last executing test programs: 52.330693985s ago: executing program 3 (id=520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 51.962550216s ago: executing program 3 (id=525): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4850, &(0x7f00000006c0)={0x0, 0x3637, 0x1000, 0x1, 0x17b}, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000740)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x6], 0x2) socket$inet6(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000010101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES16, @ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x122b, &(0x7f0000001980)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x26}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='rodir,nocase,rodir,uni_xlate=1,shortname=lower,iocharset=cp1251,nonumtail=0,shortname=winnt,check=strict,codepage=850,nonumtail=0,iocharset=cp1250,iocharset=euc-jp,sys_immutable,utf8=0,utf8=1\x00\x00id=', @ANYBLOB=',uni_xlate=1,audit,\x00', @ANYRES16=r0, @ANYRESOCT=r5], 0x3, 0x279, &(0x7f00000008c0)="$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") ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0xf006, 0x8000000, 0x1, 0xffffffffffffffff, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 51.772001802s ago: executing program 3 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x40, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x800}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 50.873151284s ago: executing program 3 (id=533): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f00000013c0)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@fat=@tz_utc}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d5, &(0x7f0000000b80)="$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") r0 = socket$inet6(0xa, 0x80002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'wlan1\x00', @random="3b74efe04316"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000043000100f0ffffbf00000000020000000e0001006172705f636163686500000008000400080000000c00068008000100", @ANYRES32=r4], 0x48}}, 0x2000c804) r5 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x4fca4, 0x1, 0x2000003, 0x226}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) socket(0x5, 0x80000, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/ipt_hashlimit/lo\x00', 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) read$FUSE(r13, &(0x7f0000004100)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) 50.26398759s ago: executing program 3 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0xee00, 0xee01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='loginuid\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r3, &(0x7f0000001640)=[{&(0x7f0000000080)=""/4093, 0xffd}], 0x1, 0x3f, 0x6a76) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 50.26354373s ago: executing program 3 (id=535): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 50.198949342s ago: executing program 32 (id=535): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 48.405788364s ago: executing program 5 (id=554): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x9, 0xfb, 0x8, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x1, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2424, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]}) 48.354453704s ago: executing program 5 (id=555): r0 = syz_io_uring_setup(0x52ab, &(0x7f0000000180)={0x0, 0x100573, 0x1, 0x3, 0x115}, &(0x7f0000000340), &(0x7f0000011000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002640)={0x2e, 0x16, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x1, 0x7ca, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1, 0x2000008, 0x10010, 0xffffffffffffffff, 0x10000000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e1f, @remote}, 0x10) sendfile(r1, r1, 0x0, 0x1000000201005) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff6b) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f00000000c0)={0x10, 0x3, 0x13}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 48.354135194s ago: executing program 5 (id=556): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="62ef8f6fb5367a00ade356652833e20a091d97cb42e2ff11d75fc545e5dfc58954c199e66ca0985b4a8eea3bd4e8a2fc268c73e3d5c2a5551bcd189d4ee1ae8fcb12a28f91171f89f761f4fefb0747976b4505f671ba06ff49bd4dfa06362cd5ab5f4f7c00188992c2c75e2fffc760a7308b5e7a809057acd5ce430927a2a716b269", 0x82, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f00000001c0)=[{0x9, 0xf0, 0x9, 0x5f}, {0x0, 0xa, 0x3, 0x3}, {0x3, 0xf7, 0x7, 0x401}, {0x8000, 0x6, 0x6, 0x7}, {0x4, 0x8, 0xc, 0x5}, {0x4, 0x5, 0x7, 0x2}]}) syz_clone3(&(0x7f0000001400)={0x80820280, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r0, 0x80, 0x7fffffffffffffff, r1) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FIBMAP(r2, 0x301, &(0x7f0000000100)=0x3) 48.348912215s ago: executing program 5 (id=557): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000380)={0x20071023}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180), 0x0) read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x208010, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x30a, &(0x7f0000000840)="$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") bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 47.85359122s ago: executing program 5 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x140482, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@empty, 0x0, 0x8, 0x2, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x400000000001, 0x1, 0x4003, 0x2, 0x200000000000000, 0x40, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x8000000, 0x6e6bb3, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140)={r4}, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24044015) r5 = socket$packet(0x11, 0x2, 0x300) accept4(r5, 0x0, 0x0, 0x80800) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x35c, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x5, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400a41, 0x0, 0x8}, 0x18) r9 = openat(r8, &(0x7f0000000140)='./file0\x00', 0x2e8100, 0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x7, 0x11, 0x1, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x40442, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, r9, 0x0, '\x00', 0x0, r8, 0x5, 0x4, 0x3}, 0x50) 47.672713535s ago: executing program 5 (id=560): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000640)={0x84, 0x8, 0x80, 0x4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000780)={[{@debug}, {@data_err_abort}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@noquota}, {@noquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpquota}, {@dax_inode}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_read_part_table(0x637, &(0x7f0000000000)="$eJzs3D9oXWUYB+DfSe8996aFpopTl1RnsdjZ1ICkl0qnSrcuVUFCxSFOFUtuNIsZMjg4uxQhS1sXDR0c1CJO4hQ6qBVXQYpKLdIj555z/0QQxLaD8DxDzvd95/3e93tzTsac8L82l25SjIa9dJIcf/lvERsZB6Rfxyepuu29czsrp05XVVUVdcz5dPPk54evJ+m0W/qTNFVVrU8mJ3Plw4M33iuG3Z1bddEvtw7Uy/PNMY4kTx8q+6M0MxlSVfsO1nuYvwf+m6tLN4tis2xnT/16fzm59svK2d0zW+9ff7FdXk++Surn/079Xoyj38rFYxc6o2H9lN+czftbcymnK9PHPZ/OvjMMN9cG28tLq3vjhaODnU9fe+6PYzdSncjXZWdufKOY5iuT4YO3X/e/UL/925eWVvcGl+cnN5744PEvsthO7lRVjtQlH8voT2fxIVQGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRuLp0c+HdzbXBdrK6N+i1qytnd89slUleeHU0n8u147O7DrTXi7lwu76uZy358ZN0Z4OK+ke32d5dbtZ+WKyeGQ064/q9+WZwaWl1b3DvYHL72ftHB82u5LMT03Lrk8y7eb4d3a0ao8nGPzXZlqgWmrhv7s32X3SStcH2qP7ln4pOf7T+cTGcHLM+yOu9vNI0U90t271/TtsAAAAAAAAAAAAAAAAAAACAB7Jy6vQbd9rx+X6Sn9+eq8dVr/kv9+JgsS/+u14yfzK50k8xXE5y66Xfy28Pb33ffjpgmF6GSQ59tHGu3VLuSzD5RECRqnyUnfFv/BUAAP//PZZ8Jw==") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) io_setup(0xcd08, &(0x7f0000000680)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xeff, &(0x7f0000000180)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r5 = open(&(0x7f0000000080)='./file1\x00', 0x14e142, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r7, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) 47.548727908s ago: executing program 33 (id=560): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000640)={0x84, 0x8, 0x80, 0x4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000780)={[{@debug}, {@data_err_abort}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@noquota}, {@noquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpquota}, {@dax_inode}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_read_part_table(0x637, &(0x7f0000000000)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) io_setup(0xcd08, &(0x7f0000000680)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xeff, &(0x7f0000000180)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r5 = open(&(0x7f0000000080)='./file1\x00', 0x14e142, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r7, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) 1.94244378s ago: executing program 0 (id=1120): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x200}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$eJzs3V2IXGcdB+D/mdlJ87E1aWy1rbFZDbWB0JnNZhMS8cISP2pNakXxIhTCkp3OhszurNkJdKeCLd4UBRG8EUGo2AsrooHcVEptL1q8UVDqB5UaF1QQoWilIII6cuZjMzaTbHQ/Du55Hji773nP2Xnf2eE358yc95wTQG6NpT+SiNGIuBQRO7uz/7nCWPdX69DFmXRKot3+1J+TznrThy7O9Fft/92O9MdIxNaI2H08iX2lq9tdWGydm6rXq+d785Xm7HxlYbF179nZqVq1Vp07fHTy2MSRyaOTa/dcx3+y/bY/3P3g0tMv/e0f3/jVke+l/R3tLRt8HmtlLMZ6/5NS3DJQP5JEPLDWjWWk2H2p4+6BumQkww5xw9rt3d9NX7+3R8S+Tv53RjG6L96rzz38153xi/uz7iOwftp9wxe/0QY2rUJnHzgplCOiWy4UyuXuPvytsb1Qbyw0DzzSuDA33d1X3hWlwiNn69Xx3meFXVFK0vmDnfKV+Ym3zB+K6OwDP1nc1pkvn2nUpzf6zQ7oGI24fOmzZ7bseEv+/1js5h/YvNL8//zlZ19Iy28Ws+4NsJHS/H/nzdmPh/xD7sg/5Jf8Q37JP+SX/EN+yT/kl/xDfsk/5Jf8Q37JP+RXP/8PnTwZD5082W71zn+fa9TOnpuZPzYxXp69cKZ8pnF+vlxrNGqdM3ZmV37ceqMxf3AiLjxaaVYXmpWFxdbp2caFuebpznn9p6tDLgUAZODU0tYHbtn74qtJRDz+/m2dKbWlt1xWYXNrt5PI+hxkIBs++kN+uVQb5JfP+ECywvKt11pQX/u+ABujkHUHgMzcc4fjf5BXvv+H/PL9P+SXfXzA9/+QP77/h/wavcb9v24euHfXeES8LSJ+XCzd1L/XF/D/5fYdV8qjEZcvf+szleX7cCsoKCgsF7J8pwI2wpXQZ90TICvThy7O9Kc1fNjrHlZ4vraGLQH/tdfv6w4CSnPf6k3dJSPLxwZK6zRO6LUnI8biB795av9MMZ2i9z60Dk0BQzz+RETcPmz7n3SODezqrbe7u1rcGhG3RcQ7IuKdq2z7a59M8/9ydbBO/mHj3Gj+74iIuyLizoh4V0TsiYh3r7Ltn11K8//LbYN18g/58LmXsu4BkJWPPZt1D4CsnDLGAHLr249l3QMgK899P+seAFn58itZ9wDy7cX7ImJ82PG/Qud4f1+pd13Am3rXAtgWEdsjYkfvHMKbe+cI7hw4ZriS05+IGIu7fjhY5/gfbJz++L/WVeP/Csvj/4oRsXcVbTz/gdEvDauf2pPm/+nH+uP/0iltvz8WEFhfrz8RcefQ/CfLY36TSHMa8Z7/sY2xzy89M6z+lQfTxy39VP4hG+1vRrwvhue/Ly1VmrPzlYXF1r2d+3jXqnOHj04emzgyeXSy0rlESKV/oZAhTvzljQPD6l+bSPP/9cPyD9lIt//br5H/wf3/966ijeNf/eKpYfWjv0vzv+eF6+e/8Kctyac78/37Ejw61WyePxixJTlxdf3EKjoKm1w/I/0Mpfnfv2/45//dvb9Jt//HI+JD6f5CRPwzIv4VER+OiI9ExEcj4v7rtPmVe2pLw+p/+0ya/6fO2f5DNtL8T6+w/U9//30VbRzY/6MvDKv/4N40/+Vf//7EwyPpJP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa29hsXVuql6vnl/HQtbPEQAAAAAAAPLi3wEAAP//wpg1Fg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.358329261s ago: executing program 2 (id=1163): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f00000003c0)) 1.324471178s ago: executing program 2 (id=1165): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x8586, 0x4) 1.018358546s ago: executing program 0 (id=1175): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400f50060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 991.576371ms ago: executing program 2 (id=1177): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000480)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 938.407341ms ago: executing program 2 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000010000001", @ANYBLOB], 0x50) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 938.303052ms ago: executing program 0 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 925.579234ms ago: executing program 2 (id=1182): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000240)=0xfffffffd, 0x4) 920.807315ms ago: executing program 0 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x54, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10001}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 894.3874ms ago: executing program 1 (id=1184): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x6, 0xfff1}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x68c6, 0x2}}}}]}, 0x44}}, 0x48850) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 893.4904ms ago: executing program 1 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 842.48744ms ago: executing program 0 (id=1186): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x200}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) getdents64(0xffffffffffffffff, 0x0, 0x0) 841.69414ms ago: executing program 1 (id=1187): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 808.577656ms ago: executing program 1 (id=1188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x12a}, 0x0) 782.846521ms ago: executing program 1 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_IE={0x37, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x3c000, 0x8}}, @link_id={0x65, 0x12, {@random="d7c932db1d9f", @device_a, @broadcast}}, @dsss={0x3, 0x1, 0xf4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 670.511262ms ago: executing program 1 (id=1190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) 284.825676ms ago: executing program 6 (id=1196): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x1, 0x1, 0x0, 0x0, 0x4], 0x4}, {0x2, [0x4, 0x0, 0x1, 0x0, 0x2, 0x2], 0x3, 0x4}}}}, {{@ip={@loopback, @local, 0xff, 0xff, 'gretap0\x00', 'ip_vti0\x00', {}, {0xff}, 0x73, 0x1, 0xa27a1cb5d3c76af6}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0xf62, 0x200, 0x1c00000, 'syz0\x00', 'syz1\x00', {0x835e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 284.443606ms ago: executing program 6 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 273.952428ms ago: executing program 6 (id=1200): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd1064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) unshare(0x20000400) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 232.856016ms ago: executing program 6 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c800000000020106000000000000000002f10000340001801400018008000100010203040800482675150f081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100070000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) 232.047716ms ago: executing program 6 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}, {0x85, 0x0, 0x0, 0x86}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 223.312658ms ago: executing program 6 (id=1204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60de000000580640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="6018"], 0x0) 90.294533ms ago: executing program 4 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) 70.879586ms ago: executing program 4 (id=1210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1d0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'veth1_to_bond\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x84, 0x6, 0x3, 0x4e}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x4}, [0x0, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xffffffff], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x2f, 0x77, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3a0) 56.90914ms ago: executing program 4 (id=1211): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x48) 56.09185ms ago: executing program 4 (id=1212): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="fda9b6dfe744d9e21e5071ff33e4fa7f1327f10fb2fe046397952a53fcdf40c84706f32c4fc139f40ead2c60e0bc0c92972e3801c0170b3a18003ac0054bb4c3559593494965bced86f6d4377cec199ac0", 0x51, 0x3b00, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.53556ms ago: executing program 4 (id=1213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) 2.43695ms ago: executing program 4 (id=1214): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x208002, 0x4) 1.65456ms ago: executing program 2 (id=1215): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 0s ago: executing program 0 (id=1216): unshare(0x20000400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): 46] loop0: detected capacity change from 0 to 256 [ 140.200307][ T456] udevd[456]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 