last executing test programs: 21.249956263s ago: executing program 3 (id=2902): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000003c0)={0xffffff}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0xffffffff, 0x4, 0x31237648, 0x80006, 0x2, 0x7fff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./config\x00', 0x0, &(0x7f00000002c0), 0x1, 0x294, &(0x7f0000000600)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000900), &(0x7f0000000940)='./config/file0\x00', 0xf, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1f7) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f0000000980)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0) write(r6, &(0x7f0000000a00)="686973743a6b6579733d5b756e97d3b09d5d551c77fbc039bdbd691257616c30a1089074d6bec4221a917e880240954dc9b6c3ce51937c29de6374c6c1ad49b4c2a5cb5243b8207e2fa10c2d903f", 0x4e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x14) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000440)={0x6, 0x8, [{0x1, 0x0, 0xae471bd}, {0x1, 0x0, 0x9}, {0xff, 0x0, 0x1}, {0x8, 0x0, 0x101}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x7f}, {0x5, 0x0, 0x5}, {0x7, 0x0, 0x10007}, {0x7, 0x0, 0x9}, {0x1, 0x0, 0x100}, {0x8000, 0x0, 0x7ff}, {0x6, 0x0, 0xffffffffbffffff7}, {0x5218, 0x0, 0x8}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0x9}, {0x2, 0x0, 0x36}]}) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0xdc0, 0x3}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000400)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 19.787799533s ago: executing program 3 (id=2906): syz_usb_connect(0x5, 0x35, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0xd9, 0x50, 0xc7, 0x10, 0x1bc7, 0x1071, 0x9e86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x5, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0xbb, 0x2, 0x1, 0x2, 0xe, 0x0, 0x8, [], [{{0x9, 0x5, 0x2, 0x0, 0x4a2fb15ad64503a1, 0x9, 0x8, 0xb, [@generic={0x8, 0xb, "5e9d6aed5ce4"}]}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000020000000000000000000000002000000000000000c0008000735"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x644003, 0x0) 17.552663017s ago: executing program 3 (id=2938): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x0, 0x1}, 0x20) r2 = epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) timerfd_create(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r5, r4}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000180)={0xc000200f}) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) madvise(&(0x7f000029a000/0x4000)=nil, 0x4000, 0x13) syz_clone3(&(0x7f00000000c0)={0x40004000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x30, 0x0, 0x0}, 0x58) syz_clone(0x20220000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b10500000800000e38ebc91bde95d86c7a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d91639"], 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="4b0b30bb2ef2cfbe177a153506ea50b82d7252e95d3800008b79f82ac68e54724b5eb7c4084684a19302f7f4d2fe65205331d03111c4aab8a747c4a7b6b3c99ff9b14c88c1ede9afea848527b857922fb5de9fb0854a7ce6ae9770eb4ae675b57cc81cc955d123963659b28814c3f886e44289e4e6afc05703143086e0cddf1c2deb12044d29218c5cc861f42f178f2d8164c46264fae9ecf21403c30f16c883de136c840473480cf4da70d2bee6f8c3319ca6fc702328413242bde68479627032e3a54c512be3b0ca56ee3c023ae3328a0b0787baf04e141aa1ab9f4caee68424eae284fc503277382a24bc282faadaac0f6a6642f8d88ee23292ee35a6ed113a740bdfac9097dc00"/278, @ANYRES32=0x0, @ANYBLOB="00000000600000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x13, r8}) fsmount(r6, 0x0, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r9, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r9, 0x0) setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000480)=0x5, 0x4) 16.817019991s ago: executing program 3 (id=2944): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181b000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000280)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f0000000800)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940), &(0x7f0000000980)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) truncate(&(0x7f00000009c0)='./file0/file1\x00', 0xe2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = getuid() getgroups(0x7, &(0x7f0000000140)=[0xee01, 0xee00, 0x0, 0xee00, 0xee01, 0xee00, 0xee01]) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x88, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x34}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x31, 0x64, 0x31, 0x34, 0x64, 0x65], 0x2d, [0x33, 0x36, 0x34, 0x36], 0x2d, [0x62, 0x35, 0x61, 0x64], 0x2d, [0x33, 0x65, 0x61, 0x66], 0x2d, [0x38, 0x38, 0x35, 0x63, 0x66, 0x33, 0x66, 0x34]}}}]}}, 0x1, 0x0, &(0x7f0000000b40)="d171161de19bcc9098b14f3c3daaea85d02760f5cdf7a1af04a6c59fb1382d23677a3c916c0bdb483edf53a9ef876c77b74f05df0a402a2fde79cc8cf10888c8b2688b70824ec932e52250bd10cdc2ede7fc8efad56c8fb11976b2e45f321665cc04438761bdb8604c6a83d708a87c90d1c94c4e21dcf35897eb1f667491e59e06025d4d3146db16a551d90bb64a28ca01c393e99be4d6192aa16e4ff9232ee9b8f76b4e2735515544b59cc0") 16.302672342s ago: executing program 3 (id=2950): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000000100)=""/32, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x5032}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(0x0, 0x2) fcntl$addseals(r2, 0x409, 0xd51354b93fddcc65) r3 = socket$inet(0x2, 0x2, 0x0) clock_gettime(0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000005c0)=0xb, 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) read$ext4_sysfs(r5, &(0x7f0000000640)=""/157, 0x9d) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="0100000000001400100009000000000100000000000208063c00"/35, 0x23}, {&(0x7f00000001c0)="00000f0003000000ed320a07b5", 0xd}, {&(0x7f0000000300)="17054ed5", 0x4}, {&(0x7f0000000540)="f5b6424e2108000000070000007ee3197e0f00000000000000000000000000791c60a17a0421ce35e308818fba7de9e76b07c2ac999876a95b00c76145254234e907e6d270", 0x45}, {&(0x7f0000000380)="bc49be0251ebffb69046c9d1f0bafd94b84f3c08665a555226ad4058dd604c8693fa28adb42faa36eaed13821033408b580ee0dd971d68082233117c9e091bfa59b4d8780c5c8ddfbe4dd30ec97340da7e6141d8e1e01ccdb49ca2f22041594a1d0ff2d17548bcaf341ef4c92de89ed321852e3357358439ebe2b123f0b99a9a763054b438d0b432d3d542b99019054749460f438f74542b99f8acb39bf4c53270c1297f2f8820fd9cc61bba49bec55c4617b566d5e91c", 0xb7}, {&(0x7f0000000480)="045ece9ba2f937547b6aed059a55665797e3", 0x12}], 0x6) 15.752708238s ago: executing program 3 (id=2965): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0x0, &(0x7f00000016c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000001740), &(0x7f0000000000)='./file0\x00', &(0x7f00000017c0), 0x2b4841, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}]}}) 15.708513682s ago: executing program 32 (id=2965): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0x0, &(0x7f00000016c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000001740), &(0x7f0000000000)='./file0\x00', &(0x7f00000017c0), 0x2b4841, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}]}}) 5.827053697s ago: executing program 0 (id=3094): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000000100)=""/32, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x5032}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(0x0, 0x2) fcntl$addseals(r2, 0x409, 0xd51354b93fddcc65) r3 = socket$inet(0x2, 0x2, 0x0) clock_gettime(0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000005c0)=0xb, 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) read$ext4_sysfs(r5, &(0x7f0000000640)=""/157, 0x9d) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="0100000000001400100009000000000100000000000208063c00"/35, 0x23}, {&(0x7f00000001c0)="00000f0003000000ed320a07b5", 0xd}, {&(0x7f0000000300)="17054ed5", 0x4}, {&(0x7f0000000540)="f5b6424e2108000000070000007ee3197e0f00000000000000000000000000791c60a17a0421ce35e308818fba7de9e76b07c2ac999876a95b00c76145254234e907e6d270", 0x45}, {&(0x7f0000000380)="bc49be0251ebffb69046c9d1f0bafd94b84f3c08665a555226ad4058dd604c8693fa28adb42faa36eaed13821033408b580ee0dd971d68082233117c9e091bfa59b4d8780c5c8ddfbe4dd30ec97340da7e6141d8e1e01ccdb49ca2f22041594a1d0ff2d17548bcaf341ef4c92de89ed321852e3357358439ebe2b123f0b99a9a763054b438d0b432d3d542b99019054749460f438f74542b99f8acb39bf4c53270c1297f2f8820fd9cc61bba49bec55c4617b566d5e91c8b375c60b37e37fccc3e459c1a4edae6dd374540", 0xcb}, {&(0x7f0000000480)="045ece9ba2f937547b6aed059a55665797e3", 0x12}], 0x6) 4.248832848s ago: executing program 1 (id=3108): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x800, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000800, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './tracefs\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = syz_create_resource$futex(&(0x7f0000000480)=0x200001) futex(r5, 0x85, 0x8, 0x0, r5, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracefs\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)='#', 0x1}, {&(0x7f0000000640)="703acb93f7ccd8331b2019", 0xb}], 0x2) 3.954706128s ago: executing program 0 (id=3104): gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xf5dfe000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) 3.895038524s ago: executing program 0 (id=3110): syz_usb_connect(0x5, 0x35, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0xd9, 0x50, 0xc7, 0x10, 0x1bc7, 0x1071, 0x9e86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x5, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0xbb, 0x2, 0x1, 0x2, 0xe, 0x0, 0x8, [], [{{0x9, 0x5, 0x2, 0x0, 0x4a2fb15ad64503a1, 0x9, 0x8, 0xb, [@generic={0x8, 0xb, "5e9d6aed5ce4"}]}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="030b06e4bfaa295f13aef5b0984aa524e4c71bdf99df803c93e5a4e9ce4539c7a2935933d888fbb30fde4d4fe19c63aceafb79ea01cbd4b088312e61112e9479d2ae2ed5decb82451b5ab70974d8d09f92e7d6ce9d463ba1598542caed9dbcece0d1f2e4af38ac6c6ff4907a69bc62400b8272ca28ce020000002a96d088b78d48af47af29fda42f77eed243e74ca65d45ae0d3045d7736eb7543161a8a2d9f7134fed06510855223f05d6fc50ca93ae5773b040bd26d38a79387a9fba96ce3d659ad9e55ad0", 0xffffffffffffff94, 0x91, 0x0, 0xfffffffffffffe6a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000020000000000000000000000002000000000000000c0008000735"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x644003, 0x0) 3.73350152s ago: executing program 5 (id=3111): mknod$loop(0x0, 0x0, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) r1 = socket$vsock_seqpacket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0x4) r2 = socket$vsock_seqpacket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) socket$inet6(0xa, 0x3, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$vsock_stream(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='seqpacket', 0x40000}], 0x1}, 0x80) 3.374865007s ago: executing program 1 (id=3117): r0 = add_key(&(0x7f0000003500)='asymmetric\x00', 0x0, &(0x7f0000003540)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000003ac0)={r0, 0x500}, &(0x7f0000003b00)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) 3.250244429s ago: executing program 1 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400030000000800"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.197357205s ago: executing program 1 (id=3120): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000840, 0x0, 0x0) creat(&(0x7f0000001580)='./file0\x00', 0xe4) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='rpc_pipefs\x00', 0x1000000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001640)=ANY=[], 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/current\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001700)) r2 = getpid() sendmsg$unix(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)="d4", 0x1}], 0x1, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}], 0x20, 0x4000080}, 0x40041c1) r3 = io_uring_setup(0x2e08, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xffffffff, 0x1f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/4095, 0x440000}], 0x100000000000011a) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001380)={0xaa, 0x1a5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000001440)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000001480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2c73, &(0x7f00000014c0)={0x0, 0x34bb, 0x100, 0xffffffff, 0x2e0}, &(0x7f0000001540), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x66, 0x110c230000, 0x0, 0x0) 2.894801946s ago: executing program 5 (id=3121): r0 = eventfd2(0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xe0000008}) io_setup(0x81, &(0x7f00000004c0)=0x0) r3 = syz_io_uring_setup(0x6b, &(0x7f0000000000)={0x0, 0xac2a, 0x20000, 0x1, 0xf}, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 2.75208568s ago: executing program 4 (id=3115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8931, &(0x7f0000000000)='veth0:') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) 2.716920624s ago: executing program 5 (id=3123): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom0\x00', 0x6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000640)={0x0, 0x6cc, 0x6, 0xff7c, 0x7, "471e9c448bc18ce9"}) syz_socket_connect_nvme_tcp() r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000680)={0xe, {"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", 0x1040}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x80) 2.664792209s ago: executing program 4 (id=3124): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000b80)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1067, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x5, 0x0, 0x6, {[@mptcp=@add_addr4={0x1e, 0x10, 0x0, 0x3, 0x94, @local, "", 0x8}]}}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x20, &(0x7f0000000a40)={&(0x7f0000000940)=""/136, 0x88, 0x0, &(0x7f0000000a00)=""/15, 0xf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f44, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x8, 0x1, 0x7, 0xffffffffffffffe0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}]}, &(0x7f0000000640)='GPL\x00', 0x1, 0xfe, &(0x7f0000000680)=""/254, 0x40f00, 0x8, '\x00', r3, @fallback=0x21, r5, 0x8, &(0x7f00000008c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x2, 0xfc, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8a99}, 0x94) 2.663781549s ago: executing program 4 (id=3125): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000580)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000600)={r1, 0x0, 0xd, 0x0, &(0x7f0000000680)="00112233445566778899aabbcc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.569308699s ago: executing program 4 (id=3126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x4, &(0x7f0000000d00)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) r6 = syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000040)={0x0, 0x34bb, 0x4, 0x1, 0x206}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) capset(&(0x7f0000000540)={0x20071026}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10008, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000001e00)={0x1, 0x8, 0x2, 0x0, 0x0, [{{r2}, 0xf}, {{r6}, 0x9}]}) 2.139302303s ago: executing program 0 (id=3127): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000000100)=""/32, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x5032}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(0x0, 0x2) fcntl$addseals(r2, 0x409, 0xd51354b93fddcc65) r3 = socket$inet(0x2, 0x2, 0x0) clock_gettime(0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000005c0)=0xb, 