last executing test programs: 20.388522562s ago: executing program 0 (id=502): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001200010a0030010000000000001c02000008ea3800090000"], 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) pause() r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x10, 0x29, 0x34, 0x400}}], 0x10}, 0x40) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x40) r6 = openat(r5, &(0x7f0000000280)='./file0\x00', 0x80000, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x14}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="1208000001d602000f6bd5baa6c8ffbc7d3c2d0f55f0cc7e201f10d713cd9d9bf38fc400000000000000005066ee57", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0xffffffffffffffd3) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES8=r7, @ANYRES32=r6, @ANYBLOB="0200"/12, @ANYRES32=r2, @ANYBLOB="5adc80c1c7119e50a312b73c003988d4d58190cc668ba59018cc2cf1dda04f472df61986f1f9da40d8ec61c16c45097dc67651d8a3a14756c0d2f7f03d972f609942794d6ea774b3bdd2d4c40af3d38d358ac2925f32c09f18e9f14e9c160362839b28a9d947a9c8ed2b4a35ddeb125cb6f224a7f2a76530496d5ca85cf4b842236e3a395924c9f9bc87d8fffe6a51522f197ef308711637fd034dd75cc8b0f9e3be1aeef08243419024a67f748400534bcea1691f18b75b822ca5092caa2560bbbdf466156886fb9221ceda30988dc91c2325bdd62b805eafec5b19bd24c91d13874e111f5c1a49110ea65f08b01f328a12b4508e6c0293ffc6882146e54686425bf9c9921bb1d36d81bc32c637f7b6d7d11270e5090000000a0c78d459727f1fa77c0e0a66968d0948ef66084a88f23d3d6d15f7f78b3b5329bb5aa5055c36365a5d2218cead2343e5dcb1a01e79464d2c86b54b4f0ee85856236a79954ae622b7c7636691c15eaa92175e", @ANYRES64=0x0], 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) write$P9_RSTAT(r8, &(0x7f0000000300)={0x16c, 0x7d, 0x5, {0x0, 0x165, 0xdf, 0x3, {0x20, 0x1}, 0x4000000, 0x3, 0x6, 0x5, 0x18, 'wmz[q?O\x10\xde\x8b\xd0\ne\ff\x85\x01\x00\x00\x00\xa8\x94\xa1\x87', 0xb8, ' {\x13\xc9\xdd\x0e\xd1\xf6\xec(\xf2v\x8e\xdcj\xf7\xf5\xe5hEg\xea\xe91\xcf{\xa5\x15\xff\xaeC.*\xc0Dh\xd0\xa6\xc3\x16Bv\v\xef\xf4\x1d\xe9\xfc\xacz\xcf\xc0\x179\xb0\xfc\x8b\xa5\xb0E\xc7\xb3/x@\x88\xb2N\aC\x8f\x82)M\xb8P\xbc/\xcai\x84\r\xe1\x7f\xbdp\x1d>\x01[\xce\xbc\xbe\xe9\xe4\xae\xb4\x81\xc1 \x81\xac\xd4x\xe2\xa5cs\b\x91\xab\xd6\xe0(\xaf\xddF\xd7\xfd\x943\xbce\x86\xb5\x8d\xc9=\xb0\xc2\x90\x80y|?\'2*\xed\xa6\x1d\x00_\x80\xc0|\x00\xe4\xf6%\x1c\x8b9\x88\xe7\xf9\xc9|2\r\x97\xb0\xea\xab/0x0}, 0x40) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex=r11, r2, 0x29, 0xa, r2, @void, @value=r1, @void, @void, r9}, 0x20) 19.216094169s ago: executing program 0 (id=512): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="20000000257308061aa064bb95a3c99517c210323713546bb6d78a63de519ca9c7a8c0f4ebb818f75c42651cc2a052", @ANYRES16=r1, @ANYBLOB="0d0304000000fdffffff130000000c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc4", 0x2}], 0x1, 0x5412, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setns(r2, 0x704b4bdce2860335) syz_usb_control_io$uac1(r4, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) 16.203701745s ago: executing program 0 (id=523): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 16.201319225s ago: executing program 4 (id=524): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 10.518117216s ago: executing program 2 (id=538): syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f0000010280)='./mnt\x00', 0x0, &(0x7f00000102c0), 0x0, 0x10204, &(0x7f0000010300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000020540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000020580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000020640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000020680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000206c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000020700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000020740)='foo', 0x3) 9.539316517s ago: executing program 0 (id=541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_256={{0x304}, "a867824de94c7d0d", "3bab70a7d847f4a03538fe8ac143803ec0e2f4ba7adb679dd8017d21db415080", "3f5be90e", "1775f2748c9bcaf9"}, 0x38) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000780000007800000003000000000000000900000d000000000f00000002000000060000000000000004000000010000000c0000000200000010000000050000000c0000000500000008000000010000000100000001000000100000000000000004000000000000010000000015002105000000000100000d000000000100000005000300000000"], &(0x7f00000002c0)=""/235, 0x93, 0xeb, 0x1, 0x8, 0x10000}, 0x28) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x100, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x6, 0x80, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r2], &(0x7f0000000480)=[{0x1, 0x2, 0x0, 0x9}, {0x2, 0x3, 0x5, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x5684}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x81, 0x29b, &(0x7f00000011c0)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 9.455076449s ago: executing program 2 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x716d, 0x8000000000008001, 0x80000005, 0x5, 0xfffffffffffffffe, 0x651, 0x3, 0x53, 0x0, 0x9, 0x588b36f8, 0x0, 0x0, 0x145, 0x8000000cbf, 0x48000001, 0x1, 0x0, 0x9, 0xfffffffd, 0x8, 0xb, 0xfffffffffffffffc, 0x3, 0x40000000009}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbb8159000000000000080045f4001c00030000010290780a010101e0000001127c9078e0000001"], 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) openat$incfs(r8, &(0x7f0000000280)='.pending_reads\x00', 0x103000, 0x108) openat$incfs(r8, &(0x7f0000000100)='.pending_reads\x00', 0x120fe, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4018848}, 0x20004804) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x5, 0x7, 0x52, @mcast1, @mcast2, 0x10, 0x7, 0x80, 0x2}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x4000080) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r7, 0xc0805841, &(0x7f0000000640)={0x1, 0x1, 0xffff, 0x4, 0xbb7b}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 9.291145434s ago: executing program 4 (id=547): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xfffc, @private=0x300, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010103}, {@private, 0x800}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty}]}]}}}}}}}, 0x0) 9.183177738s ago: executing program 4 (id=549): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3008002, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESDEC=0x0], 0x0, 0x307, &(0x7f0000000200)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) accept4(r0, &(0x7f00000006c0)=@rc, &(0x7f0000000540)=0x5a, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2d0, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x200, 0x378, 0x378, 0x200, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x9, 0x401, 0x81, 'snmp_trap\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="cc6d38f3c9dd88a5"], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @loopback}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.666623994s ago: executing program 2 (id=551): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 7.878641719s ago: executing program 4 (id=552): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 7.789096442s ago: executing program 3 (id=553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="623d74527849e01ad2f8b59d280157413473f45aef7279738b22f816f7f5151c848f94f1378ff3577c7c984fa157fa53685320d164b4"], 0x24, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0501f0ffffffffffff0000449000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (fail_nth: 2) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) unshare(0x400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x3, 0x3, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x3a) 7.782616273s ago: executing program 2 (id=554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="623d74527849e01ad2f8b59d280157413473f45aef7279738b22f816f7f5151c848f94f1378ff3577c7c984fa157fa53685320d164b4"], 0x24, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0501f0ffffffffffff0000449000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) unshare(0x400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x3, 0x3, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x3a) (fail_nth: 2) 7.718690424s ago: executing program 1 (id=555): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="20000000257308061aa064bb95a3c99517c210323713546bb6d78a63de519ca9c7a8c0f4ebb818f75c42651cc2a052", @ANYRES16=r1, @ANYBLOB="0d0304000000fdffffff130000000c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc4", 0x2}], 0x1, 0x5412, 0x0, 0x0) 6.634507109s ago: executing program 3 (id=556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="623d74527849e01ad2f8b59d280157413473f45aef7279738b22f816f7f5151c848f94f1378ff3577c7c984fa157fa53685320d164b4"], 0x24, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0501f0ffffffffffff0000449000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) unshare(0x400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x3, 0x3, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x3a) 6.438415675s ago: executing program 0 (id=557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x1d, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="623d74527849e01ad2f8b59d280157413473f45aef7279738b22f816f7f5151c848f94f1378ff3577c7c984fa157fa53685320d164b4"], 0x24, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 3.567165077s ago: executing program 1 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2002, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000044011c000800000000000000000e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xcc9b2017b9e6ff04}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) 3.562631437s ago: executing program 3 (id=559): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xfffc, @private=0x300, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010103}, {@private, 0x800}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty}]}]}}}}}}}, 0x0) 3.538926728s ago: executing program 3 (id=560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfffffffffffffea3, &(0x7f00000002c0)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace(0x4207, r1) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/218, 0xda}], 0x1, &(0x7f0000000680)=""/201, 0xc9}, 0x9}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x9, &(0x7f00000000c0)=[0xee00, 0xee01, 0xee01, 0xee01, 0x0, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='/dev/loop-control\x00', &(0x7f0000000240)='\x00', 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r1, 0xee01, r4}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0xcf) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000000)={[{@debug}, {@delalloc}, {@nodioread_nolock}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") 2.130675212s ago: executing program 0 (id=561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) shutdown(r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) r6 = socket(0x2, 0x3, 0xff) syz_usb_ep_write(r0, 0x0, 0x88, &(0x7f0000000340)="1303967d11bde28eaa0ff983099f3be72dd9e676ae1b1b88af54534d42d01720f5aed6cb9362ae6cc1de1d6c51419126465624a3c81555fce66d6f9ed6a198f089b426e74a76ff4515faca2a5b527b0134e61951348e7e032a3e7157c1eb418d21c53b4b7b564f75c3721ee9329a819b58801e3a3f3cb830157e68c5ae0ec7f8328a97682405b7bd") r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="f5a7933a00"/17, 0x11}, {&(0x7f0000000000)="ee53ab", 0x3}], 0x2, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 2.127261262s ago: executing program 1 (id=562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 1.641141478s ago: executing program 3 (id=563): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setreuid(0x0, 0xee00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = io_uring_setup(0x7fd6, &(0x7f0000000180)={0x0, 0x6692, 0x40, 0x1, 0x42}) r2 = syz_io_uring_setup(0x1a0e, &(0x7f00000003c0)={0x0, 0x24d3, 0x400, 0x3, 0x29f, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000480)) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x1b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x6c, 0x66, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x16, [0x2, 0x1, 0x7f, 0x20, 0x5]}, @mss={0x2, 0x4, 0x1}, @fastopen={0x22, 0x2}, @exp_fastopen={0xfe, 0x13, 0xf989, "079d22d6961c5af4c2cc061f44954a"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) io_uring_enter(r2, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffeaaaaaaaaaa0008060000080006040001ffff"], 0x0) socketpair(0x22, 0x80000, 0x1dee, &(0x7f0000000140)) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/7, 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000300)="2dcfbf7ec85f0fc919a16b938d066db43a5cef23", &(0x7f0000000340)=""/74}, 0x20) 1.437974944s ago: executing program 3 (id=564): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3008002, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESDEC=0x0], 0x0, 0x30a, &(0x7f0000000780)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00005c3000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) accept4(r1, &(0x7f00000006c0)=@rc, &(0x7f0000000540)=0x5a, 0x800) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], 0x2, 0x5536, &(0x7f0000006080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r6, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048da) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2d0, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x200, 0x378, 0x378, 0x200, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x9, 0x401, 0x81, 'snmp_trap\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.337504397s ago: executing program 1 (id=565): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.304782299s ago: executing program 2 (id=566): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x82, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r1, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f00000006c0), 0x0}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r4, &(0x7f0000000a00)={0x1ad, 0x29, 0x2, {0x3, [{{0x10, 0x1, 0x6}, 0xffff, 0x5, 0x16, './file0/file0/../file0'}, {{0x2, 0x2, 0x4}, 0xe536d0e0000000, 0x5, 0x16, './file0/file0/../file0'}, {{0x10, 0x3, 0x4}, 0x3, 0x3d, 0x16, './file0/file0/../file0'}, {{0x80, 0x0, 0x5}, 0x10001, 0x23, 0x16, './file0/file0/../file0'}, {{0x80, 0x0, 0x8}, 0x9, 0x8, 0xd, './file0/file0'}, {{0x8, 0x0, 0x8}, 0x7, 0x8, 0x16, './file0/file0/../file0'}, {{0x8, 0x3}, 0xfff, 0x4, 0x13, './file0/file0/file0'}, {{0x8, 0x3}, 0x4, 0x8, 0x7, './file0'}, {{0x80, 0x3, 0x2}, 0x8001, 0x0, 0x16, './file0/file0/../file0'}, {{0x20, 0x2, 0x7}, 0x1, 0x2, 0x7, './file0'}]}}, 0x1ad) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_pidfd_open(r3, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x1, 0x1, 0x2, 0x4, 0x119c}, 0x20) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 1.187693752s ago: executing program 1 (id=567): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001200010a0030010000000000001c02000008ea3800090000"], 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) pause() r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x10, 0x29, 0x34, 0x400}}], 0x10}, 0x40) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x40) r6 = openat(r5, &(0x7f0000000280)='./file0\x00', 0x80000, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x14}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="1208000001d602000f6bd5baa6c8ffbc7d3c2d0f55f0cc7e201f10d713cd9d9bf38fc400000000000000005066ee57", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0xffffffffffffffd3) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES8=r7, @ANYRES32=r6, @ANYBLOB="0200"/12, @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=0x0], 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) write$P9_RSTAT(r8, &(0x7f0000000300)={0x16c, 0x7d, 0x5, {0x0, 0x165, 0xdf, 0x3, {0x20, 0x1}, 0x4000000, 0x3, 0x6, 0x5, 0x18, 'wmz[q?O\x10\xde\x8b\xd0\ne\ff\x85\x01\x00\x00\x00\xa8\x94\xa1\x87', 0xb8, ' {\x13\xc9\xdd\x0e\xd1\xf6\xec(\xf2v\x8e\xdcj\xf7\xf5\xe5hEg\xea\xe91\xcf{\xa5\x15\xff\xaeC.*\xc0Dh\xd0\xa6\xc3\x16Bv\v\xef\xf4\x1d\xe9\xfc\xacz\xcf\xc0\x179\xb0\xfc\x8b\xa5\xb0E\xc7\xb3/x@\x88\xb2N\aC\x8f\x82)M\xb8P\xbc/\xcai\x84\r\xe1\x7f\xbdp\x1d>\x01[\xce\xbc\xbe\xe9\xe4\xae\xb4\x81\xc1 \x81\xac\xd4x\xe2\xa5cs\b\x91\xab\xd6\xe0(\xaf\xddF\xd7\xfd\x943\xbce\x86\xb5\x8d\xc9=\xb0\xc2\x90\x80y|?