last executing test programs: 1m13.130457926s ago: executing program 2 (id=3): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000005780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f0000005740)='./file0\x00', 0x1000800, &(0x7f0000005780)=ANY=[], 0x2, 0x553b, &(0x7f0000005d40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f000000b280)='.\x00', 0x2000, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f000000b2c0)={0x9, 0xc, 0x3, 0xa}) 1m10.927208614s ago: executing program 2 (id=9): mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) openat(0xffffffffffffff9c, 0x0, 0x20a080, 0x318) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./bus\x00', 0x2000006, &(0x7f00000003c0)=ANY=[], 0x25, 0x357, &(0x7f0000000540)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000008c0)='./file0\x00', 0x18) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x10, &(0x7f0000000500)={[{@journal_async_commit}]}, 0x5, 0x7e8, &(0x7f0000003e80)="$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") r0 = open(&(0x7f0000001500)='./file1\x00', 0x4c83e, 0x4c) ioctl$FITRIM(r0, 0xc0185879, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x2008800, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001dc0)="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", 0x2000, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffec, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 1m9.434764081s ago: executing program 2 (id=12): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0xff, 0x0, 0x81, 0x6, "00207d20008012000000007fffffff8900"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='offline', 0x7) 1m7.854534037s ago: executing program 2 (id=18): listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='.\x00', 0x800, &(0x7f0000000080), 0x25, 0x763, &(0x7f0000002bc0)="$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") chdir(&(0x7f0000000840)='./file0\x00') syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000340)={0x26, 0x1, 0x10004}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4064890) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x80000, 0x78) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000300)={[0x6]}, 0x0, &(0x7f0000000400)={r1, r2+10000000}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003be8c5e687a8a6a006c000296f03ee2f4c78a680300006c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec1a799ba8584b2c8ac425a02aff06011500000000010000000affff027f000000ba00085d024f0298e9e90554062a6600379a11aaa6bef6215a3cd4d9b990", 0xb8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x9, 0x0, 0x3, 0x0, 0x5, 0x9c37}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000900)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.746813968s ago: executing program 32 (id=18): listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='.\x00', 0x800, &(0x7f0000000080), 0x25, 0x763, &(0x7f0000002bc0)="$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") chdir(&(0x7f0000000840)='./file0\x00') syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000340)={0x26, 0x1, 0x10004}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4064890) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x80000, 0x78) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000300)={[0x6]}, 0x0, &(0x7f0000000400)={r1, r2+10000000}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003be8c5e687a8a6a006c000296f03ee2f4c78a680300006c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec1a799ba8584b2c8ac425a02aff06011500000000010000000affff027f000000ba00085d024f0298e9e90554062a6600379a11aaa6bef6215a3cd4d9b990", 0xb8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x9, 0x0, 0x3, 0x0, 0x5, 0x9c37}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000900)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.039160852s ago: executing program 5 (id=279): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x5, 0x0, 0x3, 0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003940), &(0x7f0000003980)='./file0\x00', 0x802, &(0x7f00000039c0)={[{@uni_xlateno}, {@shortname_lower}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@utf8}, {@utf8no}, {@fat=@flush}, {@uni_xlate}]}, 0x29, 0x34a, &(0x7f0000003a80)="$eJzs3T1oJHUUAPC3mSSbBM5sIYhWq50gxyVioVXCccJhCj1Z/GoMXqJnJh5kcSEWt5fmxFKxEezsrtDSWixE7CxsvUJOxcbrDu5wZHb2Yza7a+Lhxq/frwgvb96beTM7ZCch+efVtdi5OBfbt27djIWFSsyunV2L25WoxUwkUbgaAMB/ye0si1+zwtHVHyz1ovkpzwUATE/n/f/1U8UnaURUY3F85bUTnQsAmJ5jfv//7Njs5amNBQBM0cj7/yNDmw/9mH+2/zsBAMC/1/MvvfzM+kbEhXp9IWL33Vaj1YinBtsXIy5FGltxJpbjbkTxoFA8LeQfnz6/ce5MPfdjLRp5R6sRsdtuNYonhfWk01+NlViOWrc/6/cnef9Kp78eEVfbnePHbqXVmIulvH87Ln2/FFuxGstx/0h/xPmNc6v17g4a+XFbMxHRjjioLfROIp//dCzHt6/F5UjjYuS9g/mvrNTrZ7ONXn8x//Vqpw4AAAAAAAAAAAAAAAAAAAAAAKbhdL2v1l//Jtttt65dOFxQG1ofp1FsXt/urO9zUKwPlFV7q/O8lxxeH6g+vL5OYzZm/tYzBwAAAAAAAAAAAAAAAAAAgH+O5v58bKbp1l5z/52dctAuZd76+tMvF+NwzZvJIBOzxe6Garq5KHUl0W/P+u1ZMlTTDZKIQfH1z/sTl2uqeWI+xrXnQbVzgr3MYuxsVoqZsmqannr4h4/Hdf02yCQxclmGg0p3ptKm3fuK1B90TQ5Wj6i5kWXZpPYrH412RSViduSF+yuCr26+8eDjzQee6GS+6C768Ohjyy/c+PCTn3c20+hemjSd32veze75WEnpxa10r3NlzJ0wPjgYZA72mvubyXe/vPjQ+9/0avKbYTNNkxjbnpUzb08+1meDTG+yTqbSC44407kJd+9o8MqdYvf3cjHnu6P9dNyu0hcJC3UAAAAAAAAAAAAAAAAAAMCJKP2t+J/w5HPTmwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATt7g//+XgoORzHGCO+0Y3VTd2mtOPPjiiZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Y78HAAD//wdwbzM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003e00)='blkio.bfq.io_merged\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000001900)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004c3000/0x4000)=nil) r3 = socket(0x10, 0x80000, 0x7) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000540)=""/4105, 0x1009}, {0x0}, {&(0x7f0000001580)=""/296, 0x128}, {&(0x7f00000016c0)=""/265, 0x109}, {&(0x7f0000001800)=""/164, 0xa4}, {0x0}], 0x8}, 0x7fc}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x6, 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 12.038878752s ago: executing program 0 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) syz_open_dev$vcsu(0x0, 0x5, 0x2200) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000b00)=""/4096, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_int(r7, 0x0, 0xe, 0x0, &(0x7f0000000100)=0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x1}) 9.070853295s ago: executing program 0 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) symlink(&(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='./proc/net/ipt_hashlimit/lo\x00') 9.02402622s ago: executing program 0 (id=288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x5, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x7}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x1, 0xff}, {0x0, 0x8000}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x4}]}, @restrict={0xd}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000b00)=""/196, 0x91, 0xc4, 0x0, 0x5}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x10005, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='ns\x00') renameat(r0, &(0x7f0000000700)='./mnt\x00', r0, &(0x7f0000000740)='./mnt\x00') 8.681209184s ago: executing program 5 (id=290): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000280)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x2982, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) open$dir(&(0x7f0000000800)='./mnt\x00', 0x2, 0x4) renameat(r2, &(0x7f00000007c0)='./dev\x00', r2, &(0x7f0000000400)='./dev/sda1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000540)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000580), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x24020400) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000700)="f739", 0x2}], 0x1, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f00000005c0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) writev(0xffffffffffffffff, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0xb0000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18110f0000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7110000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x1, 0x100000, &(0x7f0000001200)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000101200)={0x0, 0x20400}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.949926866s ago: executing program 0 (id=291): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xffffff9a}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x20}}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r5, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2800091, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001900)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000003b00)='.\x00', &(0x7f0000003b40), 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003c00)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000003c40)=@arm64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000003cc0)=0x2, 0x4) unshare(0x40000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x8, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x8001}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x13, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x2, 0xfc}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.87690617s ago: executing program 5 (id=299): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25010000272a83d7610000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r2, 0x5410, 0x80000020000000) 5.463508021s ago: executing program 5 (id=301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x10005, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='ns\x00') renameat(r0, &(0x7f0000000700)='./mnt\x00', r0, &(0x7f0000000740)='./mnt\x00') 5.430775934s ago: executing program 5 (id=302): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000980)={0xffffffffffffffff, 0xffc000, 0x5, 0xb}) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000009c0)=""/4096, &(0x7f00000019c0)=0x1000) socket$unix(0x1, 0x5, 0x0) r1 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x8f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x5, 0x8a}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xf9, 0xc, 0x9e}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xb, 0xd3, 0x40, 0x40, 0xd7}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xa1de, 0xf000, 0x80, [0x3f00, 0xcf]}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xe7, &(0x7f0000000140)=@string={0xe7, 0x3, "d2745e7e00bef7b8d022e1508996055439e85127c590ace51bb85b2cffa3d5e11f11975843e144282cf3dac5b9afbff4e5dd02fa05df83eb9d0b7a060d4d90ca22aacfd79bf39a95c4dc24bc036303ad120739495566ce2076ec3713ef7ca0c683a5c63b83f9ce8071459ce859c76908d8ebd60ddaa3b77cec253838b1a57c5774894110360890a4a0fa9faa90fd06b762dc234cd490f77e714f47fcf61c5fe674ed9916a437f22cb15ce95fc7842e748d58ca925349b416a583b80b0f5bd431f8efbaf2c5cde785433c0b74a0f04e9795739bb6d000469c9934a576ab49e14b20ad128210"}}, {0x83, &(0x7f0000000240)=@string={0x83, 0x3, "88144261c79d63cdda8be0b0dc389d9b0b7c2d2bc3c18a89a15965ef5d916447bb1008cc2ddcfa968a8a8eb1ba0558c9008717f774f00cbc99eee3ba25ae58469c6b4375865b6a1373a76aca98ab22eec335626188150cf9a7fc12f4a417a373e2054824de35d2e5a9382a94f655d5c91f3fc207ce753261629dcc7d9a6f0c7470"}}, {0xca, &(0x7f0000000300)=@string={0xca, 0x3, "7be4f01a604fda052860a91ad91a5615ba7488d088d2566335e0cace4a0b2d05abe554badd9a9f1fb816c20be4b340fca5edebecae1bde8db52729d37cee93f4e38d821a18f8c382b46b473aedf9facecc4b603ce2bb3ff9a04e8ad27e90414a146fde95dabb250724fed930221aa80aaa2aa186ea171e5102af8dc28c08e534c2c3d2ecf8b6fa3e66ceb50610550c1c4ec1cad5712d15559a40232cb9d0fbae4a67078152aaa39e5dd9e30b4a17d956ed2a1016479894e7e38fd95a8c464e323939bce576b01f7d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0x75, &(0x7f0000000440)=@string={0x75, 0x3, "4e04fbcfb44e8c8d7f8f82507bbc58f75c76b33c49d9fb1288364f44ba6b26e60747432739e88baf25f7ab70c8580d22ae1ab389625d2a7f8ac4d09c1f143fc79bf68873a3301e2e545483df92c9160aa0528aca8db2d94fd3ec45d55858becfce902391788d3ab57cf3e7c8e81644a9b8f425"}}, {0x8, &(0x7f00000004c0)=@string={0x8, 0x3, "ad2b1460e76c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4001}}]}) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x8) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001ac0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001b40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001bc0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001c00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001c40)=0x2) syz_open_dev$loop(0x0, 0x4, 0x4942) setitimer(0x1, &(0x7f0000001c80)={{}, {0x0, 0x2710}}, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001cc0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001d00)='./dev\x00', &(0x7f0000001d40)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_control_io$printer(r1, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x0, 0xa, 0x6b, {0x6b, 0x23, "3035bea189f81fa610c4b5acc4f979dab218aec10c07c4d2bfa716cf74fed4bf8225441b37b06b029deded6b172b9e66d8da3a91db1a9567c577ca6c40c3db37c82ccfdf4256c27318778a24a116ee80ea0727ed839eaccc1799da847dc47fd03790307d5ae6cf6787"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x40, 0xc, 0x1e, "298b0bb07c3f7de280fecf192ba76b5f5a44475810e748207c92d1d1d9f3"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)=ANY=[@ANYBLOB="2000a1000000009f44880b83c626301412a56fa9db0e9ef33e3bdc401d1889e5401adf2203474e9dbf32c97cc2b5f18df93633a9cfb68c760b1af1b9219c33d2513fe618ab8193972fa21af2ab3f89fe795c7bd85f75bf0aa02094d7405bbecd3835f1a40843d6b94630b00f6ed0de2c1baebe9badf8b6e0b04c5d3df9487bc2527708d29d51c964c622a258b352199860a7a685f218fc"], &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xe}}) fcntl$setpipe(r0, 0x407, 0x8000000000000001) 3.682473017s ago: executing program 0 (id=306): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@dax}], [{@measure}, {@permit_directio}]}, 0x1, 0x522, &(0x7f0000002240)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xffffffff], 'veth0_virt_wifi\x00', 'wg2\x00', {0xff}, {0xff}, 0x67, 0x2, 0x7, 0x51}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0xfe, 0x1}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4000004, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(0x0, 0x44) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000016c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000001940)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001980)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000001a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001a80)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001b00), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001b40), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r7 = add_key(0x0, 0x0, &(0x7f0000001b80)="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", 0x52f, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000020c0)={r7, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={0x0, 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r8, 0x4, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000b40)="667bb4ff43f3bdf4152965c36e9c315082104ddc09b69a8f3d6b9dc5a3fc4a880e1d4d7b23185bda6c8e4024af1db2aefdb7f9531b8f08280ad7936a5094", 0x3e}, {&(0x7f0000000b80)="a1d523c1a6cae68fc4824241323c8f88bbf28bfe5e99206c41ae156c38f9026971a7401d99a154297e9c3851406d5520e25579fc906e9bee698c6878aea96df2fa6460af258018faa8be6a48b1581d719e1544f7d48273b41f988ef7a06361aa609239f2fa82c212cac21c26a0a0b715346ce31c8ab0656cf7bd593966da111465418e4b6871575d09947f7f307694884a034835d67b5a3cad04398e72bd555d5acd1d321687a83efd40cc5e526203024717ec285ea7bdac1f1de1ae4839ecae38ec025493f6cce7d51c4e8833651b92755b27b9a707953241846a1e17001f2ee60924ad169eb49a", 0xe8}, {&(0x7f0000000c80)="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", 0x78f}], 0x3, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x44, 0xd4, 0x1, 0x6, [{@empty, 0x7ff}, {@remote, 0xb}, {@private=0xa010100, 0x9}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x8}, {@remote, 0x9}, {@empty, 0x7}]}, @timestamp_addr={0x44, 0x4, 0x19, 0x1, 0x5}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0xd0}}], 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xd3, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71}) 3.682086707s ago: executing program 3 (id=307): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@dax}], [{@measure}, {@permit_directio}]}, 0x1, 0x522, &(0x7f0000002240)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xffffffff], 'veth0_virt_wifi\x00', 'wg2\x00', {0xff}, {0xff}, 0x67, 0x2, 0x7, 0x51}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0xfe, 0x1}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4000004, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(0x0, 0x44) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000016c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000001940)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001980)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000001a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001a80)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001b00), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001b40), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r7 = add_key(0x0, 0x0, &(0x7f0000001b80)="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", 0x52f, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000020c0)={r7, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={0x0, 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r8, 0x4, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000b40)="667bb4ff43f3bdf4152965c36e9c315082104ddc09b69a8f3d6b9dc5a3fc4a880e1d4d7b23185bda6c8e4024af1db2aefdb7f9531b8f08280ad7936a5094", 0x3e}, {&(0x7f0000000b80)="a1d523c1a6cae68fc4824241323c8f88bbf28bfe5e99206c41ae156c38f9026971a7401d99a154297e9c3851406d5520e25579fc906e9bee698c6878aea96df2fa6460af258018faa8be6a48b1581d719e1544f7d48273b41f988ef7a06361aa609239f2fa82c212cac21c26a0a0b715346ce31c8ab0656cf7bd593966da111465418e4b6871575d09947f7f307694884a034835d67b5a3cad04398e72bd555d5acd1d321687a83efd40cc5e526203024717ec285ea7bdac1f1de1ae4839ecae38ec025493f6cce7d51c4e8833651b92755b27b9a707953241846a1e17001f2ee60924ad169eb49a", 0xe8}, {&(0x7f0000000c80)="e8248e7f3f14318e8c110ac9a4c3486b8f6da6e666c0f3180161547eb190575f444a34ec9f3f9b7195d5fc6da6d78ee958657b4957d7c763e02a39baec7403f3b4149949928b6fdcf4525e8669d083b4af19461d5f21a8f6f5e01b801f79f6800000509327b093aa5484e809a15251945c453973d105333f37e05f3812988681da346c19e586e731e75638b13d46b2dbfef7b7e76b60ea026ec24c5668d39dbf72ef3c8e38080ff291ce2eaee205d096cc85db176d1ce502a2849106a21e07b3e8efe09e9e2924e86308200459debe673c26809bef18665b840c0469e50ad5947d640f699a57a5da00c1e9e28b34e5515fc2963528c4b6ae73eef2dc79d0fc810afb5968e90b9ef7ec68347d1acddd6e7bbd8912a83c181eb6c4e8cce6e1b17c0fc98ee4ed06cedf2d8a7c53f706815bd96d899a68543fde6452ca12970c9afd8689b5fd59a5b3d01a7aba77268a3aa7effe9ca867df0693f54f2cca15aaf533d262c843d55975c386fe092557b2e447142eb63835fcd355501e6b78ce249492c698d5c12fc390329dd101cc7ac1adf3b9d337d68a8dc704ca89ab6130da7e041b6b4cd8cac0dae692dd5e3ac0f53c156d1c5d2f889d68be1811e62857a170194825a24db68260ddd624f846253aacfe544c508afe316217e3e6ca33ce1bfae508dcde95cf5bfb82e534727061a3640efb577524cedbe5f043721846ec1fb36482d5571e802c0ceb85ee482e8a7e098bf3c750b7c2b729d00d7310727b5a993cc0ddc18b59bf28417c5d8295ec03c35fc549b63d1dda082372245763291354098f3e891c10c37bf8856be8fc531c76b91586a9e3e363c961e7b82f54ce357222cb7e7edcbc996e93a4ff18d18e5e1585a079482e04c8727624db7cbab5af122991491b5678d06e692b4d8c124f5d0decf841e22d99f626705cd68bed407eb46207521dc961fa6abc5628101432b48e2e1d6188acfa73b7cfc7ae5d7db4b7753c16beb084df1c47bd43001b887ba935cd5e81997452e9c198be365d0bdeabbc8732c1653611e6624a6d1c98087981f6f8dcbfc449f5ba5d6a45318bda44fe63d6fd38e6ae2cdece77bf7121fb4cbdb680ea5eedc43b662eae7017f4eb4d9231f27ad365efe1e7a08dd92e77695039c1d5624079b0a4c01aad4d81c7679fc19840c4d4b25094c3b409e45b07e2980e65b3cc2673b2e0c672efe7784861cd509d80b56fee92ef825ab5c91b354a21aba3ede054912618d5b724578dccfeb33fdb244e2f5e3634d2a89f01a02f73c0370beb971be383aab7aed2bbf55f231eea5a9376ae3f3bd24cc740eb164db2787a25a461a4fb85a9688d5f0b83f325bf28e76091e6a55d056f363ecdd0d4b53098fe896acdf7e581b37298dcaf78e9ac0f3cfb653343c837e21b5f69bf02d7cc8c9e755a6a97efc4d9ea2cd3187dc8e2f885126429988e0acfa0f048a46c4bcf8014d1f35b676f4b959ce688a699789cbcd6fea58caba3479b4304d3685d1a26fa90863fcb5d642043fe8373a46146854b1ec9b241d5490ca04300e2bff1280a03cf94983af9812c7ab4f77bfda1f4024b73e7892345f4deecb2f8dd30a7d3dfd6db90480526b14919536828da8eb0a4bbe763cba1e0ebe641163482d923b802779fa06e056c7b103df61ac45804588714419a2a2037f44726b0343ea3f2b23f95a36f191f92229e9badaff91b6b1ce7ea9df023df80b71e17fb325f24558183d4ad88d9d914a92677e65b194a8a8a6542c190d385246fb5ef1c9de568c1c846b9fc343c4860ddbf5e537835f5ad435581eea6c87834f9e92e954154e32db07c7127a274ecd59201c29f679ea621200245bd2b8fa4df468b9253e0e6a42e1521d18934803e00fd8d0933023b31743cc6e281c347a5026f4a828e6b9f0baddac77c43fb89768bcb036a0a89326d9a36276edacdcc7ee8255ffaf173689cf8edb1b9cb5d4676e8805a0c9b230fd21cf46511c95664aef50799e9a62c96a044deea66914aa3445284ab00ee63b54941c3799bb763752056013fc547da76cc3b9c67ecc80dc09dd217bbb91598ad8605bf03dc1558de08b281a5f95177ca2e658cc88ad77d45b406998cd53c53c02c2308c15ff9fcb7370f497cce17e7fc48bd4bc1702e59abb609ce2764c2d892458ce0b2a14d73e37b833329879e3f8f83a725bd7a25504bc3fdde61778ea1c44809ecd864d1b888194adb0138006d38735c51b900cf27f9868961f9fe2a2f8f5f8ddb245eccef68c40738e0a9689dc13d0840c86558dc2ede94c64834ae61841dd390d24c8ea8242105959ba45a522d9fb96ab73b3fce2833ed33bbfce07a1a021595aa87b871eaf11a2f1b9e116f8c6cec42eef6970822c212154b976d19d1f7e6c9290830438c798e5e24ee01d123a7724cc7492f509d6ea2827bf3bcc2d818c03de8dbd452300592b1046eb1f2c85459e596df6d5e5e05bafb9bf8617a5158df0a48b0eea21f259fecdaa20abe2ce3e4257f6100670124b3208772e9dc3f01a1455f020b5879e3ab50f4d899007b85f7cb7556106792759e22cfd736985bfa9f8f0f5a6b4830cc7b1bf65caaeec519ca8dc086edab919dc27153e8941ab7c2fdc1947b91a2ad1df63f51169b10985128d49421930937c9a1c79634229e926f805ec1b70b215462d77ef5dd760345b1ce5001faef0295fab306583a0cf9f84fbfbbaf7467ce72087a79c50edcc71e4817376634bc", 