last executing test programs: 2m50.651100831s ago: executing program 3 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m49.547307675s ago: executing program 3 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee00]) setresgid(r1, 0xee01, 0x0) sendmsg$netlink(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000000500)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x800}, 0x40080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000700)='./file0\x00', 0x201, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) unshare(0x60000600) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r3, 0xc008aeba, &(0x7f0000000500)={0x3, 0x1, &(0x7f00000000c0)={&(0x7f000093b000/0x4000)=nil, 0xffffffff}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 2m45.755351235s ago: executing program 3 (id=114): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8442, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x2a7, &(0x7f0000000480)="$eJzs3M9r02Acx/Hv2m3dOrcWEUFB/KIX9RC2+g9YZAOxoMxV1IOQuVRLYzObOqmI282rf8fw6E1Q/4FdPAgevMkuOyh42UGNLGm2bob9YGtTt/cLRp7keT7Jk1/jSaBZufP6caXkGiWzLokBlYTIgqyKZNdKTT3NacIv90urBbk49PPLmVt3713PFwrjk6oT+anLOVUdOfv+2Ys35z7Wh26/HXmXkqXs/ZUfuW9LJ5dOrfyZCtfu1NXUacepm9O2pTNlt2Ko3rQt07W0XHWt2qb6ku3MzjbUrM4Mp2drluuqWW1oxWpo3dF6raHmQ7NcVcMwdDgtR01yz4ni4uSkmW9LZxCHwaiFtVreTEZWFhc70SkAANBd4hr/Pyq7Wna1utP4PyGM/9uH8f9hcmxZIp8C18b/6eb9u+7S7w72DAAAAAAAAAAAAAAAAAAAAAAA7Meq52U8z8uE0/AvJSIDIhLOx91PtMd+zn+q893FAWv54d6AiP1qrjhXDKZBfb4kZbHFktE+kV/+9dAUlCeuFcZH1ZeVD/Z8Mz8/V0z614efD2Wj82NBXjfn+yTduv2cZOSEfI3K5yLz/XLhfEvekIx8eiCO2DLjX9cb+ZdjqldvFLbkB/12AAAAAAAcBoau++f53a83NPxsyJb6YOHG+wHJ7PB+YMvzda+c7o1vvwEAAAAAOErcxvOKadtW7T8ueD0Hv+YrIrJtm7gP3WA3HPn2FvrWzsH+15OSPaW+h7dGdxyEAy0sPw12bTeNY/ynBAAAAKAtNgb9cfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICja5vPgD05HjTxl4Tt/arPTjCzy2+PtWwu2en9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrJ3wAAAP//Q2YZeQ==") r2 = inotify_init1(0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="38000000020201020000000002000003240002800c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) inotify_add_watch(r2, &(0x7f0000000740)='./file1\x00', 0x20000808) r4 = open(&(0x7f0000000780)='./file1\x00', 0x143142, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c0, 0x206, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00'}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000007c0)=0x1) readv(r4, 0x0, 0x0) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000240)=0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) sendmmsg$unix(r8, &(0x7f0000000c00), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000c40), 0x10106, 0x2, 0x0) r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000c80)={0x9000000d}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r10, r1}, 0xc) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 2m44.396085075s ago: executing program 3 (id=117): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x18010, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2m44.230817362s ago: executing program 3 (id=119): setpriority(0x0, 0x0, 0x2a14b58) setresuid(0x0, 0x0, 0x0) socket(0x11, 0xa, 0x0) syz_open_dev$vcsn(0x0, 0x2, 0x98802) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000cc0)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000006200)={&(0x7f0000006240)=""/5, 0x200000, 0x1000}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) madvise(&(0x7f00002d1000/0x3000)=nil, 0x3000, 0xf) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) capset(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, 0x0, 0xffffff70) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa0040a, &(0x7f00000004c0)={[{@mblk_io_submit}, {@usrjquota}]}, 0x21, 0x4c0, &(0x7f0000000580)="$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") r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003feffffff000000f7ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000000e0000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) 2m44.121399763s ago: executing program 3 (id=120): r0 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x26cfc1750baab76, 0x85) lseek(r2, 0x1ba2, 0x1) getdents64(r2, 0x0, 0x0) 2m44.024154553s ago: executing program 32 (id=120): r0 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x26cfc1750baab76, 0x85) lseek(r2, 0x1ba2, 0x1) getdents64(r2, 0x0, 0x0) 1m56.861457403s ago: executing program 0 (id=279): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = io_uring_setup(0x53fa, &(0x7f00000007c0)={0x0, 0xdad1, 0x40, 0x0, 0x15c}) clock_nanosleep(0x2, 0x0, &(0x7f0000000840)={0x77359400}, 0xfffffffffffffffe) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x80, 0x1, 0x441, {{0x38, 0x4, 0x2, 0x5, 0xe0, 0x65, 0x0, 0xf, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0xb, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}}]}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}]}, @cipso={0x86, 0x57, 0x3, [{0x1, 0xb, "dbce263629fa657b8f"}, {0x6, 0x12, "2573ffd0bde8215e1b0ab5db6da71641"}, {0x6, 0x11, "16aaf7f457b404cf80e3d7882dfaef"}, {0x7, 0xe, "4d1edf4a03d1a3455d156ac3"}, {0x5, 0x9, "bc19f520bf3c40"}, {0x0, 0x3, "a9"}, {0x7, 0x9, "01ddf9715dc771"}]}, @ssrr={0x89, 0xb, 0x86, [@loopback, @remote]}, @noop, @noop, @end, @generic={0x88, 0x3, "f9"}, @timestamp_addr={0x44, 0x44, 0x36, 0x1, 0xd, [{@rand_addr=0x64010100, 0x3}, {@remote, 0x2}, {@multicast1, 0x3}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010102, 0x2d2339a7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x8}]}]}}}}}) r2 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, r1, 0x25, 0x15, @val=@uprobe_multi={&(0x7f0000000680)='./dev/sda\x00', &(0x7f00000006c0)=[0x3, 0x57, 0x7, 0x0, 0xd], &(0x7f0000000700)=[0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1, 0x3, 0x3], 0x6, 0x5, 0x1, r2}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) setrlimit(0xf, &(0x7f0000000440)={0x5, 0xffffffffffff0001}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) write$evdev(r4, &(0x7f00000004c0)=[{{r5, r6/1000+60000}, 0x0, 0x5, 0x4}], 0x18) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000340)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x24000, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x11}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000300), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) fcntl$setpipe(r8, 0x407, 0x15ac) 1m55.383967315s ago: executing program 0 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000004c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b00), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r2}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000e80)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000ec0)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010102, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000001000), 0x800001d, 0x60) 1m53.672894921s ago: executing program 0 (id=292): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x20}}, 0x0) 1m53.48627462s ago: executing program 0 (id=294): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c6c617a7974696d652c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c6a71666d743d76667376302c6a71666d743d7666736f6c642c6261636b67726f756e645f67633d6f66662c6e6f61636c2c646174615f666c7573682c009155f76df4d07ad6534d3588c19362f06435c912cf73b02e9946cfefd7b578c7029ce8c93b87feddd9bb7bb8924e6211c8b54dffa2d339edb64a6434663023894c1ae07c9ce2b93d95fbac8d5dbd8afb838537dbe757fdc7bf5cf39436f951f8f451e754a4bcb17e69c41e94995a3ae74e9dac87ec351b0f1e4f23af9301", @ANYRES32], 0xfa, 0x556c, &(0x7f0000000bc0)="$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") chdir(&(0x7f00000009c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x24580, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000007700)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x4000, 0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000000c0)=ANY=[], 0x7d, 0x1508, &(0x7f0000006140)="$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") socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\x00', 0x8, 0x3c, 0x1, @empty, @mcast2, {[@dstopts={0x11}]}}}}}, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x1003}, 0x38) r5 = syz_clone3(&(0x7f0000000680)={0x801400, &(0x7f0000000700)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(r5, r1, 0x34, &(0x7f0000000340)={0x2f, 0xc, 0x3}) pidfd_send_signal(r6, 0x5, &(0x7f0000000740)={0x5, 0x8, 0xc4ffffff}, 0x0) 1m50.120429826s ago: executing program 0 (id=308): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3010050, &(0x7f0000000080)=ANY=[], 0x41, 0x14fe, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000015c0)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001680)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000016c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001740)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000017c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001800), 0x4000087, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, 0x0, &(0x7f0000001840)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1, 0x21, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 1m49.983118181s ago: executing program 0 (id=309): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = io_uring_setup(0x53fa, &(0x7f00000007c0)={0x0, 0xdad1, 0x40, 0x0, 0x15c}) clock_nanosleep(0x2, 0x0, &(0x7f0000000840)={0x77359400}, 0xfffffffffffffffe) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x80, 0x1, 0x441, {{0x39, 0x4, 0x2, 0x5, 0xe4, 0x65, 0x0, 0xf, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0xb, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}}]}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}]}, @cipso={0x86, 0x59, 0x3, [{0x1, 0xb, "dbce263629fa657b8f"}, {0x6, 0x12, "2573ffd0bde8215e1b0ab5db6da71641"}, {0x6, 0x11, "16aaf7f457b404cf80e3d7882dfaef"}, {0x7, 0xe, "4d1edf4a03d1a3455d156ac3"}, {0x5, 0x9, "bc19f520bf3c40"}, {0x0, 0x3, "a9"}, {0x1, 0x2}, {0x7, 0x9, "01ddf9715dc771"}]}, @ssrr={0x89, 0xb, 0x86, [@loopback, @remote]}, @noop, @noop, @end, @generic={0x88, 0x3, "f9"}, @timestamp_addr={0x44, 0x44, 0x36, 0x1, 0xd, [{@rand_addr=0x64010100, 0x3}, {@remote, 0x2}, {@multicast1, 0x3}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010102, 0x2d2339a7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x8}]}]}}}}}) r2 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, r1, 0x25, 0x15, @val=@uprobe_multi={&(0x7f0000000680)='./dev/sda\x00', &(0x7f00000006c0)=[0x3, 0x57, 0x7, 0x0, 0xd], &(0x7f0000000700)=[0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1, 0x3, 0x3], 0x6, 0x5, 0x1, r2}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) setrlimit(0xf, &(0x7f0000000440)={0x5, 0xffffffffffff0001}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) write$evdev(r4, &(0x7f00000004c0)=[{{r5, r6/1000+60000}, 0x0, 0x5, 0x4}], 0x18) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000340)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x24000, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x11}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000300), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) fcntl$setpipe(r8, 0x407, 0x15ac) 1m49.839031376s ago: executing program 33 (id=309): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = io_uring_setup(0x53fa, &(0x7f00000007c0)={0x0, 0xdad1, 0x40, 0x0, 0x15c}) clock_nanosleep(0x2, 0x0, &(0x7f0000000840)={0x77359400}, 0xfffffffffffffffe) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x80, 0x1, 0x441, {{0x39, 0x4, 0x2, 0x5, 0xe4, 0x65, 0x0, 0xf, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0xb, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}}]}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}]}, @cipso={0x86, 0x59, 0x3, [{0x1, 0xb, "dbce263629fa657b8f"}, {0x6, 0x12, "2573ffd0bde8215e1b0ab5db6da71641"}, {0x6, 0x11, "16aaf7f457b404cf80e3d7882dfaef"}, {0x7, 0xe, "4d1edf4a03d1a3455d156ac3"}, {0x5, 0x9, "bc19f520bf3c40"}, {0x0, 0x3, "a9"}, {0x1, 0x2}, {0x7, 0x9, "01ddf9715dc771"}]}, @ssrr={0x89, 0xb, 0x86, [@loopback, @remote]}, @noop, @noop, @end, @generic={0x88, 0x3, "f9"}, @timestamp_addr={0x44, 0x44, 0x36, 0x1, 0xd, [{@rand_addr=0x64010100, 0x3}, {@remote, 0x2}, {@multicast1, 0x3}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010102, 0x2d2339a7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x8}]}]}}}}}) r2 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, r1, 0x25, 0x15, @val=@uprobe_multi={&(0x7f0000000680)='./dev/sda\x00', &(0x7f00000006c0)=[0x3, 0x57, 0x7, 0x0, 0xd], &(0x7f0000000700)=[0x0, 0x4, 0x4, 0x0, 0x3, 0x0, 0x1, 0x3, 0x3], 0x6, 0x5, 0x1, r2}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) setrlimit(0xf, &(0x7f0000000440)={0x5, 0xffffffffffff0001}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) write$evdev(r4, &(0x7f00000004c0)=[{{r5, r6/1000+60000}, 0x0, 0x5, 0x4}], 0x18) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000340)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x24000, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x11}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000300), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) fcntl$setpipe(r8, 0x407, 0x15ac) 36.919006423s ago: executing program 5 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f0000000640), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x300}, 0xa0, 0x8000, 0x8, 0x202}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x1, 0x6, 0x3, 0x4c404, r3, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r8, r7, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo\x00') renameat2(r9, &(0x7f0000000400)='./mnt\x00', r9, &(0x7f0000000440)='./file0\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/set_event\x00', 0x2, 0x0) write(r10, &(0x7f0000000140)='\ns', 0x2) 35.956486733s ago: executing program 5 (id=552): socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x2a14b58) prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000004c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='xfrm0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r4, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x2008000, &(0x7f0000000c00)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}, 0x32}]}, 0x9a, 0x4ed, &(0x7f0000000e80)="$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") remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_sb_set_mnt_opts\x00') 34.698960512s ago: executing program 5 (id=556): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x6a) close(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x3, 0xc, &(0x7f0000002fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000003040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0x200480, &(0x7f0000003100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000048c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x4, '\x00', r0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x8000, &(0x7f0000002d80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002cc0), 0x84001, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r0, 0x25, 0x0, @val=@tracing={r4, 0x400}}, 0x20) syz_emit_ethernet(0x9a, &(0x7f0000000480)=ANY=[], 0x0) 34.061178548s ago: executing program 5 (id=561): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x50f, &(0x7f0000000580)="$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") mkdir(&(0x7f0000000ac0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x1804002, 0x0) chdir(&(0x7f0000000bc0)='./bus\x00') unlink(&(0x7f0000000c00)='./file0\x00') signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x4, &(0x7f0000000d00)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x60}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000f40)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000f80)={r2}, 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300006e52dabc850000001b000000b70000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000804a30ba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xf}, 0x94) capset(&(0x7f0000000200)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x81, 0xffffffff, 0x3ffc}) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000500)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r5], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x3f, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r7, &(0x7f0000002380)=""/102392, 0x18ff8) 33.934834341s ago: executing program 5 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f0000000640), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', r4, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x300}, 0xa0, 0x8000, 0x8, 0x202}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r7, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo\x00') renameat2(r8, &(0x7f0000000400)='./mnt\x00', r8, &(0x7f0000000440)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/set_event\x00', 0x2, 0x0) write(r9, &(0x7f0000000140)='\ns', 0x2) 32.893804778s ago: executing program 5 (id=564): openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x86, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000380)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)={0x1c, 0x22, 0x601, 0x70bd2a, 0x255fdbfb}, 0x3c}], 0x1, 0x0, 0x0, 0x340080c0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="168d2dc46fbe59adbbb27479cf0f83b9490d366747669befb286847f6936d9361993cf7486b6c051bfa61acc073d310051633d6897124b85", 0x38}, {&(0x7f00000006c0)="d5744eb39b21379dc3b89a3dd5945c470685a137d6b96eb9883cf609611ec580312b9f1a0b14b12274444626c9a8f85fd833640d7a", 