140.218367][ T451] udevd[451]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 141.276428][ T2055] loop1: detected capacity change from 0 to 1024 [ 141.286993][ T2055] EXT4-fs: Ignoring removed oldalloc option [ 141.293115][ T2055] EXT4-fs: Ignoring removed oldalloc option [ 141.303652][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 141.354284][ T2055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.367114][ T2055] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 141.484904][ T2056] device wireguard0 entered promiscuous mode [ 141.659911][ T1560] usb 2-1: USB disconnect, device number 8 [ 141.846311][ T2079] loop0: detected capacity change from 0 to 1024 [ 141.860665][ T2076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 141.869890][ T2076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 141.902879][ T2076] loop2: detected capacity change from 0 to 8192 [ 141.913432][ T2076] FAT-fs (loop2): bogus logical sector size 65280 [ 141.919915][ T2076] FAT-fs (loop2): Can't find a valid FAT filesystem [ 141.953146][ T2079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.346054][ T288] EXT4-fs (loop3): unmounting filesystem. [ 142.365313][ T2100] ip_tables: iptables: counters copy to user failed while replacing table [ 142.375628][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 142.375642][ T28] audit: type=1400 audit(1790830471.097:291): avc: denied { append } for pid=2099 comm="syz.3.354" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.414183][ T2102] loop3: detected capacity change from 0 to 2048 [ 142.431574][ T2102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.440219][ T2102] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.455495][ T28] audit: type=1400 audit(1790830471.177:292): avc: denied { write } for pid=2101 comm="syz.3.355" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.456130][ T2102] fs-verity: sha512 using implementation "sha512-avx2" [ 142.478071][ T28] audit: type=1400 audit(1790830471.177:293): avc: denied { ioctl } for pid=2101 comm="syz.3.355" path="/58/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.533351][ T2102] syz.3.355 (2102) used greatest stack depth: 21728 bytes left [ 142.543363][ T288] EXT4-fs (loop3): unmounting filesystem. [ 142.579859][ T28] audit: type=1400 audit(1790830471.297:294): avc: denied { write } for pid=2107 comm="syz.3.357" path="socket:[22744]" dev="sockfs" ino=22744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.603861][ T2108] xt_ecn: cannot match TCP bits for non-tcp packets [ 142.611711][ T28] audit: type=1400 audit(1790830471.337:295): avc: denied { getopt } for pid=2107 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.819392][ T2111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 144.858625][ T289] EXT4-fs (loop0): unmounting filesystem. [ 145.005322][ T2111] device wireguard0 entered promiscuous mode [ 145.023954][ T2113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.324226][ T2128] loop4: detected capacity change from 0 to 4096 [ 145.355008][ T2128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.379748][ T2128] EXT4-fs (loop4): Test dummy encryption mode enabled [ 145.403043][ T2128] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 145.424275][ T2128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.615770][ T2142] can0: slcan on ttyS3. [ 145.720434][ T2138] loop0: detected capacity change from 0 to 4096 [ 145.789371][ T2138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.837521][ T2138] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.000692][ T2138] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 146.025634][ T2138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.046682][ T28] audit: type=1400 audit(1790830474.767:296): avc: denied { map } for pid=2151 comm="syz.3.368" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.360399][ T2127] can0 (unregistered): slcan off ttyS3. [ 147.561561][ T2158] can0: slcan on ttyS3. [ 150.071843][ T294] EXT4-fs (loop4): unmounting filesystem. [ 150.140951][ T2137] can0 (unregistered): slcan off ttyS3. [ 150.166537][ T2170] loop4: detected capacity change from 0 to 4096 [ 150.184938][ T2170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.185047][ T289] EXT4-fs (loop0): unmounting filesystem. [ 150.194953][ T2170] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.240990][ T2170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 150.276557][ T2170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.538731][ T2195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 152.446363][ T2199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.653808][ T2200] can0: slcan on ttyS3. [ 154.601585][ T2222] loop1: detected capacity change from 0 to 512 [ 154.610712][ T2169] can0 (unregistered): slcan off ttyS3. [ 154.637948][ T2218] loop9: detected capacity change from 0 to 7 [ 154.657050][ T28] audit: type=1326 audit(1790830483.377:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.2.382" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f758c19e159 code=0x0 [ 154.657825][ T1441] loop: Write error at byte offset 1, length 3584. [ 154.688098][ T294] EXT4-fs (loop4): unmounting filesystem. [ 154.752115][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 154.761636][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 154.826007][ T2230] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 154.926898][ T2240] loop3: detected capacity change from 0 to 256 [ 154.943251][ T2240] exfat: Unknown parameter '' [ 154.963103][ T2238] loop4: detected capacity change from 0 to 4096 [ 154.994224][ T2222] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 155.004266][ T2222] FAT-fs (loop1): Filesystem has been set read-only [ 155.013834][ T28] audit: type=1400 audit(1790830483.737:298): avc: denied { setopt } for pid=2220 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.033494][ T2238] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.042329][ T2238] EXT4-fs (loop4): Test dummy encryption mode enabled [ 155.049909][ T2238] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 155.059794][ T2238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.110268][ T2247] loop1: detected capacity change from 0 to 4096 [ 155.130588][ T2247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.139310][ T2247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 155.149099][ T2247] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 155.158137][ T2247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.917470][ T2251] can0: slcan on ttyS3. [ 158.779694][ T639] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.882010][ T2257] loop3: detected capacity change from 0 to 4096 [ 158.908217][ T2257] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.932232][ T2257] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.953032][ T2257] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 158.962508][ T2257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.990514][ T2252] can0 (unregistered): slcan off ttyS3. [ 158.997129][ T2253] can0: slcan on ttyS3. [ 159.035848][ T287] EXT4-fs (loop1): unmounting filesystem. [ 159.110994][ T2235] can0 (unregistered): slcan off ttyS3. [ 159.153740][ T294] EXT4-fs (loop4): unmounting filesystem. [ 159.161184][ T288] EXT4-fs (loop3): unmounting filesystem. [ 159.258745][ T2278] loop2: detected capacity change from 0 to 1024 [ 159.279741][ T2278] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 159.423571][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.705149][ T2317] loop0: detected capacity change from 0 to 256 [ 159.743092][ T2317] exfat: Unknown parameter '' [ 159.940373][ T1499] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 160.080399][ T639] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.131109][ T1499] usb 5-1: not running at top speed; connect to a high speed hub [ 160.146243][ T2322] loop2: detected capacity change from 0 to 4096 [ 160.153849][ T1499] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.176284][ T2322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.186609][ T1499] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 160.197893][ T2322] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.205063][ T1499] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.219806][ T1499] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.226949][ T2322] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 160.235357][ T1499] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 160.245512][ T2322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.256329][ T1499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.268052][ T1499] usb 5-1: config 0 descriptor?? [ 160.273199][ T639] usb 1-1: Using ep0 maxpacket: 16 [ 160.289258][ T639] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.309554][ T639] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.315044][ T2292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.331704][ T639] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 160.346141][ T639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.363253][ T639] usb 1-1: SerialNumber: syz [ 160.381907][ T639] usb 1-1: 0:2 : does not exist [ 160.476002][ T2332] can0: slcan on ttyS3. [ 160.528614][ T2340] loop1: detected capacity change from 0 to 1024 [ 160.536021][ T2340] EXT4-fs: Ignoring removed orlov option [ 160.560781][ T2340] EXT4-fs: Ignoring removed bh option [ 160.577856][ T2340] EXT4-fs: Invalid want_extra_isize 2288 [ 160.616800][ T28] audit: type=1400 audit(1790830489.337:299): avc: denied { read write } for pid=2339 comm="syz.1.409" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 160.653714][ T2354] loop1: detected capacity change from 0 to 1024 [ 160.680869][ T28] audit: type=1400 audit(1790830489.367:300): avc: denied { open } for pid=2339 comm="syz.1.409" path="/92/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 160.707706][ T451] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.759295][ T28] audit: type=1400 audit(1790830489.367:301): avc: denied { ioctl } for pid=2339 comm="syz.1.409" path="/92/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 160.801840][ T28] audit: type=1400 audit(1790830489.377:302): avc: denied { mounton } for pid=2339 comm="syz.1.409" path="/92/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 160.827337][ T28] audit: type=1400 audit(1790830489.457:303): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.856699][ T28] audit: type=1400 audit(1790830489.457:304): avc: denied { set_context_mgr } for pid=2362 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 160.903226][ T28] audit: type=1400 audit(1790830489.457:305): avc: denied { map } for pid=2362 comm="syz.1.412" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.932347][ T2371] loop3: detected capacity change from 0 to 1024 [ 160.943928][ T2368] loop1: detected capacity change from 0 to 1024 [ 160.949147][ T28] audit: type=1400 audit(1790830489.457:306): avc: denied { call } for pid=2362 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 160.983029][ T2368] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 161.000649][ T2371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.001645][ T28] audit: type=1400 audit(1790830489.457:307): avc: denied { transfer } for pid=2362 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.600383][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 161.799215][ T288] EXT4-fs (loop3): unmounting filesystem. [ 161.894591][ T2380] loop0: detected capacity change from 0 to 4096 [ 161.905164][ T2380] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.940388][ T2380] EXT4-fs (loop0): Test dummy encryption mode enabled [ 162.002056][ T2380] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 162.032060][ T2380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 162.041170][ T2374] can0 (unregistered): slcan off ttyS3. [ 162.049554][ T639] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 162.062716][ T2387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.064411][ T639] usb 1-1: USB disconnect, device number 7 [ 162.081418][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.131404][ T2393] loop3: detected capacity change from 0 to 4096 [ 162.204767][ T2393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.227994][ T291] EXT4-fs (loop2): unmounting filesystem. [ 162.235688][ T2393] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.269738][ T2393] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 162.306179][ T2393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.385755][ T1499] usb 5-1: string descriptor 0 read error: -71 [ 162.402429][ T1499] usbhid 5-1:0.0: can't add hid device: -71 [ 162.423851][ T1499] usbhid: probe of 5-1:0.0 failed with error -71 [ 162.510486][ T2410] can0: slcan on ttyS3. [ 163.010544][ T2391] can0 (unregistered): slcan off ttyS3. [ 163.249980][ T1499] usb 5-1: USB disconnect, device number 9 [ 163.250831][ T288] EXT4-fs (loop3): unmounting filesystem. [ 163.404164][ T2440] loop4: detected capacity change from 0 to 1024 [ 163.416062][ T2440] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 163.440471][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.548866][ T2447] loop3: detected capacity change from 0 to 2048 [ 163.595981][ T2445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.651832][ T2447] loop3: p1 < > p4 [ 163.662285][ T24] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 163.711349][ T2447] loop3: p4 size 722688 extends beyond EOD, truncated [ 163.815675][ T2447] netlink: 140 bytes leftover after parsing attributes in process `syz.3.427'. [ 163.905196][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.991018][ T451] udevd[451]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 164.038458][ T465] udevd[465]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 164.065831][ T24] usb 3-1: Product: syz [ 164.120494][ T24] usb 3-1: Manufacturer: syz [ 164.833864][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.957360][ T24] scsi host1: uas [ 164.968350][ C1] usb 3-1: stat urb: no pending cmd for uas-tag 0 [ 165.105328][ T289] EXT4-fs (loop0): unmounting filesystem. [ 165.159932][ T2491] netlink: 108 bytes leftover after parsing attributes in process `syz.1.437'. [ 165.164403][ T2489] loop0: detected capacity change from 0 to 256 [ 165.186379][ T2489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 165.208650][ T2494] tap0: tun_chr_ioctl cmd 1074025677 [ 165.219490][ T2494] tap0: linktype set to 769 [ 165.783078][ T2497] loop2: detected capacity change from 0 to 1024 [ 165.789743][ T2497] EXT4-fs: Ignoring removed oldalloc option [ 165.795675][ T2497] EXT4-fs: Ignoring removed oldalloc option [ 165.802592][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 165.901342][ T28] audit: type=1326 audit(1790830494.617:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.433" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fb9e159 code=0x7fc00000 [ 165.931353][ T2497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.217798][ T2500] device wireguard0 entered promiscuous mode [ 167.244724][ T2497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.253989][ T2497] EXT4-fs (loop2): unmounting filesystem. [ 167.281029][ T2508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.442'. [ 167.290548][ T2508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 167.319753][ T2508] loop4: detected capacity change from 0 to 8192 [ 167.327366][ T2508] FAT-fs (loop4): bogus logical sector size 65280 [ 167.333864][ T2508] FAT-fs (loop4): Can't find a valid FAT filesystem [ 167.342843][ T2508] loop4: detected capacity change from 0 to 256 [ 167.376680][ T2480] loop2: detected capacity change from 0 to 512 [ 167.399943][ T2480] EXT4-fs: dax option not supported [ 167.439687][ T2513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 167.631678][ T451] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.757519][ T2513] device wireguard1 entered promiscuous mode [ 168.040393][ T28] audit: type=1400 audit(1790830496.727:309): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.528600][ T2525] loop1: detected capacity change from 0 to 4096 [ 168.552367][ T2525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.561768][ T2519] loop4: detected capacity change from 0 to 1024 [ 168.572797][ C1] usb 3-1: cmd cmplt err -71 [ 168.572801][ T6] usb 3-1: USB disconnect, device number 5 [ 168.589276][ T6] scsi 1:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 168.597138][ T6] scsi 1:0:0:0: tag#12 CDB: opcode=0x12 12 00 00 00 24 00 [ 168.621971][ T2525] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.629551][ T2519] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 168.649534][ T2525] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 168.675466][ T465] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.693366][ T2525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.711882][ T2541] loop2: detected capacity change from 0 to 4096 [ 168.720801][ T2541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.736413][ T2541] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.757966][ T2541] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 168.766953][ T2541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.817254][ T2549] SELinux: security_context_str_to_sid () failed with errno=-22 [ 169.457147][ T2549] netlink: 165 bytes leftover after parsing attributes in process `syz.3.453'. [ 169.562697][ T2556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'. [ 169.575211][ T2556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 169.609212][ T2556] loop3: detected capacity change from 0 to 8192 [ 169.619722][ T2556] FAT-fs (loop3): bogus logical sector size 65280 [ 169.626218][ T2556] FAT-fs (loop3): Can't find a valid FAT filesystem [ 169.650577][ T287] EXT4-fs (loop1): unmounting filesystem. [ 169.681672][ T2556] loop3: detected capacity change from 0 to 256 [ 169.706530][ T28] audit: type=1400 audit(1790830498.427:310): avc: denied { write } for pid=2559 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 169.777470][ T2558] can0: slcan on ttyS3. [ 169.782413][ T28] audit: type=1400 audit(1790830498.467:311): avc: denied { name_bind } for pid=2561 comm="syz.3.456" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 169.831491][ T28] audit: type=1400 audit(1790830498.537:312): avc: denied { read } for pid=2567 comm="syz.0.458" path="socket:[25791]" dev="sockfs" ino=25791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.922033][ T28] audit: type=1400 audit(1790830498.587:313): avc: denied { map } for pid=2567 comm="syz.0.458" path="socket:[25802]" dev="sockfs" ino=25802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.030495][ T28] audit: type=1400 audit(1790830498.587:314): avc: denied { read write } for pid=2567 comm="syz.0.458" path="socket:[25802]" dev="sockfs" ino=25802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.098870][ T28] audit: type=1400 audit(1790830498.587:315): avc: denied { setopt } for pid=2567 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.200960][ T2602] loop1: detected capacity change from 0 to 4096 [ 170.227652][ T2602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.253296][ T2602] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.260922][ T2540] can0 (unregistered): slcan off ttyS3. [ 170.272277][ T2602] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 170.286902][ T2602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.310417][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 170.651701][ T2622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 172.849580][ T28] audit: type=1400 audit(1790830501.567:316): avc: denied { ioctl } for pid=2626 comm="syz.3.468" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25975 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.910846][ T2631] loop4: detected capacity change from 0 to 1024 [ 172.965655][ T2631] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 173.077014][ T287] EXT4-fs (loop1): unmounting filesystem. [ 173.079017][ T24] usb 5-1: device descriptor read/all, error -71 [ 173.310383][ T1560] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.500371][ T1560] usb 4-1: Using ep0 maxpacket: 16 [ 173.513248][ T1560] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7 [ 173.531950][ T1560] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 173.550361][ T1560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.568531][ T1560] usb 4-1: Product: syz [ 173.572928][ T1560] usb 4-1: Manufacturer: syz [ 173.577534][ T1560] usb 4-1: SerialNumber: syz [ 173.594354][ T291] EXT4-fs (loop2): unmounting filesystem. [ 173.740368][ T2202] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.772118][ T2663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 173.787699][ T2663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 173.798806][ T1560] usb 4-1: unit 3 not found! [ 173.803638][ T1560] usb 4-1: unit 4 not found! [ 173.809254][ T28] audit: type=1400 audit(1790830502.527:317): avc: denied { read } for pid=2662 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.820474][ T1560] usb 4-1: USB disconnect, device number 8 [ 173.932424][ T2202] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 173.941565][ T2202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 173.949633][ T2202] usb 1-1: Product: syz [ 173.954024][ T2202] usb 1-1: Manufacturer: syz [ 174.031302][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.120389][ T6] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 174.294127][ T2669] loop1: detected capacity change from 0 to 4096 [ 174.301377][ T2669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.316667][ T6] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.320542][ T2669] EXT4-fs (loop1): Test dummy encryption mode enabled [ 174.331787][ T6] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 174.347126][ T6] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.358061][ T2669] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 174.360685][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.373474][ T2669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.383750][ T6] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 174.393019][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.404794][ T6] usb 3-1: config 0 descriptor?? [ 174.414023][ T2664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.587362][ T2202] scsi host1: uas [ 174.597215][ C1] usb 1-1: stat urb: no pending cmd for uas-tag 0 [ 175.207843][ T2691] loop3: detected capacity change from 0 to 2048 [ 175.266737][ T2693] loop4: detected capacity change from 0 to 4096 [ 175.293708][ T2693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.318706][ T2693] EXT4-fs (loop4): Test dummy encryption mode enabled [ 175.330992][ T28] audit: type=1400 audit(1790830503.967:318): avc: denied { remount } for pid=2689 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.358458][ T2693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 175.376414][ T2693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.402094][ T465] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.463670][ T287] EXT4-fs (loop1): unmounting filesystem. [ 175.529676][ T2700] loop1: detected capacity change from 0 to 1024 [ 175.539691][ T2700] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 175.668031][ T2703] can0: slcan on ttyS3. [ 176.421069][ T28] audit: type=1400 audit(1790830505.147:319): avc: denied { sys_module } for pid=2706 comm="syz.3.494" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 176.442775][ T2692] can0 (unregistered): slcan off ttyS3. [ 176.460620][ T2708] Invalid ELF header len 7 [ 176.539673][ T28] audit: type=1400 audit(1790830505.187:320): avc: denied { module_load } for pid=2706 comm="syz.3.494" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 176.541174][ T294] EXT4-fs (loop4): unmounting filesystem. [ 176.635606][ T6] usb 3-1: string descriptor 0 read error: -71 [ 176.652077][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 176.660217][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 176.679277][ T6] usb 3-1: USB disconnect, device number 6 [ 176.707550][ T2714] mmap: syz.1.497 (2714): VmData 29192192 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 176.777206][ T2739] loop2: detected capacity change from 0 to 4096 [ 176.787550][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 176.812118][ T28] audit: type=1326 audit(1790830505.537:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.3.494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f8b9e159 code=0x7fc00000 [ 176.870391][ T2739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.879112][ T2739] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.882861][ T2750] loop3: detected capacity change from 0 to 4096 [ 176.911568][ T2739] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 176.923261][ T2750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.940987][ T2750] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.958334][ T2739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.013906][ T2750] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 177.031111][ T2750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.051630][ T2767] loop1: detected capacity change from 0 to 1024 [ 177.087498][ T2767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.433224][ T2775] loop4: detected capacity change from 0 to 2048 [ 177.662670][ T2776] netlink: 140 bytes leftover after parsing attributes in process `syz.4.510'. [ 179.074232][ T2775] loop4: p1 < > p4 [ 179.080608][ T2775] loop4: p4 size 722688 extends beyond EOD, truncated [ 179.484676][ T287] EXT4-fs (loop1): unmounting filesystem. [ 179.522595][ T465] udevd[465]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 179.533789][ T456] udevd[456]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 179.586323][ T2786] loop4: detected capacity change from 0 to 512 [ 179.630942][ T2786] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.725869][ T2786] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.513: inode has both inline data and extents flags [ 179.759042][ T291] EXT4-fs (loop2): unmounting filesystem. [ 179.800829][ T2786] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.513: couldn't read orphan inode 15 (err -117) [ 179.820689][ T2792] futex_wake_op: syz.2.514 tries to shift op by 144; fix this program [ 179.840483][ T28] audit: type=1326 audit(1790830508.537:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 179.926406][ T28] audit: type=1326 audit(1790830508.537:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 179.995645][ T2786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.060547][ T28] audit: type=1326 audit(1790830508.537:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.116261][ T2786] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 180.197412][ T28] audit: type=1326 audit(1790830508.537:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.236694][ T28] audit: type=1326 audit(1790830508.537:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.322766][ T28] audit: type=1326 audit(1790830508.537:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.348429][ T60] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 180.363030][ T28] audit: type=1326 audit(1790830508.537:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.393945][ T28] audit: type=1326 audit(1790830508.537:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.444631][ T28] audit: type=1326 audit(1790830508.537:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.480780][ T28] audit: type=1326 audit(1790830508.537:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.514" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c19e159 code=0x7ffc0000 [ 180.508648][ T288] EXT4-fs (loop3): unmounting filesystem. [ 180.533534][ T2812] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 180.542703][ T2812] netlink: 72 bytes leftover after parsing attributes in process `syz.2.519'. [ 180.552362][ C1] usb 1-1: cmd cmplt err -71 [ 180.562365][ T1499] usb 1-1: USB disconnect, device number 8 [ 180.568824][ T1499] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 180.576651][ T1499] scsi 1:0:0:0: tag#24 CDB: opcode=0x12 12 00 00 00 24 00 [ 180.617645][ T2815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.521'. [ 180.627998][ T2815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 180.665028][ T2815] loop2: detected capacity change from 0 to 8192 [ 180.675317][ T2815] FAT-fs (loop2): bogus logical sector size 65280 [ 180.681851][ T2815] FAT-fs (loop2): Can't find a valid FAT filesystem [ 180.840103][ T2817] loop0: detected capacity change from 0 to 256 [ 180.881032][ T2817] exFAT-fs (loop0): failed to load upcase table [ 180.897971][ T2817] exFAT-fs (loop0): failed to recognize exfat type [ 180.919016][ T294] EXT4-fs (loop4): unmounting filesystem. [ 180.945235][ T2819] loop2: detected capacity change from 0 to 40427 [ 180.956797][ T2819] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 180.961856][ T2826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.525'. [ 180.975133][ T2826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 181.000220][ T2819] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 181.012247][ T2826] loop3: detected capacity change from 0 to 8192 [ 181.019151][ T2826] FAT-fs (loop3): bogus logical sector size 65280 [ 181.025656][ T2826] FAT-fs (loop3): Can't find a valid FAT filesystem [ 181.033543][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 181.044665][ T60] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.045213][ T2819] F2FS-fs (loop2): invalid crc value [ 181.057680][ T60] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 181.071965][ T60] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.085054][ T456] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.097057][ T2826] loop3: detected capacity change from 0 to 256 [ 181.104181][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.111045][ T60] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 181.120405][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.131475][ T2819] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 181.145022][ T60] usb 2-1: config 0 descriptor?? [ 181.161879][ T2783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.165835][ T2833] loop0: detected capacity change from 0 to 4096 [ 181.212732][ T2833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.240672][ T2833] EXT4-fs (loop0): Test dummy encryption mode enabled [ 181.260274][ T2833] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 181.268597][ T2819] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 181.272093][ T2833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.276026][ T2819] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.358980][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.381326][ T2819] syz.2.523: attempt to access beyond end of device [ 181.381326][ T2819] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 181.469659][ T291] syz-executor: attempt to access beyond end of device [ 181.469659][ T291] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.826976][ T2844] loop2: detected capacity change from 0 to 4096 [ 181.844510][ T2844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.859598][ T2844] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.902090][ T2844] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 181.916025][ T2844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.933823][ T2845] can0: slcan on ttyS3. [ 182.049399][ T2853] loop3: detected capacity change from 0 to 256 [ 182.090795][ T2832] can0 (unregistered): slcan off ttyS3. [ 182.102831][ T2853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 182.131115][ T2853] ip_tables: iptables: counters copy to user failed while replacing table [ 182.350036][ T288] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 182.384271][ T288] FAT-fs (loop3): Filesystem has been set read-only [ 182.411920][ T288] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 182.740571][ T60] usb 2-1: string descriptor 0 read error: -71 [ 182.763954][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 