0x78f}], 0x3, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x44, 0xd4, 0x1, 0x6, [{@empty, 0x7ff}, {@remote, 0xb}, {@private=0xa010100, 0x9}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x8}, {@remote, 0x9}, {@empty, 0x7}]}, @timestamp_addr={0x44, 0x4, 0x19, 0x1, 0x5}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0xd0}}], 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xd3, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71}) 3.557160729s ago: executing program 1 (id=308): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/179, 0xb3}], 0x1, 0x2, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@initdev, 0x0}, &(0x7f0000000200)=0x14) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@arena={0x21, 0x0, 0x0, 0xe, 0x40400, 0x1, 0x8, '\x00', r1, r0, 0x0, 0x4, 0x4}, 0xffffff3d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000540)='GPL\x00'}, 0x94) 3.000742654s ago: executing program 1 (id=309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="183cdd000100000000000000600000000000000000000000835e99ade7a23fab9397b0394bd9c6574a897fab51b933232005240d89e5cfd10c07a26ef6c96a6f6169840a3b874d1dc0b4220445b1"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) r2 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x18}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltfilter={0x138, 0x2d, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x7, 0xb}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfffd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x2b, 0x9}}, @TCA_U32_ACT={0x9c, 0x7, [@m_vlan={0x98, 0x13, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x399}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x5a, 0x6, "b16ae120def7d376fd9c97b54bca57902d1bd3bf145e35abc6e95ff80caffcc3937697f61ae7578817e8d799e2429b1e57c348ecc01866f6d4e3ac0381c4f5b037a70e5e2665e846172531a755e7ac96da20a76d2a98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4e7dc4f93756881f}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x138}, 0x1, 0x2b1e}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000880)="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", 0x4d8, r6) sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x320, 0xa, 0x148, 0x0, 0x60, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x59}, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0xffffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x56}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r1, r9, 0x3, 0x0, @val=@iter={0x0}}, 0x20) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)="fb", 0x1}], 0x1}}], 0x1, 0x20084058) 1.739405759s ago: executing program 3 (id=310): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000280)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x2982, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) open$dir(&(0x7f0000000800)='./mnt\x00', 0x2, 0x4) renameat(r0, &(0x7f00000007c0)='./dev\x00', r0, &(0x7f0000000400)='./dev/sda1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000540)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000580), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x24020400) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000700)="f739", 0x2}], 0x1, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f00000005c0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) writev(0xffffffffffffffff, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0xb0000, 0x14) 1.739098239s ago: executing program 4 (id=311): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000b40)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/50, 0x35}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/206, 0xf8}, {&(0x7f0000001dc0)=""/249, 0xf9}, {&(0x7f0000001ec0)=""/240, 0xf0}, {&(0x7f0000001fc0)=""/112, 0x70}, {&(0x7f0000002040)=""/140, 0x8c}], 0x8, &(0x7f0000002100)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10100, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208205, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@noquota}, {@mblk_io_submit}, {@lazytime}]}, 0x81, 0x63d, &(0x7f00000003c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af25, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000a00)='mounts\x00') pread64(r5, &(0x7f0000000a40)=""/237, 0xed, 0x4eb) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c010000100001002bbd7000fbdbdf25e0000001000000000000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x4050) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) 1.738507189s ago: executing program 5 (id=312): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000240), 0x4) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/174, 0xae}], 0x1, &(0x7f0000000500)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x4800) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0xc002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$bind(0x0, &(0x7f0000000280)='.\x00', 0x0, 0x21, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14927e, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x10, 0x4040) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000007c0)={r5, 0x6, {0x0, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x4, 0xd, 0x14, "88807bc062587da82381d361b893ea21c7e60d873a96c8388fe9215c18a8266936780c44fe3853bc8926f8d362cedb4c00", "5c9080c207fb15c589f43b785655fc7bc7167f1004f66d2127b037f2c38e5b845bab1cf3b9635278acaf3fe30d5bcf76138347aae9872cc1b0d76491a1cea9ab", "cc8354562a039edb172719e4f6f29b8eae64f92e55e2f1089aa2a384583b7a9d", [0x10000, 0xb2]}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) 1.737442209s ago: executing program 0 (id=313): syz_usb_connect(0x5, 0xb3, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x54, &(0x7f0000000040)=@string={0x54, 0x3, "54a602ae9df9251b563a28e10f32b116641bb4071b8392c1d74c43044771c9886f2da4af3910eed23b4348ca9de830781109cb49ebbc4bb40cdc5d8205f14ede41e559d2b9655e79a99665acc2ef63039cc0"}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e9feff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b7040000010000008500000015000000850000009e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ef000000850000000200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r4, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000700)='./file2\x00', 0x2208806, &(0x7f0000000740)={[{@acl}, {@nouid32}, {@bsdgroups}, {@abort}]}, 0x6, 0x54e, &(0x7f0000000780)="$eJzs3WFrHGkdAPD/zO72mjbn5lTkPPB6eCdt0W6ai70LvjgVxHcHyvm+hnQTQjbZkmzumlA0xQ8giKjgG30lguAHEKQfQYQD772oKKI9fSF4OjK7s8lesrtJabJrN78fTGfmeZ6Z//PsZp/dZ2Y6E8C59VJEXIuILMuy6xFRjZl2elpMsdeZ8nLvP7q/lE9JZNlbf0siKdK6+3qmmF8uNrvYzUiOxt3a2V1brDTqm8X6bGs9+SDLdm+sri+u1FfqG/Pzc68tvL5wa+HmqbQzb9UbX/nTD777s6++8evPvfP723+59q1OAzt623GaOk2vHLwWEVGOiM2zCDYm5XYLO26NuS4AAAxXjYiPRsSnI+J6VKPU/jUHAAAATJLsi9PxQdI5/wcAAABMpjQipiNJa8X1vtORprVa5xrej8eltNHcan02q+4fL5iJSrq82qjfLK4dmIlKkq/PFdfYdtdfPbQ+HxHPRcT3q1PJ8oOo15aajTtjPfIBAAAA58flQ+P/f1Y7438AAABgwswMznI3AAAAAJgQHx7/V8ZWDwAAAOCMlIee/wcAAACefl978818yrrPv77z9s72WvPtG3fqW2u19e2l2lJz825tpdlcadRrS8314/bXaDbvfj42tu/Ntupbrdmtnd3b683tjdbt1Q89AhsAAAAYoeeuPHwvjYi9L0zlsyzpyatEZKXewm4GABMlfZzCfzy7egCjVxqae2lk9QBGr/9P+mRv5BUBRu7Y/+xvzA8T77h+YODFO785/boAAABn4+onH76XdM7/t6fchSLvSpZlY60ccKaK8/9JMu6KACNXetxrgICJ4WbfcH5Vhl0BaFAAEy89wUf9yc//O5YIAADjNt2ekrRWjAOmI01rtYhn248FrCTLq436zYj4SET8rlp5Jl+fa2+ZODwAAAAAAAAAAAAAAAAAAAAAAAAAACeUZUlkA0ztlzkq0v7pAAAAwP+fiPTPSfH8r6vVV6YPHx+4kPyr2p5HxDs/fuuH9xZbrc25PP3v++mtHxXpr4766AUAAADQT3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpev9RErGXL91fGmXcv345Imby+PeXulMnpxwX2/OLUYmIS/9IotyzXRIRpVOIv/cgIp7viZ8eRJhpV61Ti8Px82JTZxF/v/3Hx798CvHhPHuY9z9f6vf5S+Ol9rz/569cTE9qcP+X7vd/pQH937P9dpgeTXrh3V/ODoz/IOKFcv/+pxs/acf/xPLh+C+fsI3f/Mbu7qC87KcRV6N//N5Ys0n57uzWv7Mbq+uLK/WV+sb8/NxrC68v3Fq4Obu82qgX//aN8b1P/eq/w9p/6Wj8/Cun3f8etP/o6//KCdv/n3fvPfpYZ7FyKKsSP8myay/3f/+fHxC/+933meLtztevdpf3Osu9XvzFb1+8MqT9d3raXx74/h9t/7WD1YFfxXm561//zh+Of5UAgFHZ2tldW2w06ptPsFDqLnR/IBwtk6cepFw46Z5j4A4tPE0LU6N8BxdjWJnu3+gI6vPtp/Cv9+elbp8w8q4IAAA4Ywe//k+6xWmc9QYAAAAAAAAAAAAAAAAAAAB6HXsHvv5ZWZZlJ9m8750F9sbSUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4f4XAAD//7ccuU0=") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="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", 0x381}], 0x1}, 0x8810) recvmmsg(r5, &(0x7f00000006c0), 0x2f, 0x40012012, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f00000003c0)="9d6bdde868beea35a1d507721b3b96e258b1a736d26b95a42eb6bb0eb33b68bbfd1f5d222d51f3", 0x27) 1.683457854s ago: executing program 4 (id=314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x40040, 0x6ab858183a7ef63b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) removexattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='system.posix_acl_default\x00') ioperm(0x9, 0x3, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x0, 0x5, 0x4e23, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@multicast2, {0x0, 0x200000000000003, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='\\\x00\x00\x00', 0x4}], 0x1}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000a00)={&(0x7f0000000a40)={0xa, 0x4e20, 0x2b, @loopback={0xfec0ffffffffffff}, 0x5}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000b00)=ANY=[], 0x28}, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x22) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000880)=0x6) syz_open_procfs(r6, &(0x7f00000008c0)='net/tcp\x00') 1.611249211s ago: executing program 4 (id=315): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000600)='./file0\x00', 0xc0000, &(0x7f00000010c0)=ANY=[], 0x1, 0x154, &(0x7f0000000640)="$eJzs27HK02AUBuCTtmrVpbM4BFycinoFilQQA4rSQSeF6tJKwS7RqZfi7XgH3oQgnbp9oimt1nb4hzT92+dZcuAlcM6QHL5A3t7+OB5NZx+mLxbRzbLoPIw8lln0ohXtqMwDADgly5TiZ0opXZvH9a+RUmq6IwCgbvY/AJwf+x8Azs9/+7/VdEcAQN1evX7z7FFRDF7meTfix7wclsPqWuVPnhaDe/kfvc1di7Icttf5/SrP/82vxI1V/mBnfjXu3qny39nj58VWfjNG9Y8PAAAAZ6Gfr+083/f7+/Kq+uv7wNb5vRO3OgcbAwC4gNnnL+N3k8n7T5e9yFYDHUs/ilqL798ijqCNEy4afjEBtds89E13AgAAAAAAAAAAAAAA7HOI34manhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/QoAAP//v8RNww==") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 1.566151745s ago: executing program 3 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) getuid() r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3ed3, 0x5}) syz_read_part_table(0x4030, &(0x7f0000000980)="$eJzszjFKw3AYxuE3avCPZBHchGAQHCVuTrlFLpAzODuYmziGHqDH6wFaKB0aCH2e9fte+IVN2k+75yRvXea+T0qShxNv/Vfqp3KXJsnP8Xlc1mgFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2bXrN/Dvku0nKY5K/+9RDW+Ul6T7Pz8dljUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kb9v2ce2iol6T4un4/LNaIAAAAAAAAAAAA4sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//1SYMTA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000140), 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2d) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.526330729s ago: executing program 4 (id=317): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000800000000000000ab0a0000731135"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d40), 0x651, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r3, &(0x7f0000000040)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f0000000080), 0x7fa) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000810000462f01fe800000000000000000000000000000fe8000000000000000000000000000aa04206558000000000fff00000800000086dd890288be00000004100000000100000000000000080022eb000000002000000802000080000000060000000008"], 0x0) symlink(&(0x7f0000000400)='./file0/../file0/file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00') write$FUSE_INIT(r5, &(0x7f0000000a40)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x40020104, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xcaab}}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write(r4, &(0x7f0000000b80)='0', 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) 1.331220168s ago: executing program 1 (id=318): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8000038, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x110, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x6, 0x6, 0x1, 'syz1\x00', 'syz1\x00', {0xfffffffffffffff6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x3}, [], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x2b}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit], &(0x7f0000000040)='GPL\x00', 0x73, 0x0, 0x0, 0x41100, 0x28, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xa, 0x800, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x5, 0xe, 0x0, &(0x7f0000000480)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.330999788s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x2200) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000b00)=""/4096, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_int(r7, 0x0, 0xe, 0x0, &(0x7f0000000100)=0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x1}) 118.010278ms ago: executing program 4 (id=320): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) 109.126919ms ago: executing program 1 (id=321): prlimit64(0x0, 0x2, &(0x7f0000000480)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0xb, 0x20010, 0xffffffffffffffff, 0x8000000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x801653e) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="002145000014000b0000400600000a0000010a0d6f7a00000200500050010300"/42, 0x2a}], 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8004, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x100000001, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) mount$bind(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x21, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, &(0x7f0000000300)) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000900)={0xd4, 0x0, 0x3ff}) r8 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r8, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x278, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r7}, [@verity={0x0, 0xc48, 0x0, 0x140, 'verity\x00', {'0', 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '4096', 0x20, 0x200000000061, 0x20, 0xfa, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @none, ' 2 ignore_zero_blocks check_at_most_once'}}]}) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r11 = open(&(0x7f0000000340)='.\x00', 0x20000, 0x0) close(r10) execveat$binfmt(r11, r9, 0x0, 0x0, 0x0) 47.184095ms ago: executing program 1 (id=322): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) (async) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000000)="b7d54130e889a0a3031f19bcaf2ffdb4150662af226b34ed78abc48c07060fa6629b55187dbd15fdd678c9fe5253ceed9d4020b32faa28d3e54471a0043d950557f458c711f384fc0b26abf684d295670a4f06f03f70efd5e12dbe74dc14d908e0cb6ec19f121dc63c4f32fc0c630b0fb9dd458872b3cb3e7dd7a24ca92da06bf807459a9f2734995d41c2ebb4be46fafec49671f523fda0582ebaebfe987f1dd3bdfc4cd81fdf3b4cf6c9c5a609b111e0288d375b710822e700ee50939683147c17f1948ac3e9ac31cccb756d4e25dc817c7eb3a05ab020d08578ae46d3", 0xde, 0x8001, 0x0, 0x1, r0}]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0) (async) unshare(0x62000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 46.919845ms ago: executing program 4 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge0\x00'}) (async) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000800)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000900), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x2810400, &(0x7f0000000300)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000380)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") fsmount(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x13) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)) (async, rerun: 32) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) (async, rerun: 32) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='g', 0x1}], 0x1}, 0x11) (async) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000008820507004000010203010902d900030109200c080b0001010130f30904000000010130000a2401012a000310000013240303000000060004000000080004000a000d2409060400000000000000000904010000010230000904010101010230000db40a2402020080040000040a240201e106070485621724011024000000810b020000000000000008000010000a2402020300020000060924020106078105060905010910000805f80a2525020000000707000904020000010230000904020101010230000905820900040602210a252504000000020000"], 0x0) (async) fstat(r6, &(0x7f0000000600)) 46.462255ms ago: executing program 3 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", ""]}, 0x14}}, 0x20000001) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@dev}}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_getnetconf={0x4c, 0x52, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xf}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xea3c}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3bce}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x2400c000) socket$unix(0x1, 0x1, 0x0) fstatfs(r3, &(0x7f0000000600)=""/5) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)={0x42c, 0x3f3, 0x10, 0x70bd28, 0x25dfdbfc, {0x10, 0x0, 0x4, [0x0, 0x0, 0xd, 0x5, 0x1, 0x7, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x4, 0x1, 0x7ec8, 0x1, 0x81, 0xffffffff, 0x2, 0x5, 0x8001, 0x0, 0x200, 0x10, 0x4, 0x8, 0x10001, 0x33, 0xffff0001, 0x8, 0x3ff, 0x5, 0x8, 0x4, 0x7f67, 0xdd8e, 0xae, 0x4, 0xff, 0x7, 0x0, 0x5, 0x0, 0x0, 0x7, 0x1, 0x7, 0x3c5, 0x27, 0x9, 0x7, 0x5d431b12, 0xfffffff9, 0xf9f9, 0xc, 0xcb11, 0x10000, 0x5, 0x287, 0x401, 0x7, 0x5, 0x5, 0x7, 0x1], [0x401, 0x53a, 0x2, 0x6, 0xc909, 0x5, 0xa, 0x9, 0x1, 0x0, 0x6a, 0x3, 0x3, 0x80000000, 0xc9, 0x1, 0x7, 0x80000001, 0x4, 0x7, 0x7fff, 0x5, 0x814, 0x9, 0x8, 0x5, 0x7, 0xa8c, 0x2, 0x3, 0x15c2, 0xe, 0x14, 0x40, 0x1, 0xf, 0x9, 0x0, 0x4, 0x7, 0x3, 0x1000, 0x0, 0x8, 0x9, 0xd3e1, 0x8, 0xfffffff5, 0x1000, 0x5, 0xe, 0x0, 0x1000, 0xc34, 0x9, 0x0, 0x200, 0x7, 0x1, 0x800, 0x8, 0x8, 0x3, 0x7], [0x8, 0x100, 0xfff, 0x8, 0x200, 0x8, 0x3, 0x6, 0x1, 0x74a9, 0x9, 0x8, 0xfc, 0xb226, 0x12, 0x9be, 0x5, 0x0, 0x8, 0x1ff, 0x7, 0x7, 0x9, 0x2, 0x0, 0x3, 0x9, 0x4b05, 0x3, 0x7, 0x18000000, 0x4b, 0x7, 0xa5, 0x0, 0x4c9f, 0x3ff, 0x4a16, 0x5, 0x8, 0x10001, 0x8, 0x5e3, 0x8397, 0x1, 0x35f, 0xd471, 0x3, 0x1, 0x5, 0x1, 0x2d3, 0x7, 0x3, 0x4, 0x10000, 0x64cb, 0x9, 0xe5f3, 0x2, 0x4, 0xff, 0x1000, 0x4], [0x6, 0x7df, 0x81, 0x6, 0x400, 0x9, 0x0, 0x1b1f5309, 0x5bb1, 0x91, 0xb4, 0x6, 0x5, 0x5, 0x7, 0x3, 0x9, 0x3, 0x131e, 0xffffff01, 0x5, 0x6, 0x8, 0x9, 0x400000, 0x1, 0x1b00, 0x2, 0x1, 0xbcd, 0x7, 0x8, 0x4, 0x5, 0x4, 0x5, 0x1, 0xffffffff, 0x2, 0xd, 0x7, 0xfff, 0x1, 0x3, 0x80000001, 0x9, 0xff, 0xdd3, 0x0, 0x2, 0x53, 0x77e7, 0x8000, 0x1, 0x10000, 0x2a, 0x6, 0x0, 0xfffffffb, 0xffffffff, 0x9e9, 0x25, 0x9, 0x400], 0x9, ['mptcp_pm\x00']}, [""]}, 0x42c}, 0x1, 0x0, 0x0, 0x8080}, 0x801) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000b40)={0x0, 0x4, 0x0, [0x9, 0xfffffffffffffe01, 0xfffffffffffffffe, 0xd1, 0x5], [0x8, 0x2, 0x5, 0x6, 0xf, 0xe50, 0xf, 0x8, 0xae300000, 0xd, 0x4, 0x9, 0x800, 0x2, 0x0, 0x9, 0x1, 0x1, 0x8a3, 0x8000, 0x32, 0x3, 0x1, 0x100, 0x3, 0x5, 0x8, 0x861, 0x100, 0x1ff, 0x7, 0x80000000, 0x7, 0x9, 0xfffffffffffffffd, 0x4, 0x156d, 0x401, 0xfffffffffffffbff, 0x7fffffffffffffff, 0x80, 0x1000, 0x400, 0x4, 0x6, 0xf, 0x6, 0x7, 0x0, 0x1000, 0x3, 0x6, 0x5, 0x1, 0x9, 0x4, 0x2, 0xfffffffffffffff9, 0xb6, 0x2, 0x9, 0xffff, 0x6, 0x4, 0x8, 0x8000000000000000, 0x3, 0x100000000, 0x7, 0xc6d, 0x7, 0x9, 0x932, 0x4, 0x9, 0x6, 0x84, 0xb54c, 0x7, 0x9, 0xce6, 0x4, 0xa, 0x3, 0x9, 0xc6d2, 0x596, 0x7, 0x3, 0x6, 0x1, 0x3, 0x6, 0x248a, 0x3c38, 0xa000000000, 0x8, 0xce6, 0x6, 0xfffffffffffffff8, 0x7, 0x8, 0xd35a, 0x3, 0xfffffffffffffffa, 0x8001, 0x6592, 0x7, 0x4, 0x100000000, 0xffffffffffffa54c, 0x8, 0x8, 0x3, 0xffffffffffff18c1, 0x8, 0x0, 0x3, 0x3c52, 0xc, 0x8001]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000f80)={r5, 0x0, 0x5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r6, 0x4, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, r7, 0x813, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001580)={'pim6reg\x00', {0x2, 0x4e20, @empty}}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f00000015c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000001600)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x440d00, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r9, 0x40406f06, &(0x7f0000001680)={0xffffffffffffffa8, 0x2, 0x8, 0xffffffffd3f34c07, 0x3}) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008051) 22.096298ms ago: executing program 3 (id=325): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x1cb) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x120) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0xfffffffffffffebf) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) 0s ago: executing program 3 (id=326): getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect$uac2(0x6, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0x80, 0x40, {0x8, 0xb, 0xfc, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x5, 0x10}, [@sample_rate={0x7, 0x24, 0xd, 0x4, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x9, {0x8, 0x25, 0x1, 0x7e4b465ef3e4f348, 0x0, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0xe4, 0xf1, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x2, 0x9da}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 22.303851][ T28] audit: type=1400 audit(1794133619.545:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.304996][ T279] cgroup: Unknown subsys name 'net' [ 22.326540][ T28] audit: type=1400 audit(1794133619.545:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.353820][ T28] audit: type=1400 audit(1794133619.575:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.353987][ T279] cgroup: Unknown subsys name 'devices' [ 22.492798][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.498409][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.600640][ T28] audit: type=1400 audit(1794133619.835:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.623817][ T28] audit: type=1400 audit(1794133619.835:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.648601][ T28] audit: type=1400 audit(1794133619.835:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.657327][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.680608][ T28] audit: type=1400 audit(1794133619.915:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.706123][ T28] audit: type=1400 audit(1794133619.915:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.706925][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.732186][ T28] audit: type=1400 audit(1794133619.945:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.765853][ T28] audit: type=1400 audit(1794133619.945:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.037380][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.044485][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.051899][ T287] device bridge_slave_0 entered promiscuous mode [ 24.059881][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.066988][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.074417][ T287] device bridge_slave_1 entered promiscuous mode [ 24.153488][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.160542][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.168027][ T288] device bridge_slave_0 entered promiscuous mode [ 24.181355][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.188390][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.195800][ T291] device bridge_slave_0 entered promiscuous mode [ 24.202698][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.209716][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.217168][ T291] device bridge_slave_1 entered promiscuous mode [ 24.223808][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.230837][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.238760][ T288] device bridge_slave_1 entered promiscuous mode [ 24.302070][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.309124][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.316587][ T289] device bridge_slave_0 entered promiscuous mode [ 24.326313][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333406][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.340843][ T289] device bridge_slave_1 entered promiscuous mode [ 24.347443][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.354488][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.361867][ T290] device bridge_slave_0 entered promiscuous mode [ 24.381395][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.388443][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.396035][ T290] device bridge_slave_1 entered promiscuous mode [ 24.466110][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.473192][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.511700][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.518747][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.526031][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.533061][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600662][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.607754][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.615029][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.622058][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.630436][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.638090][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.645519][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.652693][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.659801][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.668434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.675923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.702975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.710513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.718831][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.725885][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.733527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.741848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.749977][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.757032][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.764368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.772813][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.779824][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.787215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.795429][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.802494][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.817312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.842942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.850880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.859078][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.866122][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.874293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.882820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.902251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.910858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.919163][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.926194][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.933617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.942955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.954777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.968177][ T287] device veth0_vlan entered promiscuous mode [ 24.981997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.990000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.997662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.005238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.014895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.023189][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.030194][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.037824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.046365][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.053407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.060728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.068729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.077129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.091378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.098906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.106803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.115291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.123584][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.130592][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.138110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.146492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.154878][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.161909][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.186116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.194286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.202442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.210711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.219266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.227776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.236296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.244264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.252480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.259878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.269477][ T289] device veth0_vlan entered promiscuous mode [ 25.277824][ T290] device veth0_vlan entered promiscuous mode [ 25.288772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.296902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.305133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.313370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.321803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.329797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.337975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.345718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.354589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.363064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.376680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.385111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.398007][ T289] device veth1_macvtap entered promiscuous mode [ 25.405355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.413720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.422150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.435145][ T288] device veth0_vlan entered promiscuous mode [ 25.447616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.455673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.463874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.472353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.480260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.488695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.497203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.504804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.512309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.519757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.527713][ T291] device veth0_vlan entered promiscuous mode [ 25.535626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.543985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.555298][ T288] device veth1_macvtap entered promiscuous mode [ 25.565986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.574509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.582885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.590430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.598761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.606970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.615376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.623972][ T290] device veth1_macvtap entered promiscuous mode [ 25.631430][ T287] device veth1_macvtap entered promiscuous mode [ 25.647332][ T291] device veth1_macvtap entered promiscuous mode [ 25.654636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.662499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.670089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.678708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.686923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.694526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.702852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.718404][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 25.731994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.740292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.749226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.757476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.765765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.774782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.783104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.791348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.799577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.807934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.816261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.824756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.833140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.841468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.875009][ T309] loop0: detected capacity change from 0 to 128 [ 25.890073][ T309] ======================================================= [ 25.890073][ T309] WARNING: The mand mount option has been deprecated and [ 25.890073][ T309] and is ignored by this kernel. Remove the mand [ 25.890073][ T309] option from the mount to silence this warning. [ 25.890073][ T309] ======================================================= [ 25.931499][ T313] loop1: detected capacity change from 0 to 128 [ 25.942414][ T318] loop3: detected capacity change from 0 to 512 [ 25.951009][ T318] EXT4-fs: dax option not supported [ 25.957158][ T311] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.985141][ T320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.996615][ T324] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.146486][ T327] loop1: detected capacity change from 0 to 16 [ 27.130627][ T327] erofs: (device loop1): mounted with root inode @ nid 36. [ 27.142009][ T39] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.461055][ C0] sched: RT throttling activated [ 27.651232][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 27.651364][ T28] audit: type=1400 audit(1794133624.725:121): avc: denied { mount } for pid=326 comm="syz.1.6" name="/" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.716283][ T327] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 27.794496][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.826559][ T28] audit: type=1400 audit(1794133624.955:122): avc: denied { mounton } for pid=326 comm="syz.1.6" path="/1/file2/file0" dev="loop1" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.853598][ T319] loop2: detected capacity change from 0 to 40427 [ 27.861313][ T28] audit: type=1400 audit(1794133625.005:123): avc: denied { mounton } for pid=326 comm="syz.1.6" path="/1/file2/file0" dev="overlay" ino=4611686018427387950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.888955][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 27.890005][ T319] F2FS-fs (loop2): invalid crc value [ 27.900267][ T335] loop3: detected capacity change from 0 to 512 [ 27.904503][ T28] audit: type=1400 audit(1794133625.025:124): avc: denied { read } for pid=326 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.909738][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.931488][ T28] audit: type=1400 audit(1794133625.025:125): avc: denied { open } for pid=326 comm="syz.1.6" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.963990][ T28] audit: type=1400 audit(1794133625.035:126): avc: denied { ioctl } for pid=326 comm="syz.1.6" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.981647][ T335] EXT4-fs: dax option not supported [ 28.023177][ T319] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.066801][ T319] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.070687][ T39] usb 5-1: config 0 has no interfaces? [ 28.080065][ T39] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 28.089853][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.099078][ T39] usb 5-1: config 0 descriptor?? [ 28.183074][ T288] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 28.208136][ T344] loop2: detected capacity change from 0 to 256 [ 28.238741][ T288] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 28.295364][ T344] FAT-fs (loop2): Directory bread(block 64) failed [ 28.304159][ T288] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 28.314064][ T344] FAT-fs (loop2): Directory bread(block 65) failed [ 28.412459][ T344] FAT-fs (loop2): Directory bread(block 66) failed [ 28.475004][ T344] FAT-fs (loop2): Directory bread(block 67) failed [ 28.521140][ T28] audit: type=1400 audit(1794133625.755:127): avc: denied { create } for pid=346 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.562235][ T344] FAT-fs (loop2): Directory bread(block 68) failed [ 28.606385][ T344] FAT-fs (loop2): Directory bread(block 69) failed [ 29.012851][ T350] xt_hashlimit: size too large, truncated to 1048576 [ 29.171157][ T344] FAT-fs (loop2): Directory bread(block 70) failed [ 29.177803][ T28] audit: type=1400 audit(1794133625.795:128): avc: denied { write } for pid=346 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.256214][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.264614][ T353] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 29.279786][ T353] loop3: detected capacity change from 0 to 1024 [ 29.287163][ T344] FAT-fs (loop2): Directory bread(block 71) failed [ 29.294362][ T344] FAT-fs (loop2): Directory bread(block 72) failed [ 29.304102][ T344] FAT-fs (loop2): Directory bread(block 73) failed [ 29.313773][ T28] audit: type=1400 audit(1794133625.795:129): avc: denied { read } for pid=346 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.352639][ T28] audit: type=1400 audit(1794133626.515:130): avc: denied { create } for pid=351 comm="syz.3.11" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.458799][ T316] loop4: detected capacity change from 0 to 8192 [ 29.480557][ T316] syz.4.5: attempt to access beyond end of device [ 29.480557][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.493883][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 29.500145][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.517067][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.527140][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.535550][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.549208][ T316] syz.4.5: attempt to access beyond end of device [ 29.549208][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.562707][ T310] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.574170][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.582594][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.590795][ T361] syz.4.5: attempt to access beyond end of device [ 29.590795][ T361] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.607959][ T310] usb 1-1: config 0 descriptor?? [ 29.613513][ T361] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.632521][ T290] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 29.640741][ T316] syz.4.5: attempt to access beyond end of device [ 29.640741][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.654365][ T290] FAT-fs (loop2): Filesystem has been set read-only [ 29.669818][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.680052][ T361] syz.4.5: attempt to access beyond end of device [ 29.680052][ T361] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.693607][ T361] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.702044][ T316] syz.4.5: attempt to access beyond end of device [ 29.702044][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.715570][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.724863][ T361] syz.4.5: attempt to access beyond end of device [ 29.724863][ T361] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.738350][ T361] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.746981][ T316] syz.4.5: attempt to access beyond end of device [ 29.746981][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.760450][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.768831][ T361] syz.4.5: attempt to access beyond end of device [ 29.768831][ T361] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 29.782268][ T361] Buffer I/O error on dev loop4, logical block 57847, async page read [ 29.790520][ T316] syz.4.5: attempt to access beyond end of device [ 29.790520][ T316] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 31.018109][ T316] Buffer I/O error on dev loop4, logical block 57847, async page read [ 31.062618][ T295] usb 5-1: USB disconnect, device number 2 [ 31.133888][ T371] loop4: detected capacity change from 0 to 1024 [ 31.140485][ T371] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.165999][ T376] loop1: detected capacity change from 0 to 1024 [ 31.173385][ T371] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 31.200824][ T376] EXT4-fs (loop1): Invalid log cluster size: 4294934529 [ 31.233160][ T310] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input4 [ 31.282702][ T310] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 31.382993][ T386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22'. [ 31.392252][ T385] binder: 383:385 ioctl c0306201 200000000100 returned -14 [ 31.399704][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.406855][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.434491][ T385] binder: BINDER_SET_CONTEXT_MGR already set [ 31.441560][ T385] binder: 383:385 ioctl 4018620d 2000000001c0 returned -16 [ 31.461995][ T385] binder: 383:385 ioctl c0306201 200000000200 returned -14 [ 31.478643][ T391] process 'syz.4.21' launched './file0' with NULL argv: empty string added [ 31.488468][ T338] loop0: detected capacity change from 0 to 512 [ 31.498179][ T338] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.514078][ T390] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 31.522114][ T338] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000702) [ 31.546259][ T390] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 31.585204][ T390] loop1: detected capacity change from 0 to 512 [ 31.592911][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.600144][ T310] usb 1-1: USB disconnect, device number 2 [ 31.607025][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.611366][ T390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.627347][ T390] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.638914][ T388] device bridge_slave_0 entered promiscuous mode [ 31.653787][ T393] loop3: detected capacity change from 0 to 40427 [ 31.661515][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.668355][ T393] F2FS-fs (loop3): invalid crc value [ 31.668616][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.682799][ T388] device bridge_slave_1 entered promiscuous mode [ 31.690466][ T390] EXT4-fs (loop1): 1 truncate cleaned up [ 31.697419][ T390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.720470][ T393] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.731006][ T390] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 31.752142][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 31.758700][ T390] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 31.769072][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 31.774726][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.782422][ T393] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.782614][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.797302][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.804343][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.822760][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 31.842253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.849909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.858321][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 31.858663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.891392][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 31.911895][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 31.918760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.920478][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 31.932218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.947981][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 31.975990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.998188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.006505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.016425][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.016542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.044027][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 32.051934][ T388] device veth0_vlan entered promiscuous mode [ 32.063673][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.088396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.104924][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 32.112941][ T388] device veth1_macvtap entered promiscuous mode [ 32.116907][ T404] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 32.121604][ T410] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.153913][ T410] EXT4-fs (loop1): Remounting filesystem read-only [ 32.167751][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.179648][ T390] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.23: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.179762][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.204235][ T390] EXT4-fs (loop1): Remounting filesystem read-only [ 32.239870][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.258295][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.264090][ T390] syz.1.23 (390) used greatest stack depth: 20928 bytes left [ 32.334066][ T431] loop5: detected capacity change from 0 to 128 [ 32.612309][ T10] device bridge_slave_1 left promiscuous mode [ 32.621306][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.646390][ T10] device bridge_slave_0 left promiscuous mode [ 32.661345][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 32.661359][ T28] audit: type=1326 audit(1794133629.905:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 32.694436][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.720434][ T10] device veth1_macvtap left promiscuous mode [ 32.730394][ T10] device veth0_vlan left promiscuous mode [ 32.748340][ T28] audit: type=1326 audit(1794133629.935:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 32.835794][ T28] audit: type=1326 audit(1794133629.935:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 32.915666][ T28] audit: type=1326 audit(1794133629.935:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 32.965645][ T28] audit: type=1326 audit(1794133629.945:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.024722][ T28] audit: type=1326 audit(1794133629.945:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.089640][ T28] audit: type=1326 audit(1794133629.945:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.149922][ T28] audit: type=1326 audit(1794133629.945:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.186325][ T462] loop1: detected capacity change from 0 to 256 [ 33.233544][ T462] FAT-fs (loop1): Directory bread(block 64) failed [ 33.260356][ T28] audit: type=1326 audit(1794133629.945:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.285737][ T462] FAT-fs (loop1): Directory bread(block 65) failed [ 33.292458][ T462] FAT-fs (loop1): Directory bread(block 66) failed [ 33.299038][ T462] FAT-fs (loop1): Directory bread(block 67) failed [ 33.311172][ T462] FAT-fs (loop1): Directory bread(block 68) failed [ 33.317726][ T462] FAT-fs (loop1): Directory bread(block 69) failed [ 33.331115][ T28] audit: type=1326 audit(1794133629.945:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=406 comm="syz.0.26" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fe396034e code=0x7ffc0000 [ 33.365812][ T462] FAT-fs (loop1): Directory bread(block 70) failed [ 33.377672][ T462] FAT-fs (loop1): Directory bread(block 71) failed [ 33.401234][ T462] FAT-fs (loop1): Directory bread(block 72) failed [ 33.407834][ T462] FAT-fs (loop1): Directory bread(block 73) failed [ 33.651152][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.732933][ T474] netlink: 292 bytes leftover after parsing attributes in process `syz.1.34'. [ 33.821165][ T310] usb 4-1: device descriptor read/64, error -71 [ 33.822126][ T477] loop4: detected capacity change from 0 to 1024 [ 33.904028][ T477] ext4: Unknown parameter 'fowner<00000000000000000000' [ 34.443800][ T479] loop4: detected capacity change from 0 to 40427 [ 34.551972][ T485] loop0: detected capacity change from 0 to 128 [ 34.561537][ T485] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 34.581092][ T310] usb 4-1: device descriptor read/64, error -71 [ 34.698350][ T365] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 34.732663][ T483] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.761563][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.780561][ T484] FAT-fs (loop1): Filesystem has been set read-only [ 34.787423][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.796994][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.805929][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.822986][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.832034][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.841249][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.851263][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.851595][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.867906][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.878621][ T484] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.887807][ T483] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.889229][ T494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 34.908907][ T497] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.941277][ T497] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 34.961965][ T497] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x892de5c8, utbl_chksum : 0xe619d30d) [ 35.011093][ T24] usb 5-1: device descriptor read/64, error -71 [ 35.011104][ T310] usb 4-1: device descriptor read/64, error -71 [ 35.066540][ T497] netlink: 'syz.5.42': attribute type 12 has an invalid length. [ 35.281093][ T310] usb 4-1: device descriptor read/64, error -71 [ 35.301120][ T24] usb 5-1: device descriptor read/64, error -71 [ 35.401166][ T310] usb usb4-port1: attempt power cycle [ 35.571118][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.731102][ T24] usb 5-1: device descriptor read/64, error -71 [ 35.778139][ T515] mmap: syz.1.48 (515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.824004][ T511] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x20200bb1, utbl_chksum : 0xe619d30d) [ 35.841139][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.882162][ T310] usb 4-1: device descriptor read/8, error -71 [ 35.969563][ T518] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 36.011157][ T24] usb 5-1: device descriptor read/64, error -71 [ 36.030050][ T518] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.50'. [ 36.040172][ T310] usb 4-1: device descriptor read/8, error -71 [ 36.131601][ T24] usb usb5-port1: attempt power cycle [ 36.137109][ T525] x_tables: duplicate underflow at hook 1 [ 36.137801][ T529] x_tables: duplicate underflow at hook 1 [ 36.159539][ T526] set_capacity_and_notify: 5 callbacks suppressed [ 36.159556][ T526] loop5: detected capacity change from 0 to 2048 [ 36.282291][ T520] loop0: detected capacity change from 0 to 512 [ 36.291742][ T520] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 36.291789][ T526] loop5: p1 p3 < > p4 < p5 > [ 36.312274][ T520] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.320908][ T520] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.49: bad orphan inode 15 [ 36.331599][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.339394][ T520] ext4_test_bit(bit=14, block=18) = 1 [ 36.339439][ T526] loop5: partition table partially beyond EOD, [ 36.344831][ T520] is_bad_inode(inode)=0 [ 36.344842][ T520] NEXT_ORPHAN(inode)=1023 [ 36.344848][ T520] max_ino=32 [ 36.344855][ T520] i_nlink=0 [ 36.366410][ T520] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #15: comm syz.0.49: corrupted xattr block 19 [ 36.378532][ T520] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 36.387681][ T520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.441037][ T310] usb 4-1: device descriptor read/8, error -71 [ 36.470909][ T526] truncated [ 36.474752][ T526] loop5: p1 size 196608 extends beyond EOD, truncated [ 36.485519][ T526] loop5: p3 start 614273 is beyond EOD, truncated [ 36.498974][ T526] loop5: p5 size 196608 extends beyond EOD, truncated [ 36.509869][ T547] loop3: detected capacity change from 0 to 256 [ 36.544297][ T549] loop1: detected capacity change from 0 to 256 [ 36.556462][ T547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 36.574304][ T516] syz.0.49 (516) used greatest stack depth: 15816 bytes left [ 36.595995][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.604128][ T310] usb 4-1: device descriptor read/8, error -71 [ 36.621302][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 36.647681][ T311] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.653887][ T552] loop1: detected capacity change from 0 to 256 [ 36.672167][ T24] usb 5-1: device descriptor read/8, error -71 [ 36.683859][ T322] udevd[322]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 36.683968][ T311] udevd[311]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 36.695461][ T323] udevd[323]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 36.721429][ T310] usb usb4-port1: unable to enumerate USB device [ 36.735845][ T554] loop5: detected capacity change from 0 to 4096 [ 36.750301][ T554] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.765740][ T554] EXT4-fs: Ignoring removed orlov option [ 36.772612][ T554] EXT4-fs (loop5): Test dummy encryption mode enabled [ 36.804972][ T554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 36.831107][ T24] usb 5-1: device descriptor read/8, error -71 [ 36.868579][ T554] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 36.884951][ T554] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 36.960328][ T567] loop4: detected capacity change from 0 to 128 [ 36.994128][ T567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.007340][ T567] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.114967][ T569] loop1: detected capacity change from 0 to 40427 [ 37.132638][ T569] F2FS-fs (loop1): invalid crc value [ 37.153236][ T569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.171113][ T295] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 37.190133][ T567] Zero length message leads to an empty skb [ 37.194642][ T569] F2FS-fs (loop1): Start checkpoint disabled! [ 37.207549][ T569] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 37.215188][ T569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 37.234840][ T569] syz.1.64: attempt to access beyond end of device [ 37.234840][ T569] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.275464][ T291] EXT4-fs (loop4): unmounting filesystem. [ 37.301575][ T364] kworker/u4:4: attempt to access beyond end of device [ 37.301575][ T364] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 37.336794][ T452] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 37.350284][ T452] CPU: 1 PID: 452 Comm: syz.0.26 Not tainted syzkaller #0 [ 37.357417][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 37.367929][ T452] Call Trace: [ 37.371217][ T452] [ 37.374155][ T452] __dump_stack+0x21/0x24 [ 37.378514][ T452] dump_stack_lvl+0x110/0x170 [ 37.383193][ T452] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.388219][ T452] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 37.394023][ T452] ? ___ratelimit+0x40a/0x590 [ 37.398704][ T452] dump_stack+0x15/0x24 [ 37.402913][ T452] dump_header+0xdb/0x660 [ 37.403671][ T295] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 37.407248][ T452] ? __cfi_gfp_zone+0x10/0x10 [ 37.407271][ T452] oom_kill_process+0x32a/0x410 [ 37.425760][ T452] ? kvm_sched_clock_read+0x18/0x40 [ 37.430978][ T452] out_of_memory+0x630/0x930 [ 37.435572][ T452] ? __cfi_out_of_memory+0x10/0x10 [ 37.436537][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.440684][ T452] mem_cgroup_out_of_memory+0x2be/0x390 [ 37.454166][ T452] ? __kasan_check_write+0x14/0x20 [ 37.459279][ T452] ? mem_cgroup_oom_trylock+0x360/0x360 [ 37.463573][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.464824][ T452] try_charge_memcg+0xb8a/0x1650 [ 37.476923][ T452] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 37.481078][ T295] usb 6-1: Product: syz [ 37.482298][ T452] ? __asan_set_shadow_00+0xe/0x10 [ 37.486479][ T295] usb 6-1: Manufacturer: syz [ 37.491554][ T452] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 37.491586][ T452] charge_memcg+0x81/0x1f0 [ 37.496156][ T295] usb 6-1: SerialNumber: syz [ 37.502018][ T452] __mem_cgroup_charge+0x93/0x290 [ 37.502041][ T452] ? xas_start+0x31d/0x3e0 [ 37.502056][ T452] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 37.502072][ T452] ? xas_load+0x3a2/0x3c0 [ 37.502087][ T452] shmem_add_to_page_cache+0x5b1/0xae0 [ 37.502108][ T452] ? put_page+0xb0/0xb0 [ 37.502125][ T452] ? do_fault+0x1b23/0x1e30 [ 37.502142][ T452] shmem_get_folio_gfp+0xef9/0x20f0 [ 37.502162][ T452] shmem_write_begin+0xea/0x2c0 [ 37.502178][ T452] generic_perform_write+0x32d/0x740 [ 37.502194][ T452] ? __mark_inode_dirty+0x264/0x9c0 [ 37.502213][ T452] ? __cfi_generic_perform_write+0x10/0x10 [ 37.502227][ T452] ? __cfi_file_update_time+0x10/0x10 [ 37.502248][ T452] shmem_file_write_iter+0x104/0x130 [ 37.518042][ T579] device bridge_slave_0 left promiscuous mode [ 37.520634][ T452] __kernel_write_iter+0x2a9/0x6a0 [ 37.538993][ T579] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.540111][ T452] ? __cfi___kernel_write_iter+0x10/0x10 [ 37.605253][ T452] ? iov_iter_bvec+0x53/0x1f0 [ 37.609945][ T452] dump_user_range+0x3e6/0x630 [ 37.614710][ T452] ? __cfi_dump_user_range+0x10/0x10 [ 37.619995][ T452] ? dump_align+0xfe/0x120 [ 37.624424][ T452] ? dump_emit+0xa8/0xc0 [ 37.628675][ T452] elf_core_dump+0x2b60/0x30b0 [ 37.632123][ T577] loop4: detected capacity change from 0 to 16 [ 37.633443][ T452] ? __cfi_elf_core_dump+0x10/0x10 [ 37.633476][ T452] ? dump_interrupted+0xd0/0xd0 [ 37.649523][ T452] ? 0xffffffffff600000 [ 37.653677][ T577] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.656056][ T576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.660866][ T452] do_coredump+0x160e/0x23a0 [ 37.660896][ T452] ? __cfi_do_coredump+0x10/0x10 [ 37.677810][ T452] ? kmem_cache_free+0x12d/0x300 [ 37.682746][ T452] ? ____kasan_slab_free+0x13d/0x180 [ 37.688032][ T452] ? get_signal+0xac2/0x1700 [ 37.692614][ T452] ? kmem_cache_free+0x12d/0x300 [ 37.697536][ T452] get_signal+0x157d/0x1700 [ 37.702027][ T452] ? __cfi_get_signal+0x10/0x10 [ 37.706868][ T452] ? force_sig_info_to_task+0x306/0x3b0 [ 37.712397][ T452] arch_do_signal_or_restart+0xd1/0x11c0 [ 37.718016][ T452] ? page_fault_oops+0x8b0/0x8b0 [ 37.722942][ T452] ? down_read_trylock+0x27f/0x660 [ 37.728037][ T452] ? find_vma+0x89/0xd0 [ 37.732173][ T452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.738308][ T452] ? do_user_addr_fault+0xd10/0x1030 [ 37.743571][ T452] exit_to_user_mode_loop+0x7a/0xb0 [ 37.748749][ T452] exit_to_user_mode_prepare+0x87/0xd0 [ 37.754190][ T452] irqentry_exit_to_user_mode+0x9/0x10 [ 37.759636][ T452] irqentry_exit+0x12/0x40 [ 37.764046][ T452] exc_page_fault+0x5e/0xb0 [ 37.768531][ T452] asm_exc_page_fault+0x27/0x30 [ 37.773368][ T452] RIP: 0033:0x7f0fe399fb21 [ 37.777764][ T452] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 37.797357][ T452] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 37.803403][ T452] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 37.811356][ T452] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 37.819307][ T452] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 37.827265][ T452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 37.835222][ T452] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 37.843176][ T452] [ 37.851948][ T579] device bridge_slave_1 left promiscuous mode [ 37.860858][ T579] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.862370][ T452] memory: usage 307200kB, limit 307200kB, failcnt 17477 [ 37.881493][ T452] memory+swap: usage 430844kB, limit 9007199254740988kB, failcnt 0 [ 37.892128][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 37.892141][ T28] audit: type=1400 audit(1794133635.135:722): avc: denied { write } for pid=586 comm="syz.3.68" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.894806][ T452] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.898696][ T28] audit: type=1400 audit(1794133635.135:723): avc: denied { ioctl } for pid=586 comm="syz.3.68" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.927785][ T452] Memory cgroup stats for /syz0: [ 37.953085][ T452] anon 933888 [ 37.953085][ T452] file 312254464 [ 37.953085][ T452] kernel 0 [ 37.953085][ T452] kernel_stack 0 [ 37.953085][ T452] pagetables 0 [ 37.953085][ T452] sec_pagetables 0 [ 37.953085][ T452] percpu 0 [ 37.953085][ T452] sock 0 [ 37.953085][ T452] vmalloc 0 [ 37.953085][ T452] shmem 312111104 [ 37.953085][ T452] file_mapped 27250688 [ 37.953085][ T452] file_dirty 143360 [ 37.953085][ T452] file_writeback 0 [ 37.953085][ T452] swapcached 1384448 [ 37.953085][ T452] anon_thp 0 [ 37.953085][ T452] file_thp 0 [ 37.953085][ T452] shmem_thp 0 [ 37.953085][ T452] inactive_anon 304504832 [ 37.953085][ T452] active_anon 9924608 [ 37.953085][ T452] inactive_file 143360 [ 37.953085][ T452] active_file 0 [ 37.953085][ T452] unevictable 0 [ 37.953085][ T452] slab_reclaimable 0 [ 37.953085][ T452] slab_unreclaimable 0 [ 37.953085][ T452] slab 0 [ 37.953085][ T452] workingset_refault_anon 0 [ 37.961091][ T28] audit: type=1400 audit(1794133635.195:724): avc: denied { sqpoll } for pid=586 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.071361][ T28] audit: type=1400 audit(1794133635.295:725): avc: denied { read } for pid=553 comm="syz.5.58" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.093336][ T28] audit: type=1400 audit(1794133635.295:726): avc: denied { open } for pid=553 comm="syz.5.58" path=2F352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.122030][ T452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=417,uid=0 [ 38.137889][ T28] audit: type=1400 audit(1794133635.295:727): avc: denied { map } for pid=553 comm="syz.5.58" path=2F352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.180809][ T28] audit: type=1400 audit(1794133635.295:728): avc: denied { execute } for pid=553 comm="syz.5.58" path=2F352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.189855][ T452] Memory cgroup out of memory: Killed process 417 (syz.0.26) total-vm:225800kB, anon-rss:1416kB, file-rss:49984kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 38.238603][ T28] audit: type=1400 audit(1794133635.475:729): avc: denied { write } for pid=553 comm="syz.5.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.259927][ T291] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 38.274063][ T291] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 38.281194][ T295] rtl8150 6-1:1.0: couldn't reset the device [ 38.282775][ T28] audit: type=1400 audit(1794133635.475:730): avc: denied { ioctl } for pid=553 comm="syz.5.58" path="socket:[16951]" dev="sockfs" ino=16951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.298789][ T295] rtl8150: probe of 6-1:1.0 failed with error -5 [ 38.313087][ T291] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 38.333404][ T295] usb 6-1: USB disconnect, device number 2 [ 38.340787][ T595] loop4: detected capacity change from 0 to 256 [ 38.350919][ T28] audit: type=1400 audit(1794133635.595:731): avc: denied { associate } for pid=594 comm="syz.4.69" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.498560][ T456] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 38.553084][ T456] CPU: 1 PID: 456 Comm: syz.0.26 Not tainted syzkaller #0 [ 38.560239][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 38.570305][ T456] Call Trace: [ 38.573577][ T456] [ 38.576489][ T456] __dump_stack+0x21/0x24 [ 38.580805][ T456] dump_stack_lvl+0x110/0x170 [ 38.585460][ T456] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.590461][ T456] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 38.596248][ T456] ? ___ratelimit+0x40a/0x590 [ 38.601002][ T456] dump_stack+0x15/0x24 [ 38.605246][ T456] dump_header+0xdb/0x660 [ 38.609568][ T456] ? __cfi_gfp_zone+0x10/0x10 [ 38.614232][ T456] oom_kill_process+0x32a/0x410 [ 38.619073][ T456] ? kvm_sched_clock_read+0x18/0x40 [ 38.624268][ T456] out_of_memory+0x630/0x930 [ 38.628844][ T456] ? __cfi_out_of_memory+0x10/0x10 [ 38.633942][ T456] mem_cgroup_out_of_memory+0x2be/0x390 [ 38.639472][ T456] ? __kasan_check_write+0x14/0x20 [ 38.644564][ T456] ? mem_cgroup_oom_trylock+0x360/0x360 [ 38.650090][ T456] try_charge_memcg+0xb8a/0x1650 [ 38.655010][ T456] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 38.660363][ T456] ? __asan_set_shadow_00+0xe/0x10 [ 38.665460][ T456] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 38.671348][ T456] ? finish_task_switch+0x209/0x7c0 [ 38.676535][ T456] charge_memcg+0x81/0x1f0 [ 38.680935][ T456] __mem_cgroup_charge+0x93/0x290 [ 38.685945][ T456] ? xas_start+0x31d/0x3e0 [ 38.690341][ T456] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 38.695958][ T456] ? xas_load+0x3a2/0x3c0 [ 38.700283][ T456] shmem_add_to_page_cache+0x5b1/0xae0 [ 38.705728][ T456] ? put_page+0xb0/0xb0 [ 38.709884][ T456] ? do_fault+0x1b23/0x1e30 [ 38.714375][ T456] shmem_get_folio_gfp+0xef9/0x20f0 [ 38.719561][ T456] shmem_write_begin+0xea/0x2c0 [ 38.724404][ T456] generic_perform_write+0x32d/0x740 [ 38.729670][ T456] ? __mark_inode_dirty+0x264/0x9c0 [ 38.734851][ T456] ? __cfi_generic_perform_write+0x10/0x10 [ 38.740640][ T456] ? __cfi_file_update_time+0x10/0x10 [ 38.745999][ T456] shmem_file_write_iter+0x104/0x130 [ 38.751271][ T456] __kernel_write_iter+0x2a9/0x6a0 [ 38.756361][ T456] ? __cfi___kernel_write_iter+0x10/0x10 [ 38.761974][ T456] ? iov_iter_bvec+0x53/0x1f0 [ 38.766631][ T456] dump_user_range+0x3e6/0x630 [ 38.771379][ T456] ? __cfi_dump_user_range+0x10/0x10 [ 38.776641][ T456] ? dump_align+0xfe/0x120 [ 38.781036][ T456] ? dump_emit+0xa8/0xc0 [ 38.785261][ T456] elf_core_dump+0x2b60/0x30b0 [ 38.790007][ T456] ? __cfi_elf_core_dump+0x10/0x10 [ 38.795105][ T456] ? dump_interrupted+0xd0/0xd0 [ 38.799933][ T456] ? 