\'2*\xed\xa6\x1d\x00_\x80\xc0|\x00\xe4\xf6%\x1c\x8b9\x88\xe7\xf9\xc9|2\r\x97\xb0\xea\xab/ 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.822217][ T1227] RSP: 002b:00007f8d96476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.830661][ T1227] RAX: ffffffffffffffda RBX: 00007f8d97c94fa0 RCX: 00007f8d97a1be59 [ 112.838653][ T1227] RDX: 0000200000000600 RSI: 0000000040087708 RDI: 0000000000000003 [ 112.846664][ T1227] RBP: 00007f8d96476090 R08: 0000000000000000 R09: 0000000000000000 [ 112.854657][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.862647][ T1227] R13: 00007f8d97c95038 R14: 00007f8d97c94fa0 R15: 00007ffe77c46118 [ 112.870643][ T1227] [ 113.715338][ T1238] loop2: detected capacity change from 0 to 128 [ 113.909362][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.916495][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.923832][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.930903][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.084624][ T1241] FAULT_INJECTION: forcing a failure. [ 114.084624][ T1241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.123693][ T1241] CPU: 1 PID: 1241 Comm: syz.0.275 Not tainted syzkaller #0 [ 114.131053][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.141130][ T1241] Call Trace: [ 114.144426][ T1241] [ 114.147379][ T1241] __dump_stack+0x21/0x30 [ 114.151729][ T1241] dump_stack_lvl+0x110/0x170 [ 114.156426][ T1241] ? show_regs_print_info+0x20/0x20 [ 114.161643][ T1241] ? vfs_write+0xc72/0xfd0 [ 114.166080][ T1241] dump_stack+0x15/0x20 [ 114.170254][ T1241] should_fail+0x3c1/0x510 [ 114.174694][ T1241] should_fail_usercopy+0x1a/0x20 [ 114.179749][ T1241] _copy_from_user+0x20/0xd0 [ 114.184381][ T1241] __sys_bpf+0x258/0x7d0 [ 114.188658][ T1241] ? bpf_link_show_fdinfo+0x330/0x330 [ 114.194046][ T1241] ? __fdget_pos+0x2d9/0x380 [ 114.198670][ T1241] ? debug_smp_processor_id+0x17/0x20 [ 114.204056][ T1241] __x64_sys_bpf+0x7c/0x90 [ 114.208494][ T1241] x64_sys_call+0x4b9/0x9a0 [ 114.213012][ T1241] do_syscall_64+0x4c/0xa0 [ 114.217453][ T1241] ? clear_bhb_loop+0x50/0xa0 [ 114.222152][ T1241] ? clear_bhb_loop+0x50/0xa0 [ 114.226842][ T1241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.232751][ T1241] RIP: 0033:0x7f4cd28a4e59 [ 114.237183][ T1241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.256810][ T1241] RSP: 002b:00007f4cd12ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.265240][ T1241] RAX: ffffffffffffffda RBX: 00007f4cd2b1dfa0 RCX: 00007f4cd28a4e59 [ 114.273234][ T1241] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 000000000000000f [ 114.281234][ T1241] RBP: 00007f4cd12ff090 R08: 0000000000000000 R09: 0000000000000000 [ 114.289219][ T1241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.297206][ T1241] R13: 00007f4cd2b1e038 R14: 00007f4cd2b1dfa0 R15: 00007ffc79d3e218 [ 114.305199][ T1241] [ 114.408370][ T763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.474623][ T432] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.612391][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 114.658632][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 114.755756][ T1253] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 114.845186][ T432] usb 4-1: Using ep0 maxpacket: 32 [ 115.038825][ T432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.089812][ T432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.335096][ T432] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 115.344543][ T432] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 115.352899][ T432] usb 4-1: Product: syz [ 115.358644][ T432] usb 4-1: Manufacturer: syz [ 115.385626][ T1262] FAULT_INJECTION: forcing a failure. [ 115.385626][ T1262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.455984][ T432] usb 4-1: config 0 descriptor?? [ 115.499089][ T1242] loop1: detected capacity change from 0 to 131072 [ 115.629472][ T1262] CPU: 1 PID: 1262 Comm: syz.4.282 Not tainted syzkaller #0 [ 115.636821][ T1262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.646895][ T1262] Call Trace: [ 115.650195][ T1262] [ 115.653142][ T1262] __dump_stack+0x21/0x30 [ 115.657506][ T1262] dump_stack_lvl+0x110/0x170 [ 115.662205][ T1262] ? show_regs_print_info+0x20/0x20 [ 115.667454][ T1262] dump_stack+0x15/0x20 [ 115.671632][ T1262] should_fail+0x3c1/0x510 [ 115.676084][ T1262] should_fail_usercopy+0x1a/0x20 [ 115.681144][ T1262] _copy_from_user+0x20/0xd0 [ 115.685757][ T1262] __sys_bpf+0x258/0x7d0 [ 115.690019][ T1262] ? bpf_link_show_fdinfo+0x330/0x330 [ 115.695415][ T1262] ? __kasan_check_write+0x14/0x20 [ 115.700544][ T1262] ? switch_fpu_return+0x15d/0x2c0 [ 115.705677][ T1262] __x64_sys_bpf+0x7c/0x90 [ 115.710111][ T1262] x64_sys_call+0x4b9/0x9a0 [ 115.714643][ T1262] do_syscall_64+0x4c/0xa0 [ 115.719083][ T1262] ? clear_bhb_loop+0x50/0xa0 [ 115.723790][ T1262] ? clear_bhb_loop+0x50/0xa0 [ 115.728493][ T1262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.734412][ T1262] RIP: 0033:0x7f31cf943e59 [ 115.738845][ T1262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.758468][ T1262] RSP: 002b:00007f31ce39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.766898][ T1262] RAX: ffffffffffffffda RBX: 00007f31cfbbcfa0 RCX: 00007f31cf943e59 [ 115.774887][ T1262] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000008 [ 115.782881][ T1262] RBP: 00007f31ce39e090 R08: 0000000000000000 R09: 0000000000000000 [ 115.790900][ T1262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.798889][ T1262] R13: 00007f31cfbbd038 R14: 00007f31cfbbcfa0 R15: 00007ffde20571a8 [ 115.806901][ T1262] [ 115.831209][ T1242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.902446][ T1242] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 116.061205][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 116.061219][ T30] audit: type=1400 audit(1779237782.380:200): avc: denied { write } for pid=1239 comm="syz.1.276" name="encrypted_dir" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.114444][ T432] usbhid 4-1:0.0: can't add hid device: -71 [ 116.120437][ T432] usbhid: probe of 4-1:0.0 failed with error -71 [ 116.179349][ T432] usb 4-1: USB disconnect, device number 2 [ 116.475316][ T30] audit: type=1400 audit(1779237782.410:201): avc: denied { add_name } for pid=1239 comm="syz.1.276" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.575202][ T1281] loop2: detected capacity change from 0 to 128 [ 117.049454][ T1289] FAULT_INJECTION: forcing a failure. [ 117.049454][ T1289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.124085][ T1289] CPU: 1 PID: 1289 Comm: syz.3.289 Not tainted syzkaller #0 [ 117.131449][ T1289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.141527][ T1289] Call Trace: [ 117.144828][ T1289] [ 117.147780][ T1289] __dump_stack+0x21/0x30 [ 117.152133][ T1289] dump_stack_lvl+0x110/0x170 [ 117.156834][ T1289] ? show_regs_print_info+0x20/0x20 [ 117.162055][ T1289] ? vfs_write+0xc72/0xfd0 [ 117.166513][ T1289] dump_stack+0x15/0x20 [ 117.170715][ T1289] should_fail+0x3c1/0x510 [ 117.175150][ T1289] should_fail_usercopy+0x1a/0x20 [ 117.180193][ T1289] _copy_from_user+0x20/0xd0 [ 117.184798][ T1289] __sys_bpf+0x258/0x7d0 [ 117.189059][ T1289] ? bpf_link_show_fdinfo+0x330/0x330 [ 117.194452][ T1289] ? debug_smp_processor_id+0x17/0x20 [ 117.199846][ T1289] __x64_sys_bpf+0x7c/0x90 [ 117.204301][ T1289] x64_sys_call+0x4b9/0x9a0 [ 117.208827][ T1289] do_syscall_64+0x4c/0xa0 [ 117.213265][ T1289] ? clear_bhb_loop+0x50/0xa0 [ 117.217973][ T1289] ? clear_bhb_loop+0x50/0xa0 [ 117.222666][ T1289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.228587][ T1289] RIP: 0033:0x7f8d97a1be59 [ 117.233027][ T1289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.252741][ T1289] RSP: 002b:00007f8d96455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.261200][ T1289] RAX: ffffffffffffffda RBX: 00007f8d97c95090 RCX: 00007f8d97a1be59 [ 117.269202][ T1289] RDX: 000000000000000c RSI: 00002000000000c0 RDI: 000000000000000a [ 117.277204][ T1289] RBP: 00007f8d96455090 R08: 0000000000000000 R09: 0000000000000000 [ 117.285203][ T1289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.293201][ T1289] R13: 00007f8d97c95128 R14: 00007f8d97c95090 R15: 00007ffe77c46118 [ 117.301209][ T1289] [ 117.502422][ T30] audit: type=1400 audit(1779237783.820:202): avc: denied { getopt } for pid=1291 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.527117][ T1292] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 117.554453][ T30] audit: type=1400 audit(1779237783.850:203): avc: denied { ioctl } for pid=1291 comm="syz.0.290" path="socket:[18228]" dev="sockfs" ino=18228 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.605366][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 117.614001][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 118.609957][ T1303] device bridge_slave_0 left promiscuous mode [ 118.628327][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.684926][ T1308] loop3: detected capacity change from 0 to 1024 [ 118.723010][ T1308] ======================================================= [ 118.723010][ T1308] WARNING: The mand mount option has been deprecated and [ 118.723010][ T1308] and is ignored by this kernel. Remove the mand [ 118.723010][ T1308] option from the mount to silence this warning. [ 118.723010][ T1308] ======================================================= [ 118.757987][ T307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.785967][ T1308] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 118.794753][ T1308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.802046][ T1308] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #3: block 3: comm syz.3.294: lblock 3 mapped to illegal pblock 3 (length 1) [ 118.816216][ T1308] Quota error (device loop3): write_blk: dquota write failed [ 118.823681][ T1308] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 118.832938][ T1308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.843014][ T1308] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.294: Failed to acquire dquot type 0 [ 118.854514][ T1308] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 3: comm syz.3.294: lblock 3 mapped to illegal pblock 3 (length 1) [ 118.878958][ T1308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.951860][ T1308] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.294: Failed to acquire dquot type 0 [ 118.964402][ T1308] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.294: Freeing blocks not in datazone - block = 0, count = 4096 [ 118.978123][ T1308] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 3: comm syz.3.294: lblock 3 mapped to illegal pblock 3 (length 1) [ 118.992471][ T1308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 119.003450][ T1308] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.294: Failed to acquire dquot type 0 [ 119.016909][ T1308] EXT4-fs (loop3): 1 orphan inode deleted [ 119.023391][ T1308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.057947][ T1314] FAULT_INJECTION: forcing a failure. [ 119.057947][ T1314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.071078][ T1314] CPU: 1 PID: 1314 Comm: syz.2.295 Not tainted syzkaller #0 [ 119.078385][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.088458][ T1314] Call Trace: [ 119.091750][ T1314] [ 119.094697][ T1314] __dump_stack+0x21/0x30 [ 119.099051][ T1314] dump_stack_lvl+0x110/0x170 [ 119.103742][ T1314] ? show_regs_print_info+0x20/0x20 [ 119.108969][ T1314] ? irqentry_exit+0x37/0x40 [ 119.113589][ T1314] dump_stack+0x15/0x20 [ 119.117764][ T1314] should_fail+0x3c1/0x510 [ 119.122197][ T1314] should_fail_usercopy+0x1a/0x20 [ 119.127240][ T1314] _copy_from_user+0x20/0xd0 [ 119.131854][ T1314] __sys_connect+0x16d/0x450 [ 119.136464][ T1314] ? __sys_connect_file+0x170/0x170 [ 119.141682][ T1314] ? __fdget_pos+0x2d9/0x380 [ 119.146292][ T1314] ? __kasan_check_write+0x14/0x20 [ 119.151430][ T1314] ? switch_fpu_return+0x15d/0x2c0 [ 119.156560][ T1314] __x64_sys_connect+0x7a/0x90 [ 119.161350][ T1314] x64_sys_call+0x7c/0x9a0 [ 119.165787][ T1314] do_syscall_64+0x4c/0xa0 [ 119.170222][ T1314] ? clear_bhb_loop+0x50/0xa0 [ 119.174912][ T1314] ? clear_bhb_loop+0x50/0xa0 [ 119.179616][ T1314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.185535][ T1314] RIP: 0033:0x7f25c6a40e59 [ 119.189978][ T1314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.209693][ T1314] RSP: 002b:00007f25c5459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 119.218129][ T1314] RAX: ffffffffffffffda RBX: 00007f25c6cba180 RCX: 00007f25c6a40e59 [ 119.226154][ T1314] RDX: 000000000000003a RSI: 0000200000000300 RDI: 0000000000000003 [ 119.234148][ T1314] RBP: 00007f25c5459090 R08: 0000000000000000 R09: 0000000000000000 [ 119.242167][ T1314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.250250][ T1314] R13: 00007f25c6cba218 R14: 00007f25c6cba180 R15: 00007ffe36e50858 [ 119.258247][ T1314] [ 119.816996][ T30] audit: type=1400 audit(1779237786.140:204): avc: denied { mount } for pid=1317 comm="syz.0.298" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 120.399654][ T307] usb 5-1: device descriptor read/all, error -71 [ 121.410522][ T1332] loop0: detected capacity change from 0 to 128 [ 122.220245][ T1322] loop2: detected capacity change from 0 to 40427 [ 122.242387][ T1329] loop1: detected capacity change from 0 to 40427 [ 122.257841][ T1322] F2FS-fs (loop2): invalid crc value [ 122.274730][ T1322] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.318381][ T1322] F2FS-fs (loop2): Start checkpoint disabled! [ 122.325277][ T1322] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 122.361920][ T1329] F2FS-fs (loop1): invalid crc value [ 122.381877][ T1329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.475115][ T288] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 122.493921][ T288] FAT-fs (loop0): Filesystem has been set read-only [ 122.519170][ T1329] F2FS-fs (loop1): Start checkpoint disabled! [ 122.526038][ T1329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 122.554370][ T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.593568][ T1347] loop3: detected capacity change from 0 to 128 [ 122.617885][ T1348] loop0: detected capacity change from 0 to 1024 [ 122.628652][ T1348] EXT4-fs warning (device loop0): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 122.628652][ T1348] [ 123.364463][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.664393][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 123.804562][ T26] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 123.839584][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.961231][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 123.977132][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 123.979315][ T1348] loop0: detected capacity change from 0 to 512 [ 123.988591][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 124.005855][ T1356] loop1: detected capacity change from 0 to 512 [ 124.012300][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.022015][ T26] usb 4-1: config 0 descriptor?? [ 124.027223][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 124.042200][ T30] audit: type=1326 audit(1779237790.360:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1353 comm="syz.2.306" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 124.084406][ T30] audit: type=1326 audit(1779237790.360:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1353 comm="syz.2.306" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 124.109315][ T307] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.120387][ T307] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.136778][ T1357] loop2: detected capacity change from 0 to 512 [ 124.154360][ T307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.161035][ T307] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.167623][ T1348] EXT4-fs (loop0): Ignoring removed orlov option [ 124.177102][ T1356] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 124.187119][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.190318][ T1356] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.198692][ T1348] EXT4-fs (loop0): old and new quota format mixing [ 124.218388][ T30] audit: type=1400 audit(1779237790.540:207): avc: denied { append } for pid=1355 comm="syz.1.307" path="/57/file0/cpuset.memory_pressure_enabled" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.246683][ T1357] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 124.257209][ T307] usb 5-1: config 0 descriptor?? [ 124.275776][ T1363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 124.381070][ T1354] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.399742][ T30] audit: type=1400 audit(1779237790.720:208): avc: denied { write } for pid=1368 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 124.518323][ T1336] UDC core: couldn't find an available UDC or it's busy: -16 [ 124.526322][ T1336] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.735552][ T30] audit: type=1400 audit(1779237791.060:209): avc: denied { create } for pid=1376 