288.301199][ T142] audit: backlog limit exceeded [ 288.311112][ T7390] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.325249][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.336675][ T28] audit: type=1400 audit(2000002727.928:319530): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 288.364411][ T7390] audit: audit_lost=13350 audit_rate_limit=0 audit_backlog_limit=64 [ 288.377897][ T142] audit: audit_lost=13351 audit_rate_limit=0 audit_backlog_limit=64 [ 288.396773][ T7390] audit: backlog limit exceeded [ 288.697263][ T4015] Bluetooth: hci0: command 0x1003 tx timeout [ 288.703286][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.497248][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 289.575546][ T7434] xt_CT: No such helper "netbios-ns" [ 292.175276][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2486'. [ 293.029624][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.036680][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.043950][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.050978][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.165368][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.195734][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 293.207840][ T28] kauditd_printk_skb: 18434 callbacks suppressed [ 293.207849][ T28] audit: type=1400 audit(2000002732.908:336749): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 293.249395][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.276792][ T142] audit: audit_lost=13757 audit_rate_limit=0 audit_backlog_limit=64 [ 293.291992][ T7497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.311410][ T142] audit: backlog limit exceeded [ 293.319557][ T7497] audit: audit_lost=13758 audit_rate_limit=0 audit_backlog_limit=64 [ 293.336273][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.346446][ T28] audit: type=1400 audit(2000002732.938:336750): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 293.373375][ T7497] audit: backlog limit exceeded [ 293.382820][ T7500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.216841][ T28] kauditd_printk_skb: 21436 callbacks suppressed [ 298.216852][ T28] audit: type=1400 audit(2000002737.919:355645): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 298.258933][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.269716][ T4859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.295959][ T142] audit: audit_lost=14607 audit_rate_limit=0 audit_backlog_limit=64 [ 298.310710][ T4859] audit: audit_lost=14608 audit_rate_limit=0 audit_backlog_limit=64 [ 298.327030][ T7618] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.335193][ T7620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.355179][ T142] audit: backlog limit exceeded [ 298.363022][ T4859] audit: backlog limit exceeded [ 298.371310][ T7620] audit: audit_lost=14609 audit_rate_limit=0 audit_backlog_limit=64 [ 298.439162][ T7626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7626 comm=syz.6.2536 [ 298.493040][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.600991][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 298.629610][ T7623] ip_tables: iptables: counters copy to user failed while replacing table [ 301.839952][ T7685] syz.0.2555 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 302.171395][ T7696] netlink: 'syz.7.2559': attribute type 2 has an invalid length. [ 302.214336][ T7696] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 303.225555][ T28] kauditd_printk_skb: 18312 callbacks suppressed [ 303.225566][ T28] audit: type=1400 audit(2000002742.929:373532): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 303.271984][ T7715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.279571][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.313718][ T142] audit: audit_lost=14752 audit_rate_limit=0 audit_backlog_limit=64 [ 303.325689][ T7715] audit: audit_lost=14753 audit_rate_limit=0 audit_backlog_limit=64 [ 303.368006][ T142] audit: backlog limit exceeded [ 303.374642][ T7715] audit: backlog limit exceeded [ 303.394751][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.412057][ T28] audit: type=1400 audit(2000002742.959:373533): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 303.452573][ T142] audit: audit_lost=14754 audit_rate_limit=0 audit_backlog_limit=64 [ 304.032970][ T7725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.142783][ T7725] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 304.625447][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.685093][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 305.474381][ T7747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.603875][ T7747] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 306.853055][ T7778] device syzkaller0 entered promiscuous mode [ 307.299730][ T7795] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 308.236043][ T28] kauditd_printk_skb: 18673 callbacks suppressed [ 308.236054][ T28] audit: type=1400 audit(2000002747.940:390691): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.282769][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.291571][ T7816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.325733][ T142] audit: audit_lost=15260 audit_rate_limit=0 audit_backlog_limit=64 [ 308.336113][ T7816] audit: audit_lost=15261 audit_rate_limit=0 audit_backlog_limit=64 [ 308.374660][ T142] audit: backlog limit exceeded [ 308.380385][ T7816] audit: backlog limit exceeded [ 308.400738][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.409851][ T7817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.426237][ T28] audit: type=1400 audit(2000002747.970:390692): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.218060][ T7858] netlink: 'syz.6.2608': attribute type 4 has an invalid length. [ 313.244269][ T28] kauditd_printk_skb: 18518 callbacks suppressed [ 313.244282][ T28] audit: type=1400 audit(2000002752.941:406654): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.287765][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.322015][ T142] audit: audit_lost=16115 audit_rate_limit=0 audit_backlog_limit=64 [ 313.362538][ T142] audit: backlog limit exceeded [ 313.387705][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.401820][ T28] audit: type=1400 audit(2000002752.981:406655): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.443165][ T142] audit: audit_lost=16116 audit_rate_limit=0 audit_backlog_limit=64 [ 313.483143][ T142] audit: backlog limit exceeded [ 313.508579][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.528355][ T28] audit: type=1400 audit(2000002752.981:406656): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.254245][ T28] kauditd_printk_skb: 17907 callbacks suppressed [ 318.254257][ T28] audit: type=1400 audit(2000002757.961:421796): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.307407][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.336241][ T142] audit: audit_lost=17040 audit_rate_limit=0 audit_backlog_limit=64 [ 318.374581][ T142] audit: backlog limit exceeded [ 318.407131][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.423657][ T28] audit: type=1400 audit(2000002757.991:421797): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.459078][ T142] audit: audit_lost=17041 audit_rate_limit=0 audit_backlog_limit=64 [ 318.497514][ T142] audit: backlog limit exceeded [ 318.525361][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.543658][ T28] audit: type=1400 audit(2000002757.991:421798): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.200659][ T8009] bridge_slave_0: default FDB implementation only supports local addresses [ 323.263166][ T28] kauditd_printk_skb: 18696 callbacks suppressed [ 323.263177][ T28] audit: type=1400 audit(2000002762.972:437556): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.305217][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.312482][ T8073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.342909][ T142] audit: audit_lost=18022 audit_rate_limit=0 audit_backlog_limit=64 [ 323.382450][ T142] audit: backlog limit exceeded [ 323.394494][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.415100][ T8073] audit: audit_lost=18023 audit_rate_limit=0 audit_backlog_limit=64 [ 323.426054][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.440375][ T28] audit: type=1400 audit(2000002763.002:437557): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.461646][ T291] audit: audit_lost=18024 audit_rate_limit=0 audit_backlog_limit=64 [ 326.426787][ T8116] netlink: 'syz.0.2688': attribute type 9 has an invalid length. [ 326.913372][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'. [ 326.940706][ T8123] device ip6gre1 entered promiscuous mode [ 326.958518][ T8123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8123 comm=syz.2.2691 [ 326.981385][ T8128] futex_wake_op: syz.6.2692 tries to shift op by 144; fix this program [ 327.029910][ T8129] xt_CT: No such helper "netbios-ns" [ 328.272507][ T28] kauditd_printk_skb: 26720 callbacks suppressed [ 328.272517][ T28] audit: type=1400 audit(2000002767.982:461523): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.328424][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.337491][ T8142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.356363][ T8151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.364070][ T8152] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.375537][ T142] audit: audit_lost=18943 audit_rate_limit=0 audit_backlog_limit=64 [ 328.393467][ T8142] audit: audit_lost=18944 audit_rate_limit=0 audit_backlog_limit=64 [ 328.406403][ T8151] audit: audit_lost=18945 audit_rate_limit=0 audit_backlog_limit=64 [ 328.414720][ T8152] audit: audit_lost=18946 audit_rate_limit=0 audit_backlog_limit=64 [ 328.424915][ T142] audit: backlog limit exceeded [ 329.396371][ T8163] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2701'. [ 333.281990][ T28] kauditd_printk_skb: 29237 callbacks suppressed [ 333.282000][ T28] audit: type=1400 audit(2000002772.993:490407): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 333.313311][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.319817][ T142] audit: audit_lost=19064 audit_rate_limit=0 audit_backlog_limit=64 [ 333.351852][ T142] audit: backlog limit exceeded [ 333.371880][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.381866][ T28] audit: type=1400 audit(2000002773.023:490408): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 333.421857][ T142] audit: audit_lost=19065 audit_rate_limit=0 audit_backlog_limit=64 [ 333.429846][ T142] audit: backlog limit exceeded [ 333.451972][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.458468][ T142] audit: audit_lost=19066 audit_rate_limit=0 audit_backlog_limit=64 [ 338.002542][ T8252] futex_wake_op: syz.5.2723 tries to shift op by 144; fix this program [ 338.291925][ T28] kauditd_printk_skb: 30587 callbacks suppressed [ 338.291936][ T28] audit: type=1400 audit(2000002778.004:520995): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 338.330224][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.351272][ T142] audit: audit_lost=19067 audit_rate_limit=0 audit_backlog_limit=64 [ 338.376333][ T142] audit: backlog limit exceeded [ 338.391344][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.403274][ T28] audit: type=1400 audit(2000002778.034:520996): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 338.434054][ T142] audit: audit_lost=19068 audit_rate_limit=0 audit_backlog_limit=64 [ 338.458136][ T142] audit: backlog limit exceeded [ 338.474150][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.488147][ T28] audit: type=1400 audit(2000002778.034:520997): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.452525][ T1209] device bridge_slave_1 left promiscuous mode [ 339.458636][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.503024][ T1209] device bridge_slave_0 left promiscuous mode [ 339.509144][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.563535][ T1209] device veth1_macvtap left promiscuous mode [ 339.569565][ T1209] device veth0_vlan left promiscuous mode [ 339.972404][ T1209] tipc: Left network mode [ 340.251777][ T8266] bridge0: port 3(syz_tun) entered disabled state [ 340.258730][ T8266] device syz_tun left promiscuous mode [ 340.272872][ T8266] bridge0: port 3(syz_tun) entered disabled state [ 340.361861][ T1209] device bridge_slave_1 left promiscuous mode [ 340.367969][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.931983][ T1209] device bridge_slave_1 left promiscuous mode [ 340.938106][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.960614][ T1209] device bridge_slave_0 left promiscuous mode [ 340.975562][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.995411][ T1209] device bridge_slave_1 left promiscuous mode [ 341.010240][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.027834][ T1209] device bridge_slave_0 left promiscuous mode [ 341.042538][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.061518][ T1209] device veth1_macvtap left promiscuous mode [ 341.067600][ T1209] device veth0_vlan left promiscuous mode [ 341.090325][ T1209] device veth1_macvtap left promiscuous mode [ 341.105123][ T1209] device veth0_vlan left promiscuous mode [ 343.300680][ T28] kauditd_printk_skb: 55142 callbacks suppressed [ 343.300690][ T28] audit: type=1400 audit(2000002783.014:573348): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 343.331954][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.338437][ T142] audit: audit_lost=20000 audit_rate_limit=0 audit_backlog_limit=64 [ 343.346479][ T142] audit: backlog limit exceeded [ 343.351398][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.357868][ T142] audit: audit_lost=20001 audit_rate_limit=0 audit_backlog_limit=64 [ 343.365934][ T28] audit: type=1400 audit(2000002783.034:573349): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 343.387090][ T142] audit: backlog limit exceeded [ 343.392085][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.398573][ T142] audit: audit_lost=20002 audit_rate_limit=0 audit_backlog_limit=64 [ 348.310093][ T28] kauditd_printk_skb: 77009 callbacks suppressed [ 348.310102][ T28] audit: type=1400 audit(2000002788.025:650358): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 348.341303][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.347793][ T142] audit: audit_lost=20003 audit_rate_limit=0 audit_backlog_limit=64 [ 348.355929][ T142] audit: backlog limit exceeded [ 348.360901][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.367379][ T142] audit: audit_lost=20004 audit_rate_limit=0 audit_backlog_limit=64 [ 348.375467][ T28] audit: type=1400 audit(2000002788.045:650359): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 348.396621][ T142] audit: backlog limit exceeded [ 348.401644][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.408121][ T142] audit: audit_lost=20005 audit_rate_limit=0 audit_backlog_limit=64 [ 353.319459][ T28] kauditd_printk_skb: 76965 callbacks suppressed [ 353.319470][ T28] audit: type=1400 audit(2000002793.025:727324): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.350663][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.357179][ T142] audit: audit_lost=20006 audit_rate_limit=0 audit_backlog_limit=64 [ 353.365301][ T142] audit: backlog limit exceeded [ 353.370282][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.376760][ T142] audit: audit_lost=20007 audit_rate_limit=0 audit_backlog_limit=64 [ 353.384856][ T28] audit: type=1400 audit(2000002793.055:727325): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.406065][ T142] audit: backlog limit exceeded [ 353.411194][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.417678][ T142] audit: audit_lost=20008 audit_rate_limit=0 audit_backlog_limit=64 [ 358.328851][ T28] kauditd_printk_skb: 76969 callbacks suppressed [ 358.328864][ T28] audit: type=1400 audit(2000002798.036:804294): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 358.360345][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.366843][ T142] audit: audit_lost=20009 audit_rate_limit=0 audit_backlog_limit=64 [ 358.375222][ T142] audit: backlog limit exceeded [ 358.380179][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.386673][ T142] audit: audit_lost=20010 audit_rate_limit=0 audit_backlog_limit=64 [ 358.394741][ T28] audit: type=1400 audit(2000002798.066:804295): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 358.415990][ T142] audit: backlog limit exceeded [ 358.421090][ T142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.427565][ T142] audit: audit_lost=20011 audit_rate_limit=0 audit_backlog_limit=64