0xffffffffff600000 [ 38.804065][ T456] do_coredump+0x160e/0x23a0 [ 38.808634][ T456] ? __cfi_do_coredump+0x10/0x10 [ 38.813557][ T456] ? kmem_cache_free+0x12d/0x300 [ 38.818478][ T456] ? ____kasan_slab_free+0x13d/0x180 [ 38.823749][ T456] ? get_signal+0xac2/0x1700 [ 38.828322][ T456] ? kmem_cache_free+0x12d/0x300 [ 38.833245][ T456] get_signal+0x157d/0x1700 [ 38.837732][ T456] ? __cfi_get_signal+0x10/0x10 [ 38.842575][ T456] ? force_sig_info_to_task+0x306/0x3b0 [ 38.848103][ T456] arch_do_signal_or_restart+0xd1/0x11c0 [ 38.853721][ T456] ? page_fault_oops+0x8b0/0x8b0 [ 38.858642][ T456] ? down_read_trylock+0x27f/0x660 [ 38.863740][ T456] ? find_vma+0x89/0xd0 [ 38.867879][ T456] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 38.874015][ T456] ? do_user_addr_fault+0xd10/0x1030 [ 38.879283][ T456] exit_to_user_mode_loop+0x7a/0xb0 [ 38.884638][ T456] exit_to_user_mode_prepare+0x87/0xd0 [ 38.890077][ T456] irqentry_exit_to_user_mode+0x9/0x10 [ 38.895523][ T456] irqentry_exit+0x12/0x40 [ 38.899930][ T456] exc_page_fault+0x5e/0xb0 [ 38.904415][ T456] asm_exc_page_fault+0x27/0x30 [ 38.909253][ T456] RIP: 0033:0x7f0fe399fb21 [ 38.913648][ T456] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 38.933231][ T456] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 38.939284][ T456] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 38.947241][ T456] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 38.955190][ T456] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.963140][ T456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 38.971092][ T456] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 38.979056][ T456] [ 38.986936][ T456] memory: usage 307140kB, limit 307200kB, failcnt 18016 [ 39.001098][ T456] memory+swap: usage 426524kB, limit 9007199254740988kB, failcnt 0 [ 39.009163][ T456] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 39.051195][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 39.154729][ T456] Memory cgroup stats for /syz0: [ 39.156453][ T456] anon 368640 [ 39.156453][ T456] file 311730176 [ 39.156453][ T456] kernel 0 [ 39.156453][ T456] kernel_stack 0 [ 39.156453][ T456] pagetables 0 [ 39.156453][ T456] sec_pagetables 0 [ 39.156453][ T456] percpu 0 [ 39.156453][ T456] sock 0 [ 39.156453][ T456] vmalloc 0 [ 39.156453][ T456] shmem 311586816 [ 39.156453][ T456] file_mapped 23896064 [ 39.156453][ T456] file_dirty 143360 [ 39.156453][ T456] file_writeback 319488 [ 39.156453][ T456] swapcached 1708032 [ 39.156453][ T456] anon_thp 0 [ 39.156453][ T456] file_thp 0 [ 39.156453][ T456] shmem_thp 0 [ 39.156453][ T456] inactive_anon 141377536 [ 39.156453][ T456] active_anon 171741184 [ 39.156453][ T456] inactive_file 143360 [ 39.156453][ T456] active_file 0 [ 39.156453][ T456] unevictable 0 [ 39.156453][ T456] slab_reclaimable 0 [ 39.156453][ T456] slab_unreclaimable 0 [ 39.156453][ T456] slab 0 [ 39.156453][ T456] workingset_refault_anon 0 [ 39.278752][ T456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=457,uid=0 [ 39.281868][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 39.293920][ T456] Memory cgroup out of memory: Killed process 457 (syz.0.26) total-vm:324240kB, anon-rss:1268kB, file-rss:20544kB, shmem-rss:21060kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 39.321180][ T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.330662][ T388] EXT4-fs (loop5): unmounting filesystem. [ 39.336637][ T24] usb 5-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 39.351464][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.360670][ T24] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 39.390363][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.433190][ T617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.492543][ T311] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.532516][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.550507][ T39] usb 4-1: no configurations [ 39.556240][ T39] usb 4-1: can't read configurations, error -22 [ 39.578841][ T417] syz.0.26 (417) used greatest stack depth: 14472 bytes left [ 39.609112][ T24] usb 5-1: string descriptor 0 read error: -71 [ 39.619030][ T24] usb 5-1: Found UVC 71.01 device (0000:0000) [ 39.627444][ T24] usb 5-1: No valid video chain found. [ 39.642028][ T24] usb 5-1: USB disconnect, device number 7 [ 39.711221][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.811087][ T348] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 39.861620][ T452] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 39.894382][ T452] CPU: 1 PID: 452 Comm: syz.0.26 Not tainted syzkaller #0 [ 39.901528][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 39.911586][ T452] Call Trace: [ 39.914862][ T452] [ 39.917790][ T452] __dump_stack+0x21/0x24 [ 39.922122][ T452] dump_stack_lvl+0x110/0x170 [ 39.926801][ T452] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.931845][ T452] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 39.937649][ T452] ? ___ratelimit+0x40a/0x590 [ 39.942322][ T452] dump_stack+0x15/0x24 [ 39.946482][ T452] dump_header+0xdb/0x660 [ 39.950807][ T452] ? __cfi_gfp_zone+0x10/0x10 [ 39.955481][ T452] oom_kill_process+0x32a/0x410 [ 39.960334][ T452] ? kvm_sched_clock_read+0x18/0x40 [ 39.965538][ T452] out_of_memory+0x630/0x930 [ 39.970141][ T452] ? __cfi_out_of_memory+0x10/0x10 [ 39.975254][ T452] mem_cgroup_out_of_memory+0x2be/0x390 [ 39.980799][ T452] ? __kasan_check_write+0x14/0x20 [ 39.985911][ T452] ? mem_cgroup_oom_trylock+0x360/0x360 [ 39.991459][ T452] try_charge_memcg+0xb8a/0x1650 [ 39.996398][ T452] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 40.001766][ T452] ? __asan_set_shadow_00+0xe/0x10 [ 40.006865][ T452] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 40.012745][ T452] charge_memcg+0x81/0x1f0 [ 40.017148][ T452] __mem_cgroup_charge+0x93/0x290 [ 40.022157][ T452] ? xas_start+0x31d/0x3e0 [ 40.026555][ T452] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 40.032166][ T452] ? xas_load+0x3a2/0x3c0 [ 40.036479][ T452] shmem_add_to_page_cache+0x5b1/0xae0 [ 40.041925][ T452] ? put_page+0xb0/0xb0 [ 40.046067][ T452] ? do_fault+0x1b23/0x1e30 [ 40.050557][ T452] shmem_get_folio_gfp+0xef9/0x20f0 [ 40.055747][ T452] shmem_write_begin+0xea/0x2c0 [ 40.060580][ T452] generic_perform_write+0x32d/0x740 [ 40.065847][ T452] ? __mark_inode_dirty+0x264/0x9c0 [ 40.071031][ T452] ? __cfi_generic_perform_write+0x10/0x10 [ 40.076844][ T452] ? __cfi_file_update_time+0x10/0x10 [ 40.082199][ T452] shmem_file_write_iter+0x104/0x130 [ 40.087470][ T452] __kernel_write_iter+0x2a9/0x6a0 [ 40.092564][ T452] ? __cfi___kernel_write_iter+0x10/0x10 [ 40.098179][ T452] ? iov_iter_bvec+0x53/0x1f0 [ 40.102837][ T452] dump_user_range+0x3e6/0x630 [ 40.107582][ T452] ? __cfi_dump_user_range+0x10/0x10 [ 40.112847][ T452] ? dump_align+0xfe/0x120 [ 40.117258][ T452] ? dump_emit+0xa8/0xc0 [ 40.121480][ T452] elf_core_dump+0x2b60/0x30b0 [ 40.126228][ T452] ? __cfi_elf_core_dump+0x10/0x10 [ 40.131325][ T452] ? dump_interrupted+0xd0/0xd0 [ 40.136153][ T452] ? 0xffffffffff600000 [ 40.140287][ T452] do_coredump+0x160e/0x23a0 [ 40.144860][ T452] ? __cfi_do_coredump+0x10/0x10 [ 40.149785][ T452] ? kmem_cache_free+0x12d/0x300 [ 40.154712][ T452] ? ____kasan_slab_free+0x13d/0x180 [ 40.159980][ T452] ? get_signal+0xac2/0x1700 [ 40.164554][ T452] ? kmem_cache_free+0x12d/0x300 [ 40.169481][ T452] get_signal+0x157d/0x1700 [ 40.173972][ T452] ? __cfi_get_signal+0x10/0x10 [ 40.178806][ T452] ? force_sig_info_to_task+0x306/0x3b0 [ 40.184342][ T452] arch_do_signal_or_restart+0xd1/0x11c0 [ 40.190328][ T452] ? page_fault_oops+0x8b0/0x8b0 [ 40.195266][ T452] ? down_read_trylock+0x27f/0x660 [ 40.200374][ T452] ? find_vma+0x89/0xd0 [ 40.204519][ T452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.210661][ T452] ? do_user_addr_fault+0xd10/0x1030 [ 40.215931][ T452] exit_to_user_mode_loop+0x7a/0xb0 [ 40.221122][ T452] exit_to_user_mode_prepare+0x87/0xd0 [ 40.226562][ T452] irqentry_exit_to_user_mode+0x9/0x10 [ 40.232004][ T452] irqentry_exit+0x12/0x40 [ 40.236406][ T452] exc_page_fault+0x5e/0xb0 [ 40.240891][ T452] asm_exc_page_fault+0x27/0x30 [ 40.245727][ T452] RIP: 0033:0x7f0fe399fb21 [ 40.250125][ T452] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 40.269711][ T452] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 40.275770][ T452] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 40.283725][ T452] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 40.291680][ T452] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 40.299653][ T452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.307613][ T452] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 40.315580][ T452] [ 40.324481][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.327483][ T452] memory: usage 291648kB, limit 307200kB, failcnt 19703 [ 40.332535][ T39] usb 4-1: no configurations [ 40.344554][ T39] usb 4-1: can't read configurations, error -22 [ 40.352345][ T452] memory+swap: usage 412008kB, limit 9007199254740988kB, failcnt 0 [ 40.352928][ T39] usb usb4-port1: attempt power cycle [ 40.383279][ T627] EXT4-fs: dax option not supported [ 40.486517][ T452] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.530860][ T457] syz.0.26 (457) used greatest stack depth: 14304 bytes left [ 40.559966][ T452] Memory cgroup stats for /syz0: [ 40.562389][ T452] anon 81920 [ 40.562389][ T452] file 291266560 [ 40.562389][ T452] kernel 0 [ 40.562389][ T452] kernel_stack 0 [ 40.562389][ T452] pagetables 0 [ 40.562389][ T452] sec_pagetables 0 [ 40.562389][ T452] percpu 0 [ 40.562389][ T452] sock 0 [ 40.562389][ T452] vmalloc 0 [ 40.562389][ T452] shmem 291123200 [ 40.562389][ T452] file_mapped 16199680 [ 40.562389][ T452] file_dirty 143360 [ 40.562389][ T452] file_writeback 446464 [ 40.562389][ T452] swapcached 450560 [ 40.562389][ T452] anon_thp 0 [ 40.562389][ T452] file_thp 0 [ 40.562389][ T452] shmem_thp 0 [ 40.562389][ T452] inactive_anon 89288704 [ 40.562389][ T452] active_anon 200679424 [ 40.562389][ T452] inactive_file 143360 [ 40.562389][ T452] active_file 0 [ 40.562389][ T452] unevictable 0 [ 40.562389][ T452] slab_reclaimable 0 [ 40.562389][ T452] slab_unreclaimable 0 [ 40.562389][ T452] slab 0 [ 40.562389][ T452] workingset_refault_anon 0 [ 40.781211][ T39] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.854303][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.917240][ T39] usb 4-1: no configurations [ 40.959918][ T633] netlink: 'syz.4.80': attribute type 4 has an invalid length. [ 40.973191][ T39] usb 4-1: can't read configurations, error -22 [ 41.043508][ T634] netlink: 'syz.4.80': attribute type 4 has an invalid length. [ 41.134553][ T635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.77'. [ 41.151284][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.199946][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.281869][ T452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=411,uid=0 [ 41.288177][ T39] usb 4-1: no configurations [ 41.296893][ T452] Memory cgroup out of memory: Killed process 411 (syz.0.26) total-vm:90500kB, anon-rss:1268kB, file-rss:49984kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 41.373311][ T39] usb 4-1: can't read configurations, error -22 [ 41.385449][ T651] set_capacity_and_notify: 2 callbacks suppressed [ 41.385464][ T651] loop1: detected capacity change from 0 to 1024 [ 41.412377][ T413] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.417077][ T39] usb usb4-port1: unable to enumerate USB device [ 41.425141][ T413] CPU: 0 PID: 413 Comm: syz.0.26 Not tainted syzkaller #0 [ 41.435539][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 41.445597][ T413] Call Trace: [ 41.448965][ T413] [ 41.451891][ T413] __dump_stack+0x21/0x24 [ 41.456221][ T413] dump_stack_lvl+0x110/0x170 [ 41.460902][ T413] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.465926][ T413] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 41.471737][ T413] ? ___ratelimit+0x40a/0x590 [ 41.476424][ T413] dump_stack+0x15/0x24 [ 41.480586][ T413] dump_header+0xdb/0x660 [ 41.484927][ T413] ? __cfi_gfp_zone+0x10/0x10 [ 41.489610][ T413] oom_kill_process+0x32a/0x410 [ 41.494472][ T413] ? kvm_sched_clock_read+0x18/0x40 [ 41.499678][ T413] out_of_memory+0x630/0x930 [ 41.504280][ T413] ? __cfi_out_of_memory+0x10/0x10 [ 41.509404][ T413] mem_cgroup_out_of_memory+0x2be/0x390 [ 41.514953][ T413] ? __kasan_check_write+0x14/0x20 [ 41.520073][ T413] ? mem_cgroup_oom_trylock+0x360/0x360 [ 41.525625][ T413] try_charge_memcg+0xb8a/0x1650 [ 41.530820][ T413] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 41.536180][ T413] ? __asan_set_shadow_00+0xe/0x10 [ 41.541279][ T413] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 41.547165][ T413] charge_memcg+0x81/0x1f0 [ 41.551568][ T413] __mem_cgroup_charge+0x93/0x290 [ 41.556573][ T413] ? xas_start+0x31d/0x3e0 [ 41.560972][ T413] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 41.566594][ T413] ? xas_load+0x3a2/0x3c0 [ 41.570913][ T413] shmem_add_to_page_cache+0x5b1/0xae0 [ 41.576445][ T413] ? put_page+0xb0/0xb0 [ 41.580595][ T413] ? do_fault+0x1b23/0x1e30 [ 41.585082][ T413] shmem_get_folio_gfp+0xef9/0x20f0 [ 41.590269][ T413] shmem_write_begin+0xea/0x2c0 [ 41.595103][ T413] generic_perform_write+0x32d/0x740 [ 41.600376][ T413] ? __cfi_generic_perform_write+0x10/0x10 [ 41.606169][ T413] ? __cfi_file_update_time+0x10/0x10 [ 41.611527][ T413] shmem_file_write_iter+0x104/0x130 [ 41.616800][ T413] __kernel_write_iter+0x2a9/0x6a0 [ 41.621895][ T413] ? __cfi___kernel_write_iter+0x10/0x10 [ 41.627514][ T413] ? iov_iter_bvec+0x53/0x1f0 [ 41.632171][ T413] dump_user_range+0x3e6/0x630 [ 41.636923][ T413] ? __cfi_dump_user_range+0x10/0x10 [ 41.642190][ T413] ? dump_align+0xfe/0x120 [ 41.646588][ T413] ? dump_emit+0xa8/0xc0 [ 41.650813][ T413] elf_core_dump+0x2b60/0x30b0 [ 41.655559][ T413] ? __cfi_elf_core_dump+0x10/0x10 [ 41.660659][ T413] ? dump_interrupted+0xd0/0xd0 [ 41.665490][ T413] ? 0xffffffffff600000 [ 41.669626][ T413] do_coredump+0x160e/0x23a0 [ 41.674199][ T413] ? __cfi_do_coredump+0x10/0x10 [ 41.679123][ T413] ? kmem_cache_free+0x12d/0x300 [ 41.684048][ T413] ? ____kasan_slab_free+0x13d/0x180 [ 41.689315][ T413] ? get_signal+0xac2/0x1700 [ 41.693891][ T413] ? kmem_cache_free+0x12d/0x300 [ 41.698815][ T413] get_signal+0x157d/0x1700 [ 41.703399][ T413] ? __cfi_get_signal+0x10/0x10 [ 41.708235][ T413] ? force_sig_info_to_task+0x306/0x3b0 [ 41.713768][ T413] arch_do_signal_or_restart+0xd1/0x11c0 [ 41.719474][ T413] ? page_fault_oops+0x8b0/0x8b0 [ 41.724396][ T413] ? down_read_trylock+0x27f/0x660 [ 41.729491][ T413] ? find_vma+0x89/0xd0 [ 41.733632][ T413] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 41.739768][ T413] ? do_user_addr_fault+0xd10/0x1030 [ 41.745038][ T413] exit_to_user_mode_loop+0x7a/0xb0 [ 41.750219][ T413] exit_to_user_mode_prepare+0x87/0xd0 [ 41.755659][ T413] irqentry_exit_to_user_mode+0x9/0x10 [ 41.761098][ T413] irqentry_exit+0x12/0x40 [ 41.765497][ T413] exc_page_fault+0x5e/0xb0 [ 41.769987][ T413] asm_exc_page_fault+0x27/0x30 [ 41.774822][ T413] RIP: 0033:0x7f0fe399fb21 [ 41.779216][ T413] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 41.798810][ T413] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 41.804863][ T413] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 41.812813][ T413] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 41.820770][ T413] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.828724][ T413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.836673][ T413] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 41.844628][ T413] [ 41.864120][ T413] memory: usage 304872kB, limit 307200kB, failcnt 19893 [ 41.931950][ T413] memory+swap: usage 425632kB, limit 9007199254740988kB, failcnt 0 [ 41.940679][ T413] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.957792][ T675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 41.966589][ T413] Memory cgroup stats for /syz0: [ 41.966742][ T413] anon 126976 [ 41.966742][ T413] file 310329344 [ 41.966742][ T413] kernel 0 [ 41.966742][ T413] kernel_stack 0 [ 41.966742][ T413] pagetables 0 [ 41.966742][ T413] sec_pagetables 0 [ 41.966742][ T413] percpu 0 [ 41.966742][ T413] sock 0 [ 41.966742][ T413] vmalloc 0 [ 41.966742][ T413] shmem 310185984 [ 41.966742][ T413] file_mapped 19546112 [ 41.966742][ T413] file_dirty 143360 [ 41.966742][ T413] file_writeback 749568 [ 41.966742][ T413] swapcached 995328 [ 41.966742][ T413] anon_thp 0 [ 41.966742][ T413] file_thp 0 [ 41.966742][ T413] shmem_thp 0 [ 41.966742][ T413] inactive_anon 84758528 [ 41.966742][ T413] active_anon 225726464 [ 41.966742][ T413] inactive_file 143360 [ 41.966742][ T413] active_file 0 [ 41.966742][ T413] unevictable 0 [ 41.966742][ T413] slab_reclaimable 0 [ 41.966742][ T413] slab_unreclaimable 0 [ 41.966742][ T413] slab 0 [ 41.966742][ T413] workingset_refault_anon 0 [ 42.033191][ T675] device macsec1 entered promiscuous mode [ 42.076996][ T413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=416,uid=0 [ 42.093308][ T679] loop3: detected capacity change from 0 to 128 [ 42.111446][ T675] device vlan1 entered promiscuous mode [ 42.120025][ T675] device vlan1 left promiscuous mode [ 42.150910][ T413] Memory cgroup out of memory: Killed process 416 (syz.0.26) total-vm:90500kB, anon-rss:1268kB, file-rss:45760kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 42.228641][ T683] zero sized request [ 42.556101][ T348] usb 6-1: unable to get BOS descriptor or descriptor too short [ 42.599715][ T348] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 42.701784][ T348] usb 6-1: can't read configurations, error -71 [ 43.083301][ T699] loop1: detected capacity change from 0 to 128 [ 43.112040][ T699] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 43.151575][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 43.151589][ T28] audit: type=1400 audit(1794133640.395:757): avc: denied { map } for pid=694 comm="syz.5.90" path="socket:[18549]" dev="sockfs" ino=18549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 43.182675][ T699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.212725][ T699] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.89: Directory block failed checksum [ 43.577759][ T708] loop3: detected capacity change from 0 to 512 [ 43.803383][ T288] EXT4-fs (loop1): unmounting filesystem. [ 43.873396][ T708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.92: bg 0: block 288: padding at end of block bitmap is not set [ 43.888310][ T708] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 43.899201][ T708] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.92: attempt to clear invalid blocks 1024 len 1 [ 43.913617][ T708] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.92: invalid indirect mapped block 1819239214 (level 0) [ 43.929111][ T708] EXT4-fs (loop3): 1 truncate cleaned up [ 43.934826][ T708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.402013][ T30] oom_reaper: reaped process 416 (syz.0.26), now anon-rss:0kB, file-rss:45696kB, shmem-rss:0kB [ 44.475548][ T287] EXT4-fs (loop3): unmounting filesystem. [ 44.505656][ T720] X.509: Couldn't decode AuthKeyIdentifier [ 44.702768][ T715] loop1: detected capacity change from 0 to 1024 [ 44.705302][ T718] loop3: detected capacity change from 0 to 40427 [ 44.725638][ T718] F2FS-fs (loop3): invalid crc value [ 44.777141][ T715] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 44.827330][ T732] loop4: detected capacity change from 0 to 512 [ 44.841924][ T715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 44.850360][ T718] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.850411][ T715] System zones: [ 44.858057][ T735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.96'. [ 44.871589][ T736] futex_wake_op: syz.3.95 tries to shift op by 144; fix this program [ 44.883660][ T28] audit: type=1400 audit(1794133642.115:758): avc: denied { write } for pid=716 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.902653][ T715] 0-1, 3-36 [ 44.902812][ T732] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.908556][ T715] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.926091][ T718] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.939199][ T732] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.947341][ T715] EXT4-fs (loop1): 1 orphan inode deleted [ 44.948979][ T732] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 44.962057][ T715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.964795][ T732] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.98: attempt to clear invalid blocks 2 len 1 [ 44.993134][ T28] audit: type=1400 audit(1794133642.235:759): avc: denied { remount } for pid=714 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.994047][ T732] EXT4-fs (loop4): Remounting filesystem read-only [ 45.012384][ T715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 45.031261][ T732] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 45.049791][ T715] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 45.057122][ T732] EXT4-fs (loop4): Remounting filesystem read-only [ 45.070978][ T732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.98: invalid indirect mapped block 1819239214 (level 0) [ 45.093363][ T732] EXT4-fs (loop4): Remounting filesystem read-only [ 45.104120][ T732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.98: invalid indirect mapped block 1819239214 (level 1) [ 45.134670][ T732] EXT4-fs (loop4): Remounting filesystem read-only [ 45.146613][ T732] EXT4-fs (loop4): 1 truncate cleaned up [ 45.149508][ T747] syz.0.91 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.156528][ T732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.161978][ T747] CPU: 1 PID: 747 Comm: syz.0.91 Not tainted syzkaller #0 [ 45.177911][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.187962][ T747] Call Trace: [ 45.191230][ T747] [ 45.194145][ T747] __dump_stack+0x21/0x24 [ 45.198483][ T747] dump_stack_lvl+0x110/0x170 [ 45.203139][ T747] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.208148][ T747] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 45.213938][ T747] ? ___ratelimit+0x40a/0x590 [ 45.218601][ T747] dump_stack+0x15/0x24 [ 45.222737][ T747] dump_header+0xdb/0x660 [ 45.227055][ T747] ? __cfi_gfp_zone+0x10/0x10 [ 45.231717][ T747] oom_kill_process+0x32a/0x410 [ 45.236560][ T747] ? kvm_sched_clock_read+0x18/0x40 [ 45.241745][ T747] out_of_memory+0x630/0x930 [ 45.246328][ T747] ? __cfi_out_of_memory+0x10/0x10 [ 45.251428][ T747] mem_cgroup_out_of_memory+0x2be/0x390 [ 45.256955][ T747] ? __kasan_check_write+0x14/0x20 [ 45.262046][ T747] ? mem_cgroup_oom_trylock+0x360/0x360 [ 45.267575][ T747] try_charge_memcg+0xb8a/0x1650 [ 45.272499][ T747] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 45.277854][ T747] ? __asan_set_shadow_00+0xe/0x10 [ 45.282949][ T747] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 45.288830][ T747] charge_memcg+0x81/0x1f0 [ 45.293264][ T747] __mem_cgroup_charge+0x93/0x290 [ 45.298362][ T747] ? xas_start+0x31d/0x3e0 [ 45.302764][ T747] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 45.308377][ T747] ? xas_load+0x3a2/0x3c0 [ 45.312691][ T747] shmem_add_to_page_cache+0x5b1/0xae0 [ 45.318135][ T747] ? put_page+0xb0/0xb0 [ 45.322275][ T747] shmem_get_folio_gfp+0xef9/0x20f0 [ 45.327472][ T747] shmem_write_begin+0xea/0x2c0 [ 45.332307][ T747] generic_perform_write+0x32d/0x740 [ 45.337583][ T747] ? __cfi_generic_perform_write+0x10/0x10 [ 45.343370][ T747] ? __cfi_file_update_time+0x10/0x10 [ 45.348727][ T747] shmem_file_write_iter+0x104/0x130 [ 45.354001][ T747] vfs_write+0x5ef/0xd00 [ 45.358223][ T747] ? __cfi_vfs_write+0x10/0x10 [ 45.362976][ T747] ? __fget_files+0x2d1/0x330 [ 45.367639][ T747] ? __fdget_pos+0x1f2/0x380 [ 45.372218][ T747] ? ksys_write+0x70/0x260 [ 45.376638][ T747] ksys_write+0x14a/0x260 [ 45.380988][ T747] ? __cfi_ksys_write+0x10/0x10 [ 45.385846][ T747] ? do_user_addr_fault+0x9a5/0x1030 [ 45.391132][ T747] ? debug_smp_processor_id+0x17/0x20 [ 45.396599][ T747] __x64_sys_write+0x7b/0x90 [ 45.401198][ T747] x64_sys_call+0x27b/0x9a0 [ 45.405684][ T747] do_syscall_64+0x4c/0xa0 [ 45.410088][ T747] ? clear_bhb_loop+0x30/0x80 [ 45.414745][ T747] ? clear_bhb_loop+0x30/0x80 [ 45.419410][ T747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.425280][ T747] RIP: 0033:0x7f0fe396034e [ 45.429675][ T747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.449262][ T747] RSP: 002b:00007f0fe47deda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.457657][ T747] RAX: ffffffffffffffda RBX: 00007f0fe47df6c0 RCX: 00007f0fe396034e [ 45.465609][ T747] RDX: 0000000000040000 RSI: 00007f0fd9ff8000 RDI: 000000000000000a [ 45.473564][ T747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.481515][ T747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 45.489466][ T747] R13: 00007f0fe47deee0 R14: 00007f0fe47deea0 R15: 00007f0fd9ff8000 [ 45.497434][ T747] [ 45.501192][ T747] memory: usage 307004kB, limit 307200kB, failcnt 21411 [ 45.508290][ T747] memory+swap: usage 430884kB, limit 9007199254740988kB, failcnt 0 [ 45.516338][ T747] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 45.523280][ T747] Memory cgroup stats for /syz0: [ 45.523821][ T747] anon 495616 [ 45.523821][ T747] file 312733696 [ 45.523821][ T747] kernel 0 [ 45.523821][ T747] kernel_stack 0 [ 45.523821][ T747] pagetables 0 [ 45.523821][ T747] sec_pagetables 0 [ 45.523821][ T747] percpu 0 [ 45.523821][ T747] sock 0 [ 45.523821][ T747] vmalloc 0 [ 45.523821][ T747] shmem 312565760 [ 45.523821][ T747] file_mapped 15216640 [ 45.523821][ T747] file_dirty 167936 [ 45.523821][ T747] file_writeback 1142784 [ 45.523821][ T747] swapcached 1142784 [ 45.523821][ T747] anon_thp 0 [ 45.523821][ T747] file_thp 0 [ 45.523821][ T747] shmem_thp 0 [ 45.523821][ T747] inactive_anon 56954880 [ 45.523821][ T747] active_anon 255668224 [ 45.523821][ T747] inactive_file 0 [ 45.523821][ T747] active_file 167936 [ 45.523821][ T747] unevictable 0 [ 45.523821][ T747] slab_reclaimable 0 [ 45.523821][ T747] slab_unreclaimable 0 [ 45.523821][ T747] slab 0 [ 45.523821][ T747] workingset_refault_anon 0 [ 45.790525][ T747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=413,uid=0 [ 45.805281][ T747] Memory cgroup out of memory: Killed process 413 (syz.0.26) total-vm:90500kB, anon-rss:1268kB, file-rss:45760kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 45.861464][ T28] audit: type=1326 audit(1794133642.865:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=714 comm="syz.1.94" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 46.207827][ T732] device syzkaller1 entered promiscuous mode [ 46.255452][ T28] audit: type=1326 audit(1794133642.865:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=714 comm="syz.1.94" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 46.307305][ T291] EXT4-fs (loop4): unmounting filesystem. [ 46.311841][ T765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.319644][ T765] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 46.338388][ T28] audit: type=1326 audit(1794133642.865:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=714 comm="syz.1.94" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 46.344272][ T768] ip_tables: iptables: counters copy to user failed while replacing table [ 46.375339][ T765] audit: backlog limit exceeded [ 46.382609][ T771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.425771][ T760] loop5: detected capacity change from 0 to 512 [ 46.469349][ T288] EXT4-fs (loop1): unmounting filesystem. [ 46.524648][ T782] loop1: detected capacity change from 0 to 256 [ 46.536468][ T760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 46.551234][ T760] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.602178][ T311] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.688970][ T388] EXT4-fs (loop5): unmounting filesystem. [ 47.114570][ T793] loop1: detected capacity change from 0 to 40427 [ 47.131717][ T793] F2FS-fs (loop1): invalid crc value [ 47.159294][ T793] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.210789][ T793] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.471310][ T808] loop1: detected capacity change from 0 to 128 [ 47.545934][ T458] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 47.616907][ T818] loop1: detected capacity change from 0 to 256 [ 47.644610][ T819] device bridge_slave_1 left promiscuous mode [ 47.652944][ T801] loop0: detected capacity change from 0 to 128 [ 47.659503][ T818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 47.672086][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.672159][ T458] CPU: 0 PID: 458 Comm: syz.0.26 Not tainted syzkaller #0 [ 47.686220][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 47.696276][ T458] Call Trace: [ 47.699555][ T458] [ 47.702480][ T458] __dump_stack+0x21/0x24 [ 47.706808][ T458] dump_stack_lvl+0x110/0x170 [ 47.711488][ T458] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.716521][ T458] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 47.721723][ T821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 47.722331][ T458] ? ___ratelimit+0x40a/0x590 [ 47.722358][ T458] dump_stack+0x15/0x24 [ 47.739979][ T458] dump_header+0xdb/0x660 [ 47.744327][ T458] ? __cfi_gfp_zone+0x10/0x10 [ 47.749019][ T458] oom_kill_process+0x32a/0x410 [ 47.753887][ T458] ? kvm_sched_clock_read+0x18/0x40 [ 47.759120][ T458] out_of_memory+0x630/0x930 [ 47.763726][ T458] ? __cfi_out_of_memory+0x10/0x10 [ 47.769286][ T458] mem_cgroup_out_of_memory+0x2be/0x390 [ 47.774884][ T458] ? __kasan_check_write+0x14/0x20 [ 47.780007][ T458] ? mem_cgroup_oom_trylock+0x360/0x360 [ 47.785558][ T458] try_charge_memcg+0xb8a/0x1650 [ 47.790512][ T458] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 47.795898][ T458] ? __asan_set_shadow_00+0xe/0x10 [ 47.801024][ T458] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 47.806930][ T458] charge_memcg+0x81/0x1f0 [ 47.811356][ T458] __mem_cgroup_charge+0x93/0x290 [ 47.816387][ T458] ? xas_start+0x31d/0x3e0 [ 47.820816][ T458] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.826462][ T458] ? xas_load+0x3a2/0x3c0 [ 47.830807][ T458] shmem_add_to_page_cache+0x5b1/0xae0 [ 47.836284][ T458] ? put_page+0xb0/0xb0 [ 47.840456][ T458] ? __asan_set_shadow_00+0xe/0x10 [ 47.845592][ T458] shmem_get_folio_gfp+0xef9/0x20f0 [ 47.850809][ T458] ? xas_find+0x6ec/0x820 [ 47.855158][ T458] shmem_fault+0x1ab/0x670 [ 47.859596][ T458] ? __cfi_shmem_fault+0x10/0x10 [ 47.864557][ T458] ? __kasan_check_write+0x14/0x20 [ 47.869939][ T458] ? vma_data_pages+0xfc/0x130 [ 47.874721][ T458] do_fault+0x19de/0x1e30 [ 47.879416][ T458] ? pte_marker_clear+0x220/0x220 [ 47.884451][ T458] ? copy_page_from_iter_atomic+0xa1a/0x1240 [ 47.890447][ T458] ? memcpy+0x51/0x70 [ 47.894497][ T458] handle_mm_fault+0x1363/0x26b0 [ 47.899446][ T458] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.904747][ T458] __get_user_pages+0x34b/0xdb0 [ 47.909624][ T458] ? populate_vma_page_range+0x120/0x120 [ 47.915281][ T458] get_dump_page+0x169/0x640 [ 47.919882][ T458] ? __cfi_get_dump_page+0x10/0x10 [ 47.925024][ T458] dump_user_range+0x123/0x630 [ 47.929794][ T458] ? __cfi_dump_user_range+0x10/0x10 [ 47.935070][ T458] ? dump_align+0xfe/0x120 [ 47.939470][ T458] ? dump_emit+0xa8/0xc0 [ 47.943692][ T458] elf_core_dump+0x2b60/0x30b0 [ 47.948445][ T458] ? __cfi_elf_core_dump+0x10/0x10 [ 47.953544][ T458] ? dump_interrupted+0xd0/0xd0 [ 47.958373][ T458] ? 0xffffffffff600000 [ 47.962513][ T458] do_coredump+0x160e/0x23a0 [ 47.967265][ T458] ? __cfi_do_coredump+0x10/0x10 [ 47.972190][ T458] ? kmem_cache_free+0x12d/0x300 [ 47.977110][ T458] ? ____kasan_slab_free+0x13d/0x180 [ 47.982392][ T458] ? get_signal+0xac2/0x1700 [ 47.986970][ T458] ? kmem_cache_free+0x12d/0x300 [ 47.991980][ T458] get_signal+0x157d/0x1700 [ 47.996474][ T458] ? __cfi_get_signal+0x10/0x10 [ 48.001309][ T458] ? force_sig_info_to_task+0x306/0x3b0 [ 48.006837][ T458] arch_do_signal_or_restart+0xd1/0x11c0 [ 48.012455][ T458] ? page_fault_oops+0x8b0/0x8b0 [ 48.017378][ T458] ? down_read_trylock+0x27f/0x660 [ 48.022474][ T458] ? find_vma+0x89/0xd0 [ 48.026616][ T458] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.032761][ T458] ? do_user_addr_fault+0xd10/0x1030 [ 48.038118][ T458] exit_to_user_mode_loop+0x7a/0xb0 [ 48.043299][ T458] exit_to_user_mode_prepare+0x87/0xd0 [ 48.048737][ T458] irqentry_exit_to_user_mode+0x9/0x10 [ 48.054529][ T458] irqentry_exit+0x12/0x40 [ 48.058929][ T458] exc_page_fault+0x5e/0xb0 [ 48.063415][ T458] asm_exc_page_fault+0x27/0x30 [ 48.068254][ T458] RIP: 0033:0x7f0fe399fb21 [ 48.072658][ T458] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 48.092247][ T458] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 48.098297][ T458] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 48.106249][ T458] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 48.114203][ T458] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 48.122157][ T458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 48.130113][ T458] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 48.138070][ T458] [ 48.174477][ T819] device bridge_slave_0 left promiscuous mode [ 48.180911][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 48.180925][ T28] audit: type=1400 audit(1794133645.415:842): avc: denied { setattr } for pid=817 comm="syz.1.110" name="file0" dev="loop1" ino=1048699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.217857][ T311] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.224424][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.321404][ T28] audit: type=1400 audit(1794133645.565:843): avc: denied { mounton } for pid=829 comm="syz.0.113" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.321429][ T831] binder: Bad value for 'max' [ 48.349538][ T833] netlink: 'syz.5.111': attribute type 12 has an invalid length. [ 48.393325][ T28] audit: type=1400 audit(1794133645.635:844): avc: denied { read } for pid=829 comm="syz.0.113" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.434809][ T28] audit: type=1400 audit(1794133645.665:845): avc: denied { open } for pid=829 comm="syz.0.113" path="/13/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.460365][ T843] loop4: detected capacity change from 0 to 256 [ 48.460910][ T834] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 48.475972][ T28] audit: type=1400 audit(1794133645.705:846): avc: denied { ioctl } for pid=829 comm="syz.0.113" path="/13/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.544899][ T28] audit: type=1400 audit(1794133645.785:847): avc: denied { getopt } for pid=848 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.565946][ T847] loop0: detected capacity change from 0 to 512 [ 48.577924][ T851] loop3: detected capacity change from 0 to 16 [ 48.604875][ T851] erofs: (device loop3): mounted with root inode @ nid 36. [ 48.661164][ T39] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 48.743037][ T847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 48.827367][ T863] loop3: detected capacity change from 0 to 512 [ 48.833881][ T39] usb 2-1: device descriptor read/64, error -71 [ 48.873547][ T458] memory: usage 272628kB, limit 307200kB, failcnt 23596 [ 48.883473][ T863] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.886370][ T458] memory+swap: usage 397800kB, limit 9007199254740988kB, failcnt 0 [ 48.905639][ T458] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.912594][ T847] System zones: 0-2, 18-18, 34-34 [ 48.927900][ T458] Memory cgroup stats for /syz0: [ 48.928067][ T458] anon 208896 [ 48.928067][ T458] file 282537984 [ 48.928067][ T458] kernel 0 [ 48.928067][ T458] kernel_stack 0 [ 48.928067][ T458] pagetables 0 [ 48.928067][ T458] sec_pagetables 0 [ 48.928067][ T458] percpu 0 [ 48.928067][ T458] sock 0 [ 48.928067][ T458] vmalloc 0 [ 48.928067][ T458] shmem 282144768 [ 48.928067][ T458] file_mapped 18345984 [ 48.928067][ T458] file_dirty 167936 [ 48.928067][ T458] file_writeback 270336 [ 48.928067][ T458] swapcached 344064 [ 48.928067][ T458] anon_thp 0 [ 48.928067][ T458] file_thp 0 [ 48.928067][ T458] shmem_thp 0 [ 48.928067][ T458] inactive_anon 106233856 [ 48.928067][ T458] active_anon 175374336 [ 48.928067][ T458] inactive_file 241664 [ 48.928067][ T458] active_file 151552 [ 48.928067][ T458] unevictable 0 [ 48.928067][ T458] slab_reclaimable 0 [ 48.928067][ T458] slab_unreclaimable 0 [ 48.928067][ T458] slab 0 [ 48.928067][ T458] workingset_refault_anon 0 [ 49.024791][ T847] EXT4-fs (loop0): 1 orphan inode deleted [ 49.044584][ T847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.101121][ T39] usb 2-1: device descriptor read/64, error -71 [ 49.118453][ T458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=448,uid=0 [ 49.144295][ T458] Memory cgroup out of memory: Killed process 448 (syz.0.26) total-vm:324108kB, anon-rss:1268kB, file-rss:20544kB, shmem-rss:6648kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 49.172056][ T60] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 49.219042][ T847] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.341353][ T60] usb 6-1: device descriptor read/64, error -71 [ 49.371168][ T39] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 49.384551][ T876] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 49.386729][ T847] EXT4-fs (loop0): unmounting filesystem. [ 49.392363][ T876] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 49.531114][ T39] usb 2-1: device descriptor read/64, error -71 [ 49.570970][ T879] device dummy0 entered promiscuous mode [ 49.582721][ T28] audit: type=1400 audit(1794133646.825:848): avc: denied { append } for pid=881 comm="syz.4.125" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.611082][ T60] usb 6-1: device descriptor read/64, error -71 [ 49.619677][ T879] device vlan2 entered promiscuous mode [ 49.641267][ T880] jbd2_journal_init_inode: Cannot locate journal superblock [ 49.648579][ T880] EXT4-fs (loop3): Could not load journal inode [ 49.709137][ T28] audit: type=1400 audit(1794133646.945:849): avc: denied { create } for pid=886 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.744410][ T28] audit: type=1400 audit(1794133646.985:850): avc: denied { read write } for pid=886 comm="syz.3.127" dev="sockfs" ino=17278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.801129][ T39] usb 2-1: device descriptor read/64, error -71 [ 49.881101][ T60] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 49.881101][ T677] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 49.921152][ T39] usb usb2-port1: attempt power cycle [ 50.051088][ T60] usb 6-1: device descriptor read/64, error -71 [ 50.072129][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.091076][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.110955][ T677] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.131088][ T677] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.140174][ T677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.151192][ T677] usb 5-1: config 0 descriptor?? [ 50.321092][ T60] usb 6-1: device descriptor read/64, error -71 [ 50.331193][ T39] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 50.358760][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.362275][ T39] usb 2-1: device descriptor read/8, error -71 [ 50.371107][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.389899][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.397397][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.411101][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.418553][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.425981][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.436894][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.441151][ T60] usb usb6-port1: attempt power cycle [ 50.444366][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.457115][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.467216][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.474655][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.489951][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.497428][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.505079][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.521100][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.522088][ T39] usb 2-1: device descriptor read/8, error -71 [ 50.528554][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.542183][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.557633][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.571127][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.585448][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.601122][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.608584][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.616174][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.631140][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.638603][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.646030][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.653476][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.660878][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.668340][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.675751][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.683195][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.690583][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.698037][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.705479][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.712929][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.720322][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.727935][ T677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 50.735543][ T677] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 50.750450][ T677] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 50.801095][ T39] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 50.832098][ T39] usb 2-1: device descriptor