0x35}, {&(0x7f0000000a80)="9c031949d2df5a36275c7de97113981014d6279a0e1d69d488e3fac5c71338552f3f1948189f5af2ce4ee976ec5ea17eca2d5e5687780d349a7b78086ccd633735a95f31f132698f57b4ddc95d35d3228e0bf999036d258e4928c5ed5b1bb51a", 0x60}, {&(0x7f0000000740)="45bad7a93a586e623b9419b5f533f704e99e330881fd585c6c3ffed7e2b10e47079d43dd5dbf7add97c2caf7c31aeeb2ca80ee8c3b1ef5f1e5e5b1c6803b75366ea30b5d05915b298118c531e28b2cfb49f0d4f5ab7157444873dc460b56144f893a4b1fba883d8aabfcfda9dbe7a08c171dc6ae6be83612c8274bf2856edae7f17841aacbaa0cd9458edae3ccc2164ee99d7bafd85ca34351520b09f3d2a07c5fd79fdcd078eda733e8af79aeca7433150d0f54fce712a0eaf5ebb8a1227aa2a7104a15ba9a1cd0ccea052f3cc27a98f7a12e5051c41d17b549e0951e21a5cfe4", 0xe1}, {&(0x7f0000000840)="72dc40831a33d32fae5dfee1d1b7a5292d704a07978db4358bf63ed084e1b542899744024748047b68abacc6a701e86963d86f5102fd938476a3ed740728b2816c98b729c4dae8fff78ee1cd8722f6dbb7ef004ae344b19064a00c2fc8b51a4d066a0570aa1df0b577d4b76625850552fb57b62c76d2b25e8bb0012cdf200f6d1625daf2b49581c6f0d768f1ea9a7bde96eb9da9a50bdf6b356d8e8b2df915dc9a955531a07aa072f365365a2f326f3d2e3fe1ee788059ea66526bcd542436c1ffcf01c5e4029c224b8455c85a36db37a3d37684205a71fd", 0xd8}, {&(0x7f0000000940)="3f3c0098c6400c15468dac8373871bb335b7bc67edd0b3cf737ed3f6b42c4b55a7d2ff090aab8e30e34fccd60e598de0ff7c9f6c105242ecc33c63400996f5c499d0843e29a897a7243eb12083a911adff214487cf0e91d4760299ac41e3ffbef84bd0d71d3ed82622ed233431482e3e2b4a9b84fa88f239ee007e49a1883384ea2fa5e8760ce38e1b56f8f5d405a8e732f971ad7a253acf13ea85bcf10a4ab6fc20fc2f40ab69b9f1c19087", 0xac}], 0x7, &(0x7f0000000fc0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd9, 0x0, 0xd, [0x7, 0x401, 0x7fffffff, 0x7fff]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@end, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x73, 0x3, [{0x6, 0xc, "3791192969c2a624b454"}, {0x6, 0x5, "a06008"}, {0x0, 0x9, "7a2128e15befdc"}, {0x6, 0x5, "22e6e6"}, {0x2, 0x5, "d4adf7"}, {0x6, 0x12, "15e757eb26a80b2d81cb43786b13aeb3"}, {0x0, 0x10, "00259cb6105dfe096593191abbbb"}, {0x5, 0x11, "bd137e949429229846221bb364f259"}, {0x6, 0x10, "9e5bab791e0067439153e70d2669"}, {0x0, 0x6, "07b7f565"}]}]}}}], 0xc0}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c40)="9630070d49c8debb88397fe150be797f84eb815e8a022d608939bb723186bd72e0499a04a7c0570e4b926e18bc33d71e36957279cc05955b431d15e210ee637a0eafb26914b684d27d204e35c26476b2541f11fec40a7a1ee9e2bb814a65da40a619472601c53e9c9df1dd5a5a6b1177582af5399fe07357bcf53458066bb5a384ccb7123f3fa842dc12e033ed7bc252f7c63ac38cb2b862dd44ecc420e6dbe0fe77ac8e7b2ad8c98fd793784299b09b7ec2c8e5e13fb00831e4245aaf5c2dd526a46b403da9df23865e2c8aab", 0xcd}], 0x1, &(0x7f0000000d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xed, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @multicast1]}, @ssrr={0x89, 0x13, 0xfc, [@dev={0xac, 0x14, 0x14, 0x20}, @local, @private=0xa010101, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1d9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x98}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000e80)="d9213fbd12982ef9fb0abcb96e6793051fdbdcd4444798b8b06496cf187d5c4106c6b34e77ce7bf6802215c50acb4814006e2045287e6bce871546a7698944558f67046f9edea57f53e1ff086478abf008824da2392a1a3338cd974bb86486ec1a8994759a7e0cbc0cea73c4983e907f0523e3389e9551b24f169ec8c5b41c1033e4209554418b35fc48cc52050adde8ee2a85424778f13543bd1049d64ffe08005b1ca9779876d84c2bad9129cd8e4fe5fcb7336c7263bcc3adcde6cf1a90e46efe7e62bdd2f0bd498896d7fa0cf3b1f903a270dab93b95c81208", 0xdb}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="14000000000000000000000001000000060000000000000050000000000000000000000007000000442c7013ac1414bb00804b91ac1414bb0000000764010100fffff801e0000001000001ffffffffff000000358c22467378cfbb97db0401070f707f000001ffffffff00000000000000001c000000000000000000000008000000954a", @ANYRES32=0x0, @ANYBLOB="7f000001ac14143a00000000"], 0x88}}], 0x4, 0x4) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') pread64(r5, &(0x7f0000001f00)=""/102375, 0x18fe7, 0xb9c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000004c0)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) 32.810033676s ago: executing program 34 (id=564): openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x86, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000380)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)={0x1c, 0x22, 0x601, 0x70bd2a, 0x255fdbfb}, 0x3c}], 0x1, 0x0, 0x0, 0x340080c0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="168d2dc46fbe59adbbb27479cf0f83b9490d366747669befb286847f6936d9361993cf7486b6c051bfa61acc073d310051633d6897124b85", 0x38}, {&(0x7f00000006c0)="d5744eb39b21379dc3b89a3dd5945c470685a137d6b96eb9883cf609611ec580312b9f1a0b14b12274444626c9a8f85fd833640d7a", 0x35}, {&(0x7f0000000a80)="9c031949d2df5a36275c7de97113981014d6279a0e1d69d488e3fac5c71338552f3f1948189f5af2ce4ee976ec5ea17eca2d5e5687780d349a7b78086ccd633735a95f31f132698f57b4ddc95d35d3228e0bf999036d258e4928c5ed5b1bb51a", 0x60}, {&(0x7f0000000740)="45bad7a93a586e623b9419b5f533f704e99e330881fd585c6c3ffed7e2b10e47079d43dd5dbf7add97c2caf7c31aeeb2ca80ee8c3b1ef5f1e5e5b1c6803b75366ea30b5d05915b298118c531e28b2cfb49f0d4f5ab7157444873dc460b56144f893a4b1fba883d8aabfcfda9dbe7a08c171dc6ae6be83612c8274bf2856edae7f17841aacbaa0cd9458edae3ccc2164ee99d7bafd85ca34351520b09f3d2a07c5fd79fdcd078eda733e8af79aeca7433150d0f54fce712a0eaf5ebb8a1227aa2a7104a15ba9a1cd0ccea052f3cc27a98f7a12e5051c41d17b549e0951e21a5cfe4", 0xe1}, {&(0x7f0000000840)="72dc40831a33d32fae5dfee1d1b7a5292d704a07978db4358bf63ed084e1b542899744024748047b68abacc6a701e86963d86f5102fd938476a3ed740728b2816c98b729c4dae8fff78ee1cd8722f6dbb7ef004ae344b19064a00c2fc8b51a4d066a0570aa1df0b577d4b76625850552fb57b62c76d2b25e8bb0012cdf200f6d1625daf2b49581c6f0d768f1ea9a7bde96eb9da9a50bdf6b356d8e8b2df915dc9a955531a07aa072f365365a2f326f3d2e3fe1ee788059ea66526bcd542436c1ffcf01c5e4029c224b8455c85a36db37a3d37684205a71fd", 0xd8}, {&(0x7f0000000940)="3f3c0098c6400c15468dac8373871bb335b7bc67edd0b3cf737ed3f6b42c4b55a7d2ff090aab8e30e34fccd60e598de0ff7c9f6c105242ecc33c63400996f5c499d0843e29a897a7243eb12083a911adff214487cf0e91d4760299ac41e3ffbef84bd0d71d3ed82622ed233431482e3e2b4a9b84fa88f239ee007e49a1883384ea2fa5e8760ce38e1b56f8f5d405a8e732f971ad7a253acf13ea85bcf10a4ab6fc20fc2f40ab69b9f1c19087", 0xac}], 0x7, &(0x7f0000000fc0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd9, 0x0, 0xd, [0x7, 0x401, 0x7fffffff, 0x7fff]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@end, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x73, 0x3, [{0x6, 0xc, "3791192969c2a624b454"}, {0x6, 0x5, "a06008"}, {0x0, 0x9, "7a2128e15befdc"}, {0x6, 0x5, "22e6e6"}, {0x2, 0x5, "d4adf7"}, {0x6, 0x12, "15e757eb26a80b2d81cb43786b13aeb3"}, {0x0, 0x10, "00259cb6105dfe096593191abbbb"}, {0x5, 0x11, "bd137e949429229846221bb364f259"}, {0x6, 0x10, "9e5bab791e0067439153e70d2669"}, {0x0, 0x6, "07b7f565"}]}]}}}], 0xc0}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c40)="9630070d49c8debb88397fe150be797f84eb815e8a022d608939bb723186bd72e0499a04a7c0570e4b926e18bc33d71e36957279cc05955b431d15e210ee637a0eafb26914b684d27d204e35c26476b2541f11fec40a7a1ee9e2bb814a65da40a619472601c53e9c9df1dd5a5a6b1177582af5399fe07357bcf53458066bb5a384ccb7123f3fa842dc12e033ed7bc252f7c63ac38cb2b862dd44ecc420e6dbe0fe77ac8e7b2ad8c98fd793784299b09b7ec2c8e5e13fb00831e4245aaf5c2dd526a46b403da9df23865e2c8aab", 0xcd}], 0x1, &(0x7f0000000d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xed, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @multicast1]}, @ssrr={0x89, 0x13, 0xfc, [@dev={0xac, 0x14, 0x14, 0x20}, @local, @private=0xa010101, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1d9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x98}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000e80)="d9213fbd12982ef9fb0abcb96e6793051fdbdcd4444798b8b06496cf187d5c4106c6b34e77ce7bf6802215c50acb4814006e2045287e6bce871546a7698944558f67046f9edea57f53e1ff086478abf008824da2392a1a3338cd974bb86486ec1a8994759a7e0cbc0cea73c4983e907f0523e3389e9551b24f169ec8c5b41c1033e4209554418b35fc48cc52050adde8ee2a85424778f13543bd1049d64ffe08005b1ca9779876d84c2bad9129cd8e4fe5fcb7336c7263bcc3adcde6cf1a90e46efe7e62bdd2f0bd498896d7fa0cf3b1f903a270dab93b95c81208", 0xdb}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="14000000000000000000000001000000060000000000000050000000000000000000000007000000442c7013ac1414bb00804b91ac1414bb0000000764010100fffff801e0000001000001ffffffffff000000358c22467378cfbb97db0401070f707f000001ffffffff00000000000000001c000000000000000000000008000000954a", @ANYRES32=0x0, @ANYBLOB="7f000001ac14143a00000000"], 0x88}}], 0x4, 0x4) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') pread64(r5, &(0x7f0000001f00)=""/102375, 0x18fe7, 0xb9c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000004c0)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) 5.393350696s ago: executing program 6 (id=700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="d555cdea55fbaddf96086f41adde", 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.393058996s ago: executing program 6 (id=702): openat$kvm(0x0, 0x0, 0x941400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f00000027c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000002980)) 5.231057802s ago: executing program 6 (id=706): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf9, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3.169842744s ago: executing program 2 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 3.123205399s ago: executing program 2 (id=724): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.034899648s ago: executing program 2 (id=726): r0 = syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./proc\x00', 0x8000, &(0x7f0000000700)=ANY=[], 0x1, 0x2b5, &(0x7f0000002100)="$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") syncfs(r0) 2.889673903s ago: executing program 7 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0x1b, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x7, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x6, "864a03", 0xd, "bdc11f"}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @private=0xa010102}}}}}}, 0x0) 2.889483663s ago: executing program 2 (id=730): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x2000011a) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001440)=""/4081, 0xff1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x121, 0x0) 2.466201146s ago: executing program 7 (id=733): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000e80)={[{@journal_async_commit}, {@commit={'commit', 0x3d, 0x9}}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}, {@journal_async_commit}, {@inlinecrypt}, {@data_journal}]}, 0x2, 0x7a7, &(0x7f00000006c0)="$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") 2.456348938s ago: executing program 6 (id=736): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x80}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) setgroups(0x1, &(0x7f0000000240)=[0x0]) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0xa2) socket$inet6_udp(0xa, 0x2, 0x0) 2.321723052s ago: executing program 2 (id=737): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x80401c, &(0x7f0000002c40)=ANY=[], 0xfd, 0x554b, &(0x7f0000009000)="$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") mknod$loop(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) link(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.662139709s ago: executing program 7 (id=741): r0 = io_uring_setup(0x136a, &(0x7f0000000600)={0x0, 0x1b8a, 0x1, 0x3, 0x28c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 1.66175358s ago: executing program 4 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./sys\x00', &(0x7f0000000a80)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000b00)='0\x00', 0x2) 1.485057098s ago: executing program 1 (id=744): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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") 1.418086524s ago: executing program 6 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) write$char_usb(r5, &(0x7f00000001c0)="e2", 0x2250) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.404571946s ago: executing program 4 (id=746): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000140)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) recvmmsg(r1, &(0x7f00000001c0), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000200)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.369574519s ago: executing program 7 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0xe, &(0x7f00000005c0)={[{@test_dummy_encryption, 0x3d}, {@discard}, {@noauto_da_alloc}, {@minixdf}, {@nojournal_checksum}, {@nogrpid}], [{@euid_eq}]}, 0x3, 0x45c, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, "006074333200009bb3c2ce0000000000000000011800f5ff0100fffffffdff00"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file2\x00', 0x0) 1.26587905s ago: executing program 1 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001740)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80040, 0xc, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/uevent\x00', 0x0, 0x0) read(r1, &(0x7f0000000340)=""/1024, 0x400) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1e4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000b80)='27', 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3e}, 0x10) r3 = fsopen(&(0x7f0000000c00)='ramfs\x00', 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.205594176s ago: executing program 4 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10, 0xa456, 0x3, 0x4, 0x8, "5de3b3d5c0d64bca54849f8ad51ca2d8100071", 0x0, 0x8}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800402, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f0, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 828.789185ms ago: executing program 7 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 779.23122ms ago: executing program 7 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@tcp=r4}, 0x20) sendto(r5, &(0x7f0000000540)="01", 0x1, 0x0, 0x0, 0x0) 743.728794ms ago: executing program 1 (id=752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@remote, 0x13, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000440)={@remote, r2}, 0x14) 113.149939ms ago: executing program 1 (id=753): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) 111.952599ms ago: executing program 4 (id=754): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000340)=""/193, &(0x7f0000000440)=0xc1) readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="69ad52", 0x3}, {&(0x7f0000000280)="b3096e40", 0x4}], 0x2) 86.431351ms ago: executing program 4 (id=755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "ee3fa66fbf0f9e55", "a5656c2128eda9fbb14b7442bc5fc5e4", "1d8faf68", "edf7bd5bfadea811"}, 0x28) 37.930556ms ago: executing program 1 (id=756): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)={0x6, 0x16, 0x10000002, 0x4, 0xffefffff, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.170869ms ago: executing program 6 (id=757): timer_create(0xfffffffc, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone3(0x0, 0x0) getegid() tkill(r0, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f0000000580)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x701401, 0xc1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 11.920219ms ago: executing program 1 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 11.683789ms ago: executing program 4 (id=759): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000740)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001080)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=760): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000001840)={0x0, 0x0}) r0 = syz_mount_image$ext4(&(0x7f00000018c0)='ext4\x00', &(0x7f0000001900)='./file0\x00', 0x280440e, &(0x7f0000001940), 0x1, 0xbdb, &(0x7f0000002140)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) kernel console output (not intermixed with test programs): 512 [ 107.370236][ T1339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.382210][ T1326] loop1: detected capacity change from 0 to 40427 [ 107.388918][ T1339] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.408551][ T30] audit: type=1326 audit(1793821719.506:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 107.811447][ T30] audit: type=1326 audit(1793821719.906:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 107.874669][ T30] audit: type=1326 audit(1793821719.946:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 107.899462][ T30] audit: type=1326 audit(1793821719.946:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 107.924821][ T30] audit: type=1326 audit(1793821719.956:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 107.975481][ T30] audit: type=1326 audit(1793821719.956:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 108.001599][ T1326] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(0) [ 108.030594][ T1326] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.035958][ T30] audit: type=1326 audit(1793821719.956:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd517103b19 code=0x7ffc0000 [ 108.072830][ T1326] F2FS-fs (loop1): invalid crc value [ 108.083590][ T1326] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 108.114413][ T1326] F2FS-fs (loop1): Start checkpoint disabled! [ 108.440030][ T1326] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.459180][ T1326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 108.462217][ T1360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 108.466945][ T1326] SELinux: (dev loop1, type f2fs) getxattr