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) read$ext4_sysfs(r5, &(0x7f0000000640)=""/157, 0x9d) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="0100000000001400100009000000000100000000000208063c00"/35, 0x23}, {&(0x7f00000001c0)="00000f0003000000ed320a07b5", 0xd}, {&(0x7f0000000300)="17054ed5", 0x4}, {&(0x7f0000000540)="f5b6424e2108000000070000007ee3197e0f00000000000000000000000000791c60a17a0421ce35e308818fba7de9e76b07c2ac999876a95b00c76145254234e907e6d270", 0x45}, {&(0x7f0000000380)="bc49be0251ebffb69046c9d1f0bafd94b84f3c08665a555226ad4058dd604c8693fa28adb42faa36eaed13821033408b580ee0dd971d68082233117c9e091bfa59b4d8780c5c8ddfbe4dd30ec97340da7e6141d8e1e01ccdb49ca2f22041594a1d0ff2d17548bcaf341ef4c92de89ed321852e3357358439ebe2b123f0b99a9a763054b438d0b432d3d542b99019054749460f438f74542b99f8acb39bf4c53270c1297f2f8820fd9cc61bba49bec55c4617b566d5e91c8b375c60b37e37fccc3e459c1a4edae6dd374540", 0xcb}, {&(0x7f0000000480)="045ece9ba2f937547b6aed059a55665797e3", 0x12}], 0x6) 1.626352385s ago: executing program 4 (id=3128): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x800, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000800, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './tracefs\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = syz_create_resource$futex(&(0x7f0000000480)=0x200001) futex(r5, 0x85, 0x8, 0x0, r5, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracefs\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)='#', 0x1}, {&(0x7f0000000640)="703acb93f7ccd8331b2019", 0xb}], 0x2) 1.599001208s ago: executing program 1 (id=3129): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listxattr(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcff"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000000ac0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.465707741s ago: executing program 5 (id=3131): mknod$loop(0x0, 0x0, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) r1 = socket$vsock_seqpacket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0x4) r2 = socket$vsock_seqpacket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) socket$inet6(0xa, 0x3, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r3, &(0x7f0000000540)=""/37, 0x25, 0x2, 0x0, 0x0) sendmsg$vsock_stream(r2, 0x0, 0x80) 1.384230449s ago: executing program 2 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="02000000ffdbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x400c0d3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 1.374178031s ago: executing program 2 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb28bd7000010000000100000008003f"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 1.369059421s ago: executing program 0 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400030000000800"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.347526743s ago: executing program 2 (id=3136): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000b80)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1067, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x5, 0x0, 0x6, {[@mptcp=@add_addr4={0x1e, 0x10, 0x0, 0x3, 0x94, @local, "", 0x8}]}}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x20, &(0x7f0000000a40)={&(0x7f0000000940)=""/136, 0x88, 0x0, &(0x7f0000000a00)=""/15, 0xf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f44, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x8, 0x1, 0x7, 0xffffffffffffffe0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}]}, &(0x7f0000000640)='GPL\x00', 0x1, 0xfe, &(0x7f0000000680)=""/254, 0x40f00, 0x8, '\x00', r3, @fallback=0x21, r5, 0x8, &(0x7f00000008c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x2, 0xfc, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8a99}, 0x94) 1.342168594s ago: executing program 0 (id=3137): syz_usb_connect(0x5, 0x35, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0xd9, 0x50, 0xc7, 0x10, 0x1bc7, 0x1071, 0x9e86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x5, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0xbb, 0x2, 0x1, 0x2, 0xe, 0x0, 0x8, [], [{{0x9, 0x5, 0x2, 0x0, 0x4a2fb15ad64503a1, 0x9, 0x8, 0xb, [@generic={0x8, 0xb, "5e9d6aed5ce4"}]}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="030b06e4bfaa295f13aef5b0984aa524e4c71bdf99df803c93e5a4e9ce4539c7a2935933d888fbb30fde4d4fe19c63aceafb79ea01cbd4b088312e61112e9479d2ae2ed5decb82451b5ab70974d8d09f92e7d6ce9d463ba1598542caed9dbcece0d1f2e4af38ac6c6ff4907a69bc62400b8272ca28ce020000002a96d088b78d48af47af29fda42f77eed243e74ca65d45ae0d3045d7736eb7543161a8a2d9f7134fed06510855223f05d6fc50ca93ae5773b040bd26d38a79387a9fba96ce3d659ad9e55ad0", 0xffffffffffffff94, 0x91, 0x0, 0xfffffffffffffe6a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000020000000000000000000000002000000000000000c0008000735"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x644003, 0x0) 1.326457665s ago: executing program 2 (id=3138): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000580)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000600)={r1, 0x0, 0xd, 0x0, &(0x7f0000000680)="00112233445566778899aabbcc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.256540722s ago: executing program 2 (id=3139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x4, &(0x7f0000000d00)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) r6 = syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000040)={0x0, 0x34bb, 0x4, 0x1, 0x206}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) capset(&(0x7f0000000540)={0x20071026}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10008, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000001e00)={0x1, 0x8, 0x2, 0x0, 0x0, [{{r2}, 0xf}, {{r6}, 0x9}]}) 786.49502ms ago: executing program 1 (id=3140): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000840, 0x0, 0x0) creat(&(0x7f0000001580)='./file0\x00', 0xe4) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='rpc_pipefs\x00', 0x1000000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001640)=ANY=[], 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/current\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001700)) r2 = getpid() sendmsg$unix(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)="d4", 0x1}], 0x1, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}], 0x20, 0x4000080}, 0x40041c1) r3 = io_uring_setup(0x2e08, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xffffffff, 0x1f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/4095, 0x440000}], 0x100000000000011a) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001380)={0xaa, 0x1a5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000001440)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000001480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2c73, &(0x7f00000014c0)={0x0, 0x34bb, 0x100, 0xffffffff, 0x2e0}, &(0x7f0000001540), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x66, 0x110c230000, 0x0, 0x0) 605.072818ms ago: executing program 5 (id=3141): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6004, 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x19e) mount$incfs(&(0x7f00000001c0)='\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0xc002, 0x0) chdir(&(0x7f0000000280)='./bus\x00') mount$cgroup(0x0, &(0x7f0000000300)='./bus\x00', 0x0, 0x1911c8a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10080, 0x10) r1 = creat(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x6a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @multicast1}}}, {{@arp={@empty, @broadcast, 0xffffff00, 0xff000000, 0x4, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xff0, 0x9, 0x7, 0xa61, 0x2, 0x4, 'macvlan0\x00', 'wlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) close(r1) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000400000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001fa9a8fed14b39a9f413cd6fe13d2041dc05e22540fb6ba7d7a2d4caa9e968acb908b836426368aaad7423a2d47cab14d238008defe824bd53e3dce37"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000000105050000000000002fe80a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060002004e"], 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 378.789062ms ago: executing program 4 (id=3142): r0 = eventfd2(0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xe0000008}) io_setup(0x81, &(0x7f00000004c0)=0x0) r3 = syz_io_uring_setup(0x6b, &(0x7f0000000000)={0x0, 0xac2a, 0x20000, 0x1, 0xf}, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 338.994586ms ago: executing program 5 (id=3143): gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xf5dfe000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) 0s ago: executing program 2 (id=3144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) kernel console output (not intermixed with test programs): ="syz.3.1289" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 126.619408][ T28] audit: type=1326 audit(1794734810.148:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.1289" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 126.644601][ T28] audit: type=1326 audit(1794734810.148:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.1289" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 126.964395][ T4140] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1292'. [ 127.089218][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 127.093395][ T4150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1297'. [ 127.098670][ T4161] device ip6gre1 left promiscuous mode [ 127.112861][ T4161] device ipip0 left promiscuous mode [ 127.124957][ T4150] netlink: 'syz.2.1297': attribute type 5 has an invalid length. [ 127.132883][ T4161] device wg1 entered promiscuous mode [ 128.268378][ T4235] netlink: 'syz.4.1333': attribute type 30 has an invalid length. [ 128.636410][ T4246] netlink: 'syz.0.1337': attribute type 4 has an invalid length. [ 128.644217][ T4246] __nla_validate_parse: 108 callbacks suppressed [ 128.644234][ T4246] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1337'. [ 128.660688][ T4246] netlink: 'syz.0.1337': attribute type 9 has an invalid length. [ 128.668685][ T4246] netlink: 'syz.0.1337': attribute type 2 has an invalid length. [ 128.702517][ T4256] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 128.711020][ T4256] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 129.831770][ T4277] 9pnet_fd: Insufficient options for proto=fd [ 130.138613][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 130.642284][ T4292] futex_wake_op: syz.0.1355 tries to shift op by -1; fix this program [ 131.560825][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 131.560848][ T28] audit: type=1326 audit(1794734815.268:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.017509][ T28] audit: type=1326 audit(1794734815.308:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.046234][ T28] audit: type=1326 audit(1794734815.308:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.071211][ T28] audit: type=1326 audit(1794734815.318:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.100506][ T28] audit: type=1326 audit(1794734815.318:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.125998][ T28] audit: type=1326 audit(1794734815.318:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.159031][ T28] audit: type=1326 audit(1794734815.318:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.185804][ T28] audit: type=1326 audit(1794734815.318:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.212496][ T28] audit: type=1326 audit(1794734815.318:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.237573][ T28] audit: type=1326 audit(1794734815.318:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.0.1359" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 132.830581][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 133.249148][ T4363] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1379'. [ 133.759252][ T4386] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1390'. [ 133.814307][ T4396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 133.823896][ T4396] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=102 sclass=netlink_xfrm_socket pid=4396 comm=syz.1.1395 [ 133.976521][ T4417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1404'. [ 134.537975][ T4441] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1415'. [ 134.546868][ T4443] ./dev/sda1: Can't open blockdev [ 134.916875][ T4480] netlink: 'syz.4.1431': attribute type 2 has an invalid length. [ 135.373252][ T4494] ip_tables: iptables: counters copy to user failed while replacing table [ 135.383428][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 135.392932][ T4494] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 135.498696][ T4500] veth0_macvtap: Caught tx_queue_len zero misconfig [ 135.512870][ T4500] netlink: 'syz.1.1439': attribute type 15 has an invalid length. [ 135.534961][ T4500] fuse: blksize only supported for fuseblk [ 135.547059][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 135.565129][ T4506] overlayfs: failed to clone lowerpath [ 135.571428][ T4500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1554 sclass=netlink_route_socket pid=4500 comm=syz.1.1439 [ 135.633352][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 136.728025][ T4543] ./dev/sda1: Can't open blockdev [ 137.019951][ T4550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1458'. [ 137.597515][ T4574] ./dev/sda1: Can't open blockdev [ 138.301148][ T4601] xt_l2tp: missing protocol rule (udp|l2tpip) [ 138.744638][ T4623] device batadv_slave_1 entered promiscuous mode [ 138.771015][ T4622] device batadv_slave_1 left promiscuous mode [ 139.384043][ T4636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1492'. [ 140.018580][ T4616] device veth0_vlan left promiscuous mode [ 140.045837][ T4645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1496'. [ 140.236006][ T4673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1507'. [ 140.316625][ T4665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'. [ 140.353818][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'. [ 140.500010][ T4689] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1512'. [ 140.575719][ T4700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1518'. [ 140.617866][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 140.617879][ T28] audit: type=1400 audit(1794734824.328:1595): avc: denied { read } for pid=4704 comm="syz.2.1521" path="socket:[28177]" dev="sockfs" ino=28177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.691609][ T4709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4709 comm=syz.4.1522 [ 140.727072][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 140.747888][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 140.773246][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 140.843612][ T4709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4709 comm=syz.4.1522 [ 140.940892][ T28] audit: type=1400 audit(1794734824.648:1596): avc: denied { getopt } for pid=4737 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.030648][ T4742] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 141.252491][ T4752] overlayfs: failed to clone upperpath [ 141.943136][ T4777] overlayfs: failed to clone upperpath [ 142.545437][ T4818] fuse: Invalid rootmode [ 142.564994][ T4829] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 142.640296][ T4838] ip_tables: iptables: counters copy to user failed while replacing table [ 143.189591][ T4849] xt_CT: No such helper "netbios-ns" [ 143.474116][ T28] audit: type=1326 audit(1794734827.178:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.2.1572" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b15a94d9 code=0x0 [ 143.746826][ T28] audit: type=1326 audit(1794734827.458:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4865 comm="syz.1.1575" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 143.948680][ T28] audit: type=1326 audit(1794734827.658:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.1582" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47657a94d9 code=0x0 [ 145.352998][ T4909] : renamed from bond_slave_0 [ 145.525606][ T4917] overlayfs: failed to resolve './file2': -2 [ 145.751025][ T4924] __nla_validate_parse: 5 callbacks suppressed [ 145.751043][ T4924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 145.778867][ T28] audit: type=1400 audit(1794734829.488:1600): avc: denied { read } for pid=4925 comm="syz.4.1597" path="socket:[29824]" dev="sockfs" ino=29824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.899712][ T28] audit: type=1326 audit(1794734830.548:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1604" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47657a94d9 code=0x0 [ 146.957559][ T28] audit: type=1326 audit(1794734830.668:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 146.982905][ T28] audit: type=1326 audit(1794734830.668:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.008554][ T28] audit: type=1326 audit(1794734830.668:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.033587][ T28] audit: type=1326 audit(1794734830.668:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.059289][ T28] audit: type=1326 audit(1794734830.668:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.084790][ T28] audit: type=1326 audit(1794734830.668:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.110155][ T28] audit: type=1326 audit(1794734830.668:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.135273][ T28] audit: type=1326 audit(1794734830.668:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.4.1609" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 147.410859][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 149.204158][ T5047] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1640'. [ 149.833951][ T5077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1652'. [ 149.999146][ T5091] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1658'. [ 150.174509][ T5106] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1664'. [ 150.286087][ T5117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1669'. [ 150.495321][ T5123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 150.586126][ T5125] fuse: Unknown parameter 'gRoup_id' [ 150.595683][ T5125] tmpfs: Unknown parameter 'Y_inodeNd9?s' [ 150.605429][ T5131] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1675'. [ 151.114173][ T5145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1681'. [ 151.272203][ T5153] x_tables: duplicate entry at hook 2 [ 151.293895][ T5154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 151.324776][ T5156] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1686'. [ 151.350197][ T5154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 151.851666][ T5173] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1692'. [ 151.994194][ T28] kauditd_printk_skb: 617 callbacks suppressed [ 151.994212][ T28] audit: type=1400 audit(1794734835.698:2227): avc: denied { create } for pid=5175 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.033631][ T28] audit: type=1326 audit(1794734835.698:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c9a94d9 code=0x7ffc0000 [ 152.059758][ T28] audit: type=1326 audit(1794734835.698:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c9a94d9 code=0x7ffc0000 [ 152.085784][ T28] audit: type=1326 audit(1794734835.698:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c9a94d9 code=0x7ffc0000 [ 152.111679][ T28] audit: type=1326 audit(1794734835.698:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c9a94d9 code=0x7ffc0000 [ 152.137831][ T28] audit: type=1326 audit(1794734835.698:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec7c9a94d9 code=0x7ffc0000 [ 152.163827][ T28] audit: type=1326 audit(1794734835.698:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec7c9a9242 code=0x7ffc0000 [ 152.196481][ T28] audit: type=1326 audit(1794734835.708:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec7c969d0e code=0x7ffc0000 [ 152.221830][ T28] audit: type=1326 audit(1794734835.708:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec7c9a9307 code=0x7ffc0000 [ 152.248224][ T28] audit: type=1326 audit(1794734835.728:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.1.1693" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fec7c9a82f7 code=0x7ffc0000 [ 152.700262][ T5187] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1697'. [ 153.233418][ T5200] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1703'. [ 153.739194][ T5214] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1708'. [ 153.757344][ T5216] overlayfs: failed to clone upperpath [ 153.771119][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 153.787916][ T5221] SELinux: security_context_str_to_sid () failed with errno=-22 [ 154.204030][ T5233] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1714'. [ 154.986250][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.993721][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.029329][ T5264] device ip6gre1 left promiscuous mode [ 155.035696][ T5264] device ipip0 left promiscuous mode [ 155.041988][ T5264] device ip6gre2 left promiscuous mode [ 155.049417][ T5264] device veth3 left promiscuous mode [ 155.058609][ T5264] device vlan1 left promiscuous mode [ 155.110897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 155.119027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 155.246706][ T5279] device veth1_macvtap left promiscuous mode [ 155.253411][ T5279] device veth1_macvtap entered promiscuous mode [ 155.260963][ T5279] device ipip0 left promiscuous mode [ 155.267001][ T5279] device batadv_slave_1 entered promiscuous mode [ 155.275611][ T5279] device ip6gre1 left promiscuous mode [ 155.281831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.289685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.297348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.305608][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.312666][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.320659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.329134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.337476][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.344543][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.352031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.360469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 155.368610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.376820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 155.384865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.393077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.401136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.409346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.417434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.425576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.433838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.442237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.450546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.458841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 155.466579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.474544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.482862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.491318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.499434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.507845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.516604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.524518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.532638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.540144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 155.548282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.556446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.564523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.572248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 155.579625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 155.587245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.636864][ T5354] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.645959][ T5354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.741116][ T5426] __nla_validate_parse: 3 callbacks suppressed [ 157.741133][ T5426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1790'. [ 157.774909][ T28] kauditd_printk_skb: 354 callbacks suppressed [ 157.774922][ T28] audit: type=1326 audit(1794734847.476:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.3.1788" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0e11a94d9 code=0x0 [ 157.869256][ T5430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1791'. [ 157.880050][ T5430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5430 comm=syz.2.1791 [ 157.894107][ T5430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1791'. [ 159.381148][ T5468] tipc: Enabling of bearer rejected, failed to enable media [ 159.391753][ T5473] overlayfs: failed to clone upperpath [ 159.409876][ T5476] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1801'. [ 159.481049][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 159.490267][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 159.501813][ T5487] xt_limit: Overflow, try lower: 0/0 [ 159.521101][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5493 comm=syz.4.1808 [ 159.598590][ T5505] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1813'. [ 159.884997][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 159.894105][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 159.905539][ T5520] xt_limit: Overflow, try lower: 0/0 [ 160.374608][ T5534] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.358523][ T28] audit: type=1326 audit(1794734851.056:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.388860][ T5542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1826'. [ 161.398518][ T28] audit: type=1326 audit(1794734851.056:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.423866][ T28] audit: type=1326 audit(1794734851.056:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.449542][ T28] audit: type=1326 audit(1794734851.056:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.474633][ T28] audit: type=1326 audit(1794734851.056:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.499743][ T28] audit: type=1326 audit(1794734851.056:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.524805][ T28] audit: type=1326 audit(1794734851.056:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.549906][ T28] audit: type=1326 audit(1794734851.056:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 161.574878][ T28] audit: type=1326 audit(1794734851.056:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.1824" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 162.242615][ T5599] overlayfs: failed to clone upperpath [ 162.617238][ T5614] bridge0: port 3(dummy0) entered blocking state [ 162.623653][ T5614] bridge0: port 3(dummy0) entered disabled state [ 162.630470][ T5614] device dummy0 entered promiscuous mode [ 162.636458][ T5614] bridge0: port 3(dummy0) entered blocking state [ 162.642826][ T5614] bridge0: port 3(dummy0) entered forwarding state [ 162.848613][ T5624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=5624 comm=syz.0.1861 [ 163.184021][ T5630] __nla_validate_parse: 6 callbacks suppressed [ 163.184034][ T5630] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1864'. [ 163.590905][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 163.590920][ T28] audit: type=1326 audit(1794734853.296:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.621952][ T28] audit: type=1326 audit(1794734853.296:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.646776][ T28] audit: type=1326 audit(1794734853.296:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.671598][ T28] audit: type=1326 audit(1794734853.296:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.696490][ T28] audit: type=1326 audit(1794734853.296:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.721218][ T28] audit: type=1326 audit(1794734853.296:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.746179][ T28] audit: type=1326 audit(1794734853.296:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.771220][ T28] audit: type=1326 audit(1794734853.296:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.796325][ T28] audit: type=1326 audit(1794734853.296:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.823321][ T28] audit: type=1326 audit(1794734853.296:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.0.1870" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47657a94d9 code=0x7ffc0000 [ 163.994874][ T5665] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1875'. [ 164.941017][ T5688] fuse: Bad value for 'group_id' [ 165.087925][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 165.170155][ T5709] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1887'. [ 165.323413][ T5719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1285 sclass=netlink_audit_socket pid=5719 comm=syz.3.1891 [ 165.356349][ T5719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5719 comm=syz.3.1891 [ 165.385266][ T5719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5719 comm=syz.3.1891 [ 165.438799][ T5722] device vlan2 entered promiscuous mode [ 166.772072][ T5744] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1899'. [ 167.624277][ T5778] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1910'. [ 167.766799][ T5780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1911'. [ 167.775832][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'. [ 167.784790][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'. [ 168.616585][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 168.616605][ T28] audit: type=1326 audit(1794734858.326:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.690516][ T28] audit: type=1326 audit(1794734858.356:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.715494][ T28] audit: type=1326 audit(1794734858.356:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.733168][ T5808] overlayfs: failed to clone upperpath [ 168.813794][ T28] audit: type=1326 audit(1794734858.356:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.849945][ T28] audit: type=1326 audit(1794734858.356:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.875081][ T28] audit: type=1326 audit(1794734858.356:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.906121][ T28] audit: type=1326 audit(1794734858.356:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.932080][ T28] audit: type=1326 audit(1794734858.356:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.952082][ T5808] SELinux: Context : is not valid (left unmapped). [ 