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.761342][ T30] audit: type=1400 audit(1779237791.080:210): avc: denied { connect } for pid=1376 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.782016][ T30] audit: type=1400 audit(1779237791.080:211): avc: denied { setopt } for pid=1376 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.810736][ T30] audit: type=1400 audit(1779237791.080:212): avc: denied { watch } for pid=1376 comm="syz.2.312" path="/59/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.833930][ T30] audit: type=1400 audit(1779237791.080:213): avc: denied { watch_reads } for pid=1376 comm="syz.2.312" path="/59/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 125.056063][ T30] audit: type=1400 audit(1779237791.150:214): avc: denied { write } for pid=1376 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.345179][ T1385] loop0: detected capacity change from 0 to 8192 [ 125.724644][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 125.737347][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 125.784443][ T307] usbhid 5-1:0.0: can't add hid device: -71 [ 125.791316][ T307] usbhid: probe of 5-1:0.0 failed with error -71 [ 125.791592][ T26] usb 4-1: USB disconnect, device number 3 [ 125.815275][ T1389] loop1: detected capacity change from 0 to 512 [ 125.868489][ T307] usb 5-1: USB disconnect, device number 3 [ 126.549067][ T1396] loop2: detected capacity change from 0 to 128 [ 126.670228][ T1389] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 127.164420][ T1389] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.246466][ T1389] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.314: Invalid inode bitmap blk 215016 in block_group 0 [ 127.418072][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.425225][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.432551][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.439637][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.459729][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 127.474154][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 127.592409][ T1411] loop2: detected capacity change from 0 to 512 [ 127.640647][ T1404] device erspan1 left promiscuous mode [ 127.653893][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.321: iget: bad extra_isize 90 (inode size 256) [ 127.683693][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.696107][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.705267][ T1414] loop1: detected capacity change from 0 to 128 [ 127.712419][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.321: error while reading EA inode 11 err=-117 [ 127.725447][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.725562][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 127.732164][ T1411] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.753062][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.321: iget: bad extra_isize 90 (inode size 256) [ 127.766418][ T307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.767397][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.774653][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.824744][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.321: error while reading EA inode 11 err=-117 [ 127.837605][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.850804][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.321: iget: bad extra_isize 90 (inode size 256) [ 127.857087][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 127.886472][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.899310][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.321: error while reading EA inode 18 err=-117 [ 127.912298][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.921996][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 127.950306][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.321: iget: bad extra_isize 90 (inode size 256) [ 127.959369][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.004510][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.014989][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 128.028444][ T1411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.321: error while reading EA inode 18 err=-117 [ 128.029825][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.063398][ T1411] EXT4-fs (loop2): Remounting filesystem read-only [ 128.074405][ T307] usb 5-1: device descriptor read/64, error -71 [ 128.083304][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.093115][ T1411] EXT4-fs (loop2): 1 orphan inode deleted [ 128.104427][ T1411] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 128.449872][ T1416] loop0: detected capacity change from 0 to 512 [ 128.529083][ T1416] EXT4-fs (loop0): Ignoring removed bh option [ 128.545071][ T1416] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.566583][ T1416] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 128.587897][ T1416] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.322: Corrupt directory, running e2fsck is recommended [ 128.615567][ T1416] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 128.633677][ T1416] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.322: corrupted in-inode xattr [ 128.646795][ T1416] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.322: couldn't read orphan inode 15 (err -117) [ 128.674613][ T1416] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 128.864792][ T1411] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 128.944419][ T307] usb 5-1: device descriptor read/64, error -71 [ 129.144830][ T232] attempt to access beyond end of device [ 129.144830][ T232] loop1: rw=1, want=1041, limit=128 [ 129.164395][ T561] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.312382][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 129.312398][ T30] audit: type=1400 audit(1779237795.630:218): avc: denied { write } for pid=1428 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.357577][ T30] audit: type=1400 audit(1779237795.660:219): avc: denied { ioctl } for pid=1428 comm="syz.3.326" path="socket:[19537]" dev="sockfs" ino=19537 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.386532][ T30] audit: type=1400 audit(1779237795.660:220): avc: denied { map } for pid=1428 comm="syz.3.326" path="socket:[19541]" dev="sockfs" ino=19541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.415956][ T30] audit: type=1400 audit(1779237795.660:221): avc: denied { read } for pid=1428 comm="syz.3.326" path="socket:[19541]" dev="sockfs" ino=19541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.441026][ T1433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=1433 comm=syz.1.325 [ 129.453945][ T30] audit: type=1400 audit(1779237795.700:222): avc: denied { write } for pid=1426 comm="syz.1.325" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.479769][ T1432] loop3: detected capacity change from 0 to 512 [ 129.500089][ T1432] EXT4-fs (loop3): Ignoring removed bh option [ 129.509327][ T30] audit: type=1400 audit(1779237795.700:223): avc: denied { open } for pid=1426 comm="syz.1.325" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.511948][ T1432] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.539404][ T1432] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 129.557507][ T1432] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.327: Corrupt directory, running e2fsck is recommended [ 129.571409][ T1432] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 129.579911][ T1432] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.327: corrupted in-inode xattr [ 129.597536][ T30] audit: type=1400 audit(1779237795.920:224): avc: denied { ioctl } for pid=1435 comm="syz.0.328" path="socket:[19557]" dev="sockfs" ino=19557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.604657][ T561] usb 3-1: config 2 has an invalid interface number: 166 but max is 0 [ 129.622521][ T30] audit: type=1400 audit(1779237795.920:225): avc: denied { bind } for pid=1435 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.650177][ T1432] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.327: couldn't read orphan inode 15 (err -117) [ 129.662863][ T561] usb 3-1: config 2 has no interface number 0 [ 129.664772][ T1432] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 129.691840][ T561] usb 3-1: config 2 interface 166 altsetting 13 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 129.703145][ T561] usb 3-1: config 2 interface 166 has no altsetting 0 [ 129.826871][ T1436] loop0: detected capacity change from 0 to 40427 [ 129.874747][ T561] usb 3-1: New USB device found, idVendor=0b57, idProduct=50a6, bcdDevice=9a.24 [ 129.897872][ T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.908244][ T561] usb 3-1: Product: syz [ 129.913609][ T561] usb 3-1: Manufacturer: syz [ 129.919519][ T1436] F2FS-fs (loop0): Unrecognized mount option "noHarrier" or missing value [ 129.928881][ T1439] netlink: 136 bytes leftover after parsing attributes in process `syz.4.329'. [ 129.931044][ T561] usb 3-1: SerialNumber: syz [ 129.948486][ T1439] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 129.996494][ T30] audit: type=1400 audit(1779237796.320:226): avc: denied { mounton } for pid=1438 comm="syz.4.329" path="mnt:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.242660][ T1442] loop0: detected capacity change from 0 to 8192 [ 131.397815][ T1442] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.416575][ T30] audit: type=1400 audit(1779237797.740:227): avc: denied { read } for pid=1449 comm="syz.4.334" dev="nsfs" ino=4026532555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.467175][ T561] usbhid 3-1:2.166: couldn't find an input interrupt endpoint [ 131.573961][ T1450] capability: warning: `syz.4.334' uses 32-bit capabilities (legacy support in use) [ 131.734350][ T1442] device pim6reg1 entered promiscuous mode [ 131.764369][ T561] usb 3-1: USB disconnect, device number 2 [ 131.777700][ T1457] input: syz0 as /devices/virtual/input/input5 [ 132.860827][ T1472] loop1: detected capacity change from 0 to 128 [ 133.159977][ T1475] loop3: detected capacity change from 0 to 512 [ 133.600690][ T591] attempt to access beyond end of device [ 133.600690][ T591] loop1: rw=1, want=1041, limit=128 [ 133.879278][ T1484] overlayfs: workdir and upperdir must reside under the same mount [ 134.233061][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.240179][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.628425][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.293752][ T1499] FAULT_INJECTION: forcing a failure. [ 135.293752][ T1499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.307073][ T1499] CPU: 1 PID: 1499 Comm: syz.4.344 Not tainted syzkaller #0 [ 135.314382][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.324448][ T1499] Call Trace: [ 135.327736][ T1499] [ 135.330677][ T1499] __dump_stack+0x21/0x30 [ 135.335031][ T1499] dump_stack_lvl+0x110/0x170 [ 135.339736][ T1499] ? show_regs_print_info+0x20/0x20 [ 135.344945][ T1499] ? asm_sysvec_call_function_single+0x1b/0x20 [ 135.351124][ T1499] dump_stack+0x15/0x20 [ 135.355336][ T1499] should_fail+0x3c1/0x510 [ 135.359765][ T1499] should_fail_usercopy+0x1a/0x20 [ 135.364807][ T1499] _copy_from_user+0x20/0xd0 [ 135.369421][ T1499] __sys_bpf+0x258/0x7d0 [ 135.373678][ T1499] ? bpf_link_show_fdinfo+0x330/0x330 [ 135.379170][ T1499] __x64_sys_bpf+0x7c/0x90 [ 135.383606][ T1499] x64_sys_call+0x4b9/0x9a0 [ 135.388131][ T1499] do_syscall_64+0x4c/0xa0 [ 135.392576][ T1499] ? clear_bhb_loop+0x50/0xa0 [ 135.397269][ T1499] ? clear_bhb_loop+0x50/0xa0 [ 135.401971][ T1499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.407893][ T1499] RIP: 0033:0x7f31cf943e59 [ 135.412324][ T1499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.431959][ T1499] RSP: 002b:00007f31ce37d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.440922][ T1499] RAX: ffffffffffffffda RBX: 00007f31cfbbd090 RCX: 00007f31cf943e59 [ 135.448909][ T1499] RDX: 0000000000000082 RSI: 0000200000000840 RDI: 0000000000000005 [ 135.456988][ T1499] RBP: 00007f31ce37d090 R08: 0000000000000000 R09: 0000000000000000 [ 135.465033][ T1499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.473020][ T1499] R13: 00007f31cfbbd128 R14: 00007f31cfbbd090 R15: 00007ffde20571a8 [ 135.481226][ T1499] [ 135.509897][ T1501] FAULT_INJECTION: forcing a failure. [ 135.509897][ T1501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.523016][ T1501] CPU: 1 PID: 1501 Comm: syz.0.345 Not tainted syzkaller #0 [ 135.530329][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.540396][ T1501] Call Trace: [ 135.543680][ T1501] [ 135.546624][ T1501] __dump_stack+0x21/0x30 [ 135.550982][ T1501] dump_stack_lvl+0x110/0x170 [ 135.555670][ T1501] ? show_regs_print_info+0x20/0x20 [ 135.560979][ T1501] ? find_lock_lowest_rq+0x97/0x460 [ 135.566191][ T1501] dump_stack+0x15/0x20 [ 135.570358][ T1501] should_fail+0x3c1/0x510 [ 135.574779][ T1501] should_fail_usercopy+0x1a/0x20 [ 135.579804][ T1501] _copy_from_user+0x20/0xd0 [ 135.584401][ T1501] __sys_bpf+0x258/0x7d0 [ 135.588656][ T1501] ? bpf_link_show_fdinfo+0x330/0x330 [ 135.594039][ T1501] ? __kasan_check_write+0x14/0x20 [ 135.599245][ T1501] __x64_sys_bpf+0x7c/0x90 [ 135.603674][ T1501] x64_sys_call+0x4b9/0x9a0 [ 135.608179][ T1501] do_syscall_64+0x4c/0xa0 [ 135.612603][ T1501] ? clear_bhb_loop+0x50/0xa0 [ 135.617289][ T1501] ? clear_bhb_loop+0x50/0xa0 [ 135.621969][ T1501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.627871][ T1501] RIP: 0033:0x7f4cd28a4e59 [ 135.632301][ T1501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.651914][ T1501] RSP: 002b:00007f4cd12bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.660339][ T1501] RAX: ffffffffffffffda RBX: 00007f4cd2b1e180 RCX: 00007f4cd28a4e59 [ 135.668336][ T1501] RDX: 0000000000000082 RSI: 0000200000000840 RDI: 0000000000000005 [ 135.676499][ T1501] RBP: 00007f4cd12bd090 R08: 0000000000000000 R09: 0000000000000000 [ 135.684482][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.692453][ T1501] R13: 00007f4cd2b1e218 R14: 00007f4cd2b1e180 R15: 00007ffc79d3e218 [ 135.700435][ T1501] [ 135.961694][ T1508] loop3: detected capacity change from 0 to 128 [ 135.968641][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 135.981649][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.990077][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 135.998724][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.007190][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.017315][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.027563][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.264803][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.044421][ T561] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.553251][ T1526] loop0: detected capacity change from 0 to 512 [ 137.618222][ T1526] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.634444][ T561] usb 4-1: Using ep0 maxpacket: 32 [ 137.667774][ T1526] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 137.795014][ T561] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 137.803490][ T561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.824698][ T561] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 137.833792][ T561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.854121][ T561] usb 4-1: config 0 descriptor?? [ 137.895494][ T1535] FAULT_INJECTION: forcing a failure. [ 137.895494][ T1535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.908754][ T1535] CPU: 1 PID: 1535 Comm: syz.2.353 Not tainted syzkaller #0 [ 137.916095][ T1535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.926166][ T1535] Call Trace: [ 137.929460][ T1535] [ 137.932416][ T1535] __dump_stack+0x21/0x30 [ 137.936784][ T1535] dump_stack_lvl+0x110/0x170 [ 137.941498][ T1535] ? show_regs_print_info+0x20/0x20 [ 137.946727][ T1535] dump_stack+0x15/0x20 [ 137.950916][ T1535] should_fail+0x3c1/0x510 [ 137.955356][ T1535] should_fail_usercopy+0x1a/0x20 [ 137.960399][ T1535] _copy_to_user+0x20/0x90 [ 137.964839][ T1535] simple_read_from_buffer+0xe9/0x160 [ 137.970233][ T1535] proc_fail_nth_read+0x1a6/0x220 [ 137.975286][ T1535] ? proc_fault_inject_write+0x310/0x310 [ 137.980951][ T1535] ? security_file_permission+0x83/0xa0 [ 137.986518][ T1535] ? proc_fault_inject_write+0x310/0x310 [ 137.992180][ T1535] vfs_read+0x28d/0xc40 [ 137.996361][ T1535] ? kernel_read+0x1f0/0x1f0 [ 138.000970][ T1535] ? __kasan_check_write+0x14/0x20 [ 138.006106][ T1535] ? mutex_lock+0x9b/0x1c0 [ 138.010630][ T1535] ? wait_for_completion_killable_timeout+0x10/0x10 [ 138.017237][ T1535] ? __fget_files+0x2c4/0x320 [ 138.021942][ T1535] ? __fdget_pos+0x2d2/0x380 [ 138.026556][ T1535] ? ksys_read+0x71/0x250 [ 138.030907][ T1535] ksys_read+0x149/0x250 [ 138.035175][ T1535] ? vfs_write+0xfd0/0xfd0 [ 138.039615][ T1535] ? debug_smp_processor_id+0x17/0x20 [ 138.045022][ T1535] __x64_sys_read+0x7b/0x90 [ 138.049562][ T1535] x64_sys_call+0x96d/0x9a0 [ 138.054094][ T1535] do_syscall_64+0x4c/0xa0 [ 138.058529][ T1535] ? clear_bhb_loop+0x50/0xa0 [ 138.063215][ T1535] ? clear_bhb_loop+0x50/0xa0 [ 138.067924][ T1535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.073821][ T1535] RIP: 0033:0x7f25c6a0168e [ 138.078241][ T1535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.097865][ T1535] RSP: 002b:00007f25c5458fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.106291][ T1535] RAX: ffffffffffffffda RBX: 00007f25c54596c0 RCX: 00007f25c6a0168e [ 138.114272][ T1535] RDX: 000000000000000f RSI: 00007f25c54590a0 RDI: 0000000000000009 [ 138.122248][ T1535] RBP: 00007f25c5459090 R08: 0000000000000000 R09: 0000000000000000 [ 138.130224][ T1535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.138200][ T1535] R13: 00007f25c6cba218 R14: 00007f25c6cba180 R15: 00007ffe36e50858 [ 138.146179][ T1535] [ 138.183884][ T1531] loop1: detected capacity change from 0 to 40427 [ 138.211178][ T1531] F2FS-fs (loop1): invalid crc value [ 138.245280][ T1531] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.327667][ T1531] F2FS-fs (loop1): Start checkpoint disabled! [ 138.357048][ T1531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 139.400411][ T1548] FAULT_INJECTION: forcing a failure. [ 139.400411][ T1548] name failslab, interval 1, probability 0, space 0, times 0 [ 140.064748][ T1548] CPU: 0 PID: 1548 Comm: syz.2.358 Not tainted syzkaller #0 [ 140.072136][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.082306][ T1548] Call Trace: [ 140.085616][ T1548] [ 140.088564][ T1548] __dump_stack+0x21/0x30 [ 140.092931][ T1548] dump_stack_lvl+0x110/0x170 [ 140.097633][ T1548] ? show_regs_print_info+0x20/0x20 [ 140.102854][ T1548] ? timer_update_keys+0xb0/0xb0 [ 140.107819][ T1548] ? debug_smp_processor_id+0x17/0x20 [ 140.113214][ T1548] dump_stack+0x15/0x20 [ 140.117408][ T1548] should_fail+0x3c1/0x510 [ 140.121849][ T1548] __should_failslab+0xa4/0xe0 [ 140.126636][ T1548] should_failslab+0x9/0x20 [ 140.131157][ T1548] slab_pre_alloc_hook+0x3b/0xe0 [ 140.136116][ T1548] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 140.141942][ T1548] kmem_cache_alloc+0x44/0x260 [ 140.146736][ T1548] kvm_mmu_topup_memory_cache+0xe4/0x220 [ 140.152401][ T1548] kvm_mmu_load+0x88/0x1fd0 [ 140.156932][ T1548] ? kvm_apic_accept_events+0x546/0x560 [ 140.162498][ T1548] ? kvm_apic_has_interrupt+0x78f/0x7a0 [ 140.168064][ T1548] ? kvm_lapic_enable_pv_eoi+0x150/0x150 [ 140.173727][ T1548] vcpu_enter_guest+0x4f79/0x66d0 [ 140.178780][ T1548] ? avc_has_perm+0x163/0x250 [ 140.183481][ T1548] ? local_bh_enable+0x30/0x30 [ 140.188272][ T1548] ? native_send_call_func_single_ipi+0x5e/0x70 [ 140.194623][ T1548] ? send_call_function_single_ipi+0xdd/0x180 [ 140.200798][ T1548] ? generic_exec_single+0x236/0x3a0 [ 140.206099][ T1548] ? __kernel_text_address+0xa0/0x100 [ 140.211489][ T1548] ? smp_call_function_single+0x490/0x490 [ 140.217232][ T1548] ? unwind_get_return_address+0x4d/0x90 [ 140.222890][ T1548] ? stack_trace_save+0xf0/0xf0 [ 140.227769][ T1548] ? smp_call_function_single+0x39a/0x490 [ 140.233524][ T1548] ? loaded_vmcs_clear+0x90/0x90 [ 140.238483][ T1548] ? flush_smp_call_function_from_idle+0x1b0/0x1b0 [ 140.245009][ T1548] ? stack_trace_save+0xa6/0xf0 [ 140.249977][ T1548] ? loaded_vmcs_clear+0x90/0x90 [ 140.254942][ T1548] ? __stack_depot_save+0x34/0x480 [ 140.260098][ T1548] ? path_openat+0x280e/0x2f20 [ 140.264887][ T1548] ? _find_first_bit+0xc8/0x100 [ 140.269791][ T1548] ? vmx_vcpu_pi_load+0x2d9/0x390 [ 140.274837][ T1548] ? vmx_vcpu_pi_load+0x305/0x390 [ 140.279881][ T1548] ? __kasan_check_write+0x14/0x20 [ 140.285010][ T1548] ? kvm_arch_vcpu_load+0x58d/0x770 [ 140.290238][ T1548] ? __local_bh_enable_ip+0x58/0x80 [ 140.295455][ T1548] ? local_bh_enable+0x1f/0x30 [ 140.300240][ T1548] ? kvm_load_guest_fpu+0x12a/0x240 [ 140.305473][ T1548] kvm_arch_vcpu_ioctl_run+0xfab/0x2010 [ 140.311040][ T1548] kvm_vcpu_ioctl+0x8f2/0xc00 [ 140.315741][ T1548] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 140.321393][ T1548] ? selinux_file_ioctl+0x3a0/0x4d0 [ 140.326611][ T1548] ? selinux_file_alloc_security+0x120/0x120 [ 140.332620][ T1548] ? mutex_unlock+0x8f/0x230 [ 140.337231][ T1548] ? __mutex_lock_slowpath+0x10/0x10 [ 140.342546][ T1548] ? __fget_files+0x2c4/0x320 [ 140.347257][ T1548] ? security_file_ioctl+0x84/0xa0 [ 140.352383][ T1548] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 140.358036][ T1548] __se_sys_ioctl+0x121/0x1a0 [ 140.362745][ T1548] __x64_sys_ioctl+0x7b/0x90 [ 140.367365][ T1548] x64_sys_call+0x2f/0x9a0 [ 140.371819][ T1548] do_syscall_64+0x4c/0xa0 [ 140.376258][ T1548] ? clear_bhb_loop+0x50/0xa0 [ 140.380975][ T1548] ? clear_bhb_loop+0x50/0xa0 [ 140.385667][ T1548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.391594][ T1548] RIP: 0033:0x7f25c6a40e59 [ 140.396042][ T1548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.415670][ T1548] RSP: 002b:00007f25c549b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.424114][ T1548] RAX: ffffffffffffffda RBX: 00007f25c6cb9fa0 RCX: 00007f25c6a40e59 [ 140.432119][ T1548] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 140.440125][ T1548] RBP: 00007f25c549b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.448129][ T1548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.456124][ T1548] R13: 00007f25c6cba038 R14: 00007f25c6cb9fa0 R15: 00007ffe36e50858 [ 140.464123][ T1548] [ 140.572285][ T561] usbhid 4-1:0.0: can't add hid device: -71 [ 140.582519][ T561] usbhid: probe of 4-1:0.0 failed with error -71 [ 140.648850][ T561] usb 4-1: USB disconnect, device number 4 [ 140.679968][ T1564] loop2: detected capacity change from 0 to 16 [ 140.719141][ T1564] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.597944][ T1582] loop4: detected capacity change from 0 to 40427 [ 141.618943][ T1582] F2FS-fs (loop4): invalid crc value [ 141.625447][ T1582] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.785580][ T1582] F2FS-fs (loop4): Start checkpoint disabled! [ 142.193355][ T1599] loop0: detected capacity change from 0 to 128 [ 142.375224][ T1582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 143.307931][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 143.308354][ T30] audit: type=1400 audit(1779237809.400:239): avc: denied { shutdown } for pid=1596 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.393394][ T30] audit: type=1400 audit(1779237809.410:240): avc: denied { read } for pid=1596 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.385614][ T1616] loop3: detected capacity change from 0 to 8192 [ 144.447841][ T1615] loop0: detected capacity change from 0 to 512 [ 144.550451][ T1616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 144.560594][ T1616] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.571655][ T1616] F2FS-fs (loop7): Unable to read 1th superblock [ 144.578143][ T1616] blk_update_request: I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.589081][ T1616] F2FS-fs (loop7): Unable to read 2th superblock [ 145.303337][ T1620] loop0: detected capacity change from 0 to 128 [ 146.167847][ T1631] loop1: detected capacity change from 0 to 16 [ 146.217357][ T1631] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.331515][ T288] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 146.364605][ T288] FAT-fs (loop0): Filesystem has been set read-only [ 146.782035][ T1646] FAULT_INJECTION: forcing a failure. [ 146.782035][ T1646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.811803][ T1650] loop3: detected capacity change from 0 to 4096 [ 146.814466][ T1646] CPU: 1 PID: 1646 Comm: syz.1.390 Not tainted syzkaller #0 [ 146.825657][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.835737][ T1646] Call Trace: [ 146.839034][ T1646] [ 146.842070][ T1646] __dump_stack+0x21/0x30 [ 146.846439][ T1646] dump_stack_lvl+0x110/0x170 [ 146.851143][ T1646] ? show_regs_print_info+0x20/0x20 [ 146.856363][ T1646] ? vfs_write+0xc72/0xfd0 [ 146.860824][ T1646] dump_stack+0x15/0x20 [ 146.865006][ T1646] should_fail+0x3c1/0x510 [ 146.869445][ T1646] should_fail_usercopy+0x1a/0x20 [ 146.874495][ T1646] _copy_from_user+0x20/0xd0 [ 146.879120][ T1646] __sys_bpf+0x258/0x7d0 [ 146.883389][ T1646] ? bpf_link_show_fdinfo+0x330/0x330 [ 146.888795][ T1646] ? debug_smp_processor_id+0x17/0x20 [ 146.894197][ T1646] __x64_sys_bpf+0x7c/0x90 [ 146.898642][ T1646] x64_sys_call+0x4b9/0x9a0 [ 146.903179][ T1646] do_syscall_64+0x4c/0xa0 [ 146.907629][ T1646] ? clear_bhb_loop+0x50/0xa0 [ 146.912336][ T1646] ? clear_bhb_loop+0x50/0xa0 [ 146.917051][ T1646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.922987][ T1646] RIP: 0033:0x7ff90c0fce59 [ 146.927421][ T1646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.947049][ T1646] RSP: 002b:00007ff90ab57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.955505][ T1646] RAX: ffffffffffffffda RBX: 00007ff90c375fa0 RCX: 00007ff90c0fce59 [ 146.963504][ T1646] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 146.971627][ T1646] RBP: 00007ff90ab57090 R08: 0000000000000000 R09: 0000000000000000 [ 146.979627][ T1646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.987622][ T1646] R13: 00007ff90c376038 R14: 00007ff90c375fa0 R15: 00007fff1aefc0b8 [ 146.995643][ T1646] [ 147.025136][ T1650] EXT4-fs (loop3): bad geometry: block count 4904852652544 exceeds size of device (512 blocks) [ 147.037525][ T30] audit: type=1400 audit(1779237813.360:241): avc: denied { getopt } for pid=1647 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.232330][ T1649] loop2: detected capacity change from 0 to 40427 [ 147.282680][ T1649] F2FS-fs (loop2): invalid crc value [ 147.310670][ T1649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.415810][ T1649] F2FS-fs (loop2): Start checkpoint disabled! [ 149.205858][ T1649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 149.291434][ T1659] loop4: detected capacity change from 0 to 512 [ 152.572292][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.579499][ T1671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.586867][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.593920][ T1671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.607902][ T1671] device erspan1 left promiscuous mode [ 152.705049][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.831612][ T1679] loop3: detected capacity change from 0 to 16 [ 152.842490][ T1680] loop1: detected capacity change from 0 to 512 [ 152.868753][ T1679] erofs: (device loop3): mounted with root inode @ nid 36. [ 153.004824][ T1689] netlink: 116 bytes leftover after parsing attributes in process `syz.2.399'. [ 153.017680][ T30] audit: type=1400 audit(1779237819.340:242): avc: denied { write } for pid=1687 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.026534][ T1691] syz.3.403 uses obsolete (PF_INET,SOCK_PACKET) [ 153.446446][ T1695] loop1: detected capacity change from 0 to 512 [ 153.459399][ T30] audit: type=1400 audit(1779237819.360:243): avc: denied { getopt } for pid=1687 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.545331][ T1695] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.405: missing EA_INODE flag [ 153.569233][ T1695] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.405: error while reading EA inode 2 err=-117 [ 153.587956][ T1695] EXT4-fs (loop1): 1 orphan inode deleted [ 153.596877][ T1695] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 153.674821][ T30] audit: type=1400 audit(1779237820.000:244): avc: denied { bind } for pid=1700 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.913715][ T30] audit: type=1400 audit(1779237820.230:245): avc: denied { block_suspend } for pid=1708 comm="syz.2.411" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.094952][ T1712] FAULT_INJECTION: forcing a failure. [ 154.094952][ T1712] name failslab, interval 1, probability 0, space 0, times 0 [ 154.400444][ T1712] CPU: 1 PID: 1712 Comm: syz.0.406 Not tainted syzkaller #0 [ 154.407798][ T1712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.417871][ T1712] Call Trace: [ 154.421165][ T1712] [ 154.424112][ T1712] __dump_stack+0x21/0x30 [ 154.428467][ T1712] dump_stack_lvl+0x110/0x170 [ 154.433167][ T1712] ? show_regs_print_info+0x20/0x20 [ 154.438419][ T1712] ? release_firmware_map_entry+0x190/0x190 [ 154.444332][ T1712] dump_stack+0x15/0x20 [ 154.448502][ T1712] should_fail+0x3c1/0x510 [ 154.452934][ T1712] __should_failslab+0xa4/0xe0 [ 154.457737][ T1712] should_failslab+0x9/0x20 [ 154.462259][ T1712] slab_pre_alloc_hook+0x3b/0xe0 [ 154.467216][ T1712] ? getname_flags+0xb9/0x500 [ 154.471912][ T1712] kmem_cache_alloc+0x44/0x260 [ 154.476703][ T1712] ? sysvec_reschedule_ipi+0x78/0x80 [ 154.482007][ T1712] getname_flags+0xb9/0x500 [ 154.486529][ T1712] user_path_at_empty+0x30/0x1c0 [ 154.491480][ T1712] __se_sys_inotify_add_watch+0x1b6/0xbc0 [ 154.497225][ T1712] ? ksys_write+0x1f4/0x250 [ 154.501846][ T1712] ? __x64_sys_inotify_add_watch+0x90/0x90 [ 154.507679][ T1712] ? __secure_computing+0xea/0x290 [ 154.512829][ T1712] __x64_sys_inotify_add_watch+0x7b/0x90 [ 154.518480][ T1712] x64_sys_call+0x204/0x9a0 [ 154.522997][ T1712] do_syscall_64+0x4c/0xa0 [ 154.527431][ T1712] ? clear_bhb_loop+0x50/0xa0 [ 154.532120][ T1712] ? clear_bhb_loop+0x50/0xa0 [ 154.536809][ T1712] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.542721][ T1712] RIP: 0033:0x7f4cd28a4e59 [ 154.547158][ T1712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.566776][ T1712] RSP: 002b:00007f4cd12ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 154.575209][ T1712] RAX: ffffffffffffffda RBX: 00007f4cd2b1dfa0 RCX: 00007f4cd28a4e59 [ 154.583205][ T1712] RDX: 00000000040001a2 RSI: 00002000000006c0 RDI: 0000000000000003 [ 154.591195][ T1712] RBP: 00007f4cd12ff090 R08: 0000000000000000 R09: 0000000000000000 [ 154.599181][ T1712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.607173][ T1712] R13: 00007f4cd2b1e038 R14: 00007f4cd2b1dfa0 R15: 00007ffc79d3e218 [ 154.615161][ T1712] [ 155.713401][ T1705] loop1: detected capacity change from 0 to 40427 [ 155.728425][ T1705] F2FS-fs (loop1): invalid crc value [ 155.770054][ T1705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.820801][ T1730] loop2: detected capacity change from 0 to 512 [ 155.841378][ T1732] loop3: detected capacity change from 0 to 128 [ 155.905769][ T1705] F2FS-fs (loop1): Start checkpoint disabled! [ 155.913287][ T1705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 155.923711][ T1730] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.417: missing EA_INODE flag [ 155.957778][ T1730] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.417: error while reading EA inode 2 err=-117 [ 155.970527][ T1730] EXT4-fs (loop2): 1 orphan inode deleted [ 155.976486][ T1730] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 156.233971][ T30] audit: type=1400 audit(1779237822.550:246): avc: denied { mounton } for pid=1737 comm="syz.3.418" path="/79/file1" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.261812][ T30] audit: type=1400 audit(1779237822.580:247): avc: denied { read } for pid=1737 comm="syz.3.418" path="socket:[20215]" dev="sockfs" ino=20215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.596603][ T1746] netlink: 116 bytes leftover after parsing attributes in process `syz.2.421'. [ 156.689844][ T1753] loop1: detected capacity change from 0 to 512 [ 156.765301][ T1753] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 156.848686][ T1753] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.369101][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 158.933963][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 158.966715][ T1757] loop0: detected capacity change from 0 to 40427 [ 158.975873][ T30] audit: type=1326 audit(1779237825.280:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.2.