errno 2 [ 109.410360][ T1365] loop0: detected capacity change from 0 to 40427 [ 109.418319][ T1372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 109.523764][ T1365] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(0) [ 109.554773][ T1365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.588444][ T1365] F2FS-fs (loop0): invalid crc value [ 109.607712][ T1365] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 109.640643][ T1365] F2FS-fs (loop0): Start checkpoint disabled! [ 109.647556][ T1365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.654935][ T1365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 109.662670][ T1365] SELinux: (dev loop0, type f2fs) getxattr errno 2 [ 109.685658][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 109.685671][ T30] audit: type=1326 audit(1793821721.776:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd517103947 code=0x7ffc0000 [ 109.706228][ T1347] loop2: detected capacity change from 0 to 131072 [ 109.747868][ T30] audit: type=1326 audit(1793821721.796:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5170c434e code=0x7ffc0000 [ 109.772736][ T30] audit: type=1326 audit(1793821721.796:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5171037ab code=0x7ffc0000 [ 109.797460][ T30] audit: type=1326 audit(1793821721.836:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd5170c434e code=0x7ffc0000 [ 109.822804][ T30] audit: type=1326 audit(1793821721.836:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd5170c434e code=0x7ffc0000 [ 109.848611][ T30] audit: type=1326 audit(1793821721.946:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd517102987 code=0x7ffc0000 [ 109.873854][ T30] audit: type=1326 audit(1793821721.946:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd517104d8a code=0x7ffc0000 [ 109.930758][ T30] audit: type=1326 audit(1793821722.026:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5170c434e code=0x7ffc0000 [ 109.996534][ T1385] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 110.009089][ T30] audit: type=1326 audit(1793821722.026:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.2.289" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5171037ab code=0x7ffc0000 [ 110.052840][ T1387] loop4: detected capacity change from 0 to 256 [ 110.060019][ T30] audit: type=1400 audit(1793821722.086:598): avc: denied { read } for pid=1384 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.102302][ T1387] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.119532][ T1387] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 110.130643][ T1365] loop0: detected capacity change from 0 to 256 [ 110.137829][ T1387] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.157043][ T1365] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 111.360416][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.811694][ T1406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 111.858777][ T767] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 112.000174][ T1408] loop4: detected capacity change from 0 to 40427 [ 112.040105][ T1408] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(0) [ 112.052674][ T1408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.073040][ T1408] F2FS-fs (loop4): invalid crc value [ 112.081126][ T45] tipc: Left network mode [ 112.093630][ T1408] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 112.159511][ T1408] F2FS-fs (loop4): Start checkpoint disabled! [ 112.174003][ T1408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.188602][ T1408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 112.196263][ T1408] SELinux: (dev loop4, type f2fs) getxattr errno 2 [ 112.289115][ T767] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 112.364256][ T767] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 112.374208][ T767] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 112.384087][ T767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.923350][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.938200][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.954099][ T1422] device bridge_slave_0 entered promiscuous mode [ 112.974966][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.989410][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.004285][ T1422] device bridge_slave_1 entered promiscuous mode [ 113.089647][ T45] device bridge_slave_1 left promiscuous mode [ 113.097957][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.115726][ T45] device bridge_slave_0 left promiscuous mode [ 113.128247][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.216608][ T45] device veth1_macvtap left promiscuous mode [ 113.230412][ T45] device veth0_vlan left promiscuous mode [ 113.419523][ T764] Bluetooth: hci0: command 0x1003 tx timeout [ 113.425647][ T1401] Bluetooth: hci0: sending frame failed (-49) [ 113.441247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.452042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.469788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.479407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.487854][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.494942][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.503023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.520525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.529006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.537322][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.544416][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.552814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.561037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.591544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.606612][ T1422] device veth0_vlan entered promiscuous mode [ 113.614894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.628300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.637151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.652830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.661371][ T1422] device veth1_macvtap entered promiscuous mode [ 113.672480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.688008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.726926][ T1436] loop6: detected capacity change from 0 to 256 [ 113.746242][ T1440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 113.769264][ T1442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.890112][ T1436] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.907309][ T1436] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 113.917638][ T1436] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.568930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 115.041744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.169165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 115.177521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.186119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.194941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.203546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.212103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.395723][ T1454] input: syz0 as /devices/virtual/input/input12 [ 115.403252][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 115.403307][ T30] audit: type=1400 audit(1793821727.466:613): avc: denied { write } for pid=1448 comm="syz.5.318" name="ipv6_route" dev="proc" ino=4026532994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.498876][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 115.506229][ T1401] Bluetooth: hci0: sending frame failed (-49) [ 115.571379][ T1453] loop6: detected capacity change from 0 to 256 [ 116.378892][ T1453] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.398530][ T1453] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 116.588876][ T1453] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.736246][ T1463] loop4: detected capacity change from 0 to 256 [ 116.763985][ T1463] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 116.941817][ T1466] loop1: detected capacity change from 0 to 256 [ 117.526481][ T1468] FAULT_INJECTION: forcing a failure. [ 117.526481][ T1468] name failslab, interval 1, probability 0, space 0, times 0 [ 117.540430][ T1466] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.704616][ T623] Bluetooth: hci0: command 0x1009 tx timeout [ 117.754904][ T1468] CPU: 1 PID: 1468 Comm: syz.5.323 Not tainted syzkaller #0 [ 117.762238][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.772310][ T1468] Call Trace: [ 117.775612][ T1468] [ 117.778556][ T1468] __dump_stack+0x21/0x30 [ 117.782904][ T1468] dump_stack_lvl+0x110/0x170 [ 117.787591][ T1468] ? show_regs_print_info+0x20/0x20 [ 117.792809][ T1468] dump_stack+0x15/0x20 [ 117.796996][ T1468] should_fail+0x3ab/0x500 [ 117.801431][ T1468] __should_failslab+0xa4/0xe0 [ 117.806207][ T1468] should_failslab+0x9/0x20 [ 117.810727][ T1468] slab_pre_alloc_hook+0x39/0xd0 [ 117.815702][ T1468] kmem_cache_alloc_trace+0x48/0x270 [ 117.821014][ T1468] ? alloc_fs_context+0x64/0x7c0 [ 117.825979][ T1468] alloc_fs_context+0x64/0x7c0 [ 117.830777][ T1468] fs_context_for_reconfigure+0x73/0x80 [ 117.836341][ T1468] reconfigure_single+0x48/0xb0 [ 117.841210][ T1468] public_dev_mount+0x73/0xe0 [ 117.845906][ T1468] legacy_get_tree+0xed/0x190 [ 117.850598][ T1468] ? devtmpfs_delete_node+0x1f0/0x1f0 [ 117.855986][ T1468] vfs_get_tree+0x89/0x260 [ 117.860446][ T1468] vfs_fsconfig_locked+0x236/0x3f0 [ 117.865574][ T1468] __se_sys_fsconfig+0x69c/0x7e0 [ 117.870528][ T1468] ? __x64_sys_fsconfig+0xd0/0xd0 [ 117.875570][ T1468] ? __ia32_sys_read+0x90/0x90 [ 117.880351][ T1468] __x64_sys_fsconfig+0xbf/0xd0 [ 117.885217][ T1468] x64_sys_call+0x51b/0x9a0 [ 117.889735][ T1468] do_syscall_64+0x4c/0xa0 [ 117.894170][ T1468] ? clear_bhb_loop+0x50/0xa0 [ 117.898869][ T1468] ? clear_bhb_loop+0x50/0xa0 [ 117.903584][ T1468] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.909489][ T1468] RIP: 0033:0x7f03948ebb19 [ 117.913918][ T1468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.933541][ T1468] RSP: 002b:00007f0393343028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 117.941970][ T1468] RAX: ffffffffffffffda RBX: 00007f0394b71fa0 RCX: 00007f03948ebb19 [ 117.949961][ T1468] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 117.957951][ T1468] RBP: 00007f0393343090 R08: 0000000000000000 R09: 0000000000000000 [ 117.965951][ T1468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.973942][ T1468] R13: 00007f0394b72038 R14: 00007f0394b71fa0 R15: 00007ffc74ce2b78 [ 117.981943][ T1468] [ 118.098598][ T767] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 118.114312][ T767] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 118.123577][ T1466] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 118.132786][ T767] input: failed to attach handler kbd to device input11, error: -5 [ 118.142234][ T1466] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 118.374503][ T1476] tipc: Started in network mode [ 118.379466][ T1476] tipc: Node identity 7f000001, cluster identity 4711 [ 118.386338][ T1476] tipc: Enabling of bearer rejected, failed to enable media [ 118.407386][ T1479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.816595][ T1486] loop1: detected capacity change from 0 to 256 [ 120.975663][ T1486] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 122.384778][ T623] usb 3-1: USB disconnect, device number 7 [ 122.402849][ T1490] netlink: 260 bytes leftover after parsing attributes in process `syz.5.330'. [ 122.498443][ T1506] loop4: detected capacity change from 0 to 256 [ 122.506792][ T30] audit: type=1326 audit(1793821734.596:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.5.330" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03948ebb19 code=0x0 [ 122.557273][ T1508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.336'. [ 122.568806][ T1508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.336'. [ 122.581071][ T1506] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 122.609414][ T1508] tipc: Started in network mode [ 122.614311][ T1508] tipc: Node identity 4, cluster identity 4711 [ 122.688900][ T1508] tipc: Node number set to 4 [ 123.211309][ T1518] loop1: detected capacity change from 0 to 256 [ 123.754706][ T1518] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.790016][ T1518] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 123.800763][ T1520] loop6: detected capacity change from 0 to 256 [ 123.817502][ T1518] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 123.864585][ T1522] loop2: detected capacity change from 0 to 256 [ 123.936486][ T1520] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.947256][ T1520] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 123.961274][ T1520] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.079965][ T1525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.378354][ T1522] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.391614][ T1522] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 125.401764][ T1522] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.282655][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 126.401208][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.412172][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 126.742381][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.781195][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.933616][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.261493][ T1544] loop2: detected capacity change from 0 to 256 [ 127.269128][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.322263][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.392007][ T1544] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 127.438612][ T1538] device bridge1 entered promiscuous mode [ 128.227207][ T1550] netlink: 'syz.4.342': attribute type 29 has an invalid length. [ 128.310931][ T30] audit: type=1400 audit(1793821740.406:615): avc: denied { create } for pid=1555 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.369300][ T30] audit: type=1400 audit(1793821740.436:616): avc: denied { bind } for pid=1555 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.388734][ T30] audit: type=1400 audit(1793821740.436:617): avc: denied { connect } for pid=1555 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.408242][ T30] audit: type=1400 audit(1793821740.436:618): avc: denied { ioctl } for pid=1555 comm="syz.4.349" path="socket:[21569]" dev="sockfs" ino=21569 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.454430][ T1539] loop6: detected capacity change from 0 to 40427 [ 128.485985][ T1539] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 128.514017][ T1539] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 128.533228][ T1539] F2FS-fs (loop6): invalid crc value [ 128.548809][ T30] audit: type=1400 audit(1793821740.436:619): avc: denied { unlink } for pid=1555 comm="syz.4.349" name="#1" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.579824][ T1539] F2FS-fs (loop6): Found nat_bits in checkpoint [ 128.636771][ T30] audit: type=1400 audit(1793821740.456:620): avc: denied { lock } for pid=1555 comm="syz.4.349" path="socket:[21567]" dev="sockfs" ino=21567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.701467][ T30] audit: type=1400 audit(1793821740.466:621): avc: denied { ioctl } for pid=1555 comm="syz.4.349" path="socket:[21567]" dev="sockfs" ino=21567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.748734][ T1539] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 128.755874][ T1539] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 128.913999][ T1538] netlink: 84 bytes leftover after parsing attributes in process `syz.6.343'. [ 129.635805][ T1574] loop6: detected capacity change from 0 to 256 [ 129.691066][ T1574] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.708584][ T1574] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 129.721181][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.353'. [ 129.739938][ T1574] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 129.762164][ T1576] netlink: 32 bytes leftover after parsing attributes in process `syz.5.353'. [ 129.788629][ T1577] tipc: Cannot configure node identity twice [ 129.899404][ T1580] netlink: 'syz.4.355': attribute type 29 has an invalid length. [ 130.289533][ T1585] 9pnet: Insufficient options for proto=fd [ 130.446580][ T1585] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 130.878185][ T1590] netlink: 'syz.5.359': attribute type 29 has an invalid length. [ 130.886436][ T1585] SELinux: duplicate or incompatible mount options [ 130.924001][ T1595] loop2: detected capacity change from 0 to 256 [ 130.962111][ T1595] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.014016][ T1595] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 131.039805][ T1595] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 131.055779][ T1600] 9pnet: Insufficient options for proto=fd [ 131.078386][ T1600] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 131.090065][ T1602] device bridge2 entered promiscuous mode [ 131.096631][ T1600] SELinux: duplicate or incompatible mount options [ 131.175185][ T1592] loop1: detected capacity change from 0 to 40427 [ 131.240440][ T1592] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(0) [ 131.298423][ T1592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.489009][ T764] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.614385][ T1592] F2FS-fs (loop1): invalid crc value [ 131.710844][ T1592] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.202813][ T1606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 132.219813][ T1592] F2FS-fs (loop1): Start checkpoint disabled! [ 132.246883][ T1592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.266373][ T1592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 132.288613][ T764] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 132.298746][ T1592] SELinux: (dev loop1, type f2fs) getxattr errno 2 [ 132.313907][ T1603] loop6: detected capacity change from 0 to 40427 [ 132.324863][ T764] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 132.358881][ T1603] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 132.370626][ T764] usb 6-1: config 1 interface 0 has no altsetting 0 [ 132.370776][ T1603] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 132.388534][ T1603] F2FS-fs (loop6): invalid crc value [ 132.395131][ T1603] F2FS-fs (loop6): Found nat_bits in checkpoint [ 132.487360][ T1603] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 132.497156][ T1603] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 132.509322][ T764] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.518399][ T764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.538727][ T764] usb 6-1: SerialNumber: syz [ 132.823668][ T1598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.910665][ T1602] netlink: 84 bytes leftover after parsing attributes in process `syz.6.362'. [ 133.176998][ T1598] UDC core: couldn't find an available UDC or it's busy: -16 [ 133.184668][ T1598] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.199171][ T1624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.209249][ T1598] UDC core: couldn't find an available UDC or it's busy: -16 [ 133.216719][ T1598] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.488794][ T764] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 133.527878][ T764] usb 6-1: USB disconnect, device number 6 [ 133.849630][ T1634] loop1: detected capacity change from 0 to 512 [ 133.864248][ T1634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 133.872341][ T1634] System zones: 1-12 [ 133.877420][ T1634] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.369: missing EA_INODE flag [ 133.889218][ T1634] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.369: error while reading EA inode 12 err=-117 [ 133.901948][ T1634] EXT4-fs (loop1): 1 orphan inode deleted [ 133.907749][ T1634] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 135.495350][ T1659] 9pnet: Insufficient options for proto=fd [ 135.510982][ T1659] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 135.522267][ T1659] SELinux: duplicate or incompatible mount options [ 135.612715][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'. [ 135.791306][ T1668] loop5: detected capacity change from 0 to 256 [ 135.799237][ T1668] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.834990][ T1668] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 135.867915][ T1668] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 137.034417][ T1674] loop4: detected capacity change from 0 to 256 [ 137.077051][ T1674] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.119070][ T1674] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 137.153393][ T1674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 137.314817][ T1679] loop6: detected capacity change from 0 to 256 [ 137.321759][ T1677] device bridge1 entered promiscuous mode [ 137.327409][ T1681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.363806][ T1679] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.729251][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 138.398881][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.639531][ T1679] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 138.649238][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 138.761202][ T1679] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.949454][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.957991][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.967133][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.976472][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.985932][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.022473][ T1689] loop4: detected capacity change from 0 to 1024 [ 139.130645][ T1689] EXT4-fs (loop4): Ignoring removed oldalloc option [ 139.137301][ T1689] EXT4-fs (loop4): Ignoring removed oldalloc option [ 139.144231][ T1689] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.648321][ T1689] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 140.431046][ T1704] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 140.459301][ T1704] SELinux: duplicate or incompatible mount options [ 140.466731][ T1708] device bridge3 entered promiscuous mode [ 140.564438][ T1719] loop1: detected capacity change from 0 to 256 [ 140.585601][ T1713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 140.608372][ T1721] loop6: detected capacity change from 0 to 512 [ 140.622372][ T1719] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.648520][ T1719] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 140.658359][ T1719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.778391][ T1708] loop4: detected capacity change from 0 to 40427 [ 140.782586][ T1721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 140.793691][ T1708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 140.800211][ T1721] System zones: 1-12 [ 140.806399][ T1721] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.393: missing EA_INODE flag [ 140.816850][ T1708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.819873][ T1721] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.393: error while reading EA inode 12 err=-117 [ 140.839551][ T1721] EXT4-fs (loop6): 1 orphan inode deleted [ 140.874089][ T1721] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 141.125915][ T1708] F2FS-fs (loop4): invalid crc value [ 141.218639][ T1708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.362297][ T1729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.078275][ T1708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.108261][ T1708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.209557][ T1740] loop5: detected capacity change from 0 to 256 [ 142.321160][ T1708] netlink: 84 bytes leftover after parsing attributes in process `syz.4.388'. [ 142.467381][ T1740] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.518524][ T1740] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 142.541789][ T1740] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.676215][ T1745] loop2: detected capacity change from 0 to 512 [ 142.689848][ T1747] loop4: detected capacity change from 0 to 512 [ 144.285237][ T1755] loop5: detected capacity change from 0 to 256 [ 144.337988][ T1755] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 144.541954][ T1766] loop1: detected capacity change from 0 to 256 [ 144.996237][ T1766] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 145.399746][ T1772] loop2: detected capacity change from 0 to 1024 [ 145.436672][ T1772] EXT4-fs (loop2): Ignoring removed oldalloc option [ 145.444647][ T1772] EXT4-fs (loop2): Ignoring removed oldalloc option [ 145.451545][ T1772] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.750825][ T1772] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 146.451201][ T1787] loop2: detected capacity change from 0 to 256 [ 146.533412][ T1787] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 146.709085][ T1792] loop6: detected capacity change from 0 to 256 [ 146.738286][ T1792] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.750045][ T1792] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 146.764920][ T1792] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 148.172832][ T1795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.413'. [ 148.591905][ T1803] loop1: detected capacity change from 0 to 40427 [ 148.650543][ T1803] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(0) [ 148.672294][ T1803] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 148.701095][ T1803] F2FS-fs (loop1): invalid crc value [ 148.729420][ T1803] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 148.828685][ T1803] F2FS-fs (loop1): Start checkpoint disabled! [ 148.835767][ T1803] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 148.848881][ T1803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 148.856558][ T1803] SELinux: (dev loop1, type f2fs) getxattr errno 2 [ 149.316964][ T1818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.421'. [ 149.998707][ T1809] loop6: detected capacity change from 0 to 40427 [ 150.027165][ T1809] F2FS-fs (loop6): Mismatch start address, segment0(512) cp_blkaddr(0) [ 150.069002][ T1809] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 150.095284][ T1809] F2FS-fs (loop6): invalid crc value [ 150.131171][ T1809] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.163265][ T1830] loop2: detected capacity change from 0 to 256 [ 150.196470][ T1830] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.244868][ T1830] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 150.300119][ T1830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 150.377508][ T1809] F2FS-fs (loop6): Start checkpoint disabled! [ 150.430441][ T1809] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 150.458627][ T623] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 150.530735][ T1809] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 150.538355][ T1809] SELinux: (dev loop6, type f2fs) getxattr errno 2 [ 151.949453][ T1841] loop1: detected capacity change from 0 to 256 [ 151.978579][ T30] audit: type=1326 audit(1793821764.066:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 151.978600][ T623] usb 6-1: Using ep0 maxpacket: 16 [ 152.016140][ T1841] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.047303][ T1841] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 152.055274][ T30] audit: type=1326 audit(1793821764.066:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.084570][ T1841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.103121][ T30] audit: type=1326 audit(1793821764.066:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.118651][ T623] usb 6-1: device descriptor read/all, error -71 [ 152.137873][ T1846] loop5: detected capacity change from 0 to 256 [ 152.167425][ T30] audit: type=1326 audit(1793821764.066:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.195567][ T30] audit: type=1326 audit(1793821764.066:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.234166][ T30] audit: type=1326 audit(1793821764.066:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.265403][ T30] audit: type=1326 audit(1793821764.066:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.290510][ T30] audit: type=1326 audit(1793821764.066:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.316309][ T30] audit: type=1326 audit(1793821764.066:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.341068][ T30] audit: type=1326 audit(1793821764.066:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae67488b19 code=0x7ffc0000 [ 152.369526][ T1846] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.388641][ T1846] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 152.402613][ T1846] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.193452][ T1876] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 154.212799][ T1876] SELinux: duplicate or incompatible mount options [ 154.340592][ T1878] netlink: 'syz.5.437': attribute type 29 has an invalid length. [ 154.515016][ T1883] device bridge2 entered promiscuous mode [ 154.719386][ T1883] loop1: detected capacity change from 0 to 40427 [ 154.735464][ T1883] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.746852][ T1883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.756059][ T1883] F2FS-fs (loop1): invalid crc value [ 154.763022][ T1883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.804068][ T1883] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.811261][ T1883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.149479][ T1898] loop2: detected capacity change from 0 to 1024 [ 155.256439][ T1898] EXT4-fs (loop2): Ignoring removed oldalloc option [ 155.263131][ T1898] EXT4-fs (loop2): Ignoring removed oldalloc option [ 155.269792][ T1898] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.295728][ T1898] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 156.732560][ T1924] loop6: detected capacity change from 0 to 512 [ 158.388883][ T1930] device bridge4 entered promiscuous mode [ 158.449669][ T1936] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.459074][ T1924] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.470416][ T1924] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.686387][ T1948] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.802852][ T1930] loop4: detected capacity change from 0 to 40427 [ 158.830212][ T1948] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 159.530858][ T1930] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.571893][ T1930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.692475][ T1930] F2FS-fs (loop4): invalid crc value [ 159.740883][ T1930] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.763341][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 159.763356][ T30] audit: type=1326 audit(1793821771.856:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 159.898591][ T30] audit: type=1326 audit(1793821771.856:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 159.923699][ T30] audit: type=1326 audit(1793821771.856:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 160.433580][ T30] audit: type=1326 audit(1793821771.856:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 160.463928][ T1930] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.475274][ T1930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.620553][ T1973] loop2: detected capacity change from 0 to 1024 [ 161.111153][ T1973] EXT4-fs (loop2): Ignoring removed oldalloc option [ 161.117865][ T1973] EXT4-fs (loop2): Ignoring removed oldalloc option [ 161.124571][ T1973] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.264662][ T1973] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 161.369035][ T30] audit: type=1326 audit(1793821771.856:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.393961][ T30] audit: type=1326 audit(1793821771.856:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.774942][ T30] audit: type=1326 audit(1793821771.856:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.847921][ T30] audit: type=1326 audit(1793821771.856:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.874356][ T30] audit: type=1326 audit(1793821771.856:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.899701][ T30] audit: type=1326 audit(1793821771.856:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.6.457" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e722db19 code=0x7ffc0000 [ 161.995391][ T1982] loop2: detected capacity change from 0 to 256 [ 162.392652][ T1982] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 162.473813][ T1956] loop6: detected capacity change from 0 to 131072 [ 164.427849][ T1997] loop1: detected capacity change from 0 to 512 [ 164.571901][ T1997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.588689][ T1997] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.499210][ T2014] loop1: detected capacity change from 0 to 512 [ 165.586464][ T2015] tipc: Cannot configure node identity twice [ 165.683576][ T2014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.704619][ T2014] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.719464][ T2025] device bridge2 entered promiscuous mode [ 165.838969][ T2023] netlink: 260 bytes leftover after parsing attributes in process `syz.6.474'. [ 165.873185][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 165.873232][ T30] audit: type=1326 audit(1793821777.966:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2022 comm="syz.6.474" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9e722db19 code=0x0 [ 166.277013][ T2035] loop4: detected capacity change from 0 to 512 [ 166.511326][ T2027] loop5: detected capacity change from 0 to 40427 [ 166.576294][ T2027] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 166.596858][ T2027] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 166.657757][ T2027] F2FS-fs (loop5): invalid crc value [ 166.689230][ T2027] F2FS-fs (loop5): Found nat_bits in checkpoint [ 166.735768][ T2027] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 166.742968][ T2027] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.766303][ T2042] loop4: detected capacity change from 0 to 1024 [ 166.783774][ T2051] loop2: detected capacity change from 0 to 512 [ 166.823488][ T2042] EXT4-fs (loop4): Ignoring removed oldalloc option [ 166.830325][ T2042] EXT4-fs (loop4): Ignoring removed oldalloc option [ 166.836945][ T2042] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.868698][ T2042] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 166.890471][ T2051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.919330][ T2051] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.269486][ T2065] input: syz0 as /devices/virtual/input/input17 [ 168.270709][ T2070] input: syz0 as /devices/virtual/input/input18 [ 168.612871][ T1857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 168.839930][ T2079] loop5: detected