read/8, error -71 [ 50.851091][ T60] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 50.882085][ T60] usb 6-1: device descriptor read/8, error -71 [ 50.982515][ T39] usb 2-1: device descriptor read/8, error -71 [ 51.011089][ T19] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 51.032224][ T60] usb 6-1: device descriptor read/8, error -71 [ 51.101289][ T39] usb usb2-port1: unable to enumerate USB device [ 51.202129][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.221136][ T19] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 51.232110][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 51.252244][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.271095][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.279155][ T19] usb 4-1: SerialNumber: syz [ 51.301094][ T60] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 51.332106][ T60] usb 6-1: device descriptor read/8, error -71 [ 51.349754][ T451] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 51.376329][ T451] CPU: 0 PID: 451 Comm: syz.0.26 Not tainted syzkaller #0 [ 51.383494][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 51.393559][ T451] Call Trace: [ 51.396843][ T451] [ 51.399770][ T451] __dump_stack+0x21/0x24 [ 51.404107][ T451] dump_stack_lvl+0x110/0x170 [ 51.408784][ T451] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.413808][ T451] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 51.419629][ T451] ? ___ratelimit+0x40a/0x590 [ 51.424319][ T451] dump_stack+0x15/0x24 [ 51.428485][ T451] dump_header+0xdb/0x660 [ 51.432831][ T451] ? __cfi_gfp_zone+0x10/0x10 [ 51.437513][ T451] oom_kill_process+0x32a/0x410 [ 51.442372][ T451] ? kvm_sched_clock_read+0x18/0x40 [ 51.447587][ T451] out_of_memory+0x630/0x930 [ 51.452183][ T451] ? __cfi_out_of_memory+0x10/0x10 [ 51.457316][ T451] mem_cgroup_out_of_memory+0x2be/0x390 [ 51.462874][ T451] ? __kasan_check_write+0x14/0x20 [ 51.467987][ T451] ? mem_cgroup_oom_trylock+0x360/0x360 [ 51.473543][ T451] try_charge_memcg+0xb8a/0x1650 [ 51.478495][ T451] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 51.482087][ T60] usb 6-1: device descriptor read/8, error -71 [ 51.483923][ T451] ? __asan_set_shadow_00+0xe/0x10 [ 51.483952][ T451] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 51.501060][ T451] charge_memcg+0x81/0x1f0 [ 51.505491][ T451] __mem_cgroup_charge+0x93/0x290 [ 51.510536][ T451] ? xas_start+0x31d/0x3e0 [ 51.514966][ T451] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 51.520610][ T451] ? xas_load+0x3a2/0x3c0 [ 51.524948][ T451] shmem_add_to_page_cache+0x5b1/0xae0 [ 51.530417][ T451] ? put_page+0xb0/0xb0 [ 51.534583][ T451] ? do_fault+0x1b23/0x1e30 [ 51.539089][ T451] shmem_get_folio_gfp+0xef9/0x20f0 [ 51.544291][ T451] shmem_write_begin+0xea/0x2c0 [ 51.549143][ T451] generic_perform_write+0x32d/0x740 [ 51.554432][ T451] ? __cfi_generic_perform_write+0x10/0x10 [ 51.556697][ T448] syz.0.26 (448) used greatest stack depth: 13376 bytes left [ 51.560236][ T451] ? __cfi_file_update_time+0x10/0x10 [ 51.572948][ T451] shmem_file_write_iter+0x104/0x130 [ 51.578235][ T451] __kernel_write_iter+0x2a9/0x6a0 [ 51.583333][ T451] ? __cfi___kernel_write_iter+0x10/0x10 [ 51.588975][ T451] ? dump_user_range+0x575/0x630 [ 51.593898][ T451] ? iov_iter_bvec+0x53/0x1f0 [ 51.598558][ T451] dump_user_range+0x3e6/0x630 [ 51.603317][ T451] ? __cfi_dump_user_range+0x10/0x10 [ 51.608600][ T451] ? dump_align+0xfe/0x120 [ 51.613015][ T451] ? dump_emit+0xa8/0xc0 [ 51.617250][ T451] elf_core_dump+0x2b60/0x30b0 [ 51.622004][ T451] ? __cfi_elf_core_dump+0x10/0x10 [ 51.627105][ T451] ? dump_interrupted+0xd0/0xd0 [ 51.631938][ T451] ? 0xffffffffff600000 [ 51.636072][ T451] do_coredump+0x160e/0x23a0 [ 51.640669][ T451] ? __cfi_do_coredump+0x10/0x10 [ 51.645591][ T451] ? kmem_cache_free+0x12d/0x300 [ 51.650512][ T451] ? ____kasan_slab_free+0x13d/0x180 [ 51.655784][ T451] ? get_signal+0xac2/0x1700 [ 51.660361][ T451] ? kmem_cache_free+0x12d/0x300 [ 51.665283][ T451] get_signal+0x157d/0x1700 [ 51.669778][ T451] ? __cfi_get_signal+0x10/0x10 [ 51.674609][ T451] ? force_sig_info_to_task+0x306/0x3b0 [ 51.680138][ T451] arch_do_signal_or_restart+0xd1/0x11c0 [ 51.685755][ T451] ? page_fault_oops+0x8b0/0x8b0 [ 51.690680][ T451] ? down_read_trylock+0x27f/0x660 [ 51.695805][ T451] ? find_vma+0x89/0xd0 [ 51.699945][ T451] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 51.706080][ T451] ? do_user_addr_fault+0xd10/0x1030 [ 51.711352][ T451] exit_to_user_mode_loop+0x7a/0xb0 [ 51.716532][ T451] exit_to_user_mode_prepare+0x87/0xd0 [ 51.721971][ T451] irqentry_exit_to_user_mode+0x9/0x10 [ 51.727414][ T451] irqentry_exit+0x12/0x40 [ 51.731821][ T451] exc_page_fault+0x5e/0xb0 [ 51.736306][ T451] asm_exc_page_fault+0x27/0x30 [ 51.741140][ T451] RIP: 0033:0x7f0fe399fb21 [ 51.745539][ T451] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 51.765127][ T451] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 51.771176][ T451] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 51.779128][ T451] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 51.787080][ T451] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 51.795034][ T451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 51.802986][ T451] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 51.810942][ T451] [ 51.814174][ T60] usb usb6-port1: unable to enumerate USB device [ 51.823867][ T906] set_capacity_and_notify: 2 callbacks suppressed [ 51.823885][ T906] loop1: detected capacity change from 0 to 512 [ 51.847151][ T39] usb 4-1: USB disconnect, device number 10 [ 51.869744][ T906] EXT4-fs: Ignoring removed oldalloc option [ 51.880506][ T906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 51.897597][ T906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.931510][ T906] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.130: bad orphan inode 131083 [ 51.950583][ T906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.968119][ T906] fscrypt: AES-256-XTS using blk-crypto-fallback [ 51.994344][ T28] audit: type=1400 audit(1794133649.235:851): avc: denied { read append } for pid=905 comm="syz.1.130" path="/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.052507][ T288] EXT4-fs (loop1): unmounting filesystem. [ 52.133451][ T922] loop1: detected capacity change from 0 to 128 [ 52.182890][ T451] memory: usage 307200kB, limit 307200kB, failcnt 57649 [ 52.189902][ T451] memory+swap: usage 431992kB, limit 9007199254740988kB, failcnt 0 [ 52.197913][ T451] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 52.205449][ T451] Memory cgroup stats for /syz0: [ 52.205604][ T451] anon 49152 [ 52.205604][ T451] file 314277888 [ 52.205604][ T451] kernel 0 [ 52.205604][ T451] kernel_stack 0 [ 52.205604][ T451] pagetables 0 [ 52.205604][ T451] sec_pagetables 0 [ 52.205604][ T451] percpu 0 [ 52.205604][ T451] sock 0 [ 52.205604][ T451] vmalloc 0 [ 52.205604][ T451] shmem 314265600 [ 52.205604][ T451] file_mapped 26816512 [ 52.205604][ T451] file_dirty 12288 [ 52.205604][ T451] file_writeback 204800 [ 52.205604][ T451] swapcached 204800 [ 52.205604][ T451] anon_thp 0 [ 52.205604][ T451] file_thp 0 [ 52.205604][ T451] shmem_thp 0 [ 52.205604][ T451] inactive_anon 54902784 [ 52.205604][ T451] active_anon 259354624 [ 52.205604][ T451] inactive_file 12288 [ 52.205604][ T451] active_file 0 [ 52.205604][ T451] unevictable 0 [ 52.205604][ T451] slab_reclaimable 0 [ 52.205604][ T451] slab_unreclaimable 0 [ 52.205604][ T451] slab 0 [ 52.205604][ T451] workingset_refault_anon 0 [ 52.300183][ T451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=432,uid=0 [ 52.314927][ T451] Memory cgroup out of memory: Killed process 432 (syz.0.26) total-vm:324108kB, anon-rss:1268kB, file-rss:20544kB, shmem-rss:10136kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 52.332258][ T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 52.373528][ T924] loop3: detected capacity change from 0 to 512 [ 52.491346][ T60] usb 6-1: device descriptor read/64, error -71 [ 52.735143][ T39] usb 5-1: USB disconnect, device number 8 [ 52.761129][ T60] usb 6-1: device descriptor read/64, error -71 [ 53.121122][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 53.185467][ T938] loop4: detected capacity change from 0 to 512 [ 53.212309][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 53.212323][ T28] audit: type=1400 audit(1794133650.455:854): avc: denied { search } for pid=936 comm="syz.4.137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.260660][ T459] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.270414][ T459] CPU: 0 PID: 459 Comm: syz.0.26 Not tainted syzkaller #0 [ 53.277532][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 53.281136][ T60] usb 6-1: device descriptor read/64, error -71 [ 53.287587][ T459] Call Trace: [ 53.287599][ T459] [ 53.287606][ T459] __dump_stack+0x21/0x24 [ 53.287636][ T459] dump_stack_lvl+0x110/0x170 [ 53.309012][ T459] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.314052][ T459] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 53.319865][ T459] ? ___ratelimit+0x40a/0x590 [ 53.324549][ T459] dump_stack+0x15/0x24 [ 53.328729][ T459] dump_header+0xdb/0x660 [ 53.333068][ T459] ? __cfi_gfp_zone+0x10/0x10 [ 53.336820][ T938] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 53.337835][ T459] oom_kill_process+0x32a/0x410 [ 53.351256][ T459] ? kvm_sched_clock_read+0x18/0x40 [ 53.356454][ T459] out_of_memory+0x630/0x930 [ 53.361207][ T459] ? __cfi_out_of_memory+0x10/0x10 [ 53.366319][ T459] mem_cgroup_out_of_memory+0x2be/0x390 [ 53.371872][ T459] ? __kasan_check_write+0x14/0x20 [ 53.377012][ T459] ? mem_cgroup_oom_trylock+0x360/0x360 [ 53.382567][ T459] try_charge_memcg+0xb8a/0x1650 [ 53.387509][ T459] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 53.392873][ T459] ? __asan_set_shadow_00+0xe/0x10 [ 53.397978][ T459] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 53.403861][ T459] charge_memcg+0x81/0x1f0 [ 53.408271][ T459] __mem_cgroup_charge+0x93/0x290 [ 53.413282][ T459] ? xas_start+0x31d/0x3e0 [ 53.417685][ T459] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.423302][ T459] ? xas_load+0x3a2/0x3c0 [ 53.427632][ T459] shmem_add_to_page_cache+0x5b1/0xae0 [ 53.433079][ T459] ? put_page+0xb0/0xb0 [ 53.437224][ T459] ? do_fault+0x1b23/0x1e30 [ 53.441717][ T459] shmem_get_folio_gfp+0xef9/0x20f0 [ 53.446908][ T459] shmem_write_begin+0xea/0x2c0 [ 53.451745][ T459] generic_perform_write+0x32d/0x740 [ 53.457023][ T459] ? __cfi_generic_perform_write+0x10/0x10 [ 53.462814][ T459] ? __cfi_file_update_time+0x10/0x10 [ 53.468178][ T459] shmem_file_write_iter+0x104/0x130 [ 53.473448][ T459] __kernel_write_iter+0x2a9/0x6a0 [ 53.478544][ T459] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.484162][ T459] ? iov_iter_bvec+0x53/0x1f0 [ 53.488850][ T459] dump_user_range+0x3e6/0x630 [ 53.493602][ T459] ? __cfi_dump_user_range+0x10/0x10 [ 53.498869][ T459] ? dump_align+0xfe/0x120 [ 53.503276][ T459] ? kasan_check_range+0x89/0x2a0 [ 53.508288][ T459] ? dump_emit+0xa8/0xc0 [ 53.512513][ T459] elf_core_dump+0x2b60/0x30b0 [ 53.517269][ T459] ? __cfi_elf_core_dump+0x10/0x10 [ 53.522372][ T459] ? dump_interrupted+0xd0/0xd0 [ 53.527207][ T459] ? 0xffffffffff600000 [ 53.531342][ T459] do_coredump+0x160e/0x23a0 [ 53.535928][ T459] ? __cfi_do_coredump+0x10/0x10 [ 53.540853][ T459] ? kmem_cache_free+0x12d/0x300 [ 53.545776][ T459] ? ____kasan_slab_free+0x13d/0x180 [ 53.551047][ T459] ? get_signal+0xac2/0x1700 [ 53.555675][ T459] ? kmem_cache_free+0x12d/0x300 [ 53.560601][ T459] get_signal+0x157d/0x1700 [ 53.565095][ T459] ? __cfi_get_signal+0x10/0x10 [ 53.569938][ T459] ? force_sig_info_to_task+0x306/0x3b0 [ 53.575470][ T459] arch_do_signal_or_restart+0xd1/0x11c0 [ 53.581092][ T459] ? page_fault_oops+0x8b0/0x8b0 [ 53.586021][ T459] ? down_read_trylock+0x27f/0x660 [ 53.591120][ T459] ? find_vma+0x89/0xd0 [ 53.595274][ T459] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.601423][ T459] ? do_user_addr_fault+0xd10/0x1030 [ 53.606702][ T459] exit_to_user_mode_loop+0x7a/0xb0 [ 53.611888][ T459] exit_to_user_mode_prepare+0x87/0xd0 [ 53.617332][ T459] irqentry_exit_to_user_mode+0x9/0x10 [ 53.622786][ T459] irqentry_exit+0x12/0x40 [ 53.627187][ T459] exc_page_fault+0x5e/0xb0 [ 53.631678][ T459] asm_exc_page_fault+0x27/0x30 [ 53.636515][ T459] RIP: 0033:0x7f0fe399fb21 [ 53.640915][ T459] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.660504][ T459] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 53.666559][ T459] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 53.674533][ T459] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 53.682484][ T459] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.690436][ T459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.698389][ T459] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 53.706348][ T459] [ 53.713334][ T938] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 53.729160][ T938] EXT4-fs (loop4): mount failed [ 53.770071][ T459] memory: usage 297724kB, limit 307200kB, failcnt 59475 [ 53.817086][ T459] memory+swap: usage 391872kB, limit 9007199254740988kB, failcnt 0 [ 53.825359][ T459] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.832276][ T459] Memory cgroup stats for /syz0: [ 53.832412][ T459] anon 45056 [ 53.832412][ T459] file 285749248 [ 53.832412][ T459] kernel 0 [ 53.832412][ T459] kernel_stack 0 [ 53.832412][ T459] pagetables 0 [ 53.832412][ T459] sec_pagetables 0 [ 53.832412][ T459] percpu 0 [ 53.832412][ T459] sock 0 [ 53.832412][ T459] vmalloc 0 [ 53.832412][ T459] shmem 285736960 [ 53.832412][ T459] file_mapped 27242496 [ 53.832412][ T459] file_dirty 12288 [ 53.832412][ T459] file_writeback 0 [ 53.832412][ T459] swapcached 933888 [ 53.832412][ T459] anon_thp 0 [ 53.832412][ T459] file_thp 0 [ 53.832412][ T459] shmem_thp 0 [ 53.832412][ T459] inactive_anon 246419456 [ 53.832412][ T459] active_anon 40247296 [ 53.832412][ T459] inactive_file 12288 [ 53.832412][ T459] active_file 0 [ 53.832412][ T459] unevictable 0 [ 53.832412][ T459] slab_reclaimable 0 [ 53.832412][ T459] slab_unreclaimable 0 [ 53.832412][ T459] slab 0 [ 53.832412][ T459] workingset_refault_anon 0 [ 53.861117][ T60] usb 6-1: device descriptor read/64, error -71 [ 53.926024][ T459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=450,uid=0 [ 53.967475][ T459] Memory cgroup out of memory: Killed process 450 (syz.0.26) total-vm:324240kB, anon-rss:1268kB, file-rss:20544kB, shmem-rss:14468kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 54.051505][ T950] loop1: detected capacity change from 0 to 512 [ 54.129147][ T952] loop4: detected capacity change from 0 to 512 [ 54.161770][ T60] usb usb6-port1: attempt power cycle [ 54.195996][ T952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.221871][ T952] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.415148][ T924] loop3: detected capacity change from 0 to 131072 [ 54.426785][ T924] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 54.442611][ T291] EXT4-fs (loop4): unmounting filesystem. [ 54.471090][ T924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.475025][ T967] loop4: detected capacity change from 0 to 1024 [ 54.491106][ T924] F2FS-fs (loop3): invalid crc value [ 54.502399][ T967] EXT4-fs (loop4): barriers disabled [ 54.518692][ T967] JBD2: no valid journal superblock found [ 54.525535][ T924] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.532827][ T967] EXT4-fs (loop4): error loading journal [ 54.571097][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 54.613782][ T972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 54.622988][ T924] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.630063][ T924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 54.638347][ T60] usb 6-1: device descriptor read/8, error -71 [ 54.686770][ T28] audit: type=1326 audit(1794133651.925:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.727306][ T28] audit: type=1326 audit(1794133651.955:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.751909][ T28] audit: type=1326 audit(1794133651.955:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.781223][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.788933][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.802144][ T60] usb 6-1: device descriptor read/8, error -71 [ 54.815498][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.823473][ T28] audit: type=1326 audit(1794133651.955:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.848469][ T28] audit: type=1326 audit(1794133651.955:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.901204][ T28] audit: type=1326 audit(1794133651.955:860): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.951367][ T28] audit: type=1326 audit(1794133651.955:861): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 54.985167][ T979] loop5: detected capacity change from 0 to 2048 [ 55.001285][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 55.010685][ T950] loop1: detected capacity change from 0 to 131072 [ 55.020286][ T455] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.030376][ T28] audit: type=1326 audit(1794133651.955:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.144" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 55.059615][ T950] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 55.068374][ T950] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 55.073690][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 55.077629][ T950] F2FS-fs (loop1): invalid crc value [ 55.089749][ T455] CPU: 0 PID: 455 Comm: syz.0.26 Not tainted syzkaller #0 [ 55.096877][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 55.106935][ T455] Call Trace: [ 55.110219][ T455] [ 55.113155][ T455] __dump_stack+0x21/0x24 [ 55.117491][ T455] dump_stack_lvl+0x110/0x170 [ 55.122171][ T455] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.127196][ T455] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 55.133009][ T455] ? ___ratelimit+0x40a/0x590 [ 55.137691][ T455] dump_stack+0x15/0x24 [ 55.141855][ T455] dump_header+0xdb/0x660 [ 55.146191][ T455] ? __cfi_gfp_zone+0x10/0x10 [ 55.150871][ T455] oom_kill_process+0x32a/0x410 [ 55.155730][ T455] ? kvm_sched_clock_read+0x18/0x40 [ 55.160939][ T455] out_of_memory+0x630/0x930 [ 55.165540][ T455] ? __cfi_out_of_memory+0x10/0x10 [ 55.170669][ T455] mem_cgroup_out_of_memory+0x2be/0x390 [ 55.176218][ T455] ? __kasan_check_write+0x14/0x20 [ 55.181336][ T455] ? mem_cgroup_oom_trylock+0x360/0x360 [ 55.186894][ T455] try_charge_memcg+0xb8a/0x1650 [ 55.191843][ T455] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 55.197226][ T455] ? __asan_set_shadow_00+0xe/0x10 [ 55.202349][ T455] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 55.208253][ T455] charge_memcg+0x81/0x1f0 [ 55.212770][ T455] __mem_cgroup_charge+0x93/0x290 [ 55.217803][ T455] ? xas_start+0x31d/0x3e0 [ 55.222230][ T455] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 55.227876][ T455] ? xas_load+0x3a2/0x3c0 [ 55.232216][ T455] shmem_add_to_page_cache+0x5b1/0xae0 [ 55.237684][ T455] ? put_page+0xb0/0xb0 [ 55.241875][ T455] ? do_fault+0x1b23/0x1e30 [ 55.246385][ T455] shmem_get_folio_gfp+0xef9/0x20f0 [ 55.251618][ T455] shmem_write_begin+0xea/0x2c0 [ 55.256461][ T455] generic_perform_write+0x32d/0x740 [ 55.261741][ T455] ? __cfi_generic_perform_write+0x10/0x10 [ 55.267532][ T455] ? __cfi_file_update_time+0x10/0x10 [ 55.272896][ T455] shmem_file_write_iter+0x104/0x130 [ 55.278171][ T455] __kernel_write_iter+0x2a9/0x6a0 [ 55.283265][ T455] ? __cfi___kernel_write_iter+0x10/0x10 [ 55.288878][ T455] ? kasan_check_range+0x89/0x2a0 [ 55.293890][ T455] ? iov_iter_bvec+0x53/0x1f0 [ 55.298549][ T455] dump_user_range+0x3e6/0x630 [ 55.303302][ T455] ? __cfi_dump_user_range+0x10/0x10 [ 55.308575][ T455] ? dump_align+0xfe/0x120 [ 55.312978][ T455] ? dump_emit+0xa8/0xc0 [ 55.317201][ T455] elf_core_dump+0x2b60/0x30b0 [ 55.321956][ T455] ? __cfi_elf_core_dump+0x10/0x10 [ 55.327060][ T455] ? dump_interrupted+0xd0/0xd0 [ 55.331893][ T455] ? 