168.957019][ T28] audit: type=1326 audit(1794734858.356:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 168.988168][ T28] audit: type=1326 audit(1794734858.396:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.2.1917" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 169.225079][ T5824] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 171.172962][ T5853] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1936'. [ 172.837894][ T5886] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1947'. [ 172.930699][ T5891] cgroup: Name too long [ 173.041167][ T5900] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1952'. [ 173.113363][ T5917] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1958'. [ 173.269732][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 173.307844][ T5941] netlink: 'syz.1.1967': attribute type 2 has an invalid length. [ 173.316878][ T5941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5941 comm=syz.1.1967 [ 173.407199][ T5948] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1970'. [ 173.639164][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 173.639186][ T28] audit: type=1400 audit(1794734863.346:2715): avc: denied { setattr } for pid=5960 comm="syz.4.1976" name="NETLINK" dev="sockfs" ino=32094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.818530][ T6000] netlink: 'syz.3.1989': attribute type 4 has an invalid length. [ 175.645040][ T6008] /dev/loop4: Can't open blockdev [ 175.865687][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'. [ 176.123424][ T28] audit: type=1400 audit(1794734865.826:2716): avc: denied { getopt } for pid=6030 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.156481][ T6033] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2000'. [ 176.901533][ T6063] overlayfs: failed to clone upperpath [ 176.916327][ T6065] netlink: 'syz.1.2010': attribute type 13 has an invalid length. [ 176.935352][ T6065] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 176.947755][ T6068] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2011'. [ 177.000796][ T6073] syz.1.2013 (6073): attempted to duplicate a private mapping with mremap. This is not supported. [ 177.092404][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 177.106000][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 177.204733][ T6103] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2024'. [ 177.248925][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 177.429502][ T6125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2031'. [ 177.438712][ T6126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2031'. [ 177.448885][ T28] audit: type=1326 audit(1794734867.156:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.2.2031" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x0 [ 178.316041][ T6135] cgroup: name respecified [ 178.365376][ T6154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2035'. [ 178.599563][ T28] audit: type=1326 audit(1794734868.306:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.624440][ T28] audit: type=1326 audit(1794734868.306:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.649330][ T28] audit: type=1326 audit(1794734868.306:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.674374][ T28] audit: type=1326 audit(1794734868.306:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.699295][ T28] audit: type=1326 audit(1794734868.306:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.724041][ T28] audit: type=1326 audit(1794734868.306:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.748967][ T28] audit: type=1326 audit(1794734868.306:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.773775][ T28] audit: type=1326 audit(1794734868.306:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.798569][ T28] audit: type=1326 audit(1794734868.306:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.823653][ T28] audit: type=1326 audit(1794734868.306:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.848755][ T28] audit: type=1326 audit(1794734868.306:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.875994][ T28] audit: type=1326 audit(1794734868.306:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.2038" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 178.900839][ T6168] TCP: TCP_TX_DELAY enabled [ 178.907063][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 178.989132][ T6176] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2046'. [ 179.313694][ T6208] 9pnet_fd: Insufficient options for proto=fd [ 180.071120][ T6238] ip_tables: iptables: counters copy to user failed while replacing table [ 180.080994][ T6238] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.467392][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.474629][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.481694][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.467099][ T6341] __nla_validate_parse: 3 callbacks suppressed [ 183.467118][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 183.670808][ T6361] device veth0_vlan left promiscuous mode [ 183.761526][ T6364] overlayfs: failed to clone upperpath [ 183.874909][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 183.874930][ T28] audit: type=1326 audit(1794734873.576:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.2119" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47657a94d9 code=0x0 [ 184.830288][ T6411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2132'. [ 185.210461][ T28] audit: type=1400 audit(1794734874.916:2780): avc: denied { audit_read } for pid=6422 comm="syz.3.2134" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.265522][ T28] audit: type=1326 audit(1794734874.966:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.1.2136" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 185.396287][ T28] audit: type=1326 audit(1794734875.106:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.421259][ T28] audit: type=1326 audit(1794734875.106:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.446563][ T28] audit: type=1326 audit(1794734875.106:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.471528][ T28] audit: type=1326 audit(1794734875.106:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.496433][ T28] audit: type=1326 audit(1794734875.106:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.521285][ T28] audit: type=1326 audit(1794734875.106:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.546113][ T28] audit: type=1326 audit(1794734875.106:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.3.2139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x7ffc0000 [ 185.604824][ T6438] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2140'. [ 185.647146][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.654358][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.707377][ T6440] device ipip0 left promiscuous mode [ 185.720981][ T6440] device macsec1 left promiscuous mode [ 185.728731][ T6440] device ip6gre1 left promiscuous mode [ 185.734919][ T6440] device vlan1 left promiscuous mode [ 185.838062][ T6457] xt_TCPMSS: Only works on TCP SYN packets [ 185.865871][ T6460] ./dev/sda1: Can't open blockdev [ 185.935709][ T6469] 9pnet_fd: Insufficient options for proto=fd [ 186.505949][ T6488] netlink: 'syz.0.2158': attribute type 34 has an invalid length. [ 186.542301][ T6492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 186.855683][ T6500] overlayfs: failed to resolve './file0': -2 [ 186.867986][ T6513] 9pnet_fd: Insufficient options for proto=fd [ 187.473577][ T6552] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2180'. [ 188.080257][ T6577] /dev/loop3: Can't open blockdev [ 188.085671][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 188.655278][ T6585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2201'. [ 188.771519][ T6585] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2201'. [ 188.828629][ T6585] netlink: 'syz.1.2201': attribute type 6 has an invalid length. [ 188.838761][ T6585] netlink: 'syz.1.2201': attribute type 5 has an invalid length. [ 188.847951][ T6585] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2201'. [ 189.215629][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 189.215642][ T28] audit: type=1326 audit(1794734878.916:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.274082][ T28] audit: type=1326 audit(1794734878.956:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.305943][ T28] audit: type=1326 audit(1794734878.956:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.340568][ T28] audit: type=1326 audit(1794734878.956:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.385681][ T28] audit: type=1326 audit(1794734878.956:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.410617][ T28] audit: type=1326 audit(1794734878.956:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.435915][ T28] audit: type=1326 audit(1794734878.956:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.461015][ T28] audit: type=1326 audit(1794734878.956:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.487725][ T28] audit: type=1326 audit(1794734878.956:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.512919][ T28] audit: type=1326 audit(1794734878.956:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.2200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 189.800795][ T6625] xt_hashlimit: size too large, truncated to 1048576 [ 190.109443][ T6635] 9pnet_fd: Insufficient options for proto=fd [ 190.955966][ T6649] overlayfs: failed to clone upperpath [ 191.422225][ T6664] netlink: 'syz.4.2219': attribute type 4 has an invalid length. [ 191.500794][ T6685] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2225'. [ 191.533115][ T6689] sch_fq: defrate 65536 ignored. [ 191.789397][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 192.028505][ T6717] tmpfs: Unknown parameter '0xffffffffffffffff' [ 192.226195][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 192.483659][ T6712] netlink: 'syz.3.2235': attribute type 4 has an invalid length. [ 192.637102][ T6713] device vlan1 entered promiscuous mode [ 192.669885][ T6751] x_tables: duplicate underflow at hook 1 [ 193.629515][ T6796] netlink: 'syz.2.2264': attribute type 4 has an invalid length. [ 193.640899][ T6796] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2264'. [ 193.682872][ T6802] ip_tables: iptables: counters copy to user failed while replacing table [ 193.722298][ T6804] ip_tables: iptables: counters copy to user failed while replacing table [ 194.002036][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2272'. [ 194.032929][ T6665] syz.2.2218 (6665) used greatest stack depth: 13800 bytes left [ 194.054515][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 194.063852][ T6825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48488 sclass=netlink_route_socket pid=6825 comm=syz.1.2275 [ 194.077098][ T6817] netlink: 'syz.2.2272': attribute type 2 has an invalid length. [ 194.413885][ T6839] device bridge2 entered promiscuous mode [ 194.645906][ T28] kauditd_printk_skb: 1882 callbacks suppressed [ 194.645920][ T28] audit: type=1400 audit(1794734884.356:4757): avc: denied { map } for pid=6846 comm="syz.3.2284" path="socket:[42881]" dev="sockfs" ino=42881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.690333][ T6837] 9pnet_fd: Insufficient options for proto=fd [ 194.713173][ T6849] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2285'. [ 194.778569][ T28] audit: type=1400 audit(1794734884.386:4758): avc: denied { accept } for pid=6846 comm="syz.3.2284" path="socket:[42881]" dev="sockfs" ino=42881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.890731][ T6861] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2289'. [ 194.927250][ T6869] 9pnet_fd: Insufficient options for proto=fd [ 195.218997][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 195.266198][ T6882] device bridge0 entered promiscuous mode [ 195.272642][ T6882] device macsec1 entered promiscuous mode [ 195.436487][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 195.852421][ T6904] 9pnet_fd: Insufficient options for proto=fd [ 196.710902][ T28] audit: type=1326 audit(1794734886.416:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.2314" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47657a94d9 code=0x0 [ 197.433012][ T6936] 9pnet_fd: Insufficient options for proto=fd [ 197.479976][ T6944] device vlan0 entered promiscuous mode [ 197.485651][ T6944] device veth1 entered promiscuous mode [ 197.636933][ T28] audit: type=1326 audit(1794734887.346:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.4.2322" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7face1da94d9 code=0x0 [ 197.676196][ T6949] netlink: 'syz.4.2322': attribute type 4 has an invalid length. [ 198.939443][ T6964] overlayfs: failed to clone upperpath [ 199.221485][ T6987] ip_tables: iptables: counters copy to user failed while replacing table [ 199.408639][ T7019] fuse: Unknown parameter 'grup_id' [ 200.382429][ T28] audit: type=1400 audit(1794734890.086:4761): avc: denied { ioctl } for pid=7040 comm="syz.0.2359" path="socket:[43311]" dev="sockfs" ino=43311 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.453681][ T7057] IPv6: Can't replace route, no match found [ 200.584079][ T7076] 9pnet_fd: Insufficient options for proto=fd [ 200.601367][ T7078] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2371'. [ 200.610498][ T7078] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2371'. [ 200.645008][ T7083] ./dev/sda1: Can't open blockdev [ 200.785163][ T7102] 9pnet_fd: Insufficient options for proto=fd [ 201.280661][ T7126] 9pnet_fd: Insufficient options for proto=fd [ 201.825923][ T7154] cgroup: fork rejected by pids controller in /syz0 [ 201.854712][ T7189] lo: mtu less than device minimum [ 201.899346][ T7201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2408'. [ 201.903149][ T28] audit: type=1326 audit(1794734891.606:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.3.2409" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0e11a94d9 code=0x0 [ 202.158214][ T7208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2411'. [ 202.243078][ T28] audit: type=1400 audit(1794734891.946:4763): avc: denied { shutdown } for pid=7213 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.170053][ T7250] device vlan2 entered promiscuous mode [ 203.175700][ T7250] device syz_tun entered promiscuous mode [ 204.027996][ T7260] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2427'. [ 204.142356][ T7275] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 204.165887][ T7278] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 204.181073][ T28] audit: type=1326 audit(1794734893.876:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.206816][ T28] audit: type=1326 audit(1794734893.876:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.232800][ T28] audit: type=1326 audit(1794734893.876:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.295612][ T28] audit: type=1326 audit(1794734893.886:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.449472][ T28] audit: type=1326 audit(1794734893.886:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.523332][ T28] audit: type=1326 audit(1794734893.886:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3b1569d0e code=0x7ffc0000 [ 204.549481][ T28] audit: type=1326 audit(1794734893.886:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.2429" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3b15a94d9 code=0x7ffc0000 [ 204.591280][ T7298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.904555][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'. [ 206.523378][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 206.523394][ T28] audit: type=1326 audit(1794734896.226:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.2462" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b15a94d9 code=0x0 [ 207.442578][ T7375] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2467'. [ 207.597627][ T7390] 9pnet_fd: Insufficient options for proto=fd [ 207.658128][ T28] audit: type=1326 audit(1794734897.366:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7394 comm="syz.1.2475" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 207.876943][ T7382] overlayfs: failed to clone upperpath [ 209.090997][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 209.546703][ T28] audit: type=1400 audit(1794734899.256:4791): avc: denied { create } for pid=7446 comm="syz.2.