capacity change from 0 to 1024 [ 169.409053][ T2060] loop2: detected capacity change from 0 to 40427 [ 169.909122][ T2060] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(0) [ 169.917528][ T2060] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 169.979821][ T2079] EXT4-fs (loop5): Ignoring removed oldalloc option [ 169.986570][ T2079] EXT4-fs (loop5): Ignoring removed oldalloc option [ 169.993222][ T2079] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.006959][ T2060] F2FS-fs (loop2): invalid crc value [ 170.029310][ T2079] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 170.056433][ T2060] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 170.058120][ T2078] netlink: 260 bytes leftover after parsing attributes in process `syz.1.489'. [ 170.098278][ T30] audit: type=1326 audit(1793821782.186:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.1.489" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8a36bfb19 code=0x0 [ 170.125239][ T2060] F2FS-fs (loop2): Start checkpoint disabled! [ 170.255620][ T2060] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 170.264621][ T2060] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 170.272530][ T2060] SELinux: (dev loop2, type f2fs) getxattr errno 2 [ 170.289885][ T1857] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 170.311117][ T1857] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 170.324824][ T1857] usb 7-1: config 1 interface 0 has no altsetting 0 [ 170.356708][ T2093] loop5: detected capacity change from 0 to 256 [ 170.392662][ T2093] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.404396][ T2093] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 170.413625][ T1857] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.426214][ T1857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.439635][ T1857] usb 7-1: SerialNumber: syz [ 170.444789][ T2093] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.536806][ T2071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.619370][ T2096] loop1: detected capacity change from 0 to 256 [ 170.645749][ T2096] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.661815][ T2096] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 170.678368][ T2096] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.812935][ T2071] UDC core: couldn't find an available UDC or it's busy: -16 [ 170.820594][ T2071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.831874][ T2071] UDC core: couldn't find an available UDC or it's busy: -16 [ 170.839827][ T2071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.070635][ T2101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.080474][ T1857] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 172.089691][ T1857] usb 7-1: USB disconnect, device number 2 [ 172.299478][ T2111] loop4: detected capacity change from 0 to 256 [ 172.322708][ T2111] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 172.394825][ T2115] loop5: detected capacity change from 0 to 256 [ 172.851457][ T2115] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 174.047375][ T2125] loop6: detected capacity change from 0 to 40427 [ 174.312933][ T2125] F2FS-fs (loop6): Mismatch start address, segment0(512) cp_blkaddr(0) [ 174.399587][ T2125] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 174.527619][ T2125] F2FS-fs (loop6): invalid crc value [ 174.652026][ T2125] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 175.048555][ T2125] F2FS-fs (loop6): Start checkpoint disabled! [ 175.065645][ T2125] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 175.089580][ T2146] loop2: detected capacity change from 0 to 256 [ 175.098526][ T2125] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 175.138320][ T2146] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.153695][ T2125] SELinux: (dev loop6, type f2fs) getxattr errno 2 [ 175.180695][ T2146] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 175.219825][ T2146] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.838336][ T2153] input: syz0 as /devices/virtual/input/input20 [ 176.901674][ T30] audit: type=1326 audit(1793821788.996:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 176.962697][ T30] audit: type=1326 audit(1793821789.026:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.087223][ T2162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.108383][ T30] audit: type=1326 audit(1793821789.026:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.133440][ T30] audit: type=1326 audit(1793821789.026:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.163248][ T30] audit: type=1326 audit(1793821789.026:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.188379][ T30] audit: type=1326 audit(1793821789.026:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.216791][ T30] audit: type=1326 audit(1793821789.026:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.255149][ T30] audit: type=1326 audit(1793821789.026:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.291963][ T2166] loop5: detected capacity change from 0 to 512 [ 177.460243][ T30] audit: type=1326 audit(1793821789.026:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.518971][ T2167] loop5: detected capacity change from 0 to 1024 [ 177.537132][ T30] audit: type=1326 audit(1793821789.026:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 177.590201][ T2167] EXT4-fs (loop5): Ignoring removed oldalloc option [ 177.596903][ T2167] EXT4-fs (loop5): Ignoring removed oldalloc option [ 177.603548][ T2167] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.643022][ T2167] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 177.708510][ T442] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.879273][ T2158] loop1: detected capacity change from 0 to 131072 [ 178.141360][ T1857] kernel write not supported for file bpf-prog (pid: 1857 comm: kworker/1:9) [ 178.148898][ T442] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 178.153501][ T2178] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 178.166975][ T442] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 178.200087][ T442] usb 3-1: config 1 interface 0 has no altsetting 0 [ 178.250010][ T2178] SELinux: duplicate or incompatible mount options [ 178.308664][ T442] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.317746][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.326013][ T442] usb 3-1: SerialNumber: syz [ 178.337031][ T2187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.439024][ T2160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.616839][ T2193] loop1: detected capacity change from 0 to 256 [ 178.633767][ T2195] loop4: detected capacity change from 0 to 256 [ 178.640122][ T2193] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.654059][ T2193] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 178.664715][ T2195] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.676843][ T2193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.678717][ T2195] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 178.700493][ T2195] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.824943][ T2160] UDC core: couldn't find an available UDC or it's busy: -16 [ 178.832521][ T2160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.841314][ T2160] UDC core: couldn't find an available UDC or it's busy: -16 [ 178.848761][ T2160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.938761][ T442] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 178.946988][ T442] usb 3-1: USB disconnect, device number 8 [ 179.084400][ T2201] loop5: detected capacity change from 0 to 256 [ 179.113638][ T2201] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 179.182262][ T2203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.523'. [ 179.441936][ T2208] loop2: detected capacity change from 0 to 512 [ 179.558507][ T442] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 179.631013][ T2211] loop1: detected capacity change from 0 to 256 [ 179.649050][ T2211] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.663400][ T2209] loop2: detected capacity change from 0 to 1024 [ 179.675178][ T2211] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 179.686650][ T2211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 179.722637][ T2209] EXT4-fs (loop2): Ignoring removed oldalloc option [ 179.729295][ T2209] EXT4-fs (loop2): Ignoring removed oldalloc option [ 179.735908][ T2209] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.816540][ T2209] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 179.838582][ T442] usb 7-1: Using ep0 maxpacket: 16 [ 181.049708][ T2225] netlink: 'syz.1.529': attribute type 29 has an invalid length. [ 181.074083][ T2227] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.173972][ T2230] loop4: detected capacity change from 0 to 1024 [ 181.210973][ T2230] EXT4-fs (loop4): Ignoring removed oldalloc option [ 181.217652][ T2230] EXT4-fs (loop4): Ignoring removed oldalloc option [ 181.224339][ T2230] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.424440][ T2230] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 182.256497][ T442] usb 7-1: config 4 has an invalid interface number: 221 but max is 3 [ 182.265020][ T442] usb 7-1: config 4 has an invalid interface number: 151 but max is 3 [ 182.273486][ T442] usb 7-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 182.282232][ T442] usb 7-1: config 4 has an invalid interface number: 199 but max is 3 [ 182.290426][ T442] usb 7-1: config 4 has an invalid descriptor of length 9, skipping remainder of the config [ 182.300549][ T442] usb 7-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 182.309544][ T442] usb 7-1: config 4 has no interface number 0 [ 182.315804][ T442] usb 7-1: config 4 has no interface number 1 [ 182.328472][ T442] usb 7-1: config 4 has no interface number 2 [ 182.334597][ T442] usb 7-1: config 4 interface 221 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 182.360455][ T442] usb 7-1: config 4 interface 221 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 182.378477][ T442] usb 7-1: config 4 interface 221 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 182.404874][ T442] usb 7-1: too many endpoints for config 4 interface 151 altsetting 174: 80, using maximum allowed: 30 [ 182.427575][ T442] usb 7-1: config 4 interface 151 altsetting 174 bulk endpoint 0x3 has invalid maxpacket 1024 [ 182.439167][ T2250] loop6: detected capacity change from 0 to 256 [ 182.448471][ T442] usb 7-1: config 4 interface 151 altsetting 174 has a duplicate endpoint with address 0xD, skipping [ 182.482280][ T442] usb 7-1: config 4 interface 151 altsetting 174 has 3 endpoint descriptors, different from the interface descriptor's value: 80 [ 182.506776][ T442] usb 7-1: config 4 interface 199 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.513101][ T2250] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.528519][ T442] usb 7-1: config 4 interface 221 has no altsetting 0 [ 182.537271][ T442] usb 7-1: config 4 interface 151 has no altsetting 0 [ 182.558671][ T442] usb 7-1: config 4 interface 199 has no altsetting 0 [ 182.598586][ T442] usb 7-1: string descriptor 0 read error: -71 [ 182.604873][ T2250] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 182.613829][ T442] usb 7-1: New USB device found, idVendor=054c, idProduct=0155, bcdDevice=e6.c2 [ 182.649480][ T2250] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 182.668897][ T442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.300952][ T442] usb 7-1: can't set config #4, error -71 [ 183.307879][ T442] usb 7-1: USB disconnect, device number 3 [ 183.434374][ T2263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.508035][ T2265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 183.657711][ T2267] loop6: detected capacity change from 0 to 40427 [ 183.768532][ T2273] input: syz0 as /devices/virtual/input/input22 [ 183.879214][ T2267] F2FS-fs (loop6): Mismatch start address, segment0(512) cp_blkaddr(0) [ 183.906187][ T2267] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 183.933973][ T2267] F2FS-fs (loop6): invalid crc value [ 183.952195][ T2267] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 184.009963][ T2267] F2FS-fs (loop6): Start checkpoint disabled! [ 184.023482][ T2267] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 184.038162][ T2267] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 184.054596][ T2267] SELinux: (dev loop6, type f2fs) getxattr errno 2 [ 185.210296][ T2292] loop6: detected capacity change from 0 to 256 [ 185.271982][ T2292] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 185.325895][ T2294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 185.454047][ T2296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'. [ 185.472910][ T2300] loop1: detected capacity change from 0 to 256 [ 185.496484][ T2300] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.507247][ T2300] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 185.517509][ T2300] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.718483][ T946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.958489][ T946] usb 3-1: Using ep0 maxpacket: 16 [ 186.338551][ T946] usb 3-1: config 4 has an invalid interface number: 221 but max is 3 [ 186.346773][ T946] usb 3-1: config 4 has an invalid interface number: 151 but max is 3 [ 186.367771][ T946] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 186.376908][ T946] usb 3-1: config 4 has an invalid interface number: 199 but max is 3 [ 186.396743][ T946] usb 3-1: config 4 has an invalid descriptor of length 9, skipping remainder of the config [ 186.411066][ T946] usb 3-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 186.424643][ T946] usb 3-1: config 4 has no interface number 0 [ 186.431114][ T946] usb 3-1: config 4 has no interface number 1 [ 186.437282][ T946] usb 3-1: config 4 has no interface number 2 [ 186.443645][ T946] usb 3-1: config 4 interface 221 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 186.454761][ T946] usb 3-1: config 4 interface 221 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 186.464912][ T946] usb 3-1: config 4 interface 221 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 186.478298][ T946] usb 3-1: too many endpoints for config 4 interface 151 altsetting 174: 80, using maximum allowed: 30 [ 186.508484][ T946] usb 3-1: config 4 interface 151 altsetting 174 bulk endpoint 0x3 has invalid maxpacket 1024 [ 186.518852][ T946] usb 3-1: config 4 interface 151 altsetting 174 has a duplicate endpoint with address 0xD, skipping [ 186.529760][ T946] usb 3-1: config 4 interface 151 altsetting 174 has 3 endpoint descriptors, different from the interface descriptor's value: 80 [ 186.553276][ T946] usb 3-1: config 4 interface 199 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.576454][ T946] usb 3-1: config 4 interface 221 has no altsetting 0 [ 186.583300][ T946] usb 3-1: config 4 interface 151 has no altsetting 0 [ 186.598475][ T946] usb 3-1: config 4 interface 199 has no altsetting 0 [ 186.873696][ T2319] loop1: detected capacity change from 0 to 1024 [ 186.949038][ T2319] EXT4-fs (loop1): Ignoring removed oldalloc option [ 186.955733][ T2319] EXT4-fs (loop1): Ignoring removed oldalloc option [ 186.962453][ T2319] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.105157][ T2319] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 187.859467][ T1857] kernel write not supported for file bpf-prog (pid: 1857 comm: kworker/1:9) [ 187.876923][ T2324] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 187.886715][ T2324] SELinux: duplicate or incompatible mount options [ 187.937634][ T946] usb 3-1: New USB device found, idVendor=054c, idProduct=0155, bcdDevice=e6.c2 [ 187.946756][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.954809][ T946] usb 3-1: Product: ࠄ [ 187.960322][ T946] usb 3-1: Manufacturer: 馨뾸 [ 187.965333][ T946] usb 3-1: SerialNumber: Н [ 188.011043][ T2334] loop5: detected capacity change from 0 to 512 [ 188.050413][ T2334] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.061556][ T2334] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.081432][ T2334] incfs: ino conflict with backing FS 2 [ 188.087661][ T2334] EXT4-fs error (device loop5): ext4_lookup:1860: inode #12: comm syz.5.561: iget: bad i_size value: 2533274857506816 [ 188.100636][ T2334] incfs_lookup_dentry err:-117 [ 188.131577][ T738] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 188.269784][ T738] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 188.523524][ T8] tipc: Left network mode [ 189.272864][ T2350] loop6: detected capacity change from 0 to 256 [ 189.290656][ T2349] loop4: detected capacity change from 0 to 256 [ 189.340124][ T2349] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.370990][ T2350] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.027653][ T2349] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 190.038292][ T2350] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 190.181981][ T2349] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 190.194572][ T2350] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 190.208708][ T8] device bridge_slave_1 left promiscuous mode [ 190.214857][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.222749][ T8] device bridge_slave_0 left promiscuous mode [ 190.370359][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.380919][ T8] device veth1_macvtap left promiscuous mode [ 190.387030][ T8] device veth0_vlan left promiscuous mode [ 190.413767][ T2364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 192.370345][ T946] usb 3-1: USB disconnect, device number 9 [ 192.487838][ T2374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.640618][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.647715][ T2354] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.655643][ T2354] device bridge_slave_0 entered promiscuous mode [ 192.667999][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.675236][ T2354] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.684032][ T2354] device bridge_slave_1 entered promiscuous mode [ 192.718655][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 192.718669][ T30] audit: type=1326 audit(1793821804.796:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 192.830333][ T30] audit: type=1326 audit(1793821804.796:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 192.916399][ T30] audit: type=1326 audit(1793821804.796:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 192.941366][ T30] audit: type=1326 audit(1793821804.796:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 192.953640][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.966468][ T30] audit: type=1326 audit(1793821804.796:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 192.973056][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.973336][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.998207][ T30] audit: type=1326 audit(1793821804.796:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 193.005059][ T2354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.050722][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.058875][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.066204][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.083236][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.083599][ T30] audit: type=1326 audit(1793821804.796:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 193.092569][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.123253][ T777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.131479][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.139797][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.146470][ T30] audit: type=1326 audit(1793821804.796:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 193.146928][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.187674][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.195903][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.199723][ T30] audit: type=1326 audit(1793821804.796:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 193.220903][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.242617][ T2354] device veth0_vlan entered promiscuous mode [ 193.249439][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.257752][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.258590][ T30] audit: type=1326 audit(1793821804.796:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.1.575" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a36bfb19 code=0x7ffc0000 [ 193.290808][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.305254][ T2354] device veth1_macvtap entered promiscuous mode [ 193.312239][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.324795][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.340905][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.996805][ T2402] loop6: detected capacity change from 0 to 256 [ 194.005257][ T2400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 194.018645][ T2402] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.048764][ T2402] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 194.088042][ T2402] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.103673][ T2406] loop2: detected capacity change from 0 to 256 [ 194.123462][ T2379] loop1: detected capacity change from 0 to 131072 [ 194.134006][ T2406] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.148652][ T2406] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.161745][ T2406] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.106387][ T2416] loop1: detected capacity change from 0 to 512 [ 195.262239][ T2419] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.336842][ T2416] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 195.372394][ T2416] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.471223][ T2416] FAULT_INJECTION: forcing a failure. [ 195.471223][ T2416] name failslab, interval 1, probability 0, space 0, times 0 [ 195.511975][ T2416] CPU: 1 PID: 2416 Comm: syz.1.585 Not tainted syzkaller #0 [ 195.519320][ T2416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.529407][ T2416] Call Trace: [ 195.532725][ T2416] [ 195.535676][ T2416] __dump_stack+0x21/0x30 [ 195.540050][ T2416] dump_stack_lvl+0x110/0x170 [ 195.544746][ T2416] ? show_regs_print_info+0x20/0x20 [ 195.549968][ T2416] ? selinux_socket_bind+0x40a/0xc20 [ 195.555292][ T2416] dump_stack+0x15/0x20 [ 195.559462][ T2416] should_fail+0x3ab/0x500 [ 195.563901][ T2416] __should_failslab+0xa4/0xe0 [ 195.568685][ T2416] should_failslab+0x9/0x20 [ 195.573210][ T2416] slab_pre_alloc_hook+0x39/0xd0 [ 195.578170][ T2416] __kmalloc+0x6d/0x2c0 [ 195.582347][ T2416] ? unix_bind+0x257/0x8c0 [ 195.586784][ T2416] ? vfs_write+0xc72/0xfd0 [ 195.591237][ T2416] unix_bind+0x257/0x8c0 [ 195.595509][ T2416] ? unix_release+0xc0/0xc0 [ 195.600027][ T2416] ? check_stack_object+0x10f/0x150 [ 195.605238][ T2416] ? security_socket_bind+0x82/0xa0 [ 195.610473][ T2416] __sys_bind+0x329/0x450 [ 195.614822][ T2416] ? __ia32_sys_socketpair+0xb0/0xb0 [ 195.620133][ T2416] ? debug_smp_processor_id+0x17/0x20 [ 195.625527][ T2416] __x64_sys_bind+0x7a/0x90 [ 195.630063][ T2416] x64_sys_call+0x6f0/0x9a0 [ 195.634577][ T2416] do_syscall_64+0x4c/0xa0 [ 195.639120][ T2416] ? clear_bhb_loop+0x50/0xa0 [ 195.643823][ T2416] ? clear_bhb_loop+0x50/0xa0 [ 195.648520][ T2416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.654431][ T2416] RIP: 0033:0x7fc8a36bfb19 [ 195.658863][ T2416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.678509][ T2416] RSP: 002b:00007fc8a2117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 195.686944][ T2416] RAX: ffffffffffffffda RBX: 00007fc8a3945fa0 RCX: 00007fc8a36bfb19 [ 195.694942][ T2416] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 195.702939][ T2416] RBP: 00007fc8a2117090 R08: 0000000000000000 R09: 0000000000000000 [ 195.710456][ T2429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.587'. [ 195.711019][ T2416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.727899][ T2416] R13: 00007fc8a3946038 R14: 00007fc8a3945fa0 R15: 00007ffe3f329c38 [ 195.735916][ T2416] [ 195.958661][ T2391] loop4: detected capacity change from 0 to 131072 [ 198.211936][ T2459] netlink: 'syz.4.597': attribute type 3 has an invalid length. [ 199.332759][ T2423] syz.7.587 (2423) used greatest stack depth: 20072 bytes left [ 199.393906][ T2469] loop7: detected capacity change from 0 to 256 [ 199.460081][ T2475] loop1: detected capacity change from 0 to 256 [ 199.499960][ T2469] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.516857][ T2469] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 199.537873][ T2475] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 199.563599][ T2469] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 199.908833][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 199.978144][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.438177][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 200.515894][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.573241][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 200.573257][ T30] audit: type=1400 audit(1793821812.666:849): avc: denied { bind } for pid=2493 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.629015][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.657539][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.677356][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.687417][ T30] audit: type=1400 audit(1793821812.716:850): avc: denied { setopt } for pid=2493 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.725831][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.783159][ T2499] xt_hashlimit: size too large, truncated to 1048576 [ 200.854317][ T2492] loop6: detected capacity change from 0 to 40427 [ 200.884123][ T2492] F2FS-fs (loop6): invalid crc value [ 200.889949][ T30] audit: type=1400 audit(1793821812.986:851): avc: denied { write } for pid=2500 comm="syz.7.611" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.936847][ T2492] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 201.004690][ T2492] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 201.023245][ T30] audit: type=1400 audit(1793821813.116:852): avc: denied { write open } for pid=2491 comm="syz.6.608" path="/57/bus/file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.131154][ T2517] netlink: 'syz.7.614': attribute type 29 has an invalid length. [ 201.253433][ T2518] FAULT_INJECTION: forcing a failure. [ 201.253433][ T2518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.266602][ T2518] CPU: 1 PID: 2518 Comm: syz.6.608 Not tainted syzkaller #0 [ 201.273906][ T2518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.284000][ T2518] Call Trace: [ 201.287290][ T2518] [ 201.290236][ T2518] __dump_stack+0x21/0x30 [ 201.294586][ T2518] dump_stack_lvl+0x110/0x170 [ 201.299289][ T2518] ? show_regs_print_info+0x20/0x20 [ 201.304504][ T2518] dump_stack+0x15/0x20 [ 201.308675][ T2518] should_fail+0x3ab/0x500 [ 201.313106][ T2518] should_fail_usercopy+0x1a/0x20 [ 201.318147][ T2518] _copy_from_iter+0x220/0x10a0 [ 201.323019][ T2518] ? irqentry_exit_cond_resched+0x29/0x30 [ 201.328750][ T2518] ? sysvec_reschedule_ipi+0x78/0x80 [ 201.334056][ T2518] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 201.339451][ T2518] ? __check_object_size+0x2dd/0x3b0 [ 201.344755][ T2518] netlink_sendmsg+0x72c/0xb80 [ 201.349532][ T2518] ? irqentry_exit+0x37/0x40 [ 201.354145][ T2518] ? sysvec_reschedule_ipi+0x78/0x80 [ 201.359454][ T2518] ? netlink_getsockopt+0x530/0x530 [ 201.364690][ T2518] ? security_socket_sendmsg+0x82/0xa0 [ 201.370166][ T2518] ? netlink_getsockopt+0x530/0x530 [ 201.375382][ T2518] ____sys_sendmsg+0x5be/0x8f0 [ 201.380162][ T2518] ? __sys_sendmsg_sock+0x40/0x40 [ 201.385224][ T2518] ? import_iovec+0x7c/0xb0 [ 201.389757][ T2518] ___sys_sendmsg+0x236/0x2e0 [ 201.394451][ T2518] ? irqentry_exit+0x37/0x40 [ 201.399056][ T2518] ? __sys_sendmsg+0x280/0x280 [ 201.403838][ T2518] ? __fdget+0x1a1/0x230 [ 201.408096][ T2518] __x64_sys_sendmsg+0x201/0x2d0 [ 201.413060][ T2518] ? ___sys_sendmsg+0x2e0/0x2e0 [ 201.417921][ T2518] ? ksys_write+0x1fa/0x260 [ 201.422440][ T2518] ? __kasan_check_write+0x14/0x20 [ 201.427565][ T2518] ? switch_fpu_return+0x15d/0x2c0 [ 201.432691][ T2518] x64_sys_call+0x4b/0x9a0 [ 201.437144][ T2518] do_syscall_64+0x4c/0xa0 [ 201.441586][ T2518] ? clear_bhb_loop+0x50/0xa0 [ 201.446288][ T2518] ? clear_bhb_loop+0x50/0xa0 [ 201.450984][ T2518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.456891][ T2518] RIP: 0033:0x7fc9e722db19 [ 201.461325][ T2518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.480959][ T2518] RSP: 002b:00007fc9e5c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.489390][ T2518] RAX: ffffffffffffffda RBX: 00007fc9e74b4180 RCX: 00007fc9e722db19 [ 201.497396][ T2518] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 201.505375][ T2518] RBP: 00007fc9e5c43090 R08: 0000000000000000 R09: 0000000000000000 [ 201.513360][ T2518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.521348][ T2518] R13: 00007fc9e74b4218 R14: 00007fc9e74b4180 R15: 00007ffc774a2818 [ 201.529339][ T2518] [ 201.709565][ T2523] loop7: detected capacity change from 0 to 512 [ 201.808800][ T2523] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.836328][ T2530] loop2: detected capacity change from 0 to 512 [ 201.843048][ T2523] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.024641][ T1422] attempt to access beyond end of device [ 202.024641][ T1422] loop6: rw=2049, want=45104, limit=40427 [ 202.056560][ T2530] EXT4-fs (loop2): can't mount with commit=8, fs mounted w/o journal [ 202.157471][ T30] audit: type=1400 audit(1793821814.246:853): avc: denied { getopt } for pid=2529 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.341000][ T2542] loop6: detected capacity change from 0 to 256 [ 202.370813][ T2544] loop2: detected capacity change from 0 to 256 [ 202.380252][ T30] audit: type=1400 audit(1793821814.476:854): avc: denied { append } for pid=2545 comm="syz.1.621" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.380887][ T2546] capability: warning: `syz.1.621' uses 32-bit capabilities (legacy support in use) [ 202.413889][ T2544] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 202.430304][ T2542] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.460946][ T2542] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 202.470812][ T2542] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 202.501579][ T30] audit: type=1400 audit(1793821814.586:855): avc: denied { setopt } for pid=2549 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.521677][ T30] audit: type=1326 audit(1793821814.596:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.1.625" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8a36bfb19 code=0x0 [ 202.607389][ T30] audit: type=1400 audit(1793821814.696:857): avc: denied { listen } for pid=2549 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.630162][ T30] audit: type=1400 audit(1793821814.696:858): avc: denied { accept } for pid=2549 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.867311][ T2556] netlink: 'syz.7.626': attribute type 29 has an invalid length. [ 204.183680][ T2569] input: syz0 as /devices/virtual/input/input27 [ 204.936091][ T2571] netlink: 'syz.4.631': attribute type 3 has an invalid length. [ 205.843301][ T2563] netlink: 260 bytes leftover after parsing attributes in process `syz.6.628'. [ 206.208500][ T30] audit: type=1326 audit(1793821818.286:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2562 comm="syz.6.628" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9e722db19 code=0x0 [ 206.242545][ T2588] loop1: detected capacity change from 0 to 512 [ 206.253616][ T2590] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 206.281594][ T2588] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.329705][ T2593] loop4: detected capacity change from 0 to 256 [ 206.357274][ T2593] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.368848][ T2593] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 206.381620][ T2593] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 206.626530][ T2601] loop7: detected capacity change from 0 to 512 [ 206.659879][ T2601] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext3 [ 206.688616][ T623] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 206.796910][ T30] audit: type=1400 audit(1793821818.886:860): avc: denied { ioctl } for pid=2599 comm="syz.7.641" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.938477][ T623] usb 7-1: Using ep0 maxpacket: 8 [ 207.041456][ T2604] loop1: detected capacity change from 0 to 40427 [ 207.098568][ T623] usb 7-1: unable to get BOS descriptor or descriptor too short [ 207.131194][ T2604] F2FS-fs (loop1): invalid crc value [ 207.149487][ T2604] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 207.178536][ T623] usb 7-1: config 8 has an invalid interface number: 51 but max is 0 [ 207.194183][ T623] usb 7-1: config 8 has no interface number 0 [ 207.201524][ T623] usb 7-1: config 8 interface 51 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 1024 [ 207.212247][ T623] usb 7-1: config 8 interface 51 has no altsetting 0 [ 207.245939][ T2604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.152975][ T2618] input: syz0 as /devices/virtual/input/input29 [ 208.269741][ T286] attempt to access beyond end of device [ 208.269741][ T286] loop1: rw=2049, want=45104, limit=40427 [ 208.378662][ T623] usb 7-1: string descriptor 0 read error: -22 [ 208.385229][ T623] usb 7-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=92.d2 [ 208.398660][ T623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.430223][ T2596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.656664][ T623] usb 7-1: USB disconnect, device number 4 [ 208.688706][ T2629] netlink: 'syz.7.648': attribute type 29 has an invalid length. [ 208.752411][ T2632] loop7: detected capacity change from 0 to 256 [ 208.841215][ T2632] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 208.863965][ T2634] loop4: detected capacity change from 0 to 1024 [ 208.919077][ T2634] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.011518][ T2634] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 209.409350][ T2648] loop2: detected capacity change from 0 to 256 [ 209.433166][ T2648] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.394862][ T2648] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 210.543961][ T2652] netlink: 'syz.4.655': attribute type 29 has an invalid length. [ 210.552557][ T2648] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 210.763437][ T2654] netlink: 24 bytes leftover after parsing attributes in process `syz.7.656'. [ 210.943647][ T2670] input: syz0 as /devices/virtual/input/input32 [ 211.747991][ T30] audit: type=1400 audit(1793821823.186:861): avc: denied { ioctl } for pid=2672 comm="syz.6.662" path="socket:[25356]" dev="sockfs" ino=25356 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.814977][ T2680] cgroup: Name too long [ 211.868534][ T1857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 212.134041][ T2685] loop2: detected capacity change from 0 to 1024 [ 213.180746][ T2691] loop1: detected capacity change from 0 to 512 [ 213.234558][ T2685] EXT4-fs (loop2): Ignoring removed oldalloc option [ 213.241279][ T2685] EXT4-fs (loop2): Ignoring removed oldalloc option [ 213.247911][ T2685] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.267118][ T2691] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.288485][ T1857] usb 8-1: Using ep0 maxpacket: 16 [ 213.300629][ T2691] ext4 filesystem being mounted at /134/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.317576][ T2685] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 213.431850][ T2700] netlink: 'syz.6.670': attribute type 49 has an invalid length. [ 213.724780][ T2700] device veth0_to_batadv entered promiscuous mode [ 213.791615][ T30] audit: type=1400 audit(1793821825.886:862): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 213.823865][ T30] audit: type=1400 audit(1793821825.916:863): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.855973][ T30] audit: type=1400 audit(1793821825.916:864): avc: denied { read } for pid=140 comm="dhcpcd" name="n508" dev="tmpfs" ino=4128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.884452][ T2708] FAULT_INJECTION: forcing a failure. [ 213.884452][ T2708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.898274][ T30] audit: type=1400 audit(1793821825.916:865): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=4128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.925666][ T30] audit: type=1400 audit(1793821825.916:866): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=4128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.939231][ T2708] CPU: 0 PID: 2708 Comm: syz.4.673 Not tainted syzkaller #0 [ 213.956096][ T2708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.966176][ T2708] Call Trace: [ 213.969459][ T2708] [ 213.972393][ T2708] __dump_stack+0x21/0x30 [ 213.976734][ T2708] dump_stack_lvl+0x110/0x170 [ 213.981421][ T2708] ? show_regs_print_info+0x20/0x20 [ 213.986628][ T2708] ? stack_trace_save+0xa6/0xf0 [ 213.991506][ T2708] ? __stack_depot_save+0x34/0x480 [ 213.996625][ T2708] ? path_openat+0x284f/0x2f80 [ 214.001430][ T2708] dump_stack+0x15/0x20 [ 214.005599][ T2708] should_fail+0x3ab/0x500 [ 214.010020][ T2708] should_fail_usercopy+0x1a/0x20 [ 214.015053][ T2708] _copy_from_user+0x20/0xd0 [ 214.019652][ T2708] __copy_msghdr_from_user+0xc9/0x630 [ 214.025035][ T2708] ? _kstrtoull+0x3bb/0x4c0 [ 214.029548][ T2708] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 214.034838][ T2708] ? kstrtouint_from_user+0x1c4/0x220 [ 214.040222][ T2708] ___sys_sendmsg+0x19a/0x2e0 [ 214.044906][ T2708] ? __sys_sendmsg+0x280/0x280 [ 214.049683][ T2708] ? __fdget+0x1a1/0x230 [ 214.053946][ T2708] __x64_sys_sendmsg+0x201/0x2d0 [ 214.058893][ T2708] ? ___sys_sendmsg+0x2e0/0x2e0 [ 214.063764][ T2708] ? ksys_write+0x1fa/0x260 [ 214.068278][ T2708] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 214.074442][ T2708] x64_sys_call+0x4b/0x9a0 [ 214.078869][ T2708] do_syscall_64+0x4c/0xa0 [ 214.083313][ T2708] ? clear_bhb_loop+0x50/0xa0 [ 214.088002][ T2708] ? clear_bhb_loop+0x50/0xa0 [ 214.092688][ T2708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.098592][ T2708] RIP: 0033:0x7fae67488b19 [ 214.103014][ T2708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.122622][ T2708] RSP: 002b:00007fae65ee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.131046][ T2708] RAX: ffffffffffffffda RBX: 00007fae6770efa0 RCX: 00007fae67488b19 [ 214.139186][ T2708] RDX: 0000000000048800 RSI: 0000200000000300 RDI: 0000000000000009 [ 214.147174][ T2708] RBP: 00007fae65ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 214.155157][ T2708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.163138][ T2708] R13: 00007fae6770f038 R14: 00007fae6770efa0 R15: 00007ffd1060bf98 [ 214.171124][ T2708] [ 214.187433][ T30] audit: type=1400 audit(1793821826.266:867): avc: denied { ioctl } for pid=2710 comm="syz.2.672" path="/135/tracing/events/sched/filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 214.258501][ T1857] usb 8-1: unable to read config index 0 descriptor/all [ 214.265544][ T1857] usb 8-1: can't read configurations, error -71 [ 214.296800][ T2723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 214.500862][ T2734] netlink: 260 bytes leftover after parsing attributes in process `syz.4.680'. [ 214.514829][ T30] audit: type=1326 audit(1793821826.616:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.4.680" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae67488b19 code=0x0 [ 214.688525][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.928462][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 215.128517][ T6] usb 2-1: config 4 has an invalid interface number: 221 but max is 3 [ 215.138961][ T6] usb 2-1: config 4 has an invalid interface number: 151 but max is 3 [ 215.147249][ T6] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 215.156229][ T6] usb 2-1: config 4 has an invalid interface number: 199 but max is 3 [ 215.164684][ T6] usb 2-1: config 4 has an invalid descriptor of length 9, skipping remainder of the config [ 215.175019][ T6] usb 2-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 215.184161][ T6] usb 2-1: config 4 has no interface number 0 [ 215.190462][ T6] usb 2-1: config 4 has no interface number 1 [ 215.196623][ T6] usb 2-1: config 4 has no interface number 2 [ 215.202988][ T6] usb 2-1: config 4 interface 221 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 215.214077][ T6] usb 2-1: config 4 interface 221 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 215.224183][ T6] usb 2-1: config 4 interface 221 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 215.252963][ T6] usb 2-1: too many endpoints for config 4 interface 151 altsetting 174: 80, using maximum allowed: 30 [ 215.277011][ T6] usb 2-1: config 4 interface 151 altsetting 174 bulk endpoint 0x3 has invalid maxpacket 1024 [ 215.287696][ T6] usb 2-1: config 4 interface 151 altsetting 174 has a duplicate endpoint with address 0xD, skipping [ 215.297029][ T2743] loop7: detected capacity change from 0 to 40427 [ 215.299562][ T6] usb 2-1: config 4 interface 151 altsetting 174 has 3 endpoint descriptors, different from the interface descriptor's value: 80 [ 215.308132][ T2748] FAULT_INJECTION: forcing a failure. [ 215.308132][ T2748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.319927][ T6] usb 2-1: config 4 interface 199 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.331941][ T2748] CPU: 1 PID: 2748 Comm: syz.4.684 Not tainted syzkaller #0 [ 215.346895][ T6] usb 2-1: config 4 interface 221 has no altsetting 0 [ 215.351732][ T2748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.351746][ T2748] Call Trace: [ 215.351752][ T2748] [ 215.351759][ T2748] __dump_stack+0x21/0x30 [ 215.359495][ T6] usb 2-1: config 4 interface 151 has no altsetting 0 [ 215.368597][ T2748] dump_stack_lvl+0x110/0x170 [ 215.368626][ T2748] ? show_regs_print_info+0x20/0x20 [ 215.372596][ T6] usb 2-1: config 4 interface 199 has no altsetting 0 [ 215.374866][ T2748] ? migrate_enable+0x1a5/0x2a0 [ 215.407470][ T2748] ? migrate_disable+0x180/0x180 [ 215.412458][ T2748] dump_stack+0x15/0x20 [ 215.416650][ T2748] should_fail+0x3ab/0x500 [ 215.421112][ T2748] should_fail_usercopy+0x1a/0x20 [ 215.426163][ T2748] _copy_from_user+0x20/0xd0 [ 215.430803][ T2748] generic_map_update_batch+0x4ac/0x760 [ 215.436402][ T2748] ? generic_map_delete_batch+0x520/0x520 [ 215.442151][ T2748] ? generic_map_delete_batch+0x520/0x520 [ 215.447897][ T2748] bpf_map_do_batch+0x461/0x5d0 [ 215.452900][ T2748] __sys_bpf+0x65c/0x7d0 [ 215.457171][ T2748] ? bpf_link_show_fdinfo+0x330/0x330 [ 215.462578][ T2748] ? __kasan_check_write+0x14/0x20 [ 215.467721][ T2748] ? switch_fpu_return+0x15d/0x2c0 [ 215.472862][ T2748] __x64_sys_bpf+0x7c/0x90 [ 215.477324][ T2748] x64_sys_call+0x4b9/0x9a0 [ 215.481851][ T2748] do_syscall_64+0x4c/0xa0 [ 215.486297][ T2748] ? clear_bhb_loop+0x50/0xa0 [ 215.490995][ T2748] ? clear_bhb_loop+0x50/0xa0 [ 215.495724][ T2748] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.501648][ T2748] RIP: 0033:0x7fae67488b19 [ 215.506084][ T2748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.525712][ T2748] RSP: 002b:00007fae65ee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.534126][ T2748] RAX: ffffffffffffffda RBX: 00007fae6770efa0 RCX: 00007fae67488b19 [ 215.538687][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0155, bcdDevice=e6.c2 [ 215.542107][ T2748] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 215.542125][ T2748] RBP: 00007fae67520b70 R08: 0000000000000000 R09: 0000000000000000 [ 215.567087][ T2748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.568546][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.575071][ T2748] R13: 00007fae6770f038 R14: 00007fae6770efa0 R15: 00007ffd1060bf98 [ 215.575096][ T2748] [ 215.601114][ T6] usb 2-1: Product: ࠄ [ 215.605327][ T6] usb 2-1: Manufacturer: 馨뾸 [ 215.609941][ T2743] F2FS-fs (loop7): Mismatch start address, segment0(512) cp_blkaddr(0) [ 215.625091][ T2743] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 215.631185][ T6] usb 2-1: SerialNumber: Н [ 215.653808][ T2743] F2FS-fs (loop7): invalid crc value [ 215.672794][ T2743] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 215.699791][ T30] audit: type=1400 audit(1793821827.796:869): avc: denied { write } for pid=2756 comm="syz.4.688" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 215.729167][ T2743] F2FS-fs (loop7): Start checkpoint disabled! [ 215.735981][ T2743] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 215.744866][ T2743] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 215.752593][ T2743] SELinux: (dev loop7, type f2fs) getxattr errno 2 [ 216.057885][ T2765] loop6: detected capacity change from 0 to 256 [ 216.072369][ T2765] FAT-fs (loop6): Directory bread(block 64) failed [ 216.078777][ T1857] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 216.079467][ T2765] FAT-fs (loop6): Directory bread(block 65) failed [ 216.093309][ T2765] FAT-fs (loop6): Directory bread(block 66) failed [ 216.100157][ T2765] FAT-fs (loop6): Directory bread(block 67) failed [ 216.183579][ T2765] FAT-fs (loop6): Directory bread(block 68) failed [ 216.193227][ T2765] FAT-fs (loop6): Directory bread(block 69) failed [ 216.220652][ T2765] FAT-fs (loop6): Directory bread(block 70) failed [ 216.243630][ T2765] FAT-fs (loop6): Directory bread(block 71) failed [ 216.281475][ T2765] FAT-fs (loop6): Directory bread(block 72) failed [ 216.429329][ T2765] FAT-fs (loop6): Directory bread(block 73) failed [ 216.445932][ T30] audit: type=1400 audit(1793821828.536:870): avc: denied { mount } for pid=2764 comm="syz.6.690" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 216.646543][ T2783] loop4: detected capacity change from 0 to 256 [ 216.667722][ T2783] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 216.681874][ T2790] loop6: detected capacity change from 0 to 16 [ 216.709880][ T6] usb 2-1: USB disconnect, device number 6 [ 216.719833][ T2790] erofs: (device loop6): mounted with root inode @ nid 36. [ 216.739203][ T1857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.748956][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 216.748966][ T30] audit: type=1400 audit(1793821828.846:877): avc: denied { getopt } for pid=2789 comm="syz.6.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.779353][ T48] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 216.818587][ T1857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 216.842476][ T1857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 216.868121][ T1857] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.118666][ T1857] usb 3-1: string descriptor 0 read error: -22 [ 217.148027][ T1857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.158498][ T767] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 217.177469][ T1857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.208516][ T2762] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.210779][ T2814] loop1: detected capacity change from 0 to 1024 [ 217.215646][ T2762] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.241983][ T2814] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.253090][ T1857] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 217.256953][ T30] audit: type=1400 audit(1793821829.356:878): avc: denied { read } for pid=2813 comm="syz.1.711" path="/137/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 217.358474][ T442] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 217.455632][ T1857] usb 3-1: USB disconnect, device number 10 [ 217.518556][ T767] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.528478][ T767] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.688550][ T767] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 217.697765][ T767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.706011][ T767] usb 8-1: Product: syz [ 217.710386][ T767] usb 8-1: Manufacturer: syz [ 217.733648][ T767] usb 8-1: SerialNumber: syz [ 217.758554][ T442] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.771982][ T442] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.796694][ T442] usb 7-1: config 0 interface 0 has no altsetting 0 [ 217.809815][ T442] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 217.830355][ T442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.841983][ T442] usb 7-1: config 0 descriptor?? [ 217.859261][ T767] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 217.867337][ T767] ums-sddr09 8-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 217.867337][ T767] Please send a copy of this message to and [ 218.163444][ T2829] FAULT_INJECTION: forcing a failure. [ 218.163444][ T2829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.176758][ T2829] CPU: 1 PID: 2829 Comm: syz.2.714 Not tainted syzkaller #0 [ 218.184075][ T2829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.194178][ T2829] Call Trace: [ 218.197484][ T2829] [ 218.200439][ T2829] __dump_stack+0x21/0x30 [ 218.204803][ T2829] dump_stack_lvl+0x110/0x170 [ 218.209510][ T2829] ? show_regs_print_info+0x20/0x20 [ 218.214738][ T2829] dump_stack+0x15/0x20 [ 218.218918][ T2829] should_fail+0x3ab/0x500 [ 218.223377][ T2829] should_fail_alloc_page+0x55/0x80 [ 218.228623][ T2829] prepare_alloc_pages+0x13f/0x590 [ 218.233767][ T2829] ? __alloc_pages_bulk+0xab0/0xab0 [ 218.239003][ T2829] __alloc_pages+0x11d/0x460 [ 218.243645][ T2829] ? unlock_page_memcg+0x114/0x130 [ 218.248787][ T2829] ? zone_watermark_fast+0x250/0x250 [ 218.254097][ T2829] ? page_remove_rmap+0xc6d/0xf40 [ 218.259153][ T2829] ? page_add_file_rmap+0x700/0x700 [ 218.264380][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.269541][ T2829] ? _raw_spin_lock+0x94/0xf0 [ 218.274250][ T2829] __get_free_pages+0x10/0x30 [ 218.278959][ T2829] __tlb_remove_page_size+0x18a/0x310 [ 218.284362][ T2829] unmap_page_range+0x1059/0x1e00 [ 218.289446][ T2829] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 218.295815][ T2829] ? _raw_spin_unlock+0x4d/0x70 [ 218.300695][ T2829] ? finish_task_switch+0x16b/0x790 [ 218.305942][ T2829] unmap_vmas+0x26d/0x380 [ 218.310300][ T2829] ? unmap_page_range+0x1e00/0x1e00 [ 218.315524][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.320669][ T2829] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 218.326156][ T2829] exit_mmap+0x412/0x8b0 [ 218.330429][ T2829] ? vm_brk+0x30/0x30 [ 218.334440][ T2829] ? __mmput+0x7b/0x300 [ 218.338620][ T2829] __mmput+0x92/0x300 [ 218.342660][ T2829] mmput+0x50/0x150 [ 218.346492][ T2829] do_exit+0xacc/0x29a0 [ 218.350691][ T2829] ? avc_denied+0x1b0/0x1b0 [ 218.355223][ T2829] ? put_task_struct+0x90/0x90 [ 218.360022][ T2829] ? __schedule+0xbd7/0x14a0 [ 218.364642][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.369784][ T2829] ? _raw_spin_lock_irq+0x95/0xf0 [ 218.374837][ T2829] do_group_exit+0x149/0x310 [ 218.379466][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.384603][ T2829] ? recalc_sigpending+0x1ac/0x230 [ 218.389740][ T2829] get_signal+0x64f/0x1430 [ 218.394185][ T2829] arch_do_signal_or_restart+0xe2/0x1100 [ 218.399840][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.404974][ T2829] ? mutex_unlock+0x8f/0x230 [ 218.409591][ T2829] ? __kasan_check_write+0x14/0x20 [ 218.414736][ T2829] ? get_sigframe_size+0x10/0x10 [ 218.419697][ T2829] ? __se_sys_futex+0x135/0x330 [ 218.424586][ T2829] exit_to_user_mode_loop+0xa7/0xe0 [ 218.429806][ T2829] exit_to_user_mode_prepare+0x87/0xd0 [ 218.435339][ T2829] syscall_exit_to_user_mode+0x1a/0x30 [ 218.440829][ T2829] do_syscall_64+0x58/0xa0 [ 218.445270][ T2829] ? clear_bhb_loop+0x50/0xa0 [ 218.449980][ T2829] ? clear_bhb_loop+0x50/0xa0 [ 218.454687][ T2829] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.460610][ T2829] RIP: 0033:0x7fd517103b19 [ 218.465044][ T2829] Code: Unable to access opcode bytes at RIP 0x7fd517103aef. [ 218.472427][ T2829] RSP: 002b:00007fd515b5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.480953][ T2829] RAX: 0000000000000001 RBX: 00007fd517389fa8 RCX: 00007fd517103b19 [ 218.488954][ T2829] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd517389fac [ 218.496950][ T2829] RBP: 00007fd517389fa0 R08: 0006a108881ababa R09: 0000000000000000 [ 218.504945][ T2829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.512947][ T2829] R13: 00007fd51738a038 R14: 00007ffd01d5f660 R15: 00007ffd01d5f748 [ 218.520947][ T2829] [ 218.543064][ T442] lenovo 0003:17EF:6047.0001: ignoring exceeding usage max [ 218.573325][ T767] ums-sddr09: probe of 8-1:1.0 failed with error -5 [ 218.587767][ T767] usb 8-1: USB disconnect, device number 4 [ 218.619087][ T442] lenovo 0003:17EF:6047.0001: No inputs registered, leaving [ 218.636666][ T442] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.10 Joystick [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 218.767376][ T1857] usb 7-1: USB disconnect, device number 5 [ 218.779428][ T2842] loop4: detected capacity change from 0 to 128 [ 218.814460][ T30] audit: type=1400 audit(1793821830.865:879): avc: denied { remount } for pid=2841 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 218.900667][ T2848] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 219.078558][ T2861] loop2: detected capacity change from 0 to 256 [ 219.139384][ T2865] FAULT_INJECTION: forcing a failure. [ 219.139384][ T2865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.152963][ T2865] CPU: 1 PID: 2865 Comm: syz.1.728 Not tainted syzkaller #0 [ 219.160302][ T2865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.170365][ T2865] Call Trace: [ 219.173654][ T2865] [ 219.176600][ T2865] __dump_stack+0x21/0x30 [ 219.180953][ T2865] dump_stack_lvl+0x110/0x170 [ 219.185657][ T2865] ? show_regs_print_info+0x20/0x20 [ 219.190871][ T2865] ? ttwu_do_activate+0x179/0x2a0 [ 219.195911][ T2865] dump_stack+0x15/0x20 [ 219.200073][ T2865] should_fail+0x3ab/0x500 [ 219.204499][ T2865] should_fail_alloc_page+0x55/0x80 [ 219.209705][ T2865] prepare_alloc_pages+0x13f/0x590 [ 219.214859][ T2865] ? __alloc_pages_bulk+0xab0/0xab0 [ 219.220061][ T2865] __alloc_pages+0x11d/0x460 [ 219.224654][ T2865] ? unlock_page_memcg+0x114/0x130 [ 219.229781][ T2865] ? zone_watermark_fast+0x250/0x250 [ 219.235078][ T2865] ? page_remove_rmap+0xc6d/0xf40 [ 219.240118][ T2865] ? page_add_file_rmap+0x700/0x700 [ 219.245321][ T2865] ? mark_page_accessed+0x3a8/0x8e0 [ 219.250529][ T2865] __get_free_pages+0x10/0x30 [ 219.255209][ T2865] __tlb_remove_page_size+0x18a/0x310 [ 219.260598][ T2865] unmap_page_range+0x1059/0x1e00 [ 219.265645][ T2865] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 219.271997][ T2865] ? lru_cache_add+0x7e0/0x7e0 [ 219.276766][ T2865] unmap_vmas+0x26d/0x380 [ 219.281105][ T2865] ? unmap_page_range+0x1e00/0x1e00 [ 219.286312][ T2865] ? __kasan_check_write+0x14/0x20 [ 219.291434][ T2865] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 219.296896][ T2865] exit_mmap+0x412/0x8b0 [ 219.301142][ T2865] ? vm_brk+0x30/0x30 [ 219.305127][ T2865] ? mutex_unlock+0x8f/0x230 [ 219.309730][ T2865] ? uprobe_clear_state+0x2c6/0x320 [ 219.314931][ T2865] __mmput+0x92/0x300 [ 219.318917][ T2865] mmput+0x50/0x150 [ 219.322729][ T2865] do_exit+0xacc/0x29a0 [ 219.326896][ T2865] ? do_kern_addr_fault+0x80/0x80 [ 219.331930][ T2865] ? put_task_struct+0x90/0x90 [ 219.336710][ T2865] ? __kasan_check_write+0x14/0x20 [ 219.341832][ T2865] ? _raw_spin_lock_irq+0x95/0xf0 [ 219.346858][ T2865] do_group_exit+0x149/0x310 [ 219.351447][ T2865] ? __kasan_check_write+0x14/0x20 [ 219.356562][ T2865] ? recalc_sigpending+0x1ac/0x230 [ 219.361682][ T2865] get_signal+0x64f/0x1430 [ 219.366104][ T2865] ? irqentry_exit+0x37/0x40 [ 219.370709][ T2865] arch_do_signal_or_restart+0xe2/0x1100 [ 219.376370][ T2865] ? memset+0x35/0x40 [ 219.380361][ T2865] ? _copy_from_user+0xbb/0xd0 [ 219.385148][ T2865] ? __se_sys_capset+0x26c/0x780 [ 219.390104][ T2865] ? get_sigframe_size+0x10/0x10 [ 219.395056][ T2865] ? __se_sys_futex+0x135/0x330 [ 219.399917][ T2865] exit_to_user_mode_loop+0xa7/0xe0 [ 219.405140][ T2865] exit_to_user_mode_prepare+0x87/0xd0 [ 219.410612][ T2865] syscall_exit_to_user_mode+0x1a/0x30 [ 219.416073][ T2865] do_syscall_64+0x58/0xa0 [ 219.420495][ T2865] ? clear_bhb_loop+0x50/0xa0 [ 219.425183][ T2865] ? clear_bhb_loop+0x50/0xa0 [ 219.429863][ T2865] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.435765][ T2865] RIP: 0033:0x7fc8a36bfb19 [ 219.440185][ T2865] Code: Unable to access opcode bytes at RIP 0x7fc8a36bfaef. [ 219.447546][ T2865] RSP: 002b:00007fc8a21170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.455976][ T2865] RAX: fffffffffffffe00 RBX: 00007fc8a3945fa8 RCX: 00007fc8a36bfb19 [ 219.463954][ T2865] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc8a3945fa8 [ 219.471931][ T2865] RBP: 00007fc8a3945fa0 R08: 0000000000000000 R09: 0000000000000000 [ 219.479907][ T2865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.487907][ T2865] R13: 00007fc8a3946038 R14: 00007ffe3f329b50 R15: 00007ffe3f329c38 [ 219.495892][ T2865] [ 219.528970][ T30] audit: type=1400 audit(1793821831.590:880): avc: denied { connect } for pid=2872 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.578128][ T2877] loop7: detected capacity change from 0 to 2048 [ 219.589984][ T777] tipc: Subscription rejected, illegal request [ 219.854579][ T2877] EXT4-fs (loop7): Invalid want_extra_isize 65535 [ 220.308759][ T30] audit: type=1400 audit(1793821832.386:881): avc: denied { search } for pid=2885 comm="syz.6.736" name="/" dev="configfs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.413302][ T30] audit: type=1400 audit(1793821832.386:882): avc: denied { setattr } for pid=2885 comm="syz.6.736" name="/" dev="configfs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.502956][ T2900] bridge0: bridge: STP does not work in non-root netns [ 220.617931][ T2909] loop1: detected capacity change from 0 to 4096 [ 220.702691][ T2909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.724067][ T2915] loop7: detected capacity change from 0 to 512 [ 220.755745][ T2894] loop2: detected capacity change from 0 to 40427 [ 220.792694][ T2894] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 220.812636][ T2915] EXT4-fs (loop7): Value of option "test_dummy_encryption=discard" is unrecognized [ 220.829261][ T2894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 220.839798][ T2918] FAULT_INJECTION: forcing a failure. [ 220.839798][ T2918] name failslab, interval 1, probability 0, space 0, times 0 [ 220.861065][ T2894] F2FS-fs (loop2): invalid crc value [ 220.878672][ T2918] CPU: 0 PID: 2918 Comm: syz.1.748 Not tainted syzkaller #0 [ 220.885992][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.896071][ T2918] Call Trace: [ 220.899374][ T2918] [ 220.902328][ T2918] __dump_stack+0x21/0x30 [ 220.906689][ T2918] dump_stack_lvl+0x110/0x170 [ 220.911424][ T2918] ? show_regs_print_info+0x20/0x20 [ 220.916657][ T2918] dump_stack+0x15/0x20 [ 220.920833][ T2918] should_fail+0x3ab/0x500 [ 220.925278][ T2918] __should_failslab+0xa4/0xe0 [ 220.930066][ T2918] should_failslab+0x9/0x20 [ 220.934593][ T2918] slab_pre_alloc_hook+0x39/0xd0 [ 220.939563][ T2918] ? security_inode_alloc+0x33/0x110 [ 220.944869][ T2918] kmem_cache_alloc+0x44/0x260 [ 220.949678][ T2918] security_inode_alloc+0x33/0x110 [ 220.954821][ T2918] inode_init_always+0x72c/0x9b0 [ 220.959797][ T2918] new_inode_pseudo+0x91/0x210 [ 220.964589][ T2918] new_inode+0x28/0x1e0 [ 220.968762][ T2918] ? up_write+0x7b/0x290 [ 220.973042][ T2918] ramfs_get_inode+0x2a/0x320 [ 220.977743][ T2918] ramfs_fill_super+0x12c/0x1c0 [ 220.982615][ T2918] get_tree_nodev+0xb3/0x160 [ 220.987241][ T2918] ? ramfs_get_tree+0x20/0x20 [ 220.991948][ T2918] ramfs_get_tree+0x1c/0x20 [ 220.996476][ T2918] vfs_get_tree+0x89/0x260 [ 221.000926][ T2918] vfs_fsconfig_locked+0x236/0x3f0 [ 221.006214][ T2918] __se_sys_fsconfig+0x69c/0x7e0 [ 221.011218][ T2918] ? __x64_sys_fsconfig+0xd0/0xd0 [ 221.016271][ T2918] ? __kasan_check_write+0x14/0x20 [ 221.021436][ T2918] __x64_sys_fsconfig+0xbf/0xd0 [ 221.026346][ T2918] x64_sys_call+0x51b/0x9a0 [ 221.030872][ T2918] do_syscall_64+0x4c/0xa0 [ 221.035310][ T2918] ? clear_bhb_loop+0x50/0xa0 [ 221.040017][ T2918] ? clear_bhb_loop+0x50/0xa0 [ 221.044731][ T2918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.050652][ T2918] RIP: 0033:0x7fc8a36bfb19 [ 221.055085][ T2918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.074712][ T2918] RSP: 002b:00007fc8a2117028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 221.083152][ T2918] RAX: ffffffffffffffda RBX: 00007fc8a3945fa0 RCX: 00007fc8a36bfb19 [ 221.091148][ T2918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 221.099136][ T2918] RBP: 00007fc8a3757b70 R08: 0000000000000000 R09: 0000000000000000 [ 221.107125][ T2918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.115115][ T2918] R13: 00007fc8a3946038 R14: 00007fc8a3945fa0 R15: 00007ffe3f329c38 [ 221.123118][ T2918] [ 221.176234][ T2894] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 221.270218][ T30] audit: type=1400 audit(1793821833.365:883): avc: denied { execute } for pid=2922 comm="syz.6.745" name="file1" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.305006][ T30] audit: type=1400 audit(1793821833.365:884): avc: denied { execute_no_trans } for pid=2922 comm="syz.6.745" path="/81/file1" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.320365][ T2894] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 221.929461][ T2894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.985826][ T2919] attempt to access beyond end of device [ 221.985826][ T2919] loop2: rw=2049, want=45104, limit=40427 [ 222.016574][ T30] audit: type=1400 audit(1793821834.098:885): avc: denied { link } for pid=2886 comm="syz.2.737" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.119144][ T2953] ================================================================== [ 222.125594][ T2952] loop4: detected capacity change from 0 to 512 [ 222.127240][ T2953] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x389/0x5c0 [ 222.141465][ T2953] Read of size 8 at addr ffff88811cfabee8 by task syz.7.751/2953 [ 222.149199][ T2953] [ 222.151545][ T2953] CPU: 0 PID: 2953 Comm: syz.7.751 Not tainted syzkaller #0 [ 222.158848][ T2953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 222.169112][ T2953] Call Trace: [ 222.172409][ T2953] [ 222.175351][ T2953] __dump_stack+0x21/0x30 [ 222.179693][ T2953] dump_stack_lvl+0x110/0x170 [ 222.184377][ T2953] ? show_regs_print_info+0x20/0x20 [ 222.189586][ T2953] ? load_image+0x3f0/0x3f0 [ 222.194115][ T2953] ? skb_release_data+0x1b5/0xa20 [ 222.199152][ T2953] print_address_description+0x7f/0x2c0 [ 222.204708][ T2953] ? sk_skb_adjust_room+0x389/0x5c0 [ 222.209937][ T2953] kasan_report+0x10f/0x150 [ 222.214566][ T2953] ? sk_skb_adjust_room+0x389/0x5c0 [ 222.219791][ T2953] __asan_report_load8_noabort+0x14/0x20 [ 222.225449][ T2953] sk_skb_adjust_room+0x389/0x5c0 [ 222.230485][ T2953] bpf_prog_e15ab8bd9cea3c06+0x19/0xdb8 [ 222.236057][ T2953] sk_psock_verdict_recv+0x245/0x7f0 [ 222.241367][ T2953] unix_read_sock+0x108/0x2d0 [ 222.246059][ T2953] ? sk_psock_skb_redirect+0x440/0x440 [ 222.251527][ T2953] ? unix_stream_splice_actor+0x120/0x120 [ 222.257281][ T2953] ? asm_sysvec_call_function_single+0x1b/0x20 [ 222.263454][ T2953] ? sk_psock_skb_redirect+0x440/0x440 [ 222.268927][ T2953] unix_stream_read_sock+0x61/0x90 [ 222.274053][ T2953] sk_psock_verdict_data_ready+0x167/0x1d0 [ 222.279875][ T2953] ? sk_psock_start_verdict+0xc0/0xc0 [ 222.285257][ T2953] ? _raw_spin_lock+0x94/0xf0 [ 222.289967][ T2953] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 222.295784][ T2953] ? skb_queue_tail+0xcb/0xf0 [ 222.300485][ T2953] unix_stream_sendmsg+0x7d1/0xc90 [ 222.305636][ T2953] ? unix_show_fdinfo+0xa0/0xa0 [ 222.310504][ T2953] ? __fget_files+0x2e1/0x340 [ 222.315198][ T2953] ? security_socket_sendmsg+0x82/0xa0 [ 222.320674][ T2953] __sys_sendto+0x46d/0x620 [ 222.325187][ T2953] ? __ia32_sys_getpeername+0x90/0x90 [ 222.330572][ T2953] ? map_update_elem+0x286/0x780 [ 222.335549][ T2953] ? __se_sys_futex+0x135/0x330 [ 222.340419][ T2953] ? __kasan_check_write+0x14/0x20 [ 222.345541][ T2953] __x64_sys_sendto+0xe5/0x100 [ 222.350319][ T2953] x64_sys_call+0x178/0x9a0 [ 222.354836][ T2953] do_syscall_64+0x4c/0xa0 [ 222.359274][ T2953] ? clear_bhb_loop+0x50/0xa0 [ 222.363959][ T2953] ? clear_bhb_loop+0x50/0xa0 [ 222.368643][ T2953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.374546][ T2953] RIP: 0033:0x7f45d3156b19 [ 222.378981][ T2953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.398596][ T2953] RSP: 002b:00007f45d1b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 222.407029][ T2953] RAX: ffffffffffffffda RBX: 00007f45d33dd090 RCX: 00007f45d3156b19 [ 222.415028][ T2953] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005 [ 222.423002][ T2953] RBP: 00007f45d31eeb70 R08: 0000000000000000 R09: 0000000000000000 [ 222.430987][ T2953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.438963][ T2953] R13: 00007f45d33dd128 R14: 00007f45d33dd090 R15: 00007ffd5dc73968 [ 222.446947][ T2953] [ 222.449973][ T2953] [ 222.452305][ T2953] Allocated by task 2953: [ 222.456642][ T2953] __kasan_slab_alloc+0xb7/0xe0 [ 222.461509][ T2953] slab_post_alloc_hook+0x4f/0x2b0 [ 222.466630][ T2953] kmem_cache_alloc+0xf7/0x260 [ 222.471397][ T2953] sk_prot_alloc+0x5f/0x320 [ 222.475910][ T2953] sk_alloc+0x38/0x430 [ 222.479985][ T2953] unix_create1+0xb4/0x610 [ 222.484442][ T2953] unix_create+0x149/0x200 [ 222.488870][ T2953] __sock_create+0x38d/0x7a0 [ 222.493475][ T2953] __sys_socketpair+0x1a1/0x590 [ 222.498385][ T2953] __x64_sys_socketpair+0x9b/0xb0 [ 222.503432][ T2953] x64_sys_call+0x36/0x9a0 [ 222.507868][ T2953] do_syscall_64+0x4c/0xa0 [ 222.512297][ T2953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.518210][ T2953] [ 222.520543][ T2953] The buggy address belongs to the object at ffff88811cfab9c0 [ 222.520543][ T2953] which belongs to the cache UNIX-STREAM of size 1216 [ 222.534691][ T2953] The buggy address is located 104 bytes to the right of [ 222.534691][ T2953] 1216-byte region [ffff88811cfab9c0, ffff88811cfabe80) [ 222.548598][ T2953] The buggy address belongs to the page: [ 222.554253][ T2953] page:ffffea000473ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11cfa8 [ 222.564502][ T2953] head:ffffea000473ea00 order:2 compound_mapcount:0 compound_pincount:0 [ 222.572829][ T2953] flags: 0x4000000000010200(slab|head|zone=1) [ 222.578931][ T2953] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881003e6a80 [ 222.587538][ T2953] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 222.596128][ T2953] page dumped because: kasan: bad access detected [ 222.602539][ T2953] page_owner tracks the page as allocated [ 222.608257][ T2953] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 231, ts 16043944650, free_ts 0 [ 222.626401][ T2953] post_alloc_hook+0x192/0x1b0 [ 222.631174][ T2953] prep_new_page+0x1c/0x110 [ 222.635683][ T2953] get_page_from_freelist+0x2d42/0x2dd0 [ 222.641252][ T2953] __alloc_pages+0x1a2/0x460 [ 222.645851][ T2953] new_slab+0xa0/0x4d0 [ 222.649943][ T2953] ___slab_alloc+0x3ac/0x840 [ 222.654540][ T2953] __slab_alloc+0x49/0x90 [ 222.658898][ T2953] kmem_cache_alloc+0x138/0x260 [ 222.663749][ T2953] sk_prot_alloc+0x5f/0x320 [ 222.668257][ T2953] sk_alloc+0x38/0x430 [ 222.672332][ T2953] unix_create1+0xb4/0x610 [ 222.676757][ T2953] unix_stream_connect+0x308/0x1020 [ 222.681979][ T2953] __sys_connect+0x3cb/0x450 [ 222.686580][ T2953] __x64_sys_connect+0x7a/0x90 [ 222.691352][ T2953] x64_sys_call+0x7c/0x9a0 [ 222.695781][ T2953] do_syscall_64+0x4c/0xa0 [ 222.700207][ T2953] page_owner free stack trace missing [ 222.705689][ T2953] [ 222.708022][ T2953] Memory state around the buggy address: [ 222.713650][ T2953] ffff88811cfabd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.721713][ T2953] ffff88811cfabe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.729786][ T2953] >ffff88811cfabe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.737847][ T2953] ^ [ 222.745305][ T2953] ffff88811cfabf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.753387][ T2953] ffff88811cfabf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.761445][ T2953] ================================================================== [ 222.769503][ T2953] Disabling lock debugging due to kernel taint [ 222.796927][ T30] audit: type=1400 audit(1793821834.205:886): avc: denied { mount } for pid=2949 comm="syz.6.757" name="/" dev="ramfs" ino=26949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 222.856884][ T30] audit: type=1400 audit(1793821834.918:887): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 222.879276][ T30] audit: type=1400 audit(1793821834.928:888): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.881949][ T2952] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 222.931606][ T30] audit: type=1400 audit(1793821834.928:889): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.970226][ T2952] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.981809][ T30] audit: type=1400 audit(1793821834.928:890): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.004050][ T30] audit: type=1400 audit(1793821834.928:891): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.024769][ T30] audit: type=1400 audit(1793821834.928:892): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.047929][ T30] audit: type=1400 audit(1793821834.928:893): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.153170][ T2964] loop2: detected capacity change from 0 to 4096 [ 223.231652][ T2964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.305284][ T30] audit: type=1400 audit(1793821837.273:894): avc: denied { read } for pid=2971 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1