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 159.042539][ T30] audit: type=1326 audit(1779237825.280:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.2.427" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 159.079632][ T1772] loop2: detected capacity change from 0 to 512 [ 159.088054][ T1757] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 159.095345][ T1757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.096064][ T1774] xt_time: unknown flags 0xc [ 159.109100][ T1757] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 297097612231902693) [ 159.147824][ T1757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.156731][ T1757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.206419][ T1772] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 159.311640][ T1772] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.451405][ T1789] loop3: detected capacity change from 0 to 512 [ 160.511635][ T1792] loop2: detected capacity change from 0 to 4096 [ 160.575765][ T1789] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 160.597882][ T1792] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 160.597882][ T1792] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 160.597882][ T1792] [ 160.616367][ T1789] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.663148][ T1792] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8568018, mo2=0003] [ 160.675932][ T1792] System zones: 0-5 [ 160.687051][ T1792] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,nodelalloc,grpquota,nojournal_checksum,delalloc,nouser_xattr,,errors=continue. Quota mode: writeback. [ 160.721446][ T1779] loop4: detected capacity change from 0 to 40427 [ 160.741748][ T1779] F2FS-fs (loop4): invalid crc value [ 160.750496][ T1792] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 160.809439][ T1779] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.851108][ T1779] F2FS-fs (loop4): Start checkpoint disabled! [ 160.858195][ T1779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.280444][ T1818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 161.372264][ T1818] device vlan0 entered promiscuous mode [ 161.399051][ T30] audit: type=1400 audit(1779237827.600:250): avc: denied { ioctl } for pid=1807 comm="syz.0.435" path="socket:[20319]" dev="sockfs" ino=20319 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.718962][ T1819] loop3: detected capacity change from 0 to 8192 [ 161.817716][ T1809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 161.838138][ T1809] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.849577][ T1809] F2FS-fs (loop7): Unable to read 1th superblock [ 161.851505][ T1823] loop2: detected capacity change from 0 to 128 [ 161.856199][ T1809] blk_update_request: I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.874387][ T1826] loop0: detected capacity change from 0 to 128 [ 161.885686][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 161.888434][ T1809] F2FS-fs (loop7): Unable to read 2th superblock [ 161.895451][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 161.912854][ T30] audit: type=1326 audit(1779237828.230:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1827 comm="syz.4.440" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf943e59 code=0x7ffc0000 [ 161.938410][ T30] audit: type=1326 audit(1779237828.260:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1827 comm="syz.4.440" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f31cf943e59 code=0x7ffc0000 [ 162.068414][ T1829] loop4: detected capacity change from 0 to 512 [ 163.046870][ T1829] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 163.155756][ T1829] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.361917][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 164.718117][ T1849] FAULT_INJECTION: forcing a failure. [ 164.718117][ T1849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.739289][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 164.748541][ T1849] CPU: 0 PID: 1849 Comm: syz.3.447 Not tainted syzkaller #0 [ 164.755863][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.765927][ T1849] Call Trace: [ 164.769234][ T1849] [ 164.772170][ T1849] __dump_stack+0x21/0x30 [ 164.776521][ T1849] dump_stack_lvl+0x110/0x170 [ 164.781211][ T1849] ? show_regs_print_info+0x20/0x20 [ 164.786427][ T1849] ? has_cap_mac_admin+0x370/0x370 [ 164.791552][ T1849] dump_stack+0x15/0x20 [ 164.795720][ T1849] should_fail+0x3c1/0x510 [ 164.800152][ T1849] should_fail_usercopy+0x1a/0x20 [ 164.805187][ T1849] _copy_from_user+0x20/0xd0 [ 164.809806][ T1849] get_user_ifreq+0x6c/0x180 [ 164.814408][ T1849] sock_ioctl+0x606/0x6e0 [ 164.818750][ T1849] ? sock_poll+0x3f0/0x3f0 [ 164.823186][ T1849] ? security_file_ioctl+0x84/0xa0 [ 164.828313][ T1849] ? sock_poll+0x3f0/0x3f0 [ 164.832731][ T1849] __se_sys_ioctl+0x121/0x1a0 [ 164.837419][ T1849] __x64_sys_ioctl+0x7b/0x90 [ 164.842040][ T1849] x64_sys_call+0x2f/0x9a0 [ 164.846470][ T1849] do_syscall_64+0x4c/0xa0 [ 164.850903][ T1849] ? clear_bhb_loop+0x50/0xa0 [ 164.855591][ T1849] ? clear_bhb_loop+0x50/0xa0 [ 164.860272][ T1849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.866194][ T1849] RIP: 0033:0x7f8d97a1be59 [ 164.870623][ T1849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.890243][ T1849] RSP: 002b:00007f8d96476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.898744][ T1849] RAX: ffffffffffffffda RBX: 00007f8d97c94fa0 RCX: 00007f8d97a1be59 [ 164.906725][ T1849] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 164.914703][ T1849] RBP: 00007f8d96476090 R08: 0000000000000000 R09: 0000000000000000 [ 164.922691][ T1849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.930668][ T1849] R13: 00007f8d97c95038 R14: 00007f8d97c94fa0 R15: 00007ffe77c46118 [ 164.938646][ T1849] [ 164.957952][ T1851] loop0: detected capacity change from 0 to 512 [ 164.984469][ T30] audit: type=1326 audit(1779237831.310:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.445" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 165.035569][ T30] audit: type=1326 audit(1779237831.340:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.445" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 165.101728][ T1852] loop2: detected capacity change from 0 to 512 [ 165.137065][ T1851] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.449: ea_inode file size=16777216 entry size=6 [ 165.174969][ T1852] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 165.200890][ T1851] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.449: iget: bad extra_isize 90 (inode size 256) [ 165.456029][ T1851] EXT4-fs (loop0): Remounting filesystem read-only [ 165.516456][ T1851] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.449: error while reading EA inode 11 err=-117 [ 165.629173][ T1851] EXT4-fs (loop0): Remounting filesystem read-only [ 165.690335][ T1851] EXT4-fs (loop0): 1 orphan inode deleted [ 165.742757][ T1851] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,prjquota,init_itable=0x0000000000000003,auto_da_alloc,. Quota mode: writeback. [ 166.231376][ T1856] loop3: detected capacity change from 0 to 40427 [ 166.263031][ T1856] F2FS-fs (loop3): invalid crc value [ 166.315331][ T1852] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 166.368155][ T1856] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.444376][ T1856] F2FS-fs (loop3): Start checkpoint disabled! [ 166.475339][ T1856] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 166.616262][ T603] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 168.549709][ T1887] loop4: detected capacity change from 0 to 128 [ 169.269927][ T1889] loop2: detected capacity change from 0 to 128 [ 170.153888][ T10] attempt to access beyond end of device [ 170.153888][ T10] loop4: rw=1, want=1041, limit=128 [ 170.167471][ T30] audit: type=1400 audit(1779237836.490:255): avc: denied { append } for pid=1894 comm="syz.1.460" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.241875][ T30] audit: type=1400 audit(1779237836.560:256): avc: denied { getopt } for pid=1894 comm="syz.1.460" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.310760][ T1901] loop0: detected capacity change from 0 to 16 [ 170.317827][ T1903] loop4: detected capacity change from 0 to 512 [ 170.335859][ T1901] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.366034][ T1903] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 170.394576][ T1909] loop0: detected capacity change from 0 to 128 [ 170.405263][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 170.414252][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 170.424642][ T30] audit: type=1326 audit(1779237836.750:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.2.462" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 170.449782][ T30] audit: type=1326 audit(1779237836.770:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.2.462" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25c6a40e59 code=0x7ffc0000 [ 170.494420][ T603] usb 1-1: device not accepting address 2, error -71 [ 170.503155][ T1911] loop2: detected capacity change from 0 to 512 [ 170.544580][ T39] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 171.137084][ T1911] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 171.746180][ T1903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 171.834230][ T1921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 171.853386][ T1921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 171.874423][ T30] audit: type=1326 audit(1779237838.190:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1920 comm="syz.4.467" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf943e59 code=0x7ffc0000 [ 171.929764][ T30] audit: type=1326 audit(1779237838.220:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1920 comm="syz.4.467" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f31cf943e59 code=0x7ffc0000 [ 171.957517][ T1922] loop4: detected capacity change from 0 to 512 [ 171.994468][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 172.014867][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.036168][ T1922] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 172.050390][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 172.071823][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.102935][ T1919] loop1: detected capacity change from 0 to 40427 [ 172.123849][ T1919] F2FS-fs (loop1): invalid crc value [ 172.132770][ T1919] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.175652][ T1919] F2FS-fs (loop1): Start checkpoint disabled! [ 172.182550][ T1919] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 172.385203][ T39] usb 4-1: string descriptor 0 read error: -22 [ 172.442066][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.566592][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.925217][ T39] usb 4-1: low speed audio streaming not supported [ 172.934364][ T39] usb 4-1: low speed audio streaming not supported [ 173.179933][ T1878] usb 4-1: USB disconnect, device number 5 [ 173.219128][ T1941] loop3: detected capacity change from 0 to 16 [ 173.367862][ T1941] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.661081][ T1950] loop3: detected capacity change from 0 to 16 [ 173.689369][ T1950] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.767190][ T1953] loop0: detected capacity change from 0 to 4096 [ 173.814849][ T1934] loop4: detected capacity change from 0 to 8192 [ 173.877203][ T1953] EXT4-fs (loop0): Test dummy encryption mode enabled [ 173.899994][ T1934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 173.920314][ T1953] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 173.945816][ T1934] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.142055][ T1934] F2FS-fs (loop9): Unable to read 1th superblock [ 174.411916][ T1957] attempt to access beyond end of device [ 174.411916][ T1957] loop3: rw=0, want=1041, limit=128 [ 175.090549][ T1953] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 175.142156][ T1953] System zones: 0-5 [ 175.152289][ T1934] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.228694][ T1934] F2FS-fs (loop9): Unable to read 2th superblock [ 175.978912][ T1969] set_capacity_and_notify: 1 callbacks suppressed [ 175.978939][ T1969] loop1: detected capacity change from 0 to 128 [ 176.215223][ T1953] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 176.444736][ T1953] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 176.937491][ T1967] attempt to access beyond end of device [ 176.937491][ T1967] loop1: rw=2049, want=1041, limit=128 [ 176.977972][ T30] audit: type=1400 audit(1779237843.300:261): avc: denied { setattr } for pid=1952 comm="syz.0.476" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 177.045624][ T1973] overlayfs: conflicting lowerdir path [ 177.141882][ T286] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 177.154688][ T30] audit: type=1400 audit(1779237843.360:262): avc: denied { remove_name } for pid=1952 comm="syz.0.476" name="#8" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 177.196887][ T286] FAT-fs (loop1): Filesystem has been set read-only [ 177.264433][ T30] audit: type=1400 audit(1779237843.360:263): avc: denied { rename } for pid=1952 comm="syz.0.476" name="#8" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 177.304973][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 177.322469][ T1980] loop2: detected capacity change from 0 to 512 [ 177.328909][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 177.334486][ T30] audit: type=1400 audit(1779237843.360:264): avc: denied { unlink } for pid=1952 comm="syz.0.476" name="#8" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.406629][ T1980] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 177.424420][ T30] audit: type=1400 audit(1779237843.360:265): avc: denied { unlink } for pid=1952 comm="syz.0.476" name="#9" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 177.448446][ T1981] loop1: detected capacity change from 0 to 512 [ 177.474783][ T1966] loop3: detected capacity change from 0 to 40427 [ 177.481396][ T30] audit: type=1326 audit(1779237843.710:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.1.481" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90c0fce59 code=0x7ffc0000 [ 177.532821][ T1981] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 177.538844][ T30] audit: type=1326 audit(1779237843.710:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.1.481" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ff90c0fce59 code=0x7ffc0000 [ 177.596036][ T1966] F2FS-fs (loop3): invalid crc value [ 177.615494][ T1980] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 177.625443][ T1966] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.943976][ T1966] F2FS-fs (loop3): Start checkpoint disabled! [ 177.961091][ T1966] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 178.226510][ T1988] loop2: detected capacity change from 0 to 40427 [ 178.491457][ T1988] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 178.503191][ T1988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.511549][ T1988] F2FS-fs (loop2): fault_type options not supported [ 178.530997][ T1995] loop1: detected capacity change from 0 to 512 [ 178.537608][ T1988] F2FS-fs (loop2): invalid crc value [ 178.555866][ T1988] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 178.577077][ T1997] loop0: detected capacity change from 0 to 1024 [ 178.612584][ T1988] F2FS-fs (loop2): Start checkpoint disabled! [ 178.620172][ T1988] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 178.627452][ T1988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 178.664811][ T1997] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 178.691747][ T1997] jbd2_journal_init_inode: Cannot locate journal superblock [ 178.714352][ T1997] EXT4-fs (loop0): Could not load journal inode [ 178.742677][ T10] attempt to access beyond end of device [ 178.742677][ T10] loop2: rw=2049, want=45104, limit=40427 [ 178.764944][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 178.813333][ T1999] fuse: Bad value for 'fd' [ 179.129303][ T2006] loop1: detected capacity change from 0 to 512 [ 179.220685][ T2007] loop0: detected capacity change from 0 to 128 [ 179.541771][ T2015] FAULT_INJECTION: forcing a failure. [ 179.541771][ T2015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.556183][ T2006] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.489: casefold flag without casefold feature [ 179.569820][ T2006] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.489: couldn't read orphan inode 15 (err -117) [ 179.582071][ T2006] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.627566][ T2017] loop2: detected capacity change from 0 to 512 [ 179.635805][ T2015] CPU: 0 PID: 2015 Comm: syz.3.493 Not tainted syzkaller #0 [ 179.643332][ T2015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.653412][ T2015] Call Trace: [ 179.656731][ T2015] [ 179.659689][ T2015] __dump_stack+0x21/0x30 [ 179.664049][ T2015] dump_stack_lvl+0x110/0x170 [ 179.668755][ T2015] ? show_regs_print_info+0x20/0x20 [ 179.673981][ T2015] dump_stack+0x15/0x20 [ 179.678167][ T2015] should_fail+0x3c1/0x510 [ 179.682620][ T2015] should_fail_usercopy+0x1a/0x20 [ 179.687680][ T2015] _copy_to_user+0x20/0x90 [ 179.692152][ T2015] simple_read_from_buffer+0xe9/0x160 [ 