182.769930][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 182.791390][ T60] usb 2-1: USB disconnect, device number 9 [ 182.800962][ T291] EXT4-fs (loop2): unmounting filesystem. [ 182.857918][ T2890] loop2: detected capacity change from 0 to 1024 [ 182.902223][ T2890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.993750][ T2896] can0: slcan on ttyS3. [ 183.020822][ T2892] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.027874][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.041068][ T2892] device bridge_slave_0 entered promiscuous mode [ 183.054958][ T2892] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.062312][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.072610][ T2892] device bridge_slave_1 entered promiscuous mode [ 183.169238][ T289] EXT4-fs (loop0): unmounting filesystem. [ 183.221405][ T2895] can0 (unregistered): slcan off ttyS3. [ 183.271878][ T319] device bridge_slave_1 left promiscuous mode [ 183.278872][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.289176][ T319] device bridge_slave_0 left promiscuous mode [ 183.300823][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.374418][ T319] device veth1_macvtap left promiscuous mode [ 183.386380][ T319] device veth0_vlan left promiscuous mode [ 183.461545][ T2921] futex_wake_op: syz.1.546 tries to shift op by 144; fix this program [ 183.555222][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.612651][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.623414][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.656038][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.713952][ T291] EXT4-fs (loop2): unmounting filesystem. [ 183.734115][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.779282][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.786387][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.839490][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.876242][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.914307][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.921423][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.941119][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.989767][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.000253][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.017753][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.030749][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.048369][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.064137][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.095577][ T2892] device veth0_vlan entered promiscuous mode [ 184.105553][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.116692][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.149691][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.161377][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.169017][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.178633][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.187644][ T2892] device veth1_macvtap entered promiscuous mode [ 184.206009][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.215526][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.227244][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.261060][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.271662][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.289772][ T2952] loop4: detected capacity change from 0 to 4096 [ 184.317853][ T2952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.327218][ T2952] EXT4-fs (loop4): Test dummy encryption mode enabled [ 184.337560][ T2952] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 184.368833][ T2952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.410188][ T2954] EXT4-fs (loop5): Test dummy encryption mode enabled [ 184.420376][ T639] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 184.442961][ T2954] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 184.455759][ T2954] netlink: 376 bytes leftover after parsing attributes in process `syz.5.536'. [ 184.471766][ T2892] EXT4-fs (loop5): unmounting filesystem. [ 184.489583][ T2965] binder_alloc: binder_alloc_mmap_handler: 2964 200000ffc000-200001000000 already mapped failed -16 [ 184.515631][ T2968] can0: slcan on ttyS3. [ 184.560650][ T2966] can0 (unregistered): slcan off ttyS3. [ 184.572067][ T2977] EXT4-fs: Ignoring removed oldalloc option [ 184.602279][ T2977] EXT4-fs (loop5): Test dummy encryption mode enabled [ 184.612979][ T639] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.628053][ T2977] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.638207][ T639] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 184.649605][ T639] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.660635][ T320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.670125][ T2977] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.557: bad orphan inode 131083 [ 184.682085][ T639] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.688709][ T639] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 184.697984][ T2977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 184.706886][ T639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.717128][ T2977] capability: warning: `syz.5.557' uses deprecated v2 capabilities in a way that may be insecure [ 184.781443][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.802063][ T639] usb 3-1: config 0 descriptor?? [ 184.821619][ T2943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.846548][ T2892] EXT4-fs (loop5): unmounting filesystem. [ 185.270464][ T320] usb 1-1: Using ep0 maxpacket: 32 [ 185.283367][ T2956] EXT4-fs: Ignoring removed nobh option [ 185.301210][ T2956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.315661][ T294] EXT4-fs (loop4): unmounting filesystem. [ 185.315744][ T2956] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.550: ea_inode file size=0 entry size=6 [ 185.335557][ T2956] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.348725][ T2956] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.550: iget: bad extra_isize 90 (inode size 256) [ 185.362550][ T2956] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.550: error while reading EA inode 11 err=-117 [ 185.377522][ T2956] EXT4-fs (loop0): 1 orphan inode deleted [ 185.387567][ T2956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.403799][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 185.403814][ T28] audit: type=1400 audit(1790830514.127:358): avc: denied { write } for pid=2986 comm="syz.4.562" name="vlan0" dev="proc" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 185.471527][ T320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.493558][ T320] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 185.510546][ T320] usb 1-1: can't read configurations, error -71 [ 185.596946][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.604205][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.612209][ T2995] device bridge_slave_0 entered promiscuous mode [ 185.621459][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.628527][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.636319][ T2995] device bridge_slave_1 entered promiscuous mode [ 185.728315][ T3010] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 185.736135][ T3010] FAT-fs (loop1): Filesystem has been set read-only [ 186.001141][ T3014] random: crng reseeded on system resumption [ 186.119566][ T289] EXT4-fs (loop0): unmounting filesystem. [ 186.184433][ T8] device bridge_slave_1 left promiscuous mode [ 186.195102][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.232903][ T8] device bridge_slave_0 left promiscuous mode [ 186.262908][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.304870][ T8] device veth1_macvtap left promiscuous mode [ 186.333431][ T8] device veth0_vlan left promiscuous mode [ 186.633321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.642551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.667729][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.676260][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.684620][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.691680][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.699678][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.708437][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.716689][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.722210][ T3020] set_capacity_and_notify: 4 callbacks suppressed [ 186.722227][ T3020] loop0: detected capacity change from 0 to 4096 [ 186.723735][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.741339][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.752854][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.763484][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.771749][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.782270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.791167][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.799682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.808599][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.816741][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.831430][ T3020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.838718][ T639] usb 3-1: string descriptor 0 read error: -71 [ 186.840571][ T3020] EXT4-fs (loop0): Test dummy encryption mode enabled [ 186.855656][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.859604][ T639] usbhid 3-1:0.0: can't add hid device: -71 [ 186.872026][ T2995] device veth0_vlan entered promiscuous mode [ 186.885668][ T2995] device veth1_macvtap entered promiscuous mode [ 186.901186][ T3020] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 186.903620][ T639] usbhid: probe of 3-1:0.0 failed with error -71 [ 186.919692][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.921748][ T639] usb 3-1: USB disconnect, device number 7 [ 186.928626][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.939615][ T3020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.940266][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.957729][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.967354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.975265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.986424][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.995093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.003610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.139733][ T3031] loop6: detected capacity change from 0 to 256 [ 187.273248][ T28] audit: type=1400 audit(1790830515.997:359): avc: denied { bind } for pid=3046 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.323100][ T28] audit: type=1400 audit(1790830516.007:360): avc: denied { setopt } for pid=3046 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.348514][ T28] audit: type=1400 audit(1790830516.007:361): avc: denied { ioctl } for pid=3046 comm="syz.4.582" path="socket:[27181]" dev="sockfs" ino=27181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.401243][ T3031] syz.6.561 (3031) used greatest stack depth: 20960 bytes left [ 187.548083][ T3054] loop4: detected capacity change from 0 to 4096 [ 187.566806][ T3054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.620532][ T3054] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.832129][ T3054] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 187.935393][ T3054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.423289][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 188.642022][ T3054] can0: slcan on ttyS3. [ 188.720143][ T3073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 188.925602][ T3073] device wireguard0 entered promiscuous mode [ 189.683581][ T3053] can0 (unregistered): slcan off ttyS3. [ 189.722705][ T294] EXT4-fs (loop4): unmounting filesystem. [ 189.837473][ T28] audit: type=1400 audit(1790830518.557:362): avc: denied { nlmsg_write } for pid=3082 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 189.959298][ T28] audit: type=1400 audit(1790830518.557:363): avc: denied { audit_write } for pid=3082 comm="syz.4.590" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 190.028991][ T28] audit: type=1107 audit(1790830518.557:364): pid=3082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 190.078725][ T3068] loop1: detected capacity change from 0 to 40427 [ 190.173128][ T3117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.595'. [ 190.234991][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 190.246408][ T3068] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 190.260438][ T3068] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 190.274745][ T3068] F2FS-fs (loop1): invalid crc value [ 190.280247][ T3109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.596'. [ 190.348880][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 190.390845][ T3127] device wireguard0 entered promiscuous mode [ 190.458629][ T3117] loop4: detected capacity change from 0 to 8192 [ 190.485126][ T3068] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 190.500074][ T3109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 190.564092][ T3117] FAT-fs (loop4): bogus logical sector size 65280 [ 190.742824][ T3117] FAT-fs (loop4): Can't find a valid FAT filesystem [ 190.990058][ T3108] loop4: detected capacity change from 0 to 256 [ 191.161259][ T3068] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 191.179075][ T3068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.184203][ T3137] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 191.204153][ T3113] loop2: detected capacity change from 0 to 8192 [ 191.217250][ T287] syz-executor: attempt to access beyond end of device [ 191.217250][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.223118][ T3137] loop6: detected capacity change from 0 to 512 [ 191.259116][ T3113] FAT-fs (loop2): bogus logical sector size 65280 [ 191.272983][ T3113] FAT-fs (loop2): Can't find a valid FAT filesystem [ 191.285297][ T3137] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.6.599: corrupted xattr block 95 [ 191.350937][ T3143] loop1: detected capacity change from 0 to 4096 [ 191.364437][ T289] EXT4-fs (loop0): unmounting filesystem. [ 191.372442][ T3143] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.374021][ T3137] EXT4-fs (loop6): Remounting filesystem read-only [ 191.388014][ T3137] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.599: bg 0: block 7: invalid block bitmap [ 191.410425][ T3143] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.417512][ T3137] EXT4-fs (loop6): Remounting filesystem read-only [ 191.435170][ T3137] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 191.436478][ T3109] loop2: detected capacity change from 0 to 256 [ 191.450941][ T3137] EXT4-fs (loop6): Remounting filesystem read-only [ 191.457789][ T3137] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2918: inode #11: comm syz.6.599: corrupted xattr block 95 [ 191.470493][ T3143] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 191.486227][ T3137] EXT4-fs (loop6): Remounting filesystem read-only [ 191.493053][ T3143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 191.497117][ T3137] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 191.515891][ T3137] EXT4-fs (loop6): 1 orphan inode deleted [ 191.573978][ T3137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 191.628151][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 191.676337][ T3156] netlink: 'syz.0.605': attribute type 12 has an invalid length. [ 191.685190][ T3156] netlink: 'syz.0.605': attribute type 29 has an invalid length. [ 191.693028][ T3156] netlink: 260 bytes leftover after parsing attributes in process `syz.0.605'. [ 191.745825][ T3164] loop0: detected capacity change from 0 to 4096 [ 191.763095][ T3164] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.780223][ T3165] netem: change failed [ 191.793180][ T3164] EXT4-fs (loop0): Test dummy encryption mode enabled [ 191.801752][ T3167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.609'. [ 191.807788][ T3164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 191.829029][ T3164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.837600][ T3167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.609'. [ 192.071922][ T3173] can0: slcan on ttyS3. [ 194.858042][ T3183] loop6: detected capacity change from 0 to 512 [ 194.879634][ T3183] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.897978][ T3183] EXT4-fs (loop6): 1 truncate cleaned up [ 194.903919][ T3183] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 195.062949][ T287] EXT4-fs (loop1): unmounting filesystem. [ 195.074158][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 195.101070][ T3163] can0 (unregistered): slcan off ttyS3. [ 195.144976][ T289] EXT4-fs (loop0): unmounting filesystem. [ 195.176204][ T28] audit: type=1400 audit(1790830523.897:365): avc: denied { setopt } for pid=3201 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 195.526306][ T3210] loop6: detected capacity change from 0 to 2048 [ 196.157728][ T3212] __nla_validate_parse: 1 callbacks suppressed [ 196.157747][ T3212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 196.182906][ T3205] netlink: 140 bytes leftover after parsing attributes in process `syz.6.616'. [ 196.251410][ T3212] device wireguard0 entered promiscuous mode [ 196.293387][ T3210] loop6: p1 < > p4 [ 197.106374][ T28] audit: type=1326 audit(1790830525.827:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3206 comm="syz.4.622" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fb9e159 code=0x7fc00000 [ 197.131350][ T3210] loop6: p4 size 722688 extends beyond EOD, truncated [ 197.160042][ T3205] loop6: detected capacity change from 0 to 256 [ 197.184024][ T3216] loop4: detected capacity change from 0 to 256 [ 197.204932][ T451] udevd[451]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 197.217923][ T465] udevd[465]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 197.244471][ T3216] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 197.320390][ T298] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.347791][ T3230] loop1: detected capacity change from 0 to 512 [ 197.371058][ T3230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.388257][ T3230] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #11: comm syz.1.629: casefold flag without casefold feature [ 197.406177][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.419646][ T28] audit: type=1326 audit(1790830526.137:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3206 comm="syz.4.622" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f547fb9e159 code=0x7fc00000 [ 197.451826][ T3230] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.629: couldn't read orphan inode 11 (err -117) [ 197.470967][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.475198][ T3224] loop0: detected capacity change from 0 to 40427 [ 197.484125][ T3230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.493688][ T3224] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 197.506493][ T3224] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 197.515811][ T3224] F2FS-fs (loop0): invalid crc value [ 197.535711][ T3224] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 197.566901][ T298] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 197.568398][ T3224] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 197.576091][ T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 197.583070][ T3224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.591098][ T298] usb 3-1: Product: syz [ 197.602853][ T298] usb 3-1: Manufacturer: syz [ 197.680386][ T1499] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 197.769241][ T3249] syz.0.626: attempt to access beyond end of device [ 197.769241][ T3249] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 197.871972][ T1499] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.880268][ T1499] usb 7-1: not running at top speed; connect to a high speed hub [ 197.890875][ T1499] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 197.899985][ T1499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.908078][ T1499] usb 7-1: Product: syz [ 197.912318][ T1499] usb 7-1: Manufacturer: syz [ 197.916968][ T1499] usb 7-1: SerialNumber: syz [ 197.960424][ T320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.127027][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.136124][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.140708][ T320] usb 5-1: Using ep0 maxpacket: 32 [ 198.297161][ T287] EXT4-fs (loop1): unmounting filesystem. [ 198.305349][ T320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.315014][ T320] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 198.327851][ T320] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 198.340555][ T289] syz-executor: attempt to access beyond end of device [ 198.340555][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.346632][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.359600][ T1499] usb 7-1: MIDIStreaming interface descriptor not found [ 198.371138][ T298] scsi host1: uas [ 198.376743][ T3253] loop1: detected capacity change from 0 to 4096 [ 198.384055][ C0] usb 3-1: stat urb: no pending cmd for uas-tag 0 [ 198.398448][ T320] usb 5-1: Product: syz [ 198.403093][ T320] usb 5-1: Manufacturer: syz [ 198.406481][ T1499] usb 7-1: USB disconnect, device number 2 [ 198.407691][ T320] usb 5-1: SerialNumber: syz [ 198.432969][ T3253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.458396][ T3253] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.467002][ T3253] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 198.475954][ T3253] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.624671][ T3247] netlink: 108 bytes leftover after parsing attributes in process `syz.4.633'. [ 198.636982][ T320] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 198.647918][ T320] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 198.660709][ T451] udevd[451]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.683825][ T320] usb 5-1: USB disconnect, device number 12 [ 198.755615][ T3263] can0: slcan on ttyS3. [ 198.823251][ T3268] loop2: detected capacity change from 0 to 1024 [ 198.848382][ T3268] EXT4-fs: Ignoring removed oldalloc option [ 198.861125][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 198.887934][ T3268] EXT4-fs: Ignoring removed oldalloc option [ 198.906054][ T3268] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.910861][ T451] udevd[451]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.935350][ T3272] device wireguard0 entered promiscuous mode [ 198.981266][ T3268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.028362][ T3268] EXT4-fs (loop2): unmounting filesystem. [ 199.100385][ T1499] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 199.140695][ T3268] loop2: detected capacity change from 0 to 512 [ 199.195491][ T3268] EXT4-fs: dax option not supported [ 199.217478][ T3289] loop4: detected capacity change from 0 to 4096 [ 199.271465][ T3289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.280194][ T3289] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.292976][ T1499] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 199.308666][ T1499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 199.324284][ T1499] usb 7-1: Product: syz [ 199.331909][ T1499] usb 7-1: Manufacturer: syz [ 199.340230][ T3289] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 199.353836][ T3289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.373593][ T3252] can0 (unregistered): slcan off ttyS3. [ 199.856728][ T3316] can0: slcan on ttyS3. [ 199.918684][ T1499] scsi host2: uas [ 199.934392][ C0] usb 7-1: stat urb: no pending cmd for uas-tag 0 [ 200.246258][ T287] EXT4-fs (loop1): unmounting filesystem. [ 200.271511][ T3332] loop6: detected capacity change from 0 to 1024 [ 200.278299][ T3332] EXT4-fs: Ignoring removed oldalloc option [ 200.284257][ T3332] EXT4-fs: Ignoring removed oldalloc option [ 200.294247][ T3332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.403492][ T3332] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 200.412675][ T3332] EXT4-fs (loop6): unmounting filesystem. [ 200.822821][ T3320] loop6: detected capacity change from 0 to 512 [ 200.829410][ T3320] EXT4-fs: dax option not supported [ 200.913752][ T3288] can0 (unregistered): slcan off ttyS3. [ 201.166477][ C0] usb 3-1: cmd cmplt err -71 [ 201.166501][ T320] usb 3-1: USB disconnect, device number 8 [ 201.176961][ T320] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 201.184734][ T320] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 201.200394][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.291589][ T3376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.300304][ T3376] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.367631][ T291] EXT4-fs (loop2): unmounting filesystem. [ 201.402537][ T19] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 201.411869][ T298] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 201.419499][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.419986][ T294] EXT4-fs (loop4): unmounting filesystem. [ 201.427864][ T19] usb 2-1: Product: syz [ 201.437647][ T19] usb 2-1: Manufacturer: syz [ 201.601995][ T3384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 201.615267][ T3384] device wireguard0 entered promiscuous mode [ 201.622537][ T298] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 201.631709][ T298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.639756][ T298] usb 1-1: Product: syz [ 201.644276][ T298] usb 1-1: Manufacturer: syz [ 201.780366][ T320] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 201.867912][ C0] usb 7-1: cmd cmplt err -71 [ 201.867958][ T24] usb 7-1: USB disconnect, device number 3 [ 201.879164][ T24] scsi 2:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 201.886918][ T24] scsi 2:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 201.948635][ T3389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.957750][ T3389] EXT4-fs (loop6): Test dummy encryption mode enabled [ 201.968167][ T320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.976822][ T3389] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 201.984107][ T320] usb 3-1: not running at top speed; connect to a high speed hub [ 201.989227][ T3389] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.002080][ T320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.015601][ T320] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.085398][ T19] scsi host1: uas [ 202.087155][ T320] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 202.093069][ C0] usb 2-1: stat urb: no pending cmd for uas-tag 0 [ 202.103178][ T320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.112907][ T320] usb 3-1: Product: syz [ 202.117163][ T320] usb 3-1: Manufacturer: syz [ 202.122057][ T320] usb 3-1: SerialNumber: syz [ 202.240911][ T3395] can0: slcan on ttyS3. [ 202.906378][ T3399] set_capacity_and_notify: 2 callbacks suppressed [ 202.906430][ T3399] loop0: detected capacity change from 0 to 1024 [ 202.923031][ T3399] EXT4-fs: Ignoring removed oldalloc option [ 202.929094][ T3399] EXT4-fs: Ignoring removed oldalloc option [ 204.981644][ T3399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.030484][ T3388] can0 (unregistered): slcan off ttyS3. [ 205.052301][ T320] usb 3-1: USB disconnect, device number 9 [ 205.102851][ C0] usb 2-1: cmd cmplt err -71 [ 205.107687][ T1499] usb 2-1: USB disconnect, device number 10 [ 205.114251][ T1499] scsi 1:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 205.122075][ T1499] scsi 1:0:0:0: tag#12 CDB: opcode=0x12 12 00 00 00 24 00 [ 205.150187][ T298] scsi host2: uas [ 205.158764][ C0] usb 1-1: stat urb: no pending cmd for uas-tag 0 [ 205.202132][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 205.209581][ T3399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.225700][ T3399] EXT4-fs (loop0): unmounting filesystem. [ 205.315569][ T3398] loop0: detected capacity change from 0 to 512 [ 205.322504][ T3398] EXT4-fs: dax option not supported [ 205.363741][ T451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.437989][ T3437] loop2: detected capacity change from 0 to 256 [ 205.517269][ T3441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 205.539500][ T28] audit: type=1400 audit(1790830534.257:368): avc: denied { read write } for pid=3447 comm="syz.6.663" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.539770][ T3449] FAULT_INJECTION: forcing a failure. [ 205.539770][ T3449] name failslab, interval 1, probability 0, space 0, times 0 [ 205.576618][ T3449] CPU: 0 PID: 3449 Comm: syz.6.663 Not tainted syzkaller #0 [ 205.583923][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.594027][ T3449] Call Trace: [ 205.597313][ T3449] [ 205.600249][ T3449] __dump_stack+0x21/0x24 [ 205.600492][ T3454] FAULT_INJECTION: forcing a failure. [ 205.600492][ T3454] name failslab, interval 1, probability 0, space 0, times 0 [ 205.604608][ T3449] dump_stack_lvl+0x110/0x170 [ 205.621851][ T3449] ? __cfi_dump_stack_lvl+0x8/0x8 [ 205.626878][ T3449] ? vsnprintf+0x189d/0x1990 [ 205.627030][ T28] audit: type=1400 audit(1790830534.257:369): avc: denied { open } for pid=3447 comm="syz.6.663" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.631465][ T3449] dump_stack+0x15/0x24 [ 205.631488][ T3449] should_fail_ex+0x3bf/0x510 [ 205.631507][ T3449] __should_failslab+0xac/0xf0 [ 205.667929][ T3449] should_failslab+0x9/0x20 [ 205.672439][ T3449] __kmem_cache_alloc_node+0x3d/0x2d0 [ 205.677804][ T3449] ? sidtab_sid2str_get+0x137/0x2c0 [ 205.682995][ T3449] ? audit_log_format+0x140/0x140 [ 205.688043][ T3449] ? kasan_save_alloc_info+0x1f/0x30 [ 205.693324][ T3449] ? sidtab_sid2str_get+0x137/0x2c0 [ 205.698526][ T3449] __kmalloc_node_track_caller+0xa1/0x1e0 [ 205.704248][ T3449] kmemdup+0x2b/0x60 [ 205.708148][ T3449] sidtab_sid2str_get+0x137/0x2c0 [ 205.713211][ T3449] security_sid_to_context_core+0x2ac/0x480 [ 205.719123][ T3449] security_sid_to_context+0x33/0x40 [ 205.724419][ T3449] avc_audit_post_callback+0x1db/0x830 [ 205.729889][ T3449] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 205.735877][ T3449] ? __cfi_audit_log_format+0x10/0x10 [ 205.741267][ T3449] ? audit_log_untrustedstring+0xe6/0x100 [ 205.746999][ T3449] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 205.752982][ T3449] common_lsm_audit+0x133f/0x1730 [ 205.758011][ T3449] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 205.764000][ T3449] ? debug_smp_processor_id+0x17/0x20 [ 205.769383][ T3449] ? call_rcu+0x5ae/0xf50 [ 205.773718][ T3449] ? __cfi_common_lsm_audit+0x10/0x10 [ 205.779100][ T3449] ? __cfi_call_rcu+0x10/0x10 [ 205.783791][ T3449] ? __this_cpu_preempt_check+0x13/0x20 [ 205.789355][ T3449] slow_avc_audit+0x1c4/0x240 [ 205.794042][ T3449] ? __cfi_slow_avc_audit+0x10/0x10 [ 205.799246][ T3449] ? avc_denied+0x133/0x1b0 [ 205.803757][ T3449] avc_has_extended_perms+0x943/0xed0 [ 205.809136][ T3449] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 205.815042][ T3449] ? release_firmware_map_entry+0x190/0x190 [ 205.820943][ T3449] ? __futex_queue+0x175/0x300 [ 205.825707][ T3449] ? __cfi___futex_queue+0x10/0x10 [ 205.830827][ T3449] ? futex_wait_setup+0x1c0/0x260 [ 205.835860][ T3449] ? futex_wait+0x5f1/0x900 [ 205.840369][ T3449] ? __cfi_futex_wait+0x10/0x10 [ 205.845217][ T3449] ? ioctl_has_perm+0x1b8/0x4f0 [ 205.850075][ T3449] ioctl_has_perm+0x3a6/0x4f0 [ 205.854770][ T3449] ? has_cap_mac_admin+0x370/0x370 [ 205.859893][ T3449] ? __kasan_slab_free+0x11/0x20 [ 205.864837][ T3449] ? do_futex+0x2e2/0x430 [ 205.869181][ T3449] selinux_file_ioctl+0x3ad/0x4c0 [ 205.874210][ T3449] ? __cfi_do_futex+0x10/0x10 [ 205.878887][ T3449] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 205.884434][ T3449] ? __fget_files+0x2d1/0x330 [ 205.889109][ T3449] security_file_ioctl+0x85/0xc0 [ 205.894052][ T3449] __se_sys_ioctl+0x53/0x1b0 [ 205.898635][ T3449] ? fpregs_restore_userregs+0x128/0x260 [ 205.904260][ T3449] __x64_sys_ioctl+0x7b/0x90 [ 205.908844][ T3449] x64_sys_call+0x58b/0x9a0 [ 205.913347][ T3449] do_syscall_64+0x4c/0xa0 [ 205.917760][ T3449] ? clear_bhb_loop+0x30/0x80 [ 205.922430][ T3449] ? clear_bhb_loop+0x30/0x80 [ 205.927097][ T3449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.932984][ T3449] RIP: 0033:0x7fe05159e159 [ 205.937426][ T3449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.957033][ T3449] RSP: 002b:00007fe052407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.965447][ T3449] RAX: ffffffffffffffda RBX: 00007fe051825fa0 RCX: 00007fe05159e159 [ 205.973409][ T3449] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 205.981370][ T3449] RBP: 00007fe05163506b R08: 0000000000000000 R09: 0000000000000000 [ 205.989339][ T3449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.997302][ T3449] R13: 00007fe051826038 R14: 00007fe051825fa0 R15: 00007ffef30a5238 [ 206.005272][ T3449] [ 206.008332][ T3454] CPU: 1 PID: 3454 Comm: syz.1.664 Not tainted syzkaller #0 [ 206.015621][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.025687][ T3454] Call Trace: [ 206.028968][ T3454] [ 206.031897][ T3454] __dump_stack+0x21/0x24 [ 206.036242][ T3454] dump_stack_lvl+0x110/0x170 [ 206.040936][ T3454] ? __cfi_dump_stack_lvl+0x8/0x8 [ 206.045980][ T3454] dump_stack+0x15/0x24 [ 206.050149][ T3454] should_fail_ex+0x3bf/0x510 [ 206.054839][ T3454] ? security_file_alloc+0x33/0x130 [ 206.060056][ T3454] __should_failslab+0xac/0xf0 [ 206.064837][ T3454] should_failslab+0x9/0x20 [ 206.069352][ T3454] kmem_cache_alloc+0x3b/0x320 [ 206.074131][ T3454] ? __alloc_file+0x28/0x2a0 [ 206.078734][ T3454] security_file_alloc+0x33/0x130 [ 206.083781][ T3454] __alloc_file+0xb5/0x2a0 [ 206.088217][ T3454] alloc_empty_file+0x97/0x180 [ 206.092998][ T3454] alloc_file+0x59/0x600 [ 206.097253][ T3454] ? _raw_spin_unlock+0x4c/0x70 [ 206.102126][ T3454] alloc_file_pseudo+0x180/0x200 [ 206.107076][ T3454] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 206.112547][ T3454] ? _raw_spin_lock+0x94/0xf0 [ 206.117244][ T3454] ? __cfi__raw_spin_lock+0x10/0x10 [ 206.122458][ T3454] ? security_inode_alloc+0xd1/0x120 [ 206.127767][ T3454] sock_alloc_file+0xba/0x270 [ 206.132464][ T3454] do_accept+0x3bc/0x6c0 [ 206.136726][ T3454] ? replace_fd+0x180/0x180 [ 206.141250][ T3454] ? __cfi_do_accept+0x10/0x10 [ 206.146036][ T3454] __sys_accept4+0xa7/0x120 [ 206.150554][ T3454] __x64_sys_accept4+0x9a/0xb0 [ 206.155331][ T3454] x64_sys_call+0x713/0x9a0 [ 206.159863][ T3454] do_syscall_64+0x4c/0xa0 [ 206.164301][ T3454] ? clear_bhb_loop+0x30/0x80 [ 206.168998][ T3454] ? clear_bhb_loop+0x30/0x80 [ 206.173697][ T3454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.179607][ T3454] RIP: 0033:0x7fcd2cf9e159 [ 206.184040][ T3454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.203664][ T3454] RSP: 002b:00007fcd2b9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 206.210370][ T28] audit: type=1400 audit(1790830534.927:371): avc: denied { setattr } for pid=3478 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.212312][ T3454] RAX: ffffffffffffffda RBX: 00007fcd2d225fa0 RCX: 00007fcd2cf9e159 [ 206.212329][ T3454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.212340][ T3454] RBP: 00007fcd2d03506b R08: 0000000000000000 R09: 0000000000000000 [ 206.212352][ T3454] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000 [ 206.266317][ T3454] R13: 00007fcd2d226038 R14: 00007fcd2d225fa0 R15: 00007ffedb1bca08 [ 206.274316][ T3454] [ 206.296195][ T28] audit: type=1400 audit(1790830534.257:370): avc: denied { ioctl } for pid=3447 comm="syz.6.663" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tsid=103 tclass=chr_file permissive=1 [ 206.338001][ C0] usb 1-1: cmd cmplt err -71 [ 206.343879][ T1499] usb 1-1: USB disconnect, device number 11 [ 206.348496][ T3488] FAULT_INJECTION: forcing a failure. [ 206.348496][ T3488] name fail_futex, interval 1, probability 0, space 0, times 1 [ 206.350672][ T1499] scsi 2:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 206.362624][ T3488] CPU: 1 PID: 3488 Comm: syz.2.670 Not tainted syzkaller #0 [ 206.370357][ T1499] scsi 2:0:0:0: tag#16 CDB: opcode=0x12 12 00 00 00 24 00 [ 206.377602][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.394749][ T3488] Call Trace: [ 206.398034][ T3488] [ 206.400965][ T3488] __dump_stack+0x21/0x24 [ 206.405311][ T3488] dump_stack_lvl+0x110/0x170 [ 206.409997][ T3488] ? __cfi_dump_stack_lvl+0x8/0x8 [ 206.415031][ T3488] dump_stack+0x15/0x24 [ 206.419198][ T3488] should_fail_ex+0x3bf/0x510 [ 206.423883][ T3488] should_fail+0xb/0x10 [ 206.428042][ T3488] get_futex_key+0x143/0xb10 [ 206.432655][ T3488] ? __cfi_get_futex_key+0x10/0x10 [ 206.432689][ T3488] futex_wake+0x150/0x8e0 [ 206.432709][ T3488] ? __cfi_futex_wake+0x10/0x10 [ 206.432735][ T3488] ? kmem_cache_free+0x12d/0x300 [ 206.432758][ T3488] ? sigqueue_free+0x167/0x1e0 [ 206.432783][ T3488] ? do_timer_create+0xe9e/0x13c0 [ 206.432803][ T3488] do_futex+0x2bf/0x430 [ 206.432819][ T3488] ? __cfi_do_futex+0x10/0x10 [ 206.432838][ T3488] __se_sys_futex+0x136/0x310 [ 206.432856][ T3488] ? __x64_sys_futex+0x100/0x100 [ 206.432872][ T3488] ? xfd_validate_state+0x70/0x150 [ 206.432893][ T3488] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 206.432910][ T3488] __x64_sys_futex+0xe5/0x100 [ 206.432926][ T3488] x64_sys_call+0x7ec/0x9a0 [ 206.432945][ T3488] do_syscall_64+0x4c/0xa0 [ 206.432967][ T3488] ? clear_bhb_loop+0x30/0x80 [ 206.432985][ T3488] ? clear_bhb_loop+0x30/0x80 [ 206.433003][ T3488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.433020][ T3488] RIP: 0033:0x7f758c19e159 [ 206.433036][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.433049][ T3488] RSP: 002b:00007f758abf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.433066][ T3488] RAX: ffffffffffffffda RBX: 00007f758c425fa8 RCX: 00007f758c19e159 [ 206.433079][ T3488] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f758c425fac [ 206.433089][ T3488] RBP: 00007f758c425fa0 R08: 0012f853720e5160 R09: 0000000000000000 [ 206.433101][ T3488] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 206.433112][ T3488] R13: 00007f758c426038 R14: 00007fffdd3bc6a0 R15: 00007fffdd3bc788 [ 206.433128][ T3488] [ 211.727964][ T3518] loop2: detected capacity change from 0 to 128 [ 211.740608][ T3525] loop0: detected capacity change from 0 to 256 [ 211.741197][ T3524] device syzkaller0 entered promiscuous mode [ 211.753680][ T3518] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 211.777603][ T3518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.782370][ T3523] loop1: detected capacity change from 0 to 4096 [ 211.796752][ T28] audit: type=1400 audit(1790830540.517:372): avc: denied { search } for pid=3529 comm="syz.4.679" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 211.800670][ T3518] ext2 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.831759][ T3523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.839221][ T28] audit: type=1400 audit(1790830540.537:373): avc: denied { write } for pid=3529 comm="syz.4.679" name="instances" dev="tracefs" ino=13512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 211.874823][ T3523] EXT4-fs (loop1): Test dummy encryption mode enabled [ 211.899511][ T28] audit: type=1400 audit(1790830540.537:374): avc: denied { add_name } for pid=3529 comm="syz.4.679" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 211.930134][ T3523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.945355][ T28] audit: type=1400 audit(1790830540.537:375): avc: denied { create } for pid=3529 comm="syz.4.679" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 212.000244][ T3523] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 212.000501][ T291] EXT4-fs (loop2): unmounting filesystem. [ 212.009240][ T28] audit: type=1400 audit(1790830540.647:376): avc: denied { ioctl } for pid=3533 comm="syz.0.680" path="socket:[31173]" dev="sockfs" ino=31173 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.042470][ T28] audit: type=1400 audit(1790830540.697:377): avc: denied { create } for pid=3519 comm="syz.1.675" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 212.073962][ T3543] loop2: detected capacity change from 0 to 1024 [ 212.092537][ T3545] loop0: detected capacity change from 0 to 512 [ 212.110669][ T3545] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 212.125298][ T3548] loop6: detected capacity change from 0 to 512 [ 212.127262][ T3541] EXT4-fs (loop1): unmounting filesystem. [ 212.139325][ T3545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.684: bg 0: block 104: invalid block bitmap [ 212.165485][ T3548] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.685: inode has both inline data and extents flags [ 212.179709][ T3543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.203139][ T3545] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 212.221428][ T28] audit: type=1400 audit(1790830540.947:378): avc: denied { write } for pid=3542 comm="syz.2.683" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 212.252906][ T291] EXT4-fs (loop2): unmounting filesystem. [ 212.262501][ T3545] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.684: invalid indirect mapped block 1 (level 1) [ 212.295293][ T3548] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.685: couldn't read orphan inode 15 (err -117) [ 212.308289][ T28] audit: type=1400 audit(1790830540.967:379): avc: denied { add_name } for pid=3542 comm="syz.2.683" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 212.358788][ T3545] EXT4-fs (loop0): 1 truncate cleaned up [ 212.365823][ T3545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.451390][ T3548] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 212.463259][ T28] audit: type=1400 audit(1790830541.187:380): avc: denied { write } for pid=3557 comm="syz.2.688" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 212.487407][ T3558] device-mapper: ioctl: Invalid ioctl structure: name test_m, dev fc00 [ 212.496260][ T3558] device-mapper: ioctl: Invalid ioctl structure: name test_m, dev fc00 [ 212.504684][ T28] audit: type=1400 audit(1790830541.207:381): avc: denied { read } for pid=3544 comm="syz.0.684" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.533890][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 212.538201][ T3563] loop2: detected capacity change from 0 to 128 [ 212.550135][ T289] EXT4-fs (loop0): unmounting filesystem. [ 212.594009][ T3563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.672303][ T3563] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.760112][ T3571] loop0: detected capacity change from 0 to 4096 [ 212.769179][ T291] EXT4-fs (loop2): unmounting filesystem. [ 212.789560][ T3571] EXT4-fs (loop0): Test dummy encryption mode enabled [ 212.839365][ T3571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.033801][ T289] EXT4-fs (loop0): unmounting filesystem. [ 213.640524][ T3590] loop6: detected capacity change from 0 to 512 [ 213.650040][ T3590] EXT4-fs: Ignoring removed nobh option [ 213.675298][ T3594] loop4: detected capacity change from 0 to 256 [ 213.687180][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #3: comm syz.6.697: corrupted inode contents [ 213.705334][ T3590] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #3: comm syz.6.697: mark_inode_dirty error [ 213.747326][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #3: comm syz.6.697: corrupted inode contents [ 213.781683][ T3590] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.697: mark_inode_dirty error [ 213.793197][ T3607] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc01 [ 213.804581][ T3590] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.697: Failed to acquire dquot type 0 [ 213.817761][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #16: comm syz.6.697: corrupted inode contents [ 213.830769][ T3590] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #16: comm syz.6.697: mark_inode_dirty error [ 213.850558][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #16: comm syz.6.697: corrupted inode contents [ 213.865544][ T3624] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 213.873831][ T3590] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.697: mark_inode_dirty error [ 213.889296][ T3626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.917115][ T3624] EXT4-fs (loop4): 1 truncate cleaned up [ 213.930268][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #16: comm syz.6.697: corrupted inode contents [ 213.944344][ T3626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.945471][ T3624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.961897][ T3590] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 213.973608][ T3590] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #16: comm syz.6.697: corrupted inode contents [ 213.992395][ T3626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.995357][ T3590] EXT4-fs error (device loop6): ext4_truncate:4327: inode #16: comm syz.6.697: mark_inode_dirty error [ 214.010206][ T3626] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.023180][ T294] EXT4-fs (loop4): unmounting filesystem. [ 214.027336][ T3590] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 214.044036][ T3626] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.708: path /152/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 214.060552][ T3590] EXT4-fs (loop6): 1 truncate cleaned up [ 214.064880][ T3626] EXT4-fs (loop2): Remounting filesystem read-only [ 214.082361][ T3590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.101093][ T3590] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.150646][ T3653] FAULT_INJECTION: forcing a failure. [ 214.150646][ T3653] name failslab, interval 1, probability 0, space 0, times 0 [ 214.178956][ T3653] CPU: 1 PID: 3653 Comm: syz.4.723 Not tainted syzkaller #0 [ 214.186299][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.196372][ T3653] Call Trace: [ 214.199664][ T3653] [ 214.202607][ T3653] __dump_stack+0x21/0x24 [ 214.206956][ T3653] dump_stack_lvl+0x110/0x170 [ 214.211629][ T3653] ? __cfi_dump_stack_lvl+0x8/0x8 [ 214.216645][ T3653] ? do_futex+0x2e2/0x430 [ 214.220977][ T3653] ? __cfi_do_futex+0x10/0x10 [ 214.225646][ T3653] dump_stack+0x15/0x24 [ 214.229807][ T3653] should_fail_ex+0x3bf/0x510 [ 214.234481][ T3653] __should_failslab+0xac/0xf0 [ 214.239258][ T3653] should_failslab+0x9/0x20 [ 214.243750][ T3653] __kmem_cache_alloc_node+0x3d/0x2d0 [ 214.249113][ T3653] ? do_eventfd+0x80/0x2e0 [ 214.253519][ T3653] ? do_eventfd+0x80/0x2e0 [ 214.257950][ T3653] kmalloc_trace+0x29/0xb0 [ 214.262365][ T3653] do_eventfd+0x80/0x2e0 [ 214.266607][ T3653] __x64_sys_eventfd2+0x5a/0x70 [ 214.271455][ T3653] x64_sys_call+0x2f2/0x9a0 [ 214.275959][ T3653] do_syscall_64+0x4c/0xa0 [ 214.280384][ T3653] ? clear_bhb_loop+0x30/0x80 [ 214.285100][ T3653] ? clear_bhb_loop+0x30/0x80 [ 214.289799][ T3653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.295682][ T3653] RIP: 0033:0x7f547fb9e159 [ 214.300089][ T3653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.319680][ T3653] RSP: 002b:00007f5480a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 214.328080][ T3653] RAX: ffffffffffffffda RBX: 00007f547fe25fa0 RCX: 00007f547fb9e159 [ 214.336042][ T3653] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000000000000003e [ 214.344046][ T3653] RBP: 00007f547fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 214.352038][ T3653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.360036][ T3653] R13: 00007f547fe26038 R14: 00007f547fe25fa0 R15: 00007ffe273af8d8 [ 214.368038][ T3653] [ 214.447322][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 214.456902][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 214.503421][ T3667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.730'. [ 214.512671][ T3670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.526599][ T3670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 214.536250][ T3670] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 214.544544][ T3670] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.729: invalid indirect mapped block 2683928664 (level 1) [ 214.558696][ T3670] EXT4-fs (loop6): Remounting filesystem read-only [ 214.565495][ T3670] EXT4-fs (loop6): 1 truncate cleaned up [ 214.571304][ T3670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.592565][ T3670] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.729: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 214.613069][ T3670] EXT4-fs (loop6): Remounting filesystem read-only [ 214.623964][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 214.648400][ T291] EXT4-fs (loop2): unmounting filesystem. [ 214.757938][ T3706] EXT4-fs: Ignoring removed i_version option [ 214.769760][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 214.779821][ T3706] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 214.788543][ T3706] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.808120][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 214.911420][ T3738] tmpfs: Unknown parameter 'quota' [ 214.975601][ T3754] binfmt_misc: register: failed to install interpreter file ./file0 [ 215.076748][ T3758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3758 comm=syz.2.769 [ 215.091127][ T3771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.103466][ T3771] overlayfs: conflicting lowerdir path [ 215.115369][ T289] EXT4-fs (loop0): unmounting filesystem. [ 215.165855][ T1560] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 215.178606][ T1560] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.226330][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 215.477988][ T3813] EXT4-fs: Ignoring removed oldalloc option [ 215.478011][ T3813] EXT4-fs: Ignoring removed orlov option [ 215.495756][ T3813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.495846][ T3813] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.571638][ T3830] random: crng reseeded on system resumption [ 216.250607][ T3530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 217.292405][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 217.717913][ T3834] syz.1.802 (3834) used greatest stack depth: 20936 bytes left [ 217.783419][ T3870] set_capacity_and_notify: 11 callbacks suppressed [ 217.783438][ T3870] loop6: detected capacity change from 0 to 128 [ 217.809620][ T294] EXT4-fs (loop4): unmounting filesystem. [ 217.850069][ T3870] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 217.861012][ T3870] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.878772][ T3882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 217.895491][ T3874] loop0: detected capacity change from 0 to 1024 [ 217.919750][ T3874] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 217.969861][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 218.083145][ T3894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 218.358140][ T3901] loop6: detected capacity change from 0 to 512 [ 218.409936][ T3894] device wireguard0 entered promiscuous mode [ 218.499942][ T3901] EXT4-fs (loop6): Invalid log cluster size: 196609 [ 219.174721][ T3911] loop4: detected capacity change from 0 to 8192 [ 219.227262][ T3916] loop6: detected capacity change from 0 to 1024 [ 219.230895][ T3911] loop4: p1 p2 p3 [ 219.411303][ T3916] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 219.587266][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 219.587941][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 219.602686][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 219.610363][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 219.610377][ T28] audit: type=1400 audit(1790830548.317:418): avc: denied { shutdown } for pid=3918 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.647729][ T3927] loop4: detected capacity change from 0 to 256 [ 219.679084][ T3927] FAT-fs (loop4): Directory bread(block 1285) failed [ 219.689513][ T3927] FAT-fs (loop4): Directory bread(block 1286) failed [ 219.696736][ T3927] FAT-fs (loop4): Directory bread(block 1287) failed [ 219.710576][ T3927] FAT-fs (loop4): Directory bread(block 1288) failed [ 219.720669][ T28] audit: type=1400 audit(1790830548.447:419): avc: denied { mount } for pid=3926 comm="syz.4.837" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 219.744099][ T3927] FAT-fs (loop4): Directory bread(block 1285) failed [ 219.760467][ T3927] FAT-fs (loop4): Directory bread(block 1286) failed [ 219.767369][ T3927] FAT-fs (loop4): Directory bread(block 1287) failed [ 219.774177][ T3927] FAT-fs (loop4): Directory bread(block 1288) failed [ 219.785973][ T3927] FAT-fs (loop4): Directory bread(block 1285) failed [ 219.793151][ T3927] FAT-fs (loop4): Directory bread(block 1286) failed [ 219.805479][ T28] audit: type=1400 audit(1790830548.527:420): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 219.825932][ T3929] loop2: detected capacity change from 0 to 4096 [ 219.850519][ T3929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.850848][ T3932] loop4: detected capacity change from 0 to 512 [ 219.880685][ T3932] EXT4-fs: Ignoring removed oldalloc option [ 219.941456][ T3932] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 219.954131][ T291] EXT4-fs (loop2): unmounting filesystem. [ 219.991316][ T3932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 219.999857][ T3932] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.019846][ T3932] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.839: bad orphan inode 267 [ 220.044678][ T3932] EXT4-fs (loop4): Remounting filesystem read-only [ 220.057257][ T3932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.492776][ T28] audit: type=1326 audit(1790830549.037:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.839" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f547fb9e159 code=0x0 [ 221.526409][ T294] EXT4-fs (loop4): unmounting filesystem. [ 221.556165][ T3946] loop6: detected capacity change from 0 to 4096 [ 221.579792][ T3957] loop4: detected capacity change from 0 to 512 [ 221.599307][ T3946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.609262][ T3957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.620099][ T3957] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.627497][ T3946] EXT4-fs (loop6): Test dummy encryption mode enabled [ 221.669717][ T3946] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 221.687503][ T3957] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 221.696028][ T3957] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 221.705473][ T3957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.722433][ T3957] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.845: iget: bad i_size value: 360287970189639690 [ 221.740380][ T3957] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.845: bad symlink. [ 221.740390][ T28] audit: type=1400 audit(1790830550.457:422): avc: denied { read } for pid=3956 comm="syz.4.845" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 221.749087][ T3979] 9pnet_fd: Insufficient options for proto=fd [ 221.785958][ T294] EXT4-fs (loop4): unmounting filesystem. [ 221.875878][ T3946] EXT4-fs (loop6): unmounting filesystem. [ 222.082565][ T4006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 222.096055][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 222.127417][ T4017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.136603][ T4017] EXT4-fs (loop6): Test dummy encryption mode enabled [ 222.144522][ T4017] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 222.422755][ T4027] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.441766][ T4027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.450763][ T4027] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.467999][ T294] EXT4-fs (loop4): unmounting filesystem. [ 222.528557][ T28] audit: type=1400 audit(1790830551.247:423): avc: denied { connect } for pid=4042 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.549955][ T4043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4043 comm=syz.4.883 [ 222.950448][ T639] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.964609][ T4017] EXT4-fs (loop6): unmounting filesystem. [ 222.995675][ T4060] set_capacity_and_notify: 5 callbacks suppressed [ 222.995693][ T4060] loop6: detected capacity change from 0 to 2048 [ 223.018479][ T4060] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 223.027625][ T4060] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.047365][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 223.116895][ T639] usb 3-1: device descriptor read/64, error -71 [ 223.364720][ T4080] loop4: detected capacity change from 0 to 512 [ 223.375460][ T4080] EXT4-fs (loop4): Test dummy encryption mode enabled [ 223.392681][ T4080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.400385][ T639] usb 3-1: device descriptor read/64, error -71 [ 223.593519][ T4094] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.897: path (unknown): directory fails checksum at offset 0 [ 223.990975][ T4094] EXT4-fs (loop4): Remounting filesystem read-only [ 224.070513][ T639] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 224.257131][ T639] usb 3-1: device descriptor read/64, error -71 [ 224.258453][ T4111] FAULT_INJECTION: forcing a failure. [ 224.258453][ T4111] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.298892][ T4111] CPU: 0 PID: 4111 Comm: syz.6.909 Not tainted syzkaller #0 [ 224.306223][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.316284][ T4111] Call Trace: [ 224.319566][ T4111] [ 224.322502][ T4111] __dump_stack+0x21/0x24 [ 224.326868][ T4111] dump_stack_lvl+0x110/0x170 [ 224.331549][ T4111] ? __cfi_dump_stack_lvl+0x8/0x8 [ 224.336584][ T4111] dump_stack+0x15/0x24 [ 224.340744][ T4111] should_fail_ex+0x3bf/0x510 [ 224.345449][ T4111] should_fail+0xb/0x10 [ 224.349613][ T4111] get_futex_key+0x143/0xb10 [ 224.354220][ T4111] ? __local_bh_enable_ip+0x58/0x80 [ 224.359430][ T4111] ? __cfi_get_futex_key+0x10/0x10 [ 224.364559][ T4111] futex_wake+0x150/0x8e0 [ 224.368893][ T4111] ? __kasan_check_write+0x14/0x20 [ 224.373772][ T294] EXT4-fs (loop4): unmounting filesystem. [ 224.374005][ T4111] ? _raw_spin_lock_bh+0x94/0xf0 [ 224.384647][ T4111] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 224.390112][ T4111] ? __cfi_futex_wake+0x10/0x10 [ 224.394952][ T4111] ? _raw_spin_unlock_bh+0x50/0x60 [ 224.400052][ T4111] ? release_sock+0x169/0x1c0 [ 224.404717][ T4111] ? __inet_bind+0x3d7/0xb70 [ 224.409308][ T4111] do_futex+0x2bf/0x430 [ 224.413456][ T4111] ? __cfi_do_futex+0x10/0x10 [ 224.418117][ T4111] ? __kasan_check_write+0x14/0x20 [ 224.423215][ T4111] __se_sys_futex+0x136/0x310 [ 224.427880][ T4111] ? __x64_sys_futex+0x100/0x100 [ 224.432809][ T4111] __x64_sys_futex+0xe5/0x100 [ 224.437467][ T4111] x64_sys_call+0x7ec/0x9a0 [ 224.441957][ T4111] do_syscall_64+0x4c/0xa0 [ 224.446367][ T4111] ? clear_bhb_loop+0x30/0x80 [ 224.451034][ T4111] ? clear_bhb_loop+0x30/0x80 [ 224.455699][ T4111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.461577][ T4111] RIP: 0033:0x7fe05159e159 [ 224.465977][ T4111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.485569][ T4111] RSP: 002b:00007fe0524070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.493971][ T4111] RAX: ffffffffffffffda RBX: 00007fe051825fa8 RCX: 00007fe05159e159 [ 224.501937][ T4111] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe051825fac [ 224.509911][ T4111] RBP: 00007fe051825fa0 R08: 000d9b09debcdcc0 R09: 0000000000000000 [ 224.517872][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.525831][ T4111] R13: 00007fe051826038 R14: 00007ffef30a5150 R15: 00007ffef30a5238 [ 224.533792][ T4111] [ 224.625537][ T4114] xt_hashlimit: size too large, truncated to 1048576 [ 224.843705][ T639] usb 3-1: device descriptor read/64, error -71 [ 224.960498][ T639] usb usb3-port1: attempt power cycle [ 224.976368][ T28] audit: type=1400 audit(1790830553.697:424): avc: denied { execute } for pid=4135 comm="syz.0.919" dev="tmpfs" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.999308][ T28] audit: type=1400 audit(1790830553.697:425): avc: denied { execute_no_trans } for pid=4135 comm="syz.0.919" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.039508][ T4142] device syzkaller0 entered promiscuous mode [ 225.141386][ T28] audit: type=1400 audit(1790830553.867:426): avc: denied { relabelfrom } for pid=4149 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 225.161618][ T28] audit: type=1400 audit(1790830553.867:427): avc: denied { relabelto } for pid=4149 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 225.261837][ T4158] overlayfs: failed to clone upperpath [ 225.742227][ T639] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.775559][ T4165] loop6: detected capacity change from 0 to 4096 [ 225.811389][ T4165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.822505][ T4165] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.828371][ T4172] loop4: detected capacity change from 0 to 4096 [ 225.838699][ T4179] tap0: tun_chr_ioctl cmd 1074025698 [ 225.843724][ T4165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 225.869123][ T4172] EXT4-fs (loop4): Test dummy encryption mode enabled [ 225.880859][ T4172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.895043][ T28] audit: type=1400 audit(1790830554.617:428): avc: denied { map } for pid=4163 comm="syz.6.931" path="/63/bus/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.925368][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 225.967570][ T294] EXT4-fs (loop4): unmounting filesystem. [ 226.261613][ T639] usb 3-1: device not accepting address 12, error -71 [ 226.657264][ T4224] loop2: detected capacity change from 0 to 1024 [ 226.681733][ T4224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.007769][ T291] EXT4-fs (loop2): unmounting filesystem. [ 227.383991][ T28] audit: type=1400 audit(1790830556.107:429): avc: denied { create } for pid=4245 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 227.480055][ T4256] FAULT_INJECTION: forcing a failure. [ 227.480055][ T4256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.493955][ T4256] CPU: 0 PID: 4256 Comm: syz.2.970 Not tainted syzkaller #0 [ 227.501270][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.511330][ T4256] Call Trace: [ 227.514614][ T4256] [ 227.517553][ T4256] __dump_stack+0x21/0x24 [ 227.521911][ T4256] dump_stack_lvl+0x110/0x170 [ 227.526611][ T4256] ? __cfi_dump_stack_lvl+0x8/0x8 [ 227.531659][ T4256] dump_stack+0x15/0x24 [ 227.535831][ T4256] should_fail_ex+0x3bf/0x510 [ 227.540566][ T4256] should_fail+0xb/0x10 [ 227.544732][ T4256] should_fail_usercopy+0x1a/0x20 [ 227.549786][ T4256] strncpy_from_user+0x24/0x2c0 [ 227.554648][ T4256] ? kmem_cache_alloc+0x166/0x320 [ 227.559685][ T4256] ? getname_flags+0xba/0x510 [ 227.564380][ T4256] getname_flags+0xf5/0x510 [ 227.568902][ T4256] user_path_at_empty+0x2f/0x1c0 [ 227.573891][ T4256] path_setxattr+0xb3/0x290 [ 227.578433][ T4256] ? simple_xattr_list_add+0x120/0x120 [ 227.583904][ T4256] ? __kasan_check_write+0x14/0x20 [ 227.588934][ T28] audit: type=1400 audit(1790830556.217:430): avc: denied { mount } for pid=4255 comm="syz.6.971" name="/" dev="pstore" ino=14593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 227.589047][ T4256] ? fpregs_restore_userregs+0x128/0x260 [ 227.611371][ T28] audit: type=1400 audit(1790830556.217:431): avc: denied { remount } for pid=4255 comm="syz.6.