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.714178][ T28] audit: type=1400 audit(1794734900.416:4792): avc: denied { nlmsg_read } for pid=7460 comm="syz.4.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.813577][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 211.085301][ T7491] netlink: 'syz.1.2511': attribute type 49 has an invalid length. [ 211.187309][ T7491] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 211.197943][ T7491] device ip6gretap0 entered promiscuous mode [ 211.463699][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'. [ 211.639290][ T7534] netlink: 'syz.4.2523': attribute type 4 has an invalid length. [ 211.659424][ T7534] netlink: 'syz.4.2523': attribute type 4 has an invalid length. [ 211.687172][ T7542] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2528'. [ 212.303723][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 212.316558][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 212.619835][ T28] audit: type=1326 audit(1794734902.326:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.2542" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7face1da94d9 code=0x0 [ 213.052484][ T28] audit: type=1326 audit(1794734902.756:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.2548" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 213.788888][ T7629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7629 comm=syz.4.2556 [ 213.824088][ T7629] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 216.265274][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 216.548459][ T28] audit: type=1400 audit(1794734906.256:4795): avc: denied { module_request } for pid=7746 comm="syz.3.2605" kmod="net-pf-2-proto-255-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 216.634749][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2611'. [ 216.675666][ T7770] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 217.219163][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 217.740373][ T7818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.811102][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 217.861644][ T7831] ip_tables: iptables: counters copy to user failed while replacing table [ 218.103766][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2640'. [ 218.125356][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 218.134551][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2641'. [ 218.143734][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2641'. [ 218.627235][ T7849] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 218.637890][ T28] audit: type=1400 audit(1794734908.346:4796): avc: denied { relabelto } for pid=7848 comm="syz.1.2644" name="478" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 218.666236][ T28] audit: type=1400 audit(1794734908.346:4797): avc: denied { associate } for pid=7848 comm="syz.1.2644" name="478" dev="tmpfs" ino=2655 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 218.694532][ T28] audit: type=1400 audit(1794734908.376:4798): avc: denied { write } for pid=289 comm="syz-executor" name="478" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 218.721849][ T28] audit: type=1400 audit(1794734908.376:4799): avc: denied { remove_name } for pid=289 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 218.749939][ T28] audit: type=1400 audit(1794734908.376:4800): avc: denied { rmdir } for pid=289 comm="syz-executor" name="478" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 219.678210][ T7892] xt_limit: Overflow, try lower: 0/0 [ 219.810492][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 219.837568][ T7912] xt_TCPMSS: Only works on TCP SYN packets [ 220.534387][ T7922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2674'. [ 220.917870][ T28] audit: type=1400 audit(1794734910.626:4801): avc: denied { read } for pid=7935 comm="syz.1.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.006685][ T7949] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.025672][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.325425][ T7953] xt_limit: Overflow, try lower: 0/0 [ 221.546639][ T7964] __nla_validate_parse: 2 callbacks suppressed [ 221.546658][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 221.833162][ T7981] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2694'. [ 221.849398][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.858666][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.870371][ T7971] device bridge_slave_0 entered promiscuous mode [ 221.904537][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.911776][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.920926][ T7971] device bridge_slave_1 entered promiscuous mode [ 222.240072][ T7991] ./dev/sda1: Can't open blockdev [ 222.791329][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2697'. [ 222.832411][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2701'. [ 222.932173][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.939929][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.949035][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.957606][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.966127][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.973160][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.981456][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.137965][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.156087][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.164354][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.171419][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.197720][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.211272][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.242828][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.259451][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.276217][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.290908][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.293704][ T8029] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2706'. [ 223.308802][ T7971] device veth0_vlan entered promiscuous mode [ 223.322167][ T7971] device veth1_macvtap entered promiscuous mode [ 223.329503][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.342375][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.351148][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.376404][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.388848][ T28] audit: type=1400 audit(1794734913.086:4802): avc: denied { mounton } for pid=7971 comm="syz-executor" path="/root/syzkaller.rU70hJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 223.471659][ T8033] loop2: detected capacity change from 0 to 34816 [ 223.484613][ T8033] EXT4-fs: Ignoring removed oldalloc option [ 223.538168][ T8033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.643153][ T8033] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 223.658128][ T8033] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 850 with error 28 [ 223.670653][ T8033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.670653][ T8033] [ 223.680379][ T8033] EXT4-fs (loop2): Total free blocks count 0 [ 223.686516][ T8033] EXT4-fs (loop2): Free/Dirty block details [ 223.692783][ T8033] EXT4-fs (loop2): free_blocks=4096 [ 223.699730][ T8033] EXT4-fs (loop2): dirty_blocks=864 [ 223.708808][ T28] audit: type=1400 audit(1794734913.416:4803): avc: denied { ioctl } for pid=8032 comm="syz.2.2689" path="/0/file1/file1" dev="loop2" ino=15 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.733593][ T8033] EXT4-fs (loop2): Block reservation details [ 223.739693][ T8033] EXT4-fs (loop2): i_reserved_data_blocks=54 [ 223.857967][ T7971] EXT4-fs (loop2): unmounting filesystem. [ 224.110514][ T8055] loop2: detected capacity change from 0 to 33280 [ 224.240700][ T8055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 224.248963][ T8055] System zones: 1-12 [ 224.256279][ T8055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.2711: missing EA_INODE flag [ 224.269516][ T8055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2711: error while reading EA inode 12 err=-117 [ 224.283744][ T8055] EXT4-fs (loop2): 1 orphan inode deleted [ 224.289618][ T8055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.824667][ T28] audit: type=1326 audit(1794734914.526:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.1.2714" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 224.894674][ T7971] EXT4-fs (loop2): unmounting filesystem. [ 224.903589][ T8065] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 224.927440][ T28] audit: type=1400 audit(1794734914.636:4805): avc: denied { read write } for pid=8066 comm="syz.2.2716" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.940894][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 224.952275][ T28] audit: type=1400 audit(1794734914.666:4806): avc: denied { open } for pid=8066 comm="syz.2.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.984442][ T28] audit: type=1400 audit(1794734914.666:4807): avc: denied { ioctl } for pid=8066 comm="syz.2.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.215784][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 225.635870][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 225.642481][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.650884][ T6] usb 3-1: config 5 has an invalid interface number: 187 but max is 0 [ 225.659152][ T6] usb 3-1: config 5 has no interface number 0 [ 225.665228][ T6] usb 3-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 225.676158][ T6] usb 3-1: config 5 interface 187 has no altsetting 0 [ 226.519338][ T6] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 226.538229][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.561410][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 226.570534][ T6] usb 3-1: Product: syz [ 226.574699][ T6] usb 3-1: Manufacturer: syz [ 226.590697][ T6] usb 3-1: SerialNumber: syz [ 226.640994][ T28] audit: type=1326 audit(1794734916.346:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.4.2737" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7face1da94d9 code=0x0 [ 226.680943][ T8120] x_tables: unsorted underflow at hook 2 [ 227.202643][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'. [ 227.438404][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2742'. [ 227.886598][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2749'. [ 228.010917][ T28] audit: type=1326 audit(1794734917.716:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.1.2756" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 229.253343][ T6] cdc_mbim 3-1:5.187: CDC Union missing and no IAD found [ 229.293133][ T6] cdc_mbim 3-1:5.187: bind() failure [ 229.300244][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 229.310641][ T6] usb 3-1: USB disconnect, device number 3 [ 229.413786][ T8202] 9pnet_fd: Insufficient options for proto=fd [ 229.622226][ T28] audit: type=1400 audit(1794734919.326:4810): avc: denied { read } for pid=8220 comm="syz.2.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.666658][ T28] audit: type=1326 audit(1794734919.376:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.692088][ T28] audit: type=1326 audit(1794734919.376:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.703267][ T8232] mmap: syz.3.2780 (8232): VmData 35328000 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 229.736719][ T28] audit: type=1326 audit(1794734919.436:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.738270][ T8227] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 229.773148][ T28] audit: type=1326 audit(1794734919.436:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.799103][ T28] audit: type=1326 audit(1794734919.446:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.824646][ T8227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.828915][ T28] audit: type=1326 audit(1794734919.446:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.836274][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 229.858253][ T28] audit: type=1326 audit(1794734919.446:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7face1da8347 code=0x7ffc0000 [ 229.892367][ T28] audit: type=1326 audit(1794734919.446:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face1da94d9 code=0x7ffc0000 [ 229.917355][ T28] audit: type=1326 audit(1794734919.446:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2778" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7face1da8347 code=0x7ffc0000 [ 230.214719][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 230.265365][ T8281] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2795'. [ 230.296677][ T8287] x_tables: unsorted underflow at hook 2 [ 230.436581][ T8297] Invalid ELF header len 1 [ 230.760629][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2805'. [ 230.769869][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.875326][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 230.955801][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 230.962359][ T6] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 230.985779][ T6] usb 3-1: can't read configurations, error -61 [ 231.145787][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.254132][ T8328] x_tables: unsorted underflow at hook 2 [ 231.335824][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 231.343289][ T6] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 231.368668][ T6] usb 3-1: can't read configurations, error -61 [ 231.383365][ T6] usb usb3-port1: attempt power cycle [ 231.805789][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 231.846138][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 231.852831][ T6] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 231.868722][ T6] usb 3-1: can't read configurations, error -61 [ 231.947103][ T8360] x_tables: unsorted underflow at hook 2 [ 232.011973][ T8363] __nla_validate_parse: 1 callbacks suppressed [ 232.011990][ T8363] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2823'. [ 232.027608][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.042076][ T8356] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 232.056112][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 232.062709][ T6] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 232.075492][ T6] usb 3-1: can't read configurations, error -61 [ 232.085976][ T6] usb usb3-port1: unable to enumerate USB device [ 232.090678][ T8356] ip_tables: iptables: counters copy to user failed while replacing table [ 233.042263][ T8400] overlayfs: failed to clone upperpath [ 234.472722][ T8441] ip_tables: iptables: counters copy to user failed while replacing table [ 234.558539][ T8458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8458 comm=syz.2.2860 [ 234.589552][ T8467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8467 comm=syz.2.2860 [ 234.648520][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 234.648534][ T28] audit: type=1400 audit(1794734924.356:4880): avc: denied { listen } for pid=8481 comm="syz.2.