179.697556][ T2015] proc_fail_nth_read+0x1a6/0x220 [ 179.702614][ T2015] ? proc_fault_inject_write+0x310/0x310 [ 179.708269][ T2015] ? security_file_permission+0x83/0xa0 [ 179.713842][ T2015] ? proc_fault_inject_write+0x310/0x310 [ 179.719507][ T2015] vfs_read+0x28d/0xc40 [ 179.723692][ T2015] ? kernel_read+0x1f0/0x1f0 [ 179.728304][ T2015] ? __kasan_check_write+0x14/0x20 [ 179.733441][ T2015] ? mutex_lock+0x9b/0x1c0 [ 179.737882][ T2015] ? wait_for_completion_killable_timeout+0x10/0x10 [ 179.744495][ T2015] ? __fget_files+0x2c4/0x320 [ 179.749206][ T2015] ? __fdget_pos+0x2d2/0x380 [ 179.753815][ T2015] ? ksys_read+0x71/0x250 [ 179.758159][ T2015] ksys_read+0x149/0x250 [ 179.762426][ T2015] ? vfs_write+0xfd0/0xfd0 [ 179.766862][ T2015] ? debug_smp_processor_id+0x17/0x20 [ 179.772254][ T2015] __x64_sys_read+0x7b/0x90 [ 179.776780][ T2015] x64_sys_call+0x96d/0x9a0 [ 179.781307][ T2015] do_syscall_64+0x4c/0xa0 [ 179.785745][ T2015] ? clear_bhb_loop+0x50/0xa0 [ 179.790533][ T2015] ? clear_bhb_loop+0x50/0xa0 [ 179.795237][ T2015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.801163][ T2015] RIP: 0033:0x7f8d979dc68e [ 179.805608][ T2015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.825244][ T2015] RSP: 002b:00007f8d96475fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.833686][ T2015] RAX: ffffffffffffffda RBX: 00007f8d964766c0 RCX: 00007f8d979dc68e [ 179.841682][ T2015] RDX: 000000000000000f RSI: 00007f8d964760a0 RDI: 0000000000000004 [ 179.849687][ T2015] RBP: 00007f8d96476090 R08: 0000000000000000 R09: 0000000000000000 [ 179.857693][ T2015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.865692][ T2015] R13: 00007f8d97c95038 R14: 00007f8d97c94fa0 R15: 00007ffe77c46118 [ 179.873693][ T2015] [ 180.059147][ T2022] overlayfs: workdir and upperdir must reside under the same mount [ 180.136403][ T2021] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.495: lblock 2 mapped to illegal pblock 2 (length 1) [ 180.178675][ T2021] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 180.198161][ T2021] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.495: lblock 0 mapped to illegal pblock 48 (length 1) [ 180.213611][ T2021] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 180.223368][ T2021] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.495: Failed to acquire dquot type 0 [ 180.244328][ T2021] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 180.264003][ T2021] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.495: mark_inode_dirty error [ 180.284469][ T2021] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 180.310705][ T2021] EXT4-fs (loop0): 1 orphan inode deleted [ 180.326763][ T2021] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 180.348839][ T1784] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.390079][ T1784] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 180.404329][ T1784] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:8: Failed to release dquot type 0 [ 180.424375][ T603] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 180.442153][ T1784] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.476543][ T1784] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:8: Failed to release dquot type 0 [ 180.500413][ T288] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 180.524432][ T288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 180.538065][ T2028] F2FS-fs (loop3): invalid crc value [ 180.544422][ T288] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 180.570529][ T2028] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.664386][ T2028] F2FS-fs (loop3): Start checkpoint disabled! [ 180.724344][ T603] usb 2-1: Using ep0 maxpacket: 32 [ 180.739710][ T2028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 180.864378][ T603] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 181.144365][ T2041] set_capacity_and_notify: 2 callbacks suppressed [ 181.144383][ T2041] loop0: detected capacity change from 0 to 128 [ 181.403901][ T2041] attempt to access beyond end of device [ 181.403901][ T2041] loop0: rw=2049, want=1041, limit=128 [ 182.177004][ T2044] loop3: detected capacity change from 0 to 256 [ 182.194328][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.205278][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.215056][ T603] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 182.216754][ T2044] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 182.224100][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.280260][ T603] usb 2-1: config 0 descriptor?? [ 182.281464][ T288] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 182.281484][ T288] FAT-fs (loop0): Filesystem has been set read-only [ 182.355220][ T2049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 182.364541][ T2049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 182.380276][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 182.380292][ T30] audit: type=1326 audit(1779237848.700:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2047 comm="syz.0.502" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd28a4e59 code=0x7ffc0000 [ 182.421452][ T2051] FAULT_INJECTION: forcing a failure. [ 182.421452][ T2051] name failslab, interval 1, probability 0, space 0, times 0 [ 182.435663][ T2051] CPU: 0 PID: 2051 Comm: syz.3.503 Not tainted syzkaller #0 [ 182.442991][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.453073][ T2051] Call Trace: [ 182.454389][ T30] audit: type=1326 audit(1779237848.740:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2047 comm="syz.0.502" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4cd28a4e59 code=0x7ffc0000 [ 182.456365][ T2051] [ 182.456374][ T2051] __dump_stack+0x21/0x30 [ 182.488248][ T2051] dump_stack_lvl+0x110/0x170 [ 182.492947][ T2051] ? show_regs_print_info+0x20/0x20 [ 182.498163][ T2051] ? avc_denied+0x1b0/0x1b0 [ 182.502678][ T2051] dump_stack+0x15/0x20 [ 182.506862][ T2051] should_fail+0x3c1/0x510 [ 182.511318][ T2051] __should_failslab+0xa4/0xe0 [ 182.516101][ T2051] should_failslab+0x9/0x20 [ 182.520965][ T2051] slab_pre_alloc_hook+0x3b/0xe0 [ 182.525916][ T2051] __kmalloc+0x6d/0x2c0 [ 182.530097][ T2051] ? kvmalloc_node+0x211/0x320 [ 182.534870][ T2051] kvmalloc_node+0x211/0x320 [ 182.539473][ T2051] ? cap_capable+0x1aa/0x230 [ 182.544070][ T2051] ? stack_trace_save+0xa6/0xf0 [ 182.548927][ T2051] ? vm_mmap+0xb0/0xb0 [ 182.553005][ T2051] xt_alloc_table_info+0x3b/0xa0 [ 182.557958][ T2051] do_arpt_set_ctl+0x88d/0xfa0 [ 182.562737][ T2051] ? proc_pid_make_inode+0x27/0x1d0 [ 182.567943][ T2051] ? proc_pident_instantiate+0x69/0x2b0 [ 182.573497][ T2051] ? proc_pident_lookup+0x1c0/0x270 [ 182.578810][ T2051] ? proc_tid_base_lookup+0x2b/0x30 [ 182.584040][ T2051] ? path_openat+0xfc9/0x2f20 [ 182.588729][ T2051] ? do_filp_open+0x1e2/0x410 [ 182.593413][ T2051] ? do_sys_openat2+0x15e/0x7f0 [ 182.598275][ T2051] ? __x64_sys_openat+0x136/0x160 [ 182.603422][ T2051] ? x64_sys_call+0x219/0x9a0 [ 182.608129][ T2051] ? arpt_unregister_table+0x50/0x50 [ 182.613436][ T2051] ? avc_has_perm_noaudit+0x391/0x490 [ 182.618822][ T2051] ? memcpy+0x56/0x70 [ 182.622861][ T2051] ? avc_has_perm_noaudit+0x30b/0x490 [ 182.628250][ T2051] ? _raw_spin_lock_irq+0xf0/0xf0 [ 182.633294][ T2051] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 182.638765][ T2051] ? __kasan_check_write+0x14/0x20 [ 182.643884][ T2051] ? mutex_unlock+0x8f/0x230 [ 182.648488][ T2051] ? __mutex_lock_slowpath+0x10/0x10 [ 182.653780][ T2051] ? _raw_spin_lock_bh+0x94/0xf0 [ 182.658726][ T2051] ? _raw_spin_lock_irq+0xf0/0xf0 [ 182.663849][ T2051] nf_setsockopt+0x272/0x2a0 [ 182.668454][ T2051] ip_setsockopt+0x2b72/0x37c0 [ 182.673224][ T2051] ? ipv4_pktinfo_prepare+0x580/0x580 [ 182.678606][ T2051] ? __kernel_text_address+0xa0/0x100 [ 182.684009][ T2051] ? unwind_get_return_address+0x4d/0x90 [ 182.689649][ T2051] ? stack_trace_save+0xf0/0xf0 [ 182.694505][ T2051] ? arch_stack_walk+0xee/0x140 [ 182.699367][ T2051] ? stack_trace_save+0xa6/0xf0 [ 182.704232][ T2051] ? __stack_depot_save+0x34/0x480 [ 182.709356][ T2051] ? path_openat+0x280e/0x2f20 [ 182.714143][ T2051] ? avc_has_perm_noaudit+0x391/0x490 [ 182.719522][ T2051] ? memcpy+0x56/0x70 [ 182.723515][ T2051] ? avc_has_perm_noaudit+0x30b/0x490 [ 182.728895][ T2051] ? avc_denied+0x1b0/0x1b0 [ 182.733408][ T2051] ? kstrtouint_from_user+0x1c4/0x220 [ 182.738876][ T2051] ? avc_has_perm+0x163/0x250 [ 182.743559][ T2051] ? avc_has_perm_noaudit+0x490/0x490 [ 182.748943][ T2051] ? proc_fail_nth_write+0x180/0x200 [ 182.754244][ T2051] tcp_setsockopt+0x22b/0x1eb0 [ 182.759033][ T2051] ? selinux_socket_setsockopt+0x282/0x360 [ 182.764847][ T2051] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 182.770224][ T2051] ? vfs_write+0xc72/0xfd0 [ 182.774639][ T2051] ? __fget_files+0x2c4/0x320 [ 182.779323][ T2051] sock_common_setsockopt+0xa0/0xb0 [ 182.784530][ T2051] ? sock_common_recvmsg+0x1c0/0x1c0 [ 182.789826][ T2051] __sys_setsockopt+0x2e9/0x470 [ 182.794770][ T2051] ? __kasan_check_write+0x14/0x20 [ 182.799963][ T2051] ? __ia32_sys_recv+0xb0/0xb0 [ 182.804742][ T2051] ? ksys_write+0x1f4/0x250 [ 182.809250][ T2051] ? __ia32_sys_read+0x90/0x90 [ 182.814020][ T2051] __x64_sys_setsockopt+0xbf/0xd0 [ 182.819058][ T2051] x64_sys_call+0x982/0x9a0 [ 182.823569][ T2051] do_syscall_64+0x4c/0xa0 [ 182.828004][ T2051] ? clear_bhb_loop+0x50/0xa0 [ 182.832693][ T2051] ? clear_bhb_loop+0x50/0xa0 [ 182.837394][ T2051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.843332][ T2051] RIP: 0033:0x7f8d97a1be59 [ 182.847768][ T2051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.867381][ T2051] RSP: 002b:00007f8d96476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.875798][ T2051] RAX: ffffffffffffffda RBX: 00007f8d97c94fa0 RCX: 00007f8d97a1be59 [ 182.883785][ T2051] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 182.891780][ T2051] RBP: 00007f8d96476090 R08: 0000000000000418 R09: 0000000000000000 [ 182.899764][ T2051] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 182.907745][ T2051] R13: 00007f8d97c95038 R14: 00007f8d97c94fa0 R15: 00007ffe77c46118 [ 182.915819][ T2051] [ 182.919721][ T2053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1299 sclass=netlink_route_socket pid=2053 comm=syz.2.505 [ 182.938662][ T2054] loop0: detected capacity change from 0 to 512 [ 182.973582][ T2061] loop2: detected capacity change from 0 to 512 [ 182.985845][ T2054] EXT4-fs (loop0): bad geometry: first data block 1 is beyond end of filesystem (0) [ 183.008817][ T2061] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.507: missing EA_INODE flag [ 183.023949][ T2061] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.507: error while reading EA inode 2 err=-117 [ 183.028902][ T2066] loop3: detected capacity change from 0 to 512 [ 183.037290][ T2061] EXT4-fs (loop2): 1 orphan inode deleted [ 183.072592][ T2061] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 183.102005][ T2068] overlayfs: workdir and upperdir must reside under the same mount [ 183.191249][ T2073] FAULT_INJECTION: forcing a failure. [ 183.191249][ T2073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.205011][ T2073] CPU: 0 PID: 2073 Comm: syz.3.511 Not tainted syzkaller #0 [ 183.212421][ T2073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.222506][ T2073] Call Trace: [ 183.225808][ T2073] [ 183.228762][ T2073] __dump_stack+0x21/0x30 [ 183.233117][ T2073] dump_stack_lvl+0x110/0x170 [ 183.237953][ T2073] ? show_regs_print_info+0x20/0x20 [ 183.243275][ T2073] ? __stack_depot_save+0x34/0x480 [ 183.248435][ T2073] ? path_openat+0x280e/0x2f20 [ 183.253231][ T2073] dump_stack+0x15/0x20 [ 183.257421][ T2073] should_fail+0x3c1/0x510 [ 183.261868][ T2073] should_fail_usercopy+0x1a/0x20 [ 183.266907][ T2073] _copy_from_user+0x20/0xd0 [ 183.271566][ T2073] iovec_from_user+0x1bc/0x2f0 [ 183.276359][ T2073] ? __copy_msghdr_from_user+0x329/0x630 [ 183.282014][ T2073] ? _kstrtoull+0x3c0/0x4d0 [ 183.286526][ T2073] __import_iovec+0x71/0x400 [ 183.291125][ T2073] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 183.296418][ T2073] ? kstrtouint_from_user+0x1c4/0x220 [ 183.301800][ T2073] import_iovec+0x7c/0xb0 [ 183.306145][ T2073] ___sys_sendmsg+0x1fd/0x2e0 [ 183.310869][ T2073] ? __sys_sendmsg+0x280/0x280 [ 183.315753][ T2073] ? __fdget+0x1a1/0x230 [ 183.320369][ T2073] __x64_sys_sendmsg+0x206/0x2f0 [ 183.325362][ T2073] ? ___sys_sendmsg+0x2e0/0x2e0 [ 183.330224][ T2073] ? ksys_write+0x1f4/0x250 [ 183.334745][ T2073] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 183.340842][ T2073] x64_sys_call+0x4b/0x9a0 [ 183.345272][ T2073] do_syscall_64+0x4c/0xa0 [ 183.349695][ T2073] ? clear_bhb_loop+0x50/0xa0 [ 183.354382][ T2073] ? clear_bhb_loop+0x50/0xa0 [ 183.359066][ T2073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.364972][ T2073] RIP: 0033:0x7f8d97a1be59 [ 183.369417][ T2073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.389032][ T2073] RSP: 002b:00007f8d96476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.397458][ T2073] RAX: ffffffffffffffda RBX: 00007f8d97c94fa0 RCX: 00007f8d97a1be59 [ 183.405535][ T2073] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 183.413516][ T2073] RBP: 00007f8d96476090 R08: 0000000000000000 R09: 0000000000000000 [ 183.421496][ T2073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.429500][ T2073] R13: 00007f8d97c95038 R14: 00007f8d97c94fa0 R15: 00007ffe77c46118 [ 183.437492][ T2073] [ 183.442358][ T603] usbhid 2-1:0.0: can't add hid device: -71 [ 183.454478][ T2077] loop0: detected capacity change from 0 to 256 [ 183.466819][ T603] usbhid: probe of 2-1:0.0 failed with error -71 [ 183.478135][ T603] usb 2-1: USB disconnect, device number 2 [ 183.517381][ T2077] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 183.575185][ T2084] netlink: 136 bytes leftover after parsing attributes in process `syz.3.513'. [ 183.591059][ T30] audit: type=1400 audit(1779237849.910:272): avc: denied { watch watch_reads } for pid=2085 comm="syz.2.515" path="/99" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.948883][ T30] audit: type=1400 audit(1779237849.950:273): avc: denied { write } for pid=2076 comm="syz.0.512" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.971748][ T2089] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 183.979204][ T2089] exFAT-fs (loop0): Filesystem has been set read-only [ 183.993816][ T2089] exFAT-fs (loop0): hint_cluster is invalid (1) [ 184.008435][ T2084] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 184.028615][ T2089] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 184.037484][ T2089] exFAT-fs (loop0): error, failed to bmap (inode : ffff888128ddd210 iblock : 9, err : -5) [ 184.048418][ T2089] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 184.056511][ T2089] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 184.086240][ T2087] process 'syz.2.515' launched './file1' with NULL argv: empty string added [ 184.095798][ T30] audit: type=1400 audit(1779237849.950:274): avc: denied { add_name } for pid=2076 comm="syz.0.512" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.718155][ T30] audit: type=1400 audit(1779237849.950:275): avc: denied { associate } for pid=2076 comm="syz.0.512" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.994419][ T2098] FAULT_INJECTION: forcing a failure. [ 184.994419][ T2098] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.155306][ T603] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.195877][ T2098] CPU: 0 PID: 2098 Comm: syz.2.517 Not tainted syzkaller #0 [ 185.203316][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.213390][ T2098] Call Trace: [ 185.216690][ T2098] [ 185.219639][ T2098] __dump_stack+0x21/0x30 [ 185.224095][ T2098] dump_stack_lvl+0x110/0x170 [ 185.228789][ T2098] ? show_regs_print_info+0x20/0x20 [ 185.234015][ T2098] ? __kasan_check_write+0x14/0x20 [ 185.239326][ T2098] ? __switch_to+0x515/0xe50 [ 185.243962][ T2098] dump_stack+0x15/0x20 [ 185.248138][ T2098] should_fail+0x3c1/0x510 [ 185.252578][ T2098] should_fail_alloc_page+0x55/0x80 [ 185.257812][ T2098] prepare_alloc_pages+0x156/0x610 [ 185.262974][ T2098] ? __alloc_pages_bulk+0xad0/0xad0 [ 185.268207][ T2098] ? __schedule+0xb76/0x14c0 [ 185.272818][ T2098] __alloc_pages+0x11d/0x460 [ 185.277428][ T2098] ? prep_new_page+0x110/0x110 [ 185.282214][ T2098] ? __kasan_check_read+0x11/0x20 [ 185.287255][ T2098] ? preempt_schedule_irq+0xca/0x120 [ 185.292559][ T2098] ? __cond_resched+0xd0/0xd0 [ 185.297256][ T2098] handle_pte_fault+0xebf/0x2710 [ 185.302210][ T2098] ? fault_around_bytes_set+0xc0/0xc0 [ 185.307603][ T2098] do_handle_mm_fault+0x1af9/0x1de0 [ 185.312824][ T2098] ? compat_start_thread+0x20/0x20 [ 185.317956][ T2098] ? numa_migrate_prep+0xd0/0xd0 [ 185.322911][ T2098] ? vmacache_update+0xb7/0x120 [ 185.327781][ T2098] ? __find_vma+0x13b/0x150 [ 185.332309][ T2098] do_user_addr_fault+0x828/0x1250 [ 185.337442][ T2098] ? do_kern_addr_fault+0x80/0x80 [ 185.342480][ T2098] ? __schedule+0xb76/0x14c0 [ 185.347092][ T2098] ? __kasan_check_read+0x11/0x20 [ 185.352137][ T2098] ? preempt_schedule_irq+0xca/0x120 [ 185.357457][ T2098] ? __cond_resched+0xd0/0xd0 [ 185.362177][ T2098] ? avc_has_perm_noaudit+0x30b/0x490 [ 185.367712][ T2098] exc_page_fault+0x51/0xb0 [ 185.372254][ T2098] asm_exc_page_fault+0x27/0x30 [ 185.377137][ T2098] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 185.383506][ T2098] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 185.403134][ T2098] RSP: 0018:ffffc90000d17938 EFLAGS: 00050202 [ 185.409234][ T2098] RAX: ffffffff824e4401 RBX: ffff8881354f2800 RCX: 0000000000000007 [ 185.417228][ T2098] RDX: 0000000000000000 RSI: ffff8881354f2800 RDI: 0000200000005980 [ 185.425224][ T2098] RBP: ffffc90000d17a90 R08: 000000230000000b R09: 1ffff11026a9e506 [ 185.433232][ T2098] R10: dffffc0000000000 R11: ffffed1026a9e507 R12: 00002000000059b8 [ 185.441243][ T2098] R13: 0000000000000038 R14: 0000200000005980 R15: 0000000000000000 [ 185.449260][ T2098] ? _copy_to_iter+0x1d1/0x1090 [ 185.454166][ T2098] ? _copy_to_iter+0x29a/0x1090 [ 185.459040][ T2098] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 185.464705][ T2098] ? iov_iter_init+0x180/0x180 [ 185.469501][ T2098] ? __check_object_size+0x2f4/0x3c0 [ 185.474809][ T2098] bcm_recvmsg+0x165/0x540 [ 185.479249][ T2098] ? bcm_sendmsg+0x660/0x660 [ 185.483863][ T2098] ? security_socket_recvmsg+0x87/0xb0 [ 185.489339][ T2098] sock_read_iter+0x2b8/0x380 [ 185.494036][ T2098] ? kernel_sock_ip_overhead+0x290/0x290 [ 185.499702][ T2098] ? memset+0x35/0x40 [ 185.503714][ T2098] ? iov_iter_init+0xbc/0x180 [ 185.508419][ T2098] vfs_read+0x6c9/0xc40 [ 185.512614][ T2098] ? kernel_read+0x1f0/0x1f0 [ 185.517226][ T2098] ? __fget_files+0x2c4/0x320 [ 185.521929][ T2098] ? __fdget_pos+0x1f7/0x380 [ 185.526552][ T2098] ? ksys_read+0x71/0x250 [ 185.530898][ T2098] ksys_read+0x149/0x250 [ 185.535159][ T2098] ? vfs_write+0xfd0/0xfd0 [ 185.539597][ T2098] ? __kasan_check_write+0x14/0x20 [ 185.544725][ T2098] ? switch_fpu_return+0x15d/0x2c0 [ 185.549860][ T2098] __x64_sys_read+0x7b/0x90 [ 185.554376][ T2098] x64_sys_call+0x96d/0x9a0 [ 185.558946][ T2098] do_syscall_64+0x4c/0xa0 [ 185.563384][ T2098] ? clear_bhb_loop+0x50/0xa0 [ 185.568076][ T2098] ? clear_bhb_loop+0x50/0xa0 [ 185.572770][ T2098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.578711][ T2098] RIP: 0033:0x7f25c6a40e59 [ 185.583147][ T2098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.583748][ T30] audit: type=1400 audit(1779237849.950:276): avc: denied { read } for pid=2076 comm="syz.0.512" name="file1" dev="loop0" ino=1048769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.602771][ T2098] RSP: 002b:00007f25c549b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.602793][ T2098] RAX: ffffffffffffffda RBX: 00007f25c6cb9fa0 RCX: 00007f25c6a40e59 [ 185.602806][ T2098] RDX: 000000000000100b RSI: 0000200000005980 RDI: 0000000000000003 [ 185.602819][ T2098] RBP: 00007f25c549b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.602831][ T2098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.602843][ T2098] R13: 00007f25c6cba038 R14: 00007f25c6cb9fa0 R15: 00007ffe36e50858 [ 185.602862][ T2098] [ 186.181979][ T30] audit: type=1400 audit(1779237850.600:277): avc: denied { execute } for pid=2085 comm="syz.2.515" name="file1" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.217668][ T2110] loop1: detected capacity change from 0 to 512 [ 186.276260][ T30] audit: type=1400 audit(1779237850.780:278): avc: denied { accept } for pid=2094 comm="syz.1.516" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.303048][ T30] audit: type=1400 audit(1779237851.290:279): avc: denied { ioctl } for pid=2096 comm="syz.2.517" path="socket:[21892]" dev="sockfs" ino=21892 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.472470][ T2110] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.520: missing EA_INODE flag [ 186.541845][ T2114] loop2: detected capacity change from 0 to 128 [ 186.549371][ T2110] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.520: error while reading EA inode 2 err=-117 [ 186.826805][ T2114] attempt to access beyond end of device [ 186.826805][ T2114] loop2: rw=2049, want=1041, limit=128 [ 186.952602][ T2110] EXT4-fs (loop1): 1 orphan inode deleted [ 187.395327][ T2110] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 187.461618][ T2120] loop3: detected capacity change from 0 to 512 [ 187.632321][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 187.641054][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 187.681835][ T2127] loop0: detected capacity change from 0 to 128 [ 189.236899][ T2120] overlayfs: workdir and upperdir must reside under the same mount [ 189.283486][ T2138] loop2: detected capacity change from 0 to 128 [ 189.543987][ T2138] attempt to access beyond end of device [ 189.543987][ T2138] loop2: rw=2049, want=1041, limit=128 [ 190.123783][ T2141] loop1: detected capacity change from 0 to 512 [ 190.225202][ T2142] loop4: detected capacity change from 0 to 128 [ 190.364726][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 190.379344][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 190.758345][ T2148] overlayfs: workdir and upperdir must reside under the same mount [ 191.000682][ T2154] loop2: detected capacity change from 0 to 128 [ 192.059916][ T2162] loop3: detected capacity change from 0 to 512 [ 192.068504][ T2164] loop1: detected capacity change from 0 to 512 [ 192.147215][ T290] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 192.157376][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 192.170301][ T2164] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.537: missing EA_INODE flag [ 192.183340][ T2164] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.537: error while reading EA inode 2 err=-117 [ 192.195651][ T2164] EXT4-fs (loop1): 1 orphan inode deleted [ 192.201476][ T2164] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 193.009293][ T2168] loop2: detected capacity change from 0 to 131072 [ 193.054653][ T2168] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.103965][ T2168] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 193.140710][ T10] attempt to access beyond end of device [ 193.140710][ T10] loop0: rw=1, want=1041, limit=128 [ 193.145730][ T30] audit: type=1400 audit(1779237859.460:280): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 193.189346][ T2168] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 193.274257][ T2189] loop1: detected capacity change from 0 to 256 [ 193.288953][ T2189] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 193.343768][ T2191] loop0: detected capacity change from 0 to 256 [ 193.378325][ T8] attempt to access beyond end of device [ 193.378325][ T8] loop4: rw=1, want=1041, limit=128 [ 193.501478][ T2198] loop4: detected capacity change from 0 to 128 [ 193.636164][ T2201] loop1: detected capacity change from 0 to 512 [ 195.057684][ T2222] FAULT_INJECTION: forcing a failure. [ 195.057684][ T2222] name failslab, interval 1, probability 0, space 0, times 0 [ 195.070374][ T2222] CPU: 1 PID: 2222 Comm: syz.3.553 Not tainted syzkaller #0 [ 195.077684][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.087777][ T2222] Call Trace: [ 195.091069][ T2222] [ 195.094021][ T2222] __dump_stack+0x21/0x30 [ 195.098375][ T2222] dump_stack_lvl+0x110/0x170 [ 195.103071][ T2222] ? show_regs_print_info+0x20/0x20 [ 195.108284][ T2222] ? compat_start_thread+0x20/0x20 [ 195.113406][ T2222] dump_stack+0x15/0x20 [ 195.117602][ T2222] should_fail+0x3c1/0x510 [ 195.122047][ T2222] __should_failslab+0xa4/0xe0 [ 195.126823][ T2222] should_failslab+0x9/0x20 [ 195.131336][ T2222] slab_pre_alloc_hook+0x3b/0xe0 [ 195.136290][ T2222] kmem_cache_alloc_trace+0x48/0x270 [ 195.141597][ T2222] ? do_signalfd4+0x14b/0x350 [ 195.146292][ T2222] do_signalfd4+0x14b/0x350 [ 195.150806][ T2222] ? __kasan_check_write+0x14/0x20 [ 195.155930][ T2222] ? _copy_from_user+0x95/0xd0 [ 195.160711][ T2222] __x64_sys_signalfd+0x12e/0x170 [ 195.165744][ T2222] ? __ia32_sys_signalfd4+0x1a0/0x1a0 [ 195.171158][ T2222] ? __kasan_check_write+0x14/0x20 [ 195.176295][ T2222] ? switch_fpu_return+0x15d/0x2c0 [ 195.181427][ T2222] x64_sys_call+0x1e8/0x9a0 [ 195.185939][ T2222] do_syscall_64+0x4c/0xa0 [ 195.190368][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 195.195048][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 195.199751][ T2222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.205681][ T2222] RIP: 0033:0x7f8d97a1be59 [ 195.210101][ T2222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.229970][ T2222] RSP: 002b:00007f8d96434028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 195.238401][ T2222] RAX: ffffffffffffffda RBX: 00007f8d97c95180 RCX: 00007f8d97a1be59 [ 195.246735][ T2222] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 195.254817][ T2222] RBP: 00007f8d96434090 R08: 0000000000000000 R09: 0000000000000000 [ 195.262801][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.270779][ T2222] R13: 00007f8d97c95218 R14: 00007f8d97c95180 R15: 00007ffe77c46118 [ 195.278790][ T2222] [ 195.475531][ T2224] loop1: detected capacity change from 0 to 256 [ 195.640837][ T2224] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 199.260978][ T2241] loop3: detected capacity change from 0 to 4096 [ 199.278473][ T30] audit: type=1400 audit(1779237865.570:281): avc: denied { ioctl } for pid=2236 comm="syz.3.560" path="socket:[22191]" dev="sockfs" ino=22191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.501065][ T2241] EXT4-fs (loop3): Test dummy encryption mode enabled [ 200.507917][ T2241] EXT4-fs (loop3): Ignoring removed oldalloc option [ 200.571680][ T2251] FAULT_INJECTION: forcing a failure. [ 200.571680][ T2251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.586095][ T2251] CPU: 1 PID: 2251 Comm: syz.2.554 Not tainted syzkaller #0 [ 200.593514][ T2251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.603584][ T2251] Call Trace: [ 200.606883][ T2251] [ 200.609829][ T2251] __dump_stack+0x21/0x30 [ 200.614184][ T2251] dump_stack_lvl+0x110/0x170 [ 200.618880][ T2251] ? show_regs_print_info+0x20/0x20 [ 200.624106][ T2251] dump_stack+0x15/0x20 [ 200.628277][ T2251] should_fail+0x3c1/0x510 [ 200.632719][ T2251] should_fail_usercopy+0x1a/0x20 [ 200.637760][ T2251] _copy_to_user+0x20/0x90 [ 200.642190][ T2251] simple_read_from_buffer+0xe9/0x160 [ 200.647578][ T2251] proc_fail_nth_read+0x1a6/0x220 [ 200.652624][ T2251] ? proc_fault_inject_write+0x310/0x310 [ 200.658279][ T2251] ? security_file_permission+0x83/0xa0 [ 200.663942][ T2251] ? proc_fault_inject_write+0x310/0x310 [ 200.669598][ T2251] vfs_read+0x28d/0xc40 [ 200.673767][ T2251] ? kernel_read+0x1f0/0x1f0 [ 200.678408][ T2251] ? _raw_spin_unlock+0x4d/0x70 [ 200.683288][ T2251] ? finish_task_switch+0x16b/0x780 [ 200.688500][ T2251] ? __switch_to_asm+0x3a/0x60 [ 200.693291][ T2251] ? __schedule+0xb76/0x14c0 [ 200.697917][ T2251] ? __kasan_check_read+0x11/0x20 [ 200.702955][ T2251] ? __fdget_pos+0x2d9/0x380 [ 200.707564][ T2251] ksys_read+0x149/0x250 [ 200.711830][ T2251] ? vfs_write+0xfd0/0xfd0 [ 200.716268][ T2251] ? __kasan_check_write+0x14/0x20 [ 200.721408][ T2251] ? switch_fpu_return+0x15d/0x2c0 [ 200.726532][ T2251] __x64_sys_read+0x7b/0x90 [ 200.731052][ T2251] x64_sys_call+0x96d/0x9a0 [ 200.735578][ T2251] do_syscall_64+0x4c/0xa0 [ 200.740014][ T2251] ? clear_bhb_loop+0x50/0xa0 [ 200.744699][ T2251] ? clear_bhb_loop+0x50/0xa0 [ 200.749391][ T2251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.755300][ T2251] RIP: 0033:0x7f25c6a0168e [ 200.759745][ T2251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.779388][ T2251] RSP: 002b:00007f25c5458fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.787824][ T2251] RAX: ffffffffffffffda RBX: 00007f25c54596c0 RCX: 00007f25c6a0168e [ 200.795809][ T2251] RDX: 000000000000000f RSI: 00007f25c54590a0 RDI: 0000000000000005 [ 200.803792][ T2251] RBP: 00007f25c5459090 R08: 0000000000000000 R09: 0000000000000000 [ 200.811783][ T2251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.819765][ T2251] R13: 00007f25c6cba218 R14: 00007f25c6cba180 R15: 00007ffe36e50858 [ 200.827766][ T2251] [ 200.856606][ T2241] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 200.864867][ T2241] System zones: 0-5 [ 200.889578][ T2241] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 201.108824][ T30] audit: type=1400 audit(1779237867.430:282): avc: denied { read } for pid=2258 comm="syz.3.563" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.131819][ T1879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.194577][ T30] audit: type=1400 audit(1779237867.460:283): avc: denied { open } for pid=2258 comm="syz.3.563" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.219327][ T30] audit: type=1400 audit(1779237867.480:284): avc: denied { ioctl } for pid=2258 comm="syz.3.563" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.264699][ T2262] loop3: detected capacity change from 0 to 128 [ 201.630821][ T2262] loop3: detected capacity change from 0 to 40427 [ 201.640939][ T2267] loop2: detected capacity change from 0 to 512 [ 201.654834][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 201.673926][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 201.684431][ T1879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.699941][ T2262] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 201.707598][ T2262] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 201.716624][ T2262] F2FS-fs (loop3): invalid crc value [ 201.722081][ T2262] F2FS-fs (loop3): invalid crc value [ 201.727538][ T2262] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 201.884914][ T1879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.894837][ T2267] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 201.904863][ T1879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.918626][ T2267] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 201.928190][ T30] audit: type=1326 audit(1779237868.250:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2270 comm="syz.1.567" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90c0fce59 code=0x7ffc0000 [ 201.953429][ T1879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.962624][ T1879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.970984][ T30] audit: type=1326 audit(1779237868.250:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2270 comm="syz.1.567" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90c0fce59 code=0x7ffc0000 [ 201.981380][ T1879] usb 1-1: config 0 descriptor?? [ 202.002469][ T2272] loop1: detected capacity change from 0 to 512 [ 202.016626][ T30] audit: type=1326 audit(1779237868.280:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2270 comm="syz.1.567" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ff90c0fce59 code=0x7ffc0000 [ 202.074847][ T2272] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 202.159935][ T30] audit: type=1400 audit(1779237868.480:288): avc: denied { mount } for pid=2266 comm="syz.2.566" name="/" dev="ramfs" ino=22260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 202.201521][ T30] audit: type=1400 audit(1779237868.480:289): avc: denied { remount } for pid=2266 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 202.221323][ T30] audit: type=1400 audit(1779237868.480:290): avc: denied { mounton } for pid=2266 comm="syz.2.566" path="/109/file0" dev="ramfs" ino=22260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 202.264339][ T432] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.440602][ T2279] loop4: detected capacity change from 0 to 256 [ 202.513674][ T2279] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 302.774227][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 302.781254][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P311/1:b..l [ 302.789102][ C1] (detected by 1, t=10002 jiffies, g=13237, q=271) [ 302.795711][ C1] task:udevd state:R running task stack:23096 pid: 311 ppid: 101 flags:0x00004000 [ 302.806546][ C1] Call Trace: [ 302.809841][ C1] [ 302.812795][ C1] __schedule+0xb6e/0x14c0 [ 302.817248][ C1] ? release_firmware_map_entry+0x190/0x190 [ 302.823161][ C1] ? __schedule+0xb76/0x14c0 [ 302.827773][ C1] preempt_schedule_irq+0xaa/0x120 [ 302.832997][ C1] ? __cond_resched+0xd0/0xd0 [ 302.837690][ C1] ? __kasan_kmalloc+0xec/0x110 [ 302.842558][ C1] ? __kmalloc_track_caller+0x13c/0x2c0 [ 302.848210][ C1] ? kmemdup_nul+0x2c/0xa0 [ 302.852647][ C1] ? security_context_to_sid_core+0xda/0x5d0 [ 302.858647][ C1] irqentry_exit_cond_resched+0x29/0x30 [ 302.864211][ C1] irqentry_exit+0x37/0x40 [ 302.868645][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 302.873780][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 302.879291][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 302.885411][ C1] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 8c 7f 7f 05 48 89 de e8 c4 7c 3e 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d f0 92 98 7e 65 8b 15 f1 92 98 [ 302.905070][ C1] RSP: 0018:ffffc900078275f8 EFLAGS: 00000246 [ 302.911183][ C1] RAX: ffffffff822d1f77 RBX: 0000000000000000 RCX: ffff888127428000 [ 302.919178][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.927181][ C1] RBP: ffffc900078276f0 R08: ffff88810c800000 R09: 0000000000000000 [ 302.935177][ C1] R10: 000000000000003a R11: 0000000000000000 R12: ffff88810c644808 [ 302.943203][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.951207][ C1] ? mls_context_to_sid+0xc7/0x990 [ 302.956347][ C1] ? mls_context_to_sid+0x152/0x990 [ 302.961561][ C1] ? mls_context_isvalid+0x3b0/0x3b0 [ 302.966890][ C1] ? symtab_search+0x34d/0x3b0 [ 302.971701][ C1] string_to_context_struct+0x480/0x670 [ 302.977288][ C1] security_context_to_sid_core+0x38d/0x5d0 [ 302.983215][ C1] ? security_context_to_sid+0x50/0x50 [ 302.988690][ C1] ? avc_has_perm_noaudit+0x490/0x490 [ 302.994079][ C1] security_context_to_sid+0x3a/0x50 [ 302.999385][ C1] selinux_inode_setxattr+0x730/0xc00 [ 303.004783][ C1] ? selinux_inode_getattr+0x3e0/0x3e0 [ 303.010259][ C1] ? preempt_schedule_irq+0xca/0x120 [ 303.015553][ C1] ? __cond_resched+0xd0/0xd0 [ 303.020239][ C1] ? irqentry_exit_cond_resched+0x29/0x30 [ 303.025972][ C1] ? xattr_permission+0x480/0x550 [ 303.031023][ C1] security_inode_setxattr+0xca/0x180 [ 303.036428][ C1] __vfs_setxattr_locked+0x9a/0x230 [ 303.041652][ C1] vfs_setxattr+0x167/0x2e0 [ 303.046200][ C1] ? xattr_permission+0x550/0x550 [ 303.051238][ C1] ? __kasan_check_write+0x14/0x20 [ 303.056368][ C1] ? _copy_from_user+0x95/0xd0 [ 303.061151][ C1] setxattr+0x36c/0x390 [ 303.065335][ C1] ? path_setxattr+0x290/0x290 [ 303.070130][ C1] ? debug_smp_processor_id+0x17/0x20 [ 303.075537][ C1] ? __mnt_want_write+0x1e6/0x260 [ 303.080584][ C1] ? mnt_want_write+0x20b/0x2e0 [ 303.085454][ C1] path_setxattr+0x147/0x290 [ 303.090066][ C1] ? simple_xattr_list_add+0x120/0x120 [ 303.095545][ C1] __x64_sys_lsetxattr+0xc2/0xe0 [ 303.100499][ C1] x64_sys_call+0x8cc/0x9a0 [ 303.105022][ C1] do_syscall_64+0x4c/0xa0 [ 303.109465][ C1] ? clear_bhb_loop+0x50/0xa0 [ 303.114167][ C1] ? clear_bhb_loop+0x50/0xa0 [ 303.118863][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.124780][ C1] RIP: 0033:0x7f6ed409a57a [ 303.129218][ C1] RSP: 002b:00007fffe0ffb068 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 303.137751][ C1] RAX: ffffffffffffffda RBX: 0000564077958fb0 RCX: 00007f6ed409a57a [ 303.145761][ C1] RDX: 0000564077958fb0 RSI: 00007f6ed471329c RDI: 0000564077967130 [ 303.153754][ C1] RBP: 000056407771b8d0 R08: 0000000000000000 R09: 0000000000000003 [ 303.161742][ C1] R10: 000000000000001b R11: 0000000000000246 R12: 0000564077967130 [ 303.169742][ C1] R13: 0000000000000001 R14: 00005640433416d7 R15: 00007fffe0ffc320 [ 303.177736][ C1] [ 303.180809][ C1] rcu: rcu_preempt kthread starved for 10038 jiffies! g13237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 303.192030][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 303.202015][ C1] rcu: RCU grace-period kthread stack dump: [ 303.207912][ C1] task:rcu_preempt state:R running task stack:28424 pid: 14 ppid: 2 flags:0x00004000 [ 303.218718][ C1] Call Trace: [ 303.222015][ C1] [ 303.224959][ C1] __schedule+0xb6e/0x14c0 [ 303.229401][ C1] ? release_firmware_map_entry+0x190/0x190 [ 303.235327][ C1] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 303.241176][ C1] ? __mod_timer+0x7da/0xb50 [ 303.245790][ C1] schedule+0x11e/0x1e0 [ 303.249970][ C1] schedule_timeout+0x159/0x340 [ 303.254847][ C1] ? console_conditional_schedule+0x30/0x30 [ 303.260761][ C1] ? update_process_times+0x200/0x200 [ 303.266162][ C1] ? prepare_to_swait_event+0x308/0x320 [ 303.271727][ C1] rcu_gp_fqs_loop+0x2ae/0xf80 [ 303.276511][ C1] ? __kasan_check_write+0x14/0x20 [ 303.281651][ C1] ? debug_smp_processor_id+0x17/0x20 [ 303.287048][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 303.292183][ C1] ? rcu_gp_init+0xc00/0xc00 [ 303.296800][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 303.302090][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 303.306743][ C1] rcu_gp_kthread+0x9b/0x360 [ 303.311366][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 303.316079][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 303.320784][ C1] ? __kasan_check_read+0x11/0x20 [ 303.325835][ C1] ? __kthread_parkme+0xac/0x200 [ 303.330790][ C1] kthread+0x411/0x500 [ 303.334877][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 303.339572][ C1] ? kthread_blkcg+0xd0/0xd0 [ 303.344174][ C1] ret_from_fork+0x1f/0x30 [ 303.348608][ C1] [ 303.351643][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 303.357999][ C1] Sending NMI from CPU 1 to CPUs 0: [ 303.363229][ C0] NMI backtrace for cpu 0 [ 303.363243][ C0] CPU: 0 PID: 2274 Comm: syz.2.568 Not tainted syzkaller #0 [ 303.363260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.363270][ C0] RIP: 0010:clockevents_program_event+0x239/0x300 [ 303.363290][ C0] Code: 00 74 19 e8 a9 0f 0c 00 48 89 df e8 e1 00 00 00 eb 14 e8 9a 0f 0c 00 44 89 f0 eb 0a e8 90 0f 0c 00 b8 c2 ff ff ff 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 0f 0c 00 0f 0b eb e3 e8 6e [ 303.363305][ C0] RSP: 0018:ffffc90000e97968 EFLAGS: 00000082 [ 303.363320][ C0] RAX: 0000000000000000 RBX: ffff8881f7026e80 RCX: 0000000000080000 [ 303.363332][ C0] RDX: ffffc9000237f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 303.363344][ C0] RBP: ffffc90000e97990 R08: ffff8881101b2780 R09: 0000000000000002 [ 303.363356][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff8881f7026ebc [ 303.363367][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: fffffffffffff9fc [ 303.363378][ C0] FS: 00007f25c549b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 303.363411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.363422][ C0] CR2: 00007f8d97a69540 CR3: 0000000113689000 CR4: 00000000003506b0 [ 303.363436][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.363445][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.363456][ C0] Call Trace: [ 303.363461][ C0] [ 303.363466][ C0] tick_program_event+0xa3/0x120 [ 303.363484][ C0] hrtimer_reprogram+0x388/0x430 [ 303.363503][ C0] hrtimer_start_range_ns+0xa76/0xc00 [ 303.363523][ C0] common_hrtimer_rearm+0xf6/0x100 [ 303.363541][ C0] posixtimer_rearm+0x13d/0x330 [ 303.363558][ C0] dequeue_signal+0x173/0x440 [ 303.363576][ C0] get_signal+0x696/0x1480 [ 303.363595][ C0] arch_do_signal_or_restart+0xdf/0x11c0 [ 303.363612][ C0] ? __ia32_sys_rt_sigreturn+0x639/0x730 [ 303.363630][ C0] ? load_gs_index+0xc0/0xc0 [ 303.363645][ C0] ? get_sigframe_size+0x10/0x10 [ 303.363664][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 303.363678][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 303.363694][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 303.363710][ C0] do_syscall_64+0x58/0xa0 [ 303.363727][ C0] ? clear_bhb_loop+0x50/0xa0 [ 303.363742][ C0] ? clear_bhb_loop+0x50/0xa0 [ 303.363756][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.363775][ C0] RIP: 0033:0x7f25c6a40e57 [ 303.363794][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 303.363807][ C0] RSP: 002b:00007f25c549b028 EFLAGS: 00000246 [ 303.363819][ C0] RAX: 00000000000000ca RBX: 00007f25c6cb9fa0 RCX: 00007f25c6a40e59 [ 303.363830][ C0] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 303.363840][ C0] RBP: 00007f25c6ad6d6f R08: 0000000000000000 R09: 0000000000000000 [ 303.363850][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.363859][ C0] R13: 00007f25c6cba038 R14: 00007f25c6cb9fa0 R15: 00007ffe36e50858 [ 303.363874][ C0] [ 428.814303][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 225s! [ 428.822996][ C0] Showing busy workqueues and worker pools: [ 428.828928][ C0] workqueue events: flags=0x0 [ 428.833635][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 428.833685][ C0] pending: usb_gadget_state_work, destroy_super_work, destroy_super_work, kfree_rcu_monitor, bpf_prog_free_deferred, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.863706][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.863755][ C0] pending: vmstat_shepherd, xfrm_state_gc_task, psi_avgs_work, destroy_list_workfn [ 428.864061][ C0] workqueue events_long: flags=0x0 [ 428.886510][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=8/256 refcnt=9 [ 428.886571][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 428.886803][ C0] workqueue events_unbound: flags=0x2 [ 428.916882][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=6/512 refcnt=8 [ 428.916927][ C0] in-flight: 10:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn, 1784:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn [ 428.917089][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.917201][ C0] workqueue events_power_efficient: flags=0x80 [ 428.953487][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 428.953544][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, check_lifetime, gc_worker [ 428.953814][ C0] workqueue rcu_gp: flags=0x8 [ 428.977797][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.977841][ C0] pending: process_srcu [ 428.977872][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.995245][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.995289][ C0] pending: vmstat_update [ 428.995317][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.995355][ C0] pending: vmstat_update [ 428.995383][ C0] workqueue writeback: flags=0x4a [ 429.024985][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 429.025028][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 429.025169][ C0] workqueue kblockd: flags=0x18 [ 429.043441][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 429.043486][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 429.043630][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 429.043668][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 429.043708][ C0] workqueue usb_hub_wq: flags=0x4 [ 429.080173][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 429.080226][ C0] in-flight: 1879:hub_event hub_event, 432:hub_event hub_event [ 429.080423][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.101390][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.101445][ C0] pending: work_fn [ 429.101570][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.118956][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 429.119004][ C0] pending: addrconf_verify_work [ 429.119098][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.137078][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.137128][ C0] pending: wg_packet_encrypt_worker [ 429.137162][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.137213][ C0] pending: wg_packet_encrypt_worker [ 429.137239][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.168901][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.168952][ C0] pending: wg_packet_encrypt_worker [ 429.168986][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.169026][ C0] pending: wg_packet_encrypt_worker [ 429.169054][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.200737][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.200787][ C0] pending: wg_packet_encrypt_worker [ 429.200818][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.200857][ C0] pending: wg_packet_encrypt_worker [ 429.200885][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.232303][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.232348][ C0] pending: wg_packet_handshake_send_worker [ 429.232379][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.251662][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.251711][ C0] pending: wg_packet_encrypt_worker [ 429.251745][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.251783][ C0] pending: wg_packet_encrypt_worker [ 429.251812][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.283247][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.283293][ C0] pending: wg_packet_handshake_send_worker [ 429.283326][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.302011][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302060][ C0] pending: wg_packet_encrypt_worker [ 429.302094][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302148][ C0] pending: wg_packet_encrypt_worker [ 429.302180][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.333682][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.333734][ C0] pending: wg_packet_handshake_send_worker [ 429.333768][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.352473][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.352528][ C0] pending: wg_packet_encrypt_worker [ 429.352561][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.352601][ C0] pending: wg_packet_encrypt_worker [ 429.352629][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.384097][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.384142][ C0] pending: wg_packet_handshake_send_worker [ 429.397549][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.402842][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.402887][ C0] pending: wg_packet_encrypt_worker [ 429.402919][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.402958][ C0] pending: wg_packet_encrypt_worker [ 429.402986][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.434857][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.434924][ C0] pending: wg_packet_encrypt_worker [ 429.434963][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.435002][ C0] pending: wg_packet_encrypt_worker [ 429.435031][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.466472][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.466516][ C0] pending: wg_packet_handshake_send_worker [ 429.466547][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.485216][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.485264][ C0] pending: wg_packet_encrypt_worker [ 429.485296][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.485337][ C0] pending: wg_packet_encrypt_worker [ 429.485364][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.516959][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.517008][ C0] pending: wg_packet_handshake_send_worker [ 429.517042][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.535711][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.535759][ C0] pending: wg_packet_encrypt_worker [ 429.535793][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.535833][ C0] pending: wg_packet_encrypt_worker [ 429.535860][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.567544][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.567605][ C0] pending: wg_packet_encrypt_worker [ 429.567642][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.567691][ C0] pending: wg_packet_encrypt_worker [ 429.567717][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.599418][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.599470][ C0] pending: wg_packet_encrypt_worker [ 429.599503][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.599538][ C0] pending: wg_packet_encrypt_worker [ 429.599563][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.631274][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.631321][ C0] pending: wg_packet_encrypt_worker [ 429.631380][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.631419][ C0] pending: wg_packet_encrypt_worker [ 429.631447][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.663170][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.663216][ C0] pending: wg_packet_encrypt_worker [ 429.663246][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.663285][ C0] pending: wg_packet_encrypt_worker [ 429.663311][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.695300][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.695359][ C0] pending: wg_packet_encrypt_worker [ 429.695393][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.695432][ C0] pending: wg_packet_encrypt_worker [ 429.695464][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=227s workers=11 idle: 802 332 582 561 26 39 308 60 899 [ 429.695558][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=226s workers=9 idle: 232 8 591 803 491 763 45