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 227.616874][ T4256] __x64_sys_setxattr+0xc5/0xe0 [ 227.637560][ T28] audit: type=1400 audit(1790830556.357:432): avc: denied { unmount } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 227.641300][ T4256] x64_sys_call+0x633/0x9a0 [ 227.641326][ T4256] do_syscall_64+0x4c/0xa0 [ 227.641347][ T4256] ? clear_bhb_loop+0x30/0x80 [ 227.641365][ T4256] ? clear_bhb_loop+0x30/0x80 [ 227.641382][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.641398][ T4256] RIP: 0033:0x7f758c19e159 [ 227.641412][ T4256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.641426][ T4256] RSP: 002b:00007f758abf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 227.641445][ T4256] RAX: ffffffffffffffda RBX: 00007f758c425fa0 RCX: 00007f758c19e159 [ 227.641457][ T4256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.733906][ T4256] RBP: 00007f758c23506b R08: 0000000000000002 R09: 0000000000000000 [ 227.741939][ T4256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.749910][ T4256] R13: 00007f758c426038 R14: 00007f758c425fa0 R15: 00007fffdd3bc788 [ 227.757894][ T4256] [ 227.809999][ T4264] loop6: detected capacity change from 0 to 2048 [ 227.829814][ T4270] loop4: detected capacity change from 0 to 128 [ 227.851191][ T4276] loop2: detected capacity change from 0 to 128 [ 227.864659][ T4264] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 227.867707][ T4270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.877889][ T4264] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.892082][ T4276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.918567][ T4270] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.931976][ T4276] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.942758][ T4270] syz.4.978 (pid 4270) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 227.951553][ T28] audit: type=1400 audit(1790830556.658:433): avc: denied { setattr } for pid=4275 comm="syz.2.980" path="/196/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 227.961600][ T4270] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 227.994343][ T2995] EXT4-fs (loop6): unmounting filesystem. [ 228.025987][ T294] EXT4-fs (loop4): unmounting filesystem. [ 228.028638][ T4287] loop0: detected capacity change from 0 to 512 [ 228.058086][ T4287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.081787][ T4287] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.093397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.094313][ T4287] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.149670][ T291] EXT4-fs (loop2): unmounting filesystem. [ 228.220977][ T4314] loop2: detected capacity change from 0 to 7 [ 228.547706][ T4350] tipc: Enabling of bearer rejected, failed to enable media [ 228.889264][ T289] EXT4-fs (loop0): unmounting filesystem. [ 229.475276][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 229.927780][ T4413] loop2: detected capacity change from 0 to 4096 [ 229.957782][ T4418] loop4: detected capacity change from 0 to 2048 [ 229.958842][ T4413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.973707][ T4413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 229.998512][ T4413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.024218][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.032765][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 230.032781][ T28] audit: type=1400 audit(1790830558.756:436): avc: denied { create } for pid=4428 comm="syz.6.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.062800][ T4436] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=4436 comm=syz.6.1048 [ 230.069607][ T28] audit: type=1400 audit(1790830558.797:437): avc: denied { create } for pid=4435 comm="syz.6.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.095688][ T28] audit: type=1400 audit(1790830558.797:438): avc: denied { write } for pid=4435 comm="syz.6.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.098222][ T294] EXT4-fs (loop4): unmounting filesystem. [ 230.154604][ T4413] EXT4-fs (loop2): unmounting filesystem. [ 230.172191][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 230.258345][ T4476] loop2: detected capacity change from 0 to 4096 [ 230.265578][ T4476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.274257][ T4476] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.282694][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.356570][ T4476] EXT4-fs (loop2): unmounting filesystem. [ 230.357569][ T4496] device gre0 entered promiscuous mode [ 230.416986][ T4502] netlink: 'syz.6.1079': attribute type 2 has an invalid length. [ 230.443759][ T28] audit: type=1400 audit(1790830559.179:439): avc: denied { write } for pid=4504 comm="syz.6.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.471438][ T28] audit: type=1400 audit(1790830559.179:440): avc: denied { create } for pid=4508 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.504788][ T28] audit: type=1400 audit(1790830559.239:441): avc: denied { bind } for pid=4511 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.512211][ T4517] device bridge1 entered promiscuous mode [ 230.540371][ T4518] loop2: detected capacity change from 0 to 4096 [ 230.546980][ T28] audit: type=1400 audit(1790830559.239:442): avc: denied { name_bind } for pid=4511 comm="syz.0.1085" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 230.570623][ T28] audit: type=1400 audit(1790830559.239:443): avc: denied { node_bind } for pid=4511 comm="syz.0.1085" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 230.599204][ T4518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.609277][ T4518] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.619666][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.654425][ T4518] EXT4-fs (loop2): unmounting filesystem. [ 230.687004][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.748812][ T28] audit: type=1400 audit(1790830559.477:444): avc: denied { execmem } for pid=4552 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 230.849692][ T4568] loop0: detected capacity change from 0 to 4096 [ 230.875061][ T4568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.884336][ T4568] EXT4-fs (loop0): Test dummy encryption mode enabled [ 230.893513][ T4574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.903900][ T4568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.914175][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 230.923419][ T28] audit: type=1400 audit(1790830559.656:445): avc: denied { nlmsg_write } for pid=4578 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.952000][ T4568] EXT4-fs (loop0): unmounting filesystem. [ 230.976943][ T4587] loop0: detected capacity change from 0 to 512 [ 230.987901][ T4587] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.006645][ T4587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.030843][ T4600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4600 comm=syz.1.1125 [ 231.148581][ T4610] loop6: detected capacity change from 0 to 4096 [ 231.169649][ T4610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.190123][ T4610] EXT4-fs (loop6): Test dummy encryption mode enabled [ 231.249964][ T4610] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 231.265470][ T4631] device syzkaller0 entered promiscuous mode [ 231.277279][ T4631] tipc: Started in network mode [ 231.282252][ T4631] tipc: Node identity 12494a9293c5, cluster identity 4711 [ 231.289576][ T4631] tipc: Enabled bearer , priority 0 [ 231.311366][ T4610] EXT4-fs (loop6): unmounting filesystem. [ 231.319884][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.330280][ T4631] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.337404][ T4631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.363720][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 231.416873][ T4630] tipc: Resetting bearer [ 231.432865][ T4630] tipc: Disabling bearer [ 231.485663][ T4670] loop4: detected capacity change from 0 to 4096 [ 231.501235][ T4670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.527913][ T4670] EXT4-fs (loop4): Test dummy encryption mode enabled [ 231.560842][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.624234][ T4670] fuse: Bad value for 'fd' [ 231.652993][ T4670] EXT4-fs (loop4): unmounting filesystem. [ 231.852889][ T289] EXT4-fs (loop0): unmounting filesystem. [ 231.872183][ T4709] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1174'. [ 231.962538][ T4715] fuse: Bad value for 'fd' [ 232.001046][ T4729] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 232.041928][ T4733] EXT4-fs (loop0): Test dummy encryption mode enabled [ 232.087085][ T4733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.366994][ T4750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.376142][ T4750] EXT4-fs (loop6): Test dummy encryption mode enabled [ 232.385368][ T4750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 232.397989][ T4750] fuse: Bad value for 'fd' [ 232.407726][ T4750] EXT4-fs (loop6): unmounting filesystem. [ 232.655175][ T4776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1202'. [ 232.664247][ T4776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1202'. [ 232.763813][ T4783] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1205'. [ 232.815278][ T4792] tipc: Started in network mode [ 232.820236][ T4792] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 232.827492][ T4792] tipc: Enabled bearer , priority 0 [ 232.910493][ T289] EXT4-fs (loop0): unmounting filesystem. [ 232.916404][ T4803] ================================================================== [ 232.924469][ T4803] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 232.931232][ T4803] Write of size 8 at addr ffff888110903950 by task syz.2.1215/4803 [ 232.939105][ T4803] [ 232.941417][ T4803] CPU: 0 PID: 4803 Comm: syz.2.1215 Not tainted syzkaller #0 [ 232.948766][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.958801][ T4803] Call Trace: [ 232.962063][ T4803] [ 232.964977][ T4803] __dump_stack+0x21/0x24 [ 232.969302][ T4803] dump_stack_lvl+0x110/0x170 [ 232.973965][ T4803] ? __cfi_dump_stack_lvl+0x8/0x8 [ 232.978978][ T4803] ? mutex_lock+0x86/0x1b0 [ 232.983383][ T4803] print_address_description+0x71/0x200 [ 232.988922][ T4803] print_report+0x4a/0x60 [ 232.993239][ T4803] kasan_report+0x122/0x150 [ 232.997731][ T4803] ? mutex_lock+0x86/0x1b0 [ 233.002141][ T4803] kasan_check_range+0x249/0x2a0 [ 233.007070][ T4803] __kasan_check_write+0x14/0x20 [ 233.011998][ T4803] mutex_lock+0x86/0x1b0 [ 233.016222][ T4803] ? __cfi_mutex_lock+0x10/0x10 [ 233.021057][ T4803] ? kfree+0x6f/0xf0 [ 233.024931][ T4803] ? l2tp_session_put+0xaf/0x1a0 [ 233.029853][ T4803] ? l2tp_session_delete+0x3df/0x4d0 [ 233.035122][ T4803] pppol2tp_release+0x178/0x2b0 [ 233.039970][ T4803] sock_close+0xc9/0x220 [ 233.044195][ T4803] ? __cfi_sock_close+0x10/0x10 [ 233.049025][ T4803] __fput+0x1fd/0x8f0 [ 233.052995][ T4803] ____fput+0x15/0x20 [ 233.056960][ T4803] task_work_run+0x1e1/0x250 [ 233.061539][ T4803] ? __cfi_task_work_run+0x10/0x10 [ 233.066640][ T4803] ? __cfi___close_range+0x10/0x10 [ 233.071740][ T4803] exit_to_user_mode_loop+0x9b/0xb0 [ 233.076925][ T4803] exit_to_user_mode_prepare+0x87/0xd0 [ 233.082364][ T4803] syscall_exit_to_user_mode+0x1a/0x30 [ 233.087808][ T4803] do_syscall_64+0x58/0xa0 [ 233.092217][ T4803] ? clear_bhb_loop+0x30/0x80 [ 233.096883][ T4803] ? clear_bhb_loop+0x30/0x80 [ 233.101543][ T4803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.107600][ T4803] RIP: 0033:0x7f758c19e159 [ 233.112000][ T4803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.131589][ T4803] RSP: 002b:00007fffdd3bc8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.139988][ T4803] RAX: 0000000000000000 RBX: 00007fffdd3bc9d0 RCX: 00007f758c19e159 [ 233.147940][ T4803] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 233.155892][ T4803] RBP: 0000000000038d92 R08: 0000000000000001 R09: 0000000000000000 [ 233.163843][ T4803] R10: 0000001b2dc20000 R11: 0000000000000246 R12: 00007fffdd3bca10 [ 233.171797][ T4803] R13: 00007f758c425fac R14: 0000000000038dc5 R15: 00007f758c425fa0 [ 233.179758][ T4803] [ 233.182761][ T4803] [ 233.185066][ T4803] Allocated by task 4804: [ 233.189387][ T4803] kasan_set_track+0x4b/0x70 [ 233.193965][ T4803] kasan_save_alloc_info+0x1f/0x30 [ 233.199059][ T4803] __kasan_kmalloc+0x95/0xb0 [ 233.203636][ T4803] __kmalloc+0xb4/0x1e0 [ 233.207794][ T4803] l2tp_session_create+0x38/0xbd0 [ 233.212817][ T4803] pppol2tp_connect+0xbf5/0x1640 [ 233.217739][ T4803] __sys_connect+0x3da/0x460 [ 233.222315][ T4803] __x64_sys_connect+0x7a/0x90 [ 233.227066][ T4803] x64_sys_call+0x88d/0x9a0 [ 233.231555][ T4803] do_syscall_64+0x4c/0xa0 [ 233.235957][ T4803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.241833][ T4803] [ 233.244138][ T4803] Freed by task 4803: [ 233.248093][ T4803] kasan_set_track+0x4b/0x70 [ 233.252669][ T4803] kasan_save_free_info+0x2b/0x40 [ 233.257670][ T4803] ____kasan_slab_free+0x132/0x180 [ 233.262765][ T4803] __kasan_slab_free+0x11/0x20 [ 233.267512][ T4803] slab_free_freelist_hook+0xc2/0x190 [ 233.272864][ T4803] __kmem_cache_free+0xb7/0x1b0 [ 233.277698][ T4803] kfree+0x6f/0xf0 [ 233.281403][ T4803] l2tp_session_put+0xaf/0x1a0 [ 233.286149][ T4803] l2tp_session_delete+0x3df/0x4d0 [ 233.291241][ T4803] pppol2tp_release+0x169/0x2b0 [ 233.296077][ T4803] sock_close+0xc9/0x220 [ 233.300302][ T4803] __fput+0x1fd/0x8f0 [ 233.304267][ T4803] ____fput+0x15/0x20 [ 233.308246][ T4803] task_work_run+0x1e1/0x250 [ 233.312822][ T4803] exit_to_user_mode_loop+0x9b/0xb0 [ 233.318004][ T4803] exit_to_user_mode_prepare+0x87/0xd0 [ 233.323443][ T4803] syscall_exit_to_user_mode+0x1a/0x30 [ 233.328891][ T4803] do_syscall_64+0x58/0xa0 [ 233.333307][ T4803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.339184][ T4803] [ 233.341489][ T4803] Last potentially related work creation: [ 233.347186][ T4803] kasan_save_stack+0x3a/0x60 [ 233.351848][ T4803] __kasan_record_aux_stack+0xb6/0xc0 [ 233.357201][ T4803] kasan_record_aux_stack_noalloc+0xb/0x10 [ 233.362992][ T4803] kvfree_call_rcu+0x8b/0x7a0 [ 233.367654][ T4803] neigh_destroy+0x476/0x5b0 [ 233.372229][ T4803] neigh_cleanup_and_release+0x76/0x1a0 [ 233.377758][ T4803] neigh_periodic_work+0x9c5/0xbc0 [ 233.382856][ T4803] process_one_work+0x717/0xc30 [ 233.387714][ T4803] worker_thread+0xa4d/0x11d0 [ 233.392382][ T4803] kthread+0x281/0x320 [ 233.396441][ T4803] ret_from_fork+0x1f/0x30 [ 233.400874][ T4803] [ 233.403180][ T4803] The buggy address belongs to the object at ffff888110903800 [ 233.403180][ T4803] which belongs to the cache kmalloc-512 of size 512 [ 233.417220][ T4803] The buggy address is located 336 bytes inside of [ 233.417220][ T4803] 512-byte region [ffff888110903800, ffff888110903a00) [ 233.430488][ T4803] [ 233.432802][ T4803] The buggy address belongs to the physical page: [ 233.439190][ T4803] page:ffffea0004424000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110900 [ 233.449430][ T4803] head:ffffea0004424000 order:2 compound_mapcount:0 compound_pincount:0 [ 233.457739][ T4803] flags: 0x4000000000010200(slab|head|zone=1) [ 233.463814][ T4803] raw: 4000000000010200 ffffea0004c3c500 dead000000000002 ffff888100042f00 [ 233.472387][ T4803] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 233.480949][ T4803] page dumped because: kasan: bad access detected [ 233.487353][ T4803] page_owner tracks the page as allocated [ 233.493062][ T4803] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 104, tgid 104 (udevadm), ts 4126383570, free_ts 0 [ 233.512935][ T4803] post_alloc_hook+0x1f5/0x210 [ 233.517706][ T4803] prep_new_page+0x1c/0x110 [ 233.522202][ T4803] get_page_from_freelist+0x2ca9/0x2d20 [ 233.527733][ T4803] __alloc_pages+0x1fa/0x610 [ 233.532312][ T4803] alloc_slab_page+0x6e/0xf0 [ 233.536883][ T4803] new_slab+0x98/0x3e0 [ 233.540929][ T4803] ___slab_alloc+0x70f/0xb70 [ 233.545502][ T4803] __slab_alloc+0x5e/0xa0 [ 233.549815][ T4803] __kmem_cache_alloc_node+0x204/0x2d0 [ 233.555258][ T4803] __kmalloc_node_track_caller+0xa1/0x1e0 [ 233.560959][ T4803] __alloc_skb+0x226/0x4a0 [ 233.565358][ T4803] alloc_uevent_skb+0x85/0x240 [ 233.570115][ T4803] kobject_uevent_net_broadcast+0x343/0x5b0 [ 233.575988][ T4803] kobject_uevent_env+0x541/0x720 [ 233.580992][ T4803] kobject_synth_uevent+0x457/0x940 [ 233.586297][ T4803] bus_uevent_store+0x4f/0x70 [ 233.591088][ T4803] page_owner free stack trace missing [ 233.596439][ T4803] [ 233.598746][ T4803] Memory state around the buggy address: [ 233.604696][ T4803] ffff888110903800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 233.612737][ T4803] ffff888110903880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 233.620782][ T4803] >ffff888110903900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 233.628840][ T4803] ^ [ 233.635489][ T4803] ffff888110903980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 233.643529][ T4803] ffff888110903a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 233.651572][ T4803] ================================================================== [ 233.674872][ T4803] Disabling lock debugging due to kernel taint [ 233.990070][ T1560] tipc: Node number set to 43690