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.653696][ T8483] loop2: detected capacity change from 0 to 256 [ 234.654666][ T28] audit: type=1400 audit(1794734924.356:4881): avc: denied { connect } for pid=8481 comm="syz.2.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.758278][ T8483] FAT-fs (loop2): Unrecognized mount option "Shortname=win95" or missing value [ 235.144618][ T60] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.342816][ T8524] ./dev/sda1: Can't open blockdev [ 235.348280][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 235.355462][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.453055][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.578635][ T60] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 235.690929][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.847269][ T60] usb 3-1: SerialNumber: syz [ 235.892988][ T60] usb 3-1: 0:2 : does not exist [ 236.026575][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 236.165684][ T8498] loop2: detected capacity change from 0 to 40427 [ 236.175232][ T8498] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 236.184436][ T8498] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 236.192720][ T8498] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000003" or missing value [ 236.266793][ T60] usb 3-1: USB disconnect, device number 8 [ 236.466176][ T8448] udevd[8448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.413179][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2905'. [ 237.698149][ T581] tipc: Left network mode [ 237.736040][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 237.749919][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2915'. [ 237.778453][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.790781][ T8611] xt_limit: Overflow, try lower: 2147483649/3300 [ 237.797317][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.804875][ T8609] device bridge_slave_0 entered promiscuous mode [ 237.816090][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.823179][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.830871][ T8609] device bridge_slave_1 entered promiscuous mode [ 237.858392][ T8614] loop2: detected capacity change from 0 to 40427 [ 237.867243][ T8614] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 237.875787][ T8614] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 237.884023][ T8614] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615V͝rRlZBbF!Ȏ6M} " or missing value [ 237.903336][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.910410][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.917659][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.924933][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.952041][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.959849][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.969179][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.992788][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.997342][ T8614] loop2: detected capacity change from 0 to 512 [ 238.001239][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.014211][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.021752][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.029948][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.051616][ T8609] device veth0_vlan entered promiscuous mode [ 238.061613][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.071123][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.079755][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.087765][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.104701][ T8609] device veth1_macvtap entered promiscuous mode [ 238.111605][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.122142][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.132412][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.286609][ T581] device dummy0 left promiscuous mode [ 238.292039][ T581] bridge0: port 3(dummy0) entered disabled state [ 238.298943][ T581] device bridge_slave_1 left promiscuous mode [ 238.305258][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.312812][ T581] device bridge_slave_0 left promiscuous mode [ 238.319031][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.327419][ T581] device batadv_slave_1 left promiscuous mode [ 238.333547][ T581] device veth1_macvtap left promiscuous mode [ 238.365881][ T2041] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.425885][ T295] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.447748][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 238.546865][ T2041] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 238.565793][ T2041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.588653][ T2041] usb-storage 3-1:1.0: USB Mass Storage device detected [ 238.605857][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 238.613574][ T295] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.337332][ T28] audit: type=1400 audit(1794734929.046:4882): avc: denied { ioctl } for pid=8642 comm="syz.4.2926" path="socket:[47702]" dev="sockfs" ino=47702 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.487111][ T28] audit: type=1400 audit(1794734929.166:4883): avc: denied { listen } for pid=8642 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.568299][ T295] usb 4-1: config 5 has an invalid interface number: 187 but max is 0 [ 239.576674][ T295] usb 4-1: config 5 has no interface number 0 [ 239.582837][ T295] usb 4-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 239.593785][ T2041] scsi host1: usb-storage 3-1:1.0 [ 239.601354][ T2041] usb 3-1: USB disconnect, device number 9 [ 239.608249][ T295] usb 4-1: config 5 interface 187 has no altsetting 0 [ 239.620559][ T295] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 239.629659][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.638075][ T295] usb 4-1: Product: syz [ 239.642247][ T295] usb 4-1: Manufacturer: syz [ 239.646904][ T295] usb 4-1: SerialNumber: syz [ 239.708681][ T8658] xt_hashlimit: size too large, truncated to 1048576 [ 239.855022][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2906'. [ 239.873258][ T295] cdc_mbim 4-1:5.187: CDC Union missing and no IAD found [ 239.882553][ T295] cdc_mbim 4-1:5.187: bind() failure [ 239.902034][ T295] usb 4-1: USB disconnect, device number 3 [ 239.963999][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.967296][ T8660] loop2: detected capacity change from 0 to 40427 [ 239.971701][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.985258][ T8660] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 239.993415][ T8660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 240.001896][ T8660] F2FS-fs (loop2): Image doesn't support compression [ 240.008986][ T8660] F2FS-fs (loop2): Image doesn't support compression [ 240.010685][ T8664] device vlan2 left promiscuous mode [ 240.019321][ T8660] F2FS-fs (loop2): invalid crc value [ 240.023830][ T8664] device syz_tun left promiscuous mode [ 240.028010][ T8660] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 240.055256][ T8660] F2FS-fs (loop2): Start checkpoint disabled! [ 240.061857][ T8660] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 240.069570][ T8660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 240.077003][ T8660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 240.338350][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 240.497258][ T8690] loop2: detected capacity change from 0 to 512 [ 240.504570][ T8690] FAT-fs (loop2): Directory bread(block 2080) failed [ 240.511366][ T8690] FAT-fs (loop2): Directory bread(block 2081) failed [ 240.518410][ T8690] FAT-fs (loop2): Directory bread(block 2082) failed [ 240.525625][ T8690] FAT-fs (loop2): Directory bread(block 2083) failed [ 240.532821][ T8690] FAT-fs (loop2): Directory bread(block 2084) failed [ 240.539935][ T8690] FAT-fs (loop2): Directory bread(block 2085) failed [ 240.549051][ T8690] FAT-fs (loop2): Directory bread(block 2086) failed [ 240.557058][ T8690] FAT-fs (loop2): Directory bread(block 2087) failed [ 240.700945][ T28] audit: type=1400 audit(1794734930.406:4884): avc: denied { mount } for pid=8689 comm="syz.2.2942" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 241.074364][ T28] audit: type=1400 audit(1794734930.656:4885): avc: denied { unmount } for pid=7971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 241.347062][ T8696] loop3: detected capacity change from 0 to 33792 [ 241.379128][ T8696] EXT4-fs: Ignoring removed bh option [ 241.416598][ T8696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.433599][ T28] audit: type=1400 audit(1794734931.136:4886): avc: denied { write } for pid=8695 comm="syz.3.2944" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.444906][ T8696] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.2944: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 241.459161][ T28] audit: type=1400 audit(1794734931.136:4887): avc: denied { add_name } for pid=8695 comm="syz.3.2944" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.475980][ T8696] EXT4-fs (loop3): Remounting filesystem read-only [ 241.497229][ T28] audit: type=1400 audit(1794734931.136:4888): avc: denied { setattr } for pid=8695 comm="syz.3.2944" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.506634][ T8696] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 241.527879][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2948'. [ 241.537500][ T28] audit: type=1400 audit(1794734931.136:4889): avc: denied { write open } for pid=8695 comm="syz.3.2944" path=2F202864656C6574656429 dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.557289][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'. [ 241.569767][ T28] audit: type=1400 audit(1794734931.136:4890): avc: denied { remove_name } for pid=8695 comm="syz.3.2944" name="#3" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.599221][ T8696] SELinux: security_context_str_to_sid (system_) failed with errno=-22 [ 241.600909][ T28] audit: type=1400 audit(1794734931.136:4891): avc: denied { rename } for pid=8695 comm="syz.3.2944" name="#3" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.630721][ T28] audit: type=1400 audit(1794734931.136:4892): avc: denied { unlink } for pid=8695 comm="syz.3.2944" name="#3" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 241.652914][ T28] audit: type=1400 audit(1794734931.136:4893): avc: denied { unlink } for pid=8695 comm="syz.3.2944" name="#4" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.675900][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.698262][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.705147][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.728144][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.734782][ T8609] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 241.754993][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.761752][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 241.776175][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.787907][ T8720] /dev/loop0: Can't open blockdev [ 241.798555][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.809981][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.832224][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.838997][ T8609] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 241.859058][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.865631][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 241.880210][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.902645][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.909807][ T8609] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 241.932046][ T8609] EXT4-fs (loop3): Remounting filesystem read-only [ 241.938843][ T8609] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 241.959150][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 241.974169][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 241.991573][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 242.011436][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 242.028477][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 242.043405][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 242.051452][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'. [ 242.058593][ T8609] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 242.107890][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2962'. [ 242.375309][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.382657][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.390842][ T8756] device bridge_slave_0 entered promiscuous mode [ 242.400600][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.407903][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.415423][ T8756] device bridge_slave_1 entered promiscuous mode [ 242.447103][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 242.478715][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.485805][ T8756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.493157][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.500201][ T8756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.519433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.527139][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.534652][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.553058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.561524][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.568606][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.576561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.584759][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.591818][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.601812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.611525][ T8774] fuse: Unknown parameter '' [ 242.620043][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.646128][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.650252][ T8780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8780 comm=syz.1.2981 [ 242.660723][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.675150][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.682912][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.691940][ T8756] device veth0_vlan entered promiscuous mode [ 242.707792][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.716363][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.724891][ T8756] device veth1_macvtap entered promiscuous mode [ 242.735129][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.743072][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.752587][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.765940][ T581] device bridge_slave_1 left promiscuous mode [ 242.772851][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.780625][ T581] device bridge_slave_0 left promiscuous mode [ 242.787105][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.795240][ T581] device veth1_macvtap left promiscuous mode [ 242.801439][ T581] device veth0_vlan left promiscuous mode [ 242.860714][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.869186][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.879560][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 242.891692][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 242.997507][ T8806] loop2: detected capacity change from 0 to 8192 [ 243.822209][ T7971] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 243.830128][ T7971] FAT-fs (loop2): Filesystem has been set read-only [ 243.892321][ T8830] loop2: detected capacity change from 0 to 8192 [ 243.894981][ T8835] x_tables: unsorted underflow at hook 2 [ 243.907502][ T8830] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 243.967783][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'. [ 244.054000][ T8840] device vlan3 entered promiscuous mode [ 244.059603][ T8840] device bond_slave_1 entered promiscuous mode [ 244.066388][ T8840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 244.082253][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3002'. [ 244.703602][ T8856] overlayfs: failed to clone upperpath [ 244.766750][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 244.879391][ T8861] x_tables: unsorted underflow at hook 2 [ 245.357822][ T515] device bridge0 left promiscuous mode [ 245.364509][ T515] device veth0_vlan left promiscuous mode [ 245.475845][ T405] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.665762][ T405] usb 3-1: Using ep0 maxpacket: 16 [ 245.672309][ T405] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.683657][ T405] usb 3-1: config 5 has an invalid interface number: 187 but max is 0 [ 245.706214][ T405] usb 3-1: config 5 has no interface number 0 [ 245.712327][ T405] usb 3-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 245.751647][ T405] usb 3-1: config 5 interface 187 has no altsetting 0 [ 245.763632][ T405] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 245.773876][ T8918] x_tables: unsorted underflow at hook 2 [ 245.781218][ T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.799402][ T405] usb 3-1: Product: syz [ 245.803592][ T405] usb 3-1: Manufacturer: syz [ 245.824640][ T405] usb 3-1: SerialNumber: syz [ 246.050088][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'. [ 246.069044][ T405] cdc_mbim 3-1:5.187: CDC Union missing and no IAD found [ 246.081937][ T405] cdc_mbim 3-1:5.187: bind() failure [ 246.097764][ T405] usb 3-1: USB disconnect, device number 10 [ 246.725938][ T8973] x_tables: unsorted underflow at hook 2 [ 246.783712][ T8890] loop5: detected capacity change from 0 to 262144 [ 246.803278][ T8890] F2FS-fs (loop5): invalid crc value [ 246.816903][ T8890] F2FS-fs (loop5): Found nat_bits in checkpoint [ 246.904228][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 246.904243][ T28] audit: type=1400 audit(1794734936.606:4903): avc: denied { connect } for pid=8976 comm="syz.4.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.025910][ T8890] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 247.082578][ T28] audit: type=1400 audit(1794734936.786:4904): avc: denied { shutdown } for pid=8889 comm="syz.5.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.103267][ T8890] F2FS-fs (loop5): checksum invalid, nid = 4, ino_of_node = 4, ecd1f60d vs. c11e22d6 [ 248.116651][ T9011] x_tables: unsorted underflow at hook 2 [ 249.286778][ T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 249.409163][ T9033] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3051'. [ 249.475814][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 249.482371][ T60] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.502113][ T60] usb 3-1: config 5 has an invalid interface number: 187 but max is 0 [ 249.526783][ T60] usb 3-1: config 5 has no interface number 0 [ 249.545524][ T60] usb 3-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 249.579146][ T60] usb 3-1: config 5 interface 187 has no altsetting 0 [ 249.601739][ T60] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 249.618390][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.627092][ T60] usb 3-1: Product: syz [ 249.631501][ T60] usb 3-1: Manufacturer: syz [ 249.631743][ T9041] ip_tables: iptables: counters copy to user failed while replacing table [ 249.645007][ T60] usb 3-1: SerialNumber: syz [ 249.854070][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 249.869149][ T60] cdc_mbim 3-1:5.187: CDC Union missing and no IAD found [ 249.878547][ T60] cdc_mbim 3-1:5.187: bind() failure [ 249.890133][ T60] usb 3-1: USB disconnect, device number 11 [ 249.953725][ T9052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3057'. [ 249.971579][ T9054] x_tables: unsorted underflow at hook 2 [ 249.998329][ T28] audit: type=1400 audit(1794734939.706:4905): avc: denied { accept } for pid=9056 comm="syz.0.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.451440][ T9071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3066'. [ 250.499094][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3068'. [ 250.512125][ T28] audit: type=1400 audit(1794734940.216:4906): avc: denied { write } for pid=9072 comm="syz.2.3065" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 250.537625][ T9084] x_tables: unsorted underflow at hook 2 [ 250.567837][ T28] audit: type=1400 audit(1794734940.276:4907): avc: denied { mounton } for pid=9086 comm="syz.4.3070" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 250.567912][ T9087] incfs: mount failed -22 [ 250.603197][ T9087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.874331][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 251.140116][ T28] audit: type=1326 audit(1794734940.846:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.1.3073" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7c9a94d9 code=0x0 [ 251.371503][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3076'. [ 251.380672][ T28] audit: type=1400 audit(1794734941.086:4909): avc: denied { map } for pid=9106 comm="syz.4.3076" path="socket:[49636]" dev="sockfs" ino=49636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 251.437896][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'. [ 251.463882][ T9121] x_tables: unsorted underflow at hook 2 [ 251.627227][ T28] audit: type=1400 audit(1794734941.336:4910): avc: denied { read write } for pid=9128 comm="syz.5.3084" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 251.650804][ T28] audit: type=1400 audit(1794734941.336:4911): avc: denied { open } for pid=9128 comm="syz.5.3084" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 251.650880][ T9129] loop5: detected capacity change from 0 to 33280 [ 251.674349][ T28] audit: type=1400 audit(1794734941.336:4912): avc: denied { ioctl } for pid=9128 comm="syz.5.3084" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 251.683652][ T9129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 251.715177][ T9129] EXT4-fs warning (device loop5): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 251.828887][ T9131] loop5: detected capacity change from 0 to 49152 [ 251.838561][ T9131] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 251.845876][ T8448] udevd[8448]: incorrect ext4 checksum on /dev/loop5 [ 251.925700][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 252.018792][ T9139] overlayfs: failed to clone upperpath [ 252.066809][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3091'. [ 252.099079][ T9148] x_tables: unsorted underflow at hook 2 [ 252.119728][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.126810][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.134090][ T9143] device bridge_slave_0 entered promiscuous mode [ 252.141040][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.148100][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.155567][ T9143] device bridge_slave_1 entered promiscuous mode [ 252.194715][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.201788][ T9143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.209070][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.216113][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.234641][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.242233][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.250212][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.259165][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.267416][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.274470][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.283134][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.291554][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.298596][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.310872][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.326701][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.335566][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.344554][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.353879][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.361491][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.369552][ T9143] device veth0_vlan entered promiscuous mode [ 252.379792][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.389149][ T9143] device veth1_macvtap entered promiscuous mode [ 252.398619][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.408537][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.452632][ T9161] tipc: Enabling of bearer rejected, failed to enable media [ 252.462503][ T9161] netem: change failed [ 252.467252][ T9161] printk: syz.4.3096 (9161): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 252.680458][ T9181] device ip6gre2 entered promiscuous mode [ 252.845800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.924563][ T9182] loop1: detected capacity change from 0 to 256 [ 252.994186][ T9182] FAT-fs (loop1): Unrecognized mount option "shortnamet" or missing value [ 253.549956][ T8448] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.621755][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.629022][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.636527][ T9184] device bridge_slave_0 entered promiscuous mode [ 253.655364][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.664058][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.666169][ T9194] tmpfs: Bad value for 'mode' [ 253.671598][ T9184] device bridge_slave_1 entered promiscuous mode [ 253.721664][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.728757][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.736056][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.743095][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.767490][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.774847][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.783264][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.791539][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.810515][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.819068][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.826157][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.834244][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.843180][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.850248][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.864717][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.873030][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.889827][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.900964][ T9184] device veth0_vlan entered promiscuous mode [ 253.907992][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.916347][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.923852][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.935813][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.944937][ T9184] device veth1_macvtap entered promiscuous mode [ 253.954399][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.964445][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.315806][ T295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 254.345789][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.352872][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.360942][ T9217] device bridge_slave_0 entered promiscuous mode [ 254.368831][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.376072][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.383436][ T9217] device bridge_slave_1 entered promiscuous mode [ 254.422561][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.429619][ T9217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.436924][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.443948][ T9217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.463903][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.471675][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.479134][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.489637][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.498245][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.505401][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.512905][ T295] usb 1-1: Using ep0 maxpacket: 16 [ 254.514653][ T9222] loop2: detected capacity change from 0 to 33792 [ 254.528539][ T9222] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.530672][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.557855][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.565499][ T9222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.567114][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.581850][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.590680][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.597900][ T28] audit: type=1400 audit(1794734944.306:4913): avc: denied { mounton } for pid=9221 comm="syz.2.3116" path="/50/file1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 254.598560][ T295] usb 1-1: config 5 has an invalid interface number: 187 but max is 0 [ 254.629856][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.640351][ T295] usb 1-1: config 5 has no interface number 0 [ 254.646658][ T295] usb 1-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 254.660426][ T7971] EXT4-fs (loop2): unmounting filesystem. [ 254.666299][ T295] usb 1-1: config 5 interface 187 has no altsetting 0 [ 254.667252][ T9229] __nla_validate_parse: 2 callbacks suppressed [ 254.667266][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 254.680175][ T295] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 254.698374][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.709283][ T9231] loop2: detected capacity change from 0 to 33792 [ 254.716268][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.716884][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.725149][ T9231] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.744084][ T295] usb 1-1: Product: syz [ 254.748438][ T295] usb 1-1: Manufacturer: syz [ 254.753094][ T295] usb 1-1: SerialNumber: syz [ 254.760350][ T28] audit: type=1326 audit(1794734944.466:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.1.3120" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f141a94d9 code=0x0 [ 254.783938][ T9217] device veth0_vlan entered promiscuous mode [ 254.792817][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.797238][ T9231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003] [ 254.800845][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.809320][ T9231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.817754][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.832410][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.847053][ T9217] device veth1_macvtap entered promiscuous mode [ 254.857667][ T28] audit: type=1326 audit(1794734944.566:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 254.863790][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.889553][ T28] audit: type=1326 audit(1794734944.596:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 254.911407][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.923421][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.932220][ T28] audit: type=1326 audit(1794734944.596:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 254.962804][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.972576][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'. [ 254.984174][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.994635][ T295] cdc_mbim 1-1:5.187: CDC Union missing and no IAD found [ 255.002933][ T295] cdc_mbim 1-1:5.187: bind() failure [ 255.020246][ T295] usb 1-1: USB disconnect, device number 2 [ 255.032335][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.042743][ T28] audit: type=1326 audit(1794734944.596:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 255.068983][ T7391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.077740][ T28] audit: type=1326 audit(1794734944.596:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 255.103784][ T28] audit: type=1326 audit(1794734944.596:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 255.129647][ T28] audit: type=1326 audit(1794734944.596:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 255.157226][ T28] audit: type=1326 audit(1794734944.596:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.2.3118" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ada94d9 code=0x7ffc0000 [ 255.214066][ T7971] EXT4-fs (loop2): unmounting filesystem. [ 255.377857][ T9255] overlayfs: './file0' not a directory [ 255.493103][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3126'. [ 255.529961][ T9257] loop4: detected capacity change from 0 to 33280 [ 255.712743][ T9257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 255.721028][ T9257] System zones: 1-12 [ 255.730776][ T9257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.3126: missing EA_INODE flag [ 255.744233][ T9257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3126: error while reading EA inode 12 err=-117 [ 255.757565][ T9257] EXT4-fs (loop4): 1 orphan inode deleted [ 255.763368][ T9257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.020187][ T519] device bridge_slave_1 left promiscuous mode [ 256.073800][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.095187][ T519] device bridge_slave_0 left promiscuous mode [ 256.097861][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.309723][ T9217] EXT4-fs (loop4): unmounting filesystem. [ 256.569738][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 256.580977][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 256.807642][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3139'. [ 256.824554][ T9296] device ip6gre1 entered promiscuous mode [ 256.872390][ T9296] loop2: detected capacity change from 0 to 33280 [ 257.049767][ T9296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 257.058076][ T9296] System zones: 1-12 [ 257.069302][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3139: missing EA_INODE flag [ 257.081891][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3139: error while reading EA inode 12 err=-117 [ 257.095519][ T9296] EXT4-fs (loop2): 1 orphan inode deleted [ 257.101335][ T9296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 257.552065][ T9301] incfs: Unexpected inode type [ 257.566348][ T9301] x_tables: unsorted underflow at hook 2 [ 257.601730][ T8756] ------------[ cut here ]------------ [ 257.607283][ T8756] WARNING: CPU: 1 PID: 8756 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 257.615314][ T8756] Modules linked in: [ 257.619260][ T8756] CPU: 1 PID: 8756 Comm: syz-executor Not tainted syzkaller #0 [ 257.626846][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 257.636919][ T8756] RIP: 0010:drop_nlink+0xc5/0x110 [ 257.641958][ T8756] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 a6 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 08 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 257.661661][ T8756] RSP: 0018:ffffc90000e37c60 EFLAGS: 00010293 [ 257.667744][ T8756] RAX: ffffffff81c66925 RBX: ffff88814f6c3570 RCX: ffff88811e112880 [ 257.675819][ T8756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.675850][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.683860][ T8756] RBP: ffffc90000e37c88 R08: 0000000000000003 R09: 0000000000000004 [ 257.699353][ T8756] R10: dffffc0000000000 R11: fffff520001c6f7c R12: dffffc0000000000 [ 257.707376][ T8756] R13: 1ffff11029ed86b7 R14: ffff88814f6c35b8 R15: 0000000000000000 [ 257.715371][ T8756] FS: 000055558b2a4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.724584][ T8756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.731471][ T8756] CR2: 000055558b2c7948 CR3: 00000001501ad000 CR4: 00000000003506a0 [ 257.739483][ T8756] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.747503][ T8756] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.755499][ T8756] Call Trace: [ 257.758828][ T8756] [ 257.761758][ T8756] shmem_rmdir+0x5b/0x90 [ 257.766025][ T8756] vfs_rmdir+0x381/0x4f0 [ 257.770273][ T8756] incfs_kill_sb+0xfe/0x210 [ 257.774776][ T8756] deactivate_locked_super+0xb5/0x120 [ 257.780196][ T8756] deactivate_super+0xaf/0xe0 [ 257.784931][ T8756] cleanup_mnt+0x45e/0x4e0 [ 257.789402][ T8756] __cleanup_mnt+0x19/0x20 [ 257.793814][ T8756] task_work_run+0x1e1/0x250 [ 257.798455][ T8756] ? __cfi_task_work_run+0x10/0x10 [ 257.803568][ T8756] ? __x64_sys_umount+0x12d/0x170 [ 257.808748][ T8756] ? __cfi___x64_sys_umount+0x10/0x10 [ 257.814130][ T8756] exit_to_user_mode_loop+0x9b/0xb0 [ 257.819732][ T8756] exit_to_user_mode_prepare+0x87/0xd0 [ 257.825195][ T8756] syscall_exit_to_user_mode+0x1a/0x30 [ 257.830704][ T8756] do_syscall_64+0x58/0xa0 [ 257.835115][ T8756] ? clear_bhb_loop+0x30/0x80 [ 257.839828][ T8756] ? clear_bhb_loop+0x30/0x80 [ 257.844516][ T8756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.850456][ T8756] RIP: 0033:0x7f8e07daa747 [ 257.854882][ T8756] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 257.874542][ T8756] RSP: 002b:00007ffdc4b254a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 257.883073][ T8756] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e07daa747 [ 257.885756][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 257.891119][ T8756] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc4b25560 [ 257.904188][ T8756] RBP: 00007ffdc4b25560 R08: 00007ffdc4b26560 R09: 00000000ffffffff [ 257.905507][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.912237][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc4b265f0 [ 257.912257][ T8756] R13: 00007f8e07e37433 R14: 000000000003ee1c R15: 00007ffdc4b26630 [ 257.933843][ T6] usb 1-1: config 5 has an invalid interface number: 187 but max is 0 [ 257.935921][ T8756] [ 257.935929][ T8756] ---[ end trace 0000000000000000 ]--- [ 257.936893][ T8756] ================================================================== [ 257.954468][ T6] usb 1-1: config 5 has no interface number 0 [ 257.960604][ T8756] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 257.960633][ T8756] Write of size 4 at addr 0000000000000170 by task syz-executor/8756 [ 257.960647][ T8756] [ 257.960653][ T8756] CPU: 1 PID: 8756 Comm: syz-executor Tainted: G W syzkaller #0 [ 257.979882][ T6] usb 1-1: config 5 interface 187 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 257.980970][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 257.983304][ T6] usb 1-1: config 5 interface 187 has no altsetting 0 [ 257.992305][ T8756] Call Trace: [ 257.992313][ T8756] [ 257.992320][ T8756] __dump_stack+0x21/0x24 [ 257.992339][ T8756] dump_stack_lvl+0x110/0x170 [ 257.992352][ T8756] ? __cfi_dump_stack_lvl+0x8/0x8 [ 257.992367][ T8756] ? __cfi_call_rcu+0x10/0x10 [ 257.992383][ T8756] ? ihold+0x20/0x60 [ 257.992399][ T8756] ? ihold+0x20/0x60 [ 257.992413][ T8756] print_report+0x3d/0x60 [ 257.992431][ T8756] kasan_report+0x122/0x150 [ 257.992451][ T8756] ? ihold+0x20/0x60 [ 257.992466][ T8756] kasan_check_range+0x249/0x2a0 [ 257.992485][ T8756] __kasan_check_write+0x14/0x20 [ 257.992499][ T8756] ihold+0x20/0x60 [ 257.992515][ T8756] vfs_rmdir+0x24c/0x4f0 [ 257.992534][ T8756] incfs_kill_sb+0xfe/0x210 [ 257.992555][ T8756] deactivate_locked_super+0xb5/0x120 [ 258.030337][ T6] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=9e.86 [ 258.030724][ T8756] deactivate_super+0xaf/0xe0 [ 258.040797][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.045047][ T8756] cleanup_mnt+0x45e/0x4e0 [ 258.055747][ T6] usb 1-1: Product: syz [ 258.057162][ T8756] __cleanup_mnt+0x19/0x20 [ 258.069192][ T6] usb 1-1: Manufacturer: syz [ 258.070603][ T8756] task_work_run+0x1e1/0x250 [ 258.082014][ T6] usb 1-1: SerialNumber: syz [ 258.083448][ T8756] ? __cfi_task_work_run+0x10/0x10 [ 258.146679][ T8756] ? __x64_sys_umount+0x12d/0x170 [ 258.151712][ T8756] ? __cfi___x64_sys_umount+0x10/0x10 [ 258.157097][ T8756] exit_to_user_mode_loop+0x9b/0xb0 [ 258.162320][ T8756] exit_to_user_mode_prepare+0x87/0xd0 [ 258.167792][ T8756] syscall_exit_to_user_mode+0x1a/0x30 [ 258.173359][ T8756] do_syscall_64+0x58/0xa0 [ 258.177791][ T8756] ? clear_bhb_loop+0x30/0x80 [ 258.182478][ T8756] ? clear_bhb_loop+0x30/0x80 [ 258.187174][ T8756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.193081][ T8756] RIP: 0033:0x7f8e07daa747 [ 258.197508][ T8756] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 258.197528][ T8756] RSP: 002b:00007ffdc4b254a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 258.197547][ T8756] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e07daa747 [ 258.197558][ T8756] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc4b25560 [ 258.197569][ T8756] RBP: 00007ffdc4b25560 R08: 00007ffdc4b26560 R09: 00000000ffffffff [ 258.197580][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc4b265f0 [ 258.197591][ T8756] R13: 00007f8e07e37433 R14: 000000000003ee1c R15: 00007ffdc4b26630 [ 258.197607][ T8756] [ 258.197614][ T8756] ================================================================== [ 258.199255][ T7971] EXT4-fs (loop2): unmounting filesystem. [ 258.201219][ T8756] Disabling lock debugging due to kernel taint [ 258.201246][ T8756] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 258.201256][ T8756] #PF: supervisor write access in kernel mode [ 258.201273][ T8756] #PF: error_code(0x0002) - not-present page [ 258.201286][ T8756] PGD 11859a067 P4D 11859a067 PUD 0 [ 258.201307][ T8756] Oops: 0002 [#1] PREEMPT SMP KASAN [ 258.201323][ T8756] CPU: 1 PID: 8756 Comm: syz-executor Tainted: G B W syzkaller #0 [ 258.201341][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 258.201350][ T8756] RIP: 0010:ihold+0x26/0x60 [ 258.201372][ T8756] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 00 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 9d f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 258.201385][ T8756] RSP: 0018:ffffc90000e37ca0 EFLAGS: 00010246 [ 258.201398][ T8756] RAX: ffff88811e112800 RBX: 0000000000000000 RCX: ffff88811e112880 [ 258.201410][ T8756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.201420][ T8756] RBP: ffffc90000e37cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 258.201431][ T8756] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff88814f6c357c [ 258.201444][ T8756] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 258.201455][ T8756] FS: 000055558b2a4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 258.201470][ T8756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.201482][ T8756] CR2: 0000000000000170 CR3: 00000001501ad000 CR4: 00000000003506a0 [ 258.201497][ T8756] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.201507][ T8756] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.201518][ T8756] Call Trace: [ 258.201523][ T8756] [ 258.201529][ T8756] vfs_rmdir+0x24c/0x4f0 [ 258.201550][ T8756] incfs_kill_sb+0xfe/0x210 [ 258.201572][ T8756] deactivate_locked_super+0xb5/0x120 [ 258.201595][ T8756] deactivate_super+0xaf/0xe0 [ 258.201615][ T8756] cleanup_mnt+0x45e/0x4e0 [ 258.201634][ T8756] __cleanup_mnt+0x19/0x20 [ 258.201649][ T8756] task_work_run+0x1e1/0x250 [ 258.201669][ T8756] ? __cfi_task_work_run+0x10/0x10 [ 258.201687][ T8756] ? __x64_sys_umount+0x12d/0x170 [ 258.201707][ T8756] ? __cfi___x64_sys_umount+0x10/0x10 [ 258.201729][ T8756] exit_to_user_mode_loop+0x9b/0xb0 [ 258.201748][ T8756] exit_to_user_mode_prepare+0x87/0xd0 [ 258.201766][ T8756] syscall_exit_to_user_mode+0x1a/0x30 [ 258.201787][ T8756] do_syscall_64+0x58/0xa0 [ 258.201802][ T8756] ? clear_bhb_loop+0x30/0x80 [ 258.201820][ T8756] ? clear_bhb_loop+0x30/0x80 [ 258.201840][ T8756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.201858][ T8756] RIP: 0033:0x7f8e07daa747 [ 258.201872][ T8756] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 258.201885][ T8756] RSP: 002b:00007ffdc4b254a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 258.201903][ T8756] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e07daa747 [ 258.201915][ T8756] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc4b25560 [ 258.201926][ T8756] RBP: 00007ffdc4b25560 R08: 00007ffdc4b26560 R09: 00000000ffffffff [ 258.201937][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc4b265f0 [ 258.201948][ T8756] R13: 00007f8e07e37433 R14: 000000000003ee1c R15: 00007ffdc4b26630 [ 258.201967][ T8756] [ 258.201972][ T8756] Modules linked in: [ 258.201993][ T8756] CR2: 0000000000000170 [ 258.202000][ T8756] ---[ end trace 0000000000000000 ]--- [ 258.202007][ T8756] RIP: 0010:ihold+0x26/0x60 [ 258.202030][ T8756] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 00 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 9d f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 258.202042][ T8756] RSP: 0018:ffffc90000e37ca0 EFLAGS: 00010246 [ 258.202055][ T8756] RAX: ffff88811e112800 RBX: 0000000000000000 RCX: ffff88811e112880 [ 258.202065][ T8756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.202074][ T8756] RBP: ffffc90000e37cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 258.202085][ T8756] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff88814f6c357c [ 258.202098][ T8756] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 258.202108][ T8756] FS: 000055558b2a4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 258.202124][ T8756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.202137][ T8756] CR2: 0000000000000170 CR3: 00000001501ad000 CR4: 00000000003506a0 [ 258.202152][ T8756] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.202163][ T8756] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.202176][ T8756] Kernel panic - not syncing: Fatal exception [ 258.202297][ T8756] Kernel Offset: disabled [ 258.749482][ T8756] Rebooting in 86400 seconds..