0xffffffffff600000 [ 55.336029][ T455] do_coredump+0x160e/0x23a0 [ 55.340605][ T455] ? __cfi_do_coredump+0x10/0x10 [ 55.345537][ T455] ? kmem_cache_free+0x12d/0x300 [ 55.350519][ T455] ? ____kasan_slab_free+0x13d/0x180 [ 55.355816][ T455] ? get_signal+0xac2/0x1700 [ 55.360406][ T455] ? kmem_cache_free+0x12d/0x300 [ 55.365338][ T455] get_signal+0x157d/0x1700 [ 55.369835][ T455] ? __cfi_get_signal+0x10/0x10 [ 55.374672][ T455] ? force_sig_info_to_task+0x306/0x3b0 [ 55.380207][ T455] arch_do_signal_or_restart+0xd1/0x11c0 [ 55.385840][ T455] ? page_fault_oops+0x8b0/0x8b0 [ 55.390762][ T455] ? down_read_trylock+0x27f/0x660 [ 55.395864][ T455] ? find_vma+0x89/0xd0 [ 55.400005][ T455] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.406149][ T455] ? do_user_addr_fault+0xd10/0x1030 [ 55.411421][ T455] exit_to_user_mode_loop+0x7a/0xb0 [ 55.416606][ T455] exit_to_user_mode_prepare+0x87/0xd0 [ 55.422056][ T455] irqentry_exit_to_user_mode+0x9/0x10 [ 55.427499][ T455] irqentry_exit+0x12/0x40 [ 55.431899][ T455] exc_page_fault+0x5e/0xb0 [ 55.436388][ T455] asm_exc_page_fault+0x27/0x30 [ 55.441218][ T455] RIP: 0033:0x7f0fe399fb21 [ 55.445613][ T455] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 55.465206][ T455] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 55.471255][ T455] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 55.479212][ T455] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 55.487166][ T455] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.495119][ T455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 55.503072][ T455] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 55.511032][ T455] [ 55.541504][ T455] memory: usage 296412kB, limit 307200kB, failcnt 63117 [ 55.551816][ T979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.573509][ T993] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 55.582955][ T455] memory+swap: usage 410508kB, limit 9007199254740988kB, failcnt 0 [ 55.590712][ T950] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.597403][ T455] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 55.603025][ T979] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.621537][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 55.678572][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 55.707445][ T979] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 55.749151][ T455] Memory cgroup stats for /syz0: [ 55.751970][ T950] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 55.759267][ T455] anon 45056 [ 55.759267][ T455] file 272859136 [ 55.759267][ T455] kernel 0 [ 55.759267][ T455] kernel_stack 0 [ 55.759267][ T455] pagetables 0 [ 55.759267][ T455] sec_pagetables 0 [ 55.759267][ T455] percpu 0 [ 55.759267][ T455] sock 0 [ 55.759267][ T455] vmalloc 0 [ 55.759267][ T455] shmem 272736256 [ 55.759267][ T455] file_mapped 33259520 [ 55.759267][ T455] file_dirty 57344 [ 55.759267][ T455] file_writeback 2142208 [ 55.759267][ T455] swapcached 3674112 [ 55.759267][ T455] anon_thp 0 [ 55.759267][ T455] file_thp 0 [ 55.759267][ T455] shmem_thp 0 [ 55.759267][ T455] inactive_anon 196530176 [ 55.759267][ T455] active_anon 78643200 [ 55.759267][ T455] inactive_file 53248 [ 55.759267][ T455] active_file 69632 [ 55.759267][ T455] unevictable 0 [ 55.759267][ T455] slab_reclaimable 0 [ 55.759267][ T455] slab_unreclaimable 0 [ 55.759267][ T455] slab 0 [ 55.759267][ T455] workingset_refault_anon 5 [ 55.771088][ T979] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.771088][ T979] [ 55.869539][ T950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 55.911139][ T979] EXT4-fs (loop5): Total free blocks count 0 [ 55.918382][ T979] EXT4-fs (loop5): Free/Dirty block details [ 55.939748][ T979] EXT4-fs (loop5): free_blocks=2415919504 [ 55.952298][ T979] EXT4-fs (loop5): dirty_blocks=32 [ 55.969390][ T979] EXT4-fs (loop5): Block reservation details [ 55.976680][ T1016] fuse: Bad value for 'fd' [ 55.996552][ T979] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 56.028996][ T388] EXT4-fs (loop5): unmounting filesystem. [ 56.047078][ T1018] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.153: bg 0: block 184: padding at end of block bitmap is not set [ 56.062486][ T1018] EXT4-fs (loop4): Remounting filesystem read-only [ 56.069016][ T1018] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 56.078126][ T1018] EXT4-fs (loop4): Remounting filesystem read-only [ 56.084798][ T1018] EXT4-fs (loop4): 1 truncate cleaned up [ 56.090448][ T1018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.099423][ T1018] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.112861][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 56.124994][ T1018] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 13: comm syz.4.153: path /33/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=4096 fake=1 [ 56.146007][ T1018] EXT4-fs (loop4): Remounting filesystem read-only [ 56.171824][ T10] EXT4-fs (loop4): Remounting filesystem read-only [ 56.207384][ T1024] tipc: Started in network mode [ 56.223103][ T1024] tipc: Node identity 4, cluster identity 4711 [ 56.242310][ T1024] tipc: Node number set to 4 [ 56.247373][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.154'. [ 56.264238][ T1027] exfat: Bad value for 'uid' [ 56.380753][ T1036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 56.432638][ T1036] tipc: Invalid UDP bearer configuration [ 56.432665][ T1036] tipc: Enabling of bearer rejected, failed to enable media [ 56.511094][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.560431][ T455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=438,uid=0 [ 56.602273][ T1042] EXT4-fs: dax option not supported [ 56.712999][ T455] Memory cgroup out of memory: Killed process 438 (syz.0.26) total-vm:324108kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:12336kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 56.742133][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.761121][ T60] usb 5-1: config 1 interface 2 has no altsetting 0 [ 56.769219][ T60] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 56.788547][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.798131][ T60] usb 5-1: Product: syz [ 56.803114][ T60] usb 5-1: Manufacturer: syz [ 56.807759][ T60] usb 5-1: SerialNumber: syz [ 57.045645][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.129518][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.586736][ T1025] set_capacity_and_notify: 5 callbacks suppressed [ 57.586755][ T1025] loop5: detected capacity change from 0 to 131072 [ 57.625671][ T1025] F2FS-fs (loop5): Unrecognized mount option "fault_injectio0000000000000000001" or missing value [ 57.770901][ T1052] loop3: detected capacity change from 0 to 512 [ 57.781288][ T1052] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.895214][ T1053] loop5: detected capacity change from 0 to 256 [ 58.075950][ T1059] netlink: 48 bytes leftover after parsing attributes in process `syz.5.162'. [ 58.105194][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.162'. [ 58.133114][ T1062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.162'. [ 58.321359][ T1068] kvm [1066]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xe299 [ 58.366094][ T1068] kvm [1066]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa37 [ 58.402708][ T1068] kvm [1066]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x18a3 [ 58.414219][ T455] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.436464][ T1068] kvm: MONITOR instruction emulated as NOP! [ 58.457724][ T455] CPU: 1 PID: 455 Comm: syz.0.26 Not tainted syzkaller #0 [ 58.464886][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 58.474951][ T455] Call Trace: [ 58.478239][ T455] [ 58.481174][ T455] __dump_stack+0x21/0x24 [ 58.485527][ T455] dump_stack_lvl+0x110/0x170 [ 58.490206][ T455] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.495232][ T455] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 58.501044][ T455] ? ___ratelimit+0x40a/0x590 [ 58.505727][ T455] dump_stack+0x15/0x24 [ 58.509878][ T455] dump_header+0xdb/0x660 [ 58.514209][ T455] ? __cfi_gfp_zone+0x10/0x10 [ 58.518882][ T455] oom_kill_process+0x32a/0x410 [ 58.523735][ T455] ? kvm_sched_clock_read+0x18/0x40 [ 58.528935][ T455] out_of_memory+0x630/0x930 [ 58.533528][ T455] ? __cfi_out_of_memory+0x10/0x10 [ 58.538636][ T455] mem_cgroup_out_of_memory+0x2be/0x390 [ 58.544174][ T455] ? __kasan_check_write+0x14/0x20 [ 58.549297][ T455] ? mem_cgroup_oom_trylock+0x360/0x360 [ 58.554841][ T455] try_charge_memcg+0xb8a/0x1650 [ 58.559786][ T455] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 58.565158][ T455] ? __asan_set_shadow_00+0xe/0x10 [ 58.570271][ T455] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 58.576169][ T455] charge_memcg+0x81/0x1f0 [ 58.580589][ T455] __mem_cgroup_charge+0x93/0x290 [ 58.585609][ T455] ? xas_start+0x31d/0x3e0 [ 58.590010][ T455] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.595798][ T455] ? xas_load+0x3a2/0x3c0 [ 58.600113][ T455] shmem_add_to_page_cache+0x5b1/0xae0 [ 58.605556][ T455] ? put_page+0xb0/0xb0 [ 58.609696][ T455] ? do_fault+0x1b23/0x1e30 [ 58.614186][ T455] shmem_get_folio_gfp+0xef9/0x20f0 [ 58.619378][ T455] shmem_write_begin+0xea/0x2c0 [ 58.624230][ T455] generic_perform_write+0x32d/0x740 [ 58.629504][ T455] ? __cfi_generic_perform_write+0x10/0x10 [ 58.635294][ T455] ? __cfi_file_update_time+0x10/0x10 [ 58.640652][ T455] shmem_file_write_iter+0x104/0x130 [ 58.645930][ T455] __kernel_write_iter+0x2a9/0x6a0 [ 58.651030][ T455] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.656650][ T455] ? dump_user_range+0x2d7/0x630 [ 58.661576][ T455] ? iov_iter_bvec+0x53/0x1f0 [ 58.666241][ T455] dump_user_range+0x3e6/0x630 [ 58.670992][ T455] ? __cfi_dump_user_range+0x10/0x10 [ 58.676260][ T455] ? dump_align+0xfe/0x120 [ 58.680661][ T455] ? dump_emit+0xa8/0xc0 [ 58.684884][ T455] elf_core_dump+0x2b60/0x30b0 [ 58.689636][ T455] ? __cfi_elf_core_dump+0x10/0x10 [ 58.694736][ T455] ? dump_interrupted+0xd0/0xd0 [ 58.699565][ T455] ? 0xffffffffff600000 [ 58.703701][ T455] do_coredump+0x160e/0x23a0 [ 58.708275][ T455] ? __cfi_do_coredump+0x10/0x10 [ 58.713198][ T455] ? kmem_cache_free+0x12d/0x300 [ 58.718126][ T455] ? ____kasan_slab_free+0x13d/0x180 [ 58.723398][ T455] ? get_signal+0xac2/0x1700 [ 58.727981][ T455] ? kmem_cache_free+0x12d/0x300 [ 58.732903][ T455] get_signal+0x157d/0x1700 [ 58.737403][ T455] ? __cfi_get_signal+0x10/0x10 [ 58.742240][ T455] ? force_sig_info_to_task+0x306/0x3b0 [ 58.747775][ T455] arch_do_signal_or_restart+0xd1/0x11c0 [ 58.753409][ T455] ? page_fault_oops+0x8b0/0x8b0 [ 58.758332][ T455] ? down_read_trylock+0x27f/0x660 [ 58.763433][ T455] ? find_vma+0x89/0xd0 [ 58.767575][ T455] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.773729][ T455] ? do_user_addr_fault+0xd10/0x1030 [ 58.778997][ T455] exit_to_user_mode_loop+0x7a/0xb0 [ 58.784175][ T455] exit_to_user_mode_prepare+0x87/0xd0 [ 58.789626][ T455] irqentry_exit_to_user_mode+0x9/0x10 [ 58.795070][ T455] irqentry_exit+0x12/0x40 [ 58.799474][ T455] exc_page_fault+0x5e/0xb0 [ 58.803966][ T455] asm_exc_page_fault+0x27/0x30 [ 58.808801][ T455] RIP: 0033:0x7f0fe399fb21 [ 58.813198][ T455] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.832785][ T455] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 58.838836][ T455] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 58.846790][ T455] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 58.854740][ T455] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 58.862693][ T455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.870640][ T455] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 58.878600][ T455] [ 58.893350][ T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.923348][ T1071] loop3: detected capacity change from 0 to 128 [ 58.957656][ T1074] loop5: detected capacity change from 0 to 512 [ 58.968598][ T455] memory: usage 307200kB, limit 307200kB, failcnt 64890 [ 58.975755][ T455] memory+swap: usage 432100kB, limit 9007199254740988kB, failcnt 0 [ 58.985033][ T455] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.992138][ T455] Memory cgroup stats for /syz0: [ 58.992301][ T455] anon 36864 [ 58.992301][ T455] file 314437632 [ 58.992301][ T455] kernel 0 [ 58.992301][ T455] kernel_stack 0 [ 58.992301][ T455] pagetables 0 [ 58.992301][ T455] sec_pagetables 0 [ 58.992301][ T455] percpu 0 [ 58.992301][ T455] sock 0 [ 58.992301][ T455] vmalloc 0 [ 58.992301][ T455] shmem 314310656 [ 58.992301][ T455] file_mapped 51544064 [ 58.992301][ T455] file_dirty 126976 [ 58.992301][ T455] file_writeback 0 [ 58.992301][ T455] swapcached 98304 [ 58.992301][ T455] anon_thp 0 [ 58.992301][ T455] file_thp 0 [ 58.992301][ T455] shmem_thp 0 [ 58.992301][ T455] inactive_anon 261206016 [ 58.992301][ T455] active_anon 53239808 [ 58.992301][ T455] inactive_file 126976 [ 58.992301][ T455] active_file 0 [ 58.992301][ T455] unevictable 0 [ 58.992301][ T455] slab_reclaimable 0 [ 58.992301][ T455] slab_unreclaimable 0 [ 58.992301][ T455] slab 0 [ 58.992301][ T455] workingset_refault_anon 5 [ 59.094250][ T455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=458,uid=0 [ 59.110241][ T291] EXT4-fs (loop4): unmounting filesystem. [ 59.114618][ T60] usb 5-1: 1:1: cannot set freq 15635245 to ep 0x1 [ 59.123947][ T60] usb 5-1: selecting invalid altsetting 0 [ 59.129687][ T60] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 59.148800][ T455] Memory cgroup out of memory: Killed process 458 (syz.0.26) total-vm:324240kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:31712kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 59.168237][ T1071] netlink: 228 bytes leftover after parsing attributes in process `syz.3.165'. [ 59.181138][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 59.195774][ T1071] x_tables: duplicate underflow at hook 2 [ 59.201149][ T60] usb 5-1: selecting invalid altsetting 0 [ 59.212738][ T1071] syz.3.165: attempt to access beyond end of device [ 59.212738][ T1071] loop3: rw=2049, sector=145, nr_sectors = 608 limit=128 [ 59.221214][ T60] usb 5-1: USB disconnect, device number 9 [ 59.250823][ T1071] syz.3.165: attempt to access beyond end of device [ 59.250823][ T1071] loop3: rw=0, sector=150, nr_sectors = 1 limit=128 [ 59.411566][ T1074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 59.449016][ T1074] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.491116][ T1092] tun0: tun_chr_ioctl cmd 1074025675 [ 59.552678][ T1092] tun0: persist disabled [ 59.552716][ T1080] syz.3.165: attempt to access beyond end of device [ 59.552716][ T1080] loop3: rw=524288, sector=153, nr_sectors = 216 limit=128 [ 59.590558][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 59.590578][ T28] audit: type=1400 audit(1794133656.825:1119): avc: denied { bind } for pid=1072 comm="syz.5.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.621027][ T1076] capability: warning: `syz.5.166' uses deprecated v2 capabilities in a way that may be insecure [ 59.768720][ T28] audit: type=1400 audit(1794133656.855:1120): avc: denied { write } for pid=1072 comm="syz.5.166" path="socket:[19366]" dev="sockfs" ino=19366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.820108][ T388] EXT4-fs (loop5): unmounting filesystem. [ 60.007620][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.197471][ T60] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 60.285332][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.321976][ T1109] loop3: detected capacity change from 0 to 128 [ 60.341335][ T60] usb 5-1: Product: syz [ 60.396828][ T60] usb 5-1: Manufacturer: syz [ 60.420624][ T1109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.441998][ T1109] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.450551][ T60] usb 5-1: SerialNumber: syz [ 60.463027][ T28] audit: type=1400 audit(1794133657.705:1121): avc: denied { create } for pid=1108 comm="syz.3.173" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.486175][ T463] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.501253][ T28] audit: type=1400 audit(1794133657.705:1122): avc: denied { read write open } for pid=1108 comm="syz.3.173" path="/37/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.529732][ T28] audit: type=1400 audit(1794133657.705:1123): avc: denied { map } for pid=1108 comm="syz.3.173" path="/37/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.561171][ T28] audit: type=1400 audit(1794133657.765:1124): avc: denied { setopt } for pid=1108 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.659286][ T287] EXT4-fs (loop3): unmounting filesystem. [ 60.672528][ T60] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 60.694989][ T60] usb 5-1: USB disconnect, device number 10 [ 60.721037][ T1116] loop3: detected capacity change from 0 to 128 [ 60.772013][ T311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.870764][ T1131] loop3: detected capacity change from 0 to 256 [ 61.896942][ T436] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.906694][ T436] CPU: 1 PID: 436 Comm: syz.0.26 Not tainted syzkaller #0 [ 61.913809][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 61.923865][ T436] Call Trace: [ 61.927129][ T436] [ 61.930045][ T436] __dump_stack+0x21/0x24 [ 61.934373][ T436] dump_stack_lvl+0x110/0x170 [ 61.939030][ T436] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.944035][ T436] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 61.949822][ T436] ? ___ratelimit+0x40a/0x590 [ 61.954486][ T436] dump_stack+0x15/0x24 [ 61.958633][ T436] dump_header+0xdb/0x660 [ 61.962948][ T436] ? __cfi_gfp_zone+0x10/0x10 [ 61.967611][ T436] oom_kill_process+0x32a/0x410 [ 61.972450][ T436] ? kvm_sched_clock_read+0x18/0x40 [ 61.977638][ T436] out_of_memory+0x630/0x930 [ 61.982214][ T436] ? __cfi_out_of_memory+0x10/0x10 [ 61.987313][ T436] mem_cgroup_out_of_memory+0x2be/0x390 [ 61.992844][ T436] ? __kasan_check_write+0x14/0x20 [ 61.997938][ T436] ? mem_cgroup_oom_trylock+0x360/0x360 [ 62.003465][ T436] try_charge_memcg+0xb8a/0x1650 [ 62.008394][ T436] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 62.013750][ T436] ? __asan_set_shadow_00+0xe/0x10 [ 62.018850][ T436] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 62.024732][ T436] charge_memcg+0x81/0x1f0 [ 62.029133][ T436] __mem_cgroup_charge+0x93/0x290 [ 62.034139][ T436] ? xas_start+0x31d/0x3e0 [ 62.038541][ T436] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.044159][ T436] ? xas_load+0x3a2/0x3c0 [ 62.048471][ T436] shmem_add_to_page_cache+0x5b1/0xae0 [ 62.053926][ T436] ? do_set_pte+0x455/0x560 [ 62.058411][ T436] ? put_page+0xb0/0xb0 [ 62.062552][ T436] ? unlock_page+0x55/0x70 [ 62.066954][ T436] ? do_fault+0x1b23/0x1e30 [ 62.071440][ T436] shmem_get_folio_gfp+0xef9/0x20f0 [ 62.076627][ T436] shmem_write_begin+0xea/0x2c0 [ 62.081457][ T436] generic_perform_write+0x32d/0x740 [ 62.086733][ T436] ? __cfi_generic_perform_write+0x10/0x10 [ 62.092518][ T436] ? __cfi_file_update_time+0x10/0x10 [ 62.097877][ T436] shmem_file_write_iter+0x104/0x130 [ 62.103148][ T436] __kernel_write_iter+0x2a9/0x6a0 [ 62.108237][ T436] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.113848][ T436] ? __sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 62.120078][ T436] ? iov_iter_bvec+0x53/0x1f0 [ 62.124734][ T436] dump_user_range+0x3e6/0x630 [ 62.129487][ T436] ? __cfi_dump_user_range+0x10/0x10 [ 62.134749][ T436] ? dump_align+0xfe/0x120 [ 62.139146][ T436] ? dump_emit+0xa8/0xc0 [ 62.143364][ T436] elf_core_dump+0x2b60/0x30b0 [ 62.148111][ T436] ? __cfi_elf_core_dump+0x10/0x10 [ 62.153211][ T436] ? dump_interrupted+0xd0/0xd0 [ 62.158043][ T436] ? 0xffffffffff600000 [ 62.162177][ T436] do_coredump+0x160e/0x23a0 [ 62.166750][ T436] ? __cfi_do_coredump+0x10/0x10 [ 62.171674][ T436] ? kmem_cache_free+0x12d/0x300 [ 62.176593][ T436] ? ____kasan_slab_free+0x13d/0x180 [ 62.181862][ T436] ? get_signal+0xac2/0x1700 [ 62.186440][ T436] ? kmem_cache_free+0x12d/0x300 [ 62.191363][ T436] get_signal+0x157d/0x1700 [ 62.195854][ T436] ? __cfi_get_signal+0x10/0x10 [ 62.200695][ T436] ? force_sig_info_to_task+0x306/0x3b0 [ 62.206240][ T436] arch_do_signal_or_restart+0xd1/0x11c0 [ 62.211871][ T436] ? page_fault_oops+0x8b0/0x8b0 [ 62.216814][ T436] ? down_read_trylock+0x27f/0x660 [ 62.221926][ T436] ? find_vma+0x89/0xd0 [ 62.226080][ T436] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.232233][ T436] ? do_user_addr_fault+0xd10/0x1030 [ 62.237508][ T436] exit_to_user_mode_loop+0x7a/0xb0 [ 62.242702][ T436] exit_to_user_mode_prepare+0x87/0xd0 [ 62.248144][ T436] irqentry_exit_to_user_mode+0x9/0x10 [ 62.253586][ T436] irqentry_exit+0x12/0x40 [ 62.257989][ T436] exc_page_fault+0x5e/0xb0 [ 62.262489][ T436] asm_exc_page_fault+0x27/0x30 [ 62.267343][ T436] RIP: 0033:0x7f0fe399fb21 [ 62.271744][ T436] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.291335][ T436] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 62.297384][ T436] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 62.305339][ T436] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 62.313293][ T436] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 62.321245][ T436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.329196][ T436] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 62.337158][ T436] [ 62.340625][ T436] memory: usage 307160kB, limit 307200kB, failcnt 65767 [ 62.351171][ T1131] exfat: Unknown parameter 'iochars Š5ŸsöÁ'À Ñet' [ 62.357822][ T436] memory+swap: usage 430592kB, limit 9007199254740988kB, failcnt 0 [ 62.416166][ T1131] loop3: detected capacity change from 0 to 512 [ 62.421078][ T436] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.436115][ T1131] EXT4-fs: Ignoring removed i_version option [ 62.461112][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.475932][ T28] audit: type=1326 audit(1794133659.715:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.180" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 62.512407][ T1131] EXT4-fs (loop3): invalid journal inode [ 62.514442][ T1137] loop5: detected capacity change from 0 to 512 [ 62.536699][ T1137] EXT4-fs: dax option not supported [ 62.571090][ T28] audit: type=1326 audit(1794133659.715:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.180" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 62.620776][ T436] Memory cgroup stats for /syz0: [ 62.620958][ T436] anon 98304 [ 62.620958][ T436] file 311762944 [ 62.620958][ T436] kernel 0 [ 62.620958][ T436] kernel_stack 0 [ 62.620958][ T436] pagetables 0 [ 62.620958][ T436] sec_pagetables 0 [ 62.620958][ T436] percpu 0 [ 62.620958][ T436] sock 0 [ 62.620958][ T436] vmalloc 0 [ 62.620958][ T436] shmem 311635968 [ 62.620958][ T436] file_mapped 46960640 [ 62.620958][ T436] file_dirty 126976 [ 62.620958][ T436] file_writeback 413696 [ 62.620958][ T436] swapcached 1204224 [ 62.620958][ T436] anon_thp 0 [ 62.620958][ T436] file_thp 0 [ 62.620958][ T436] shmem_thp 0 [ 62.620958][ T436] inactive_anon 154513408 [ 62.620958][ T436] active_anon 157458432 [ 62.620958][ T436] inactive_file 0 [ 62.620958][ T436] active_file 126976 [ 62.620958][ T436] unevictable 0 [ 62.620958][ T436] slab_reclaimable 0 [ 62.620958][ T436] slab_unreclaimable 0 [ 62.620958][ T436] slab 0 [ 62.620958][ T436] workingset_refault_anon 5 [ 63.024234][ T28] audit: type=1326 audit(1794133659.715:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.180" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 63.058667][ T1131] loop3: detected capacity change from 0 to 256 [ 63.192125][ T1131] FAT-fs (loop3): Directory bread(block 1285) failed [ 63.292714][ T1131] FAT-fs (loop3): Directory bread(block 1286) failed [ 63.431842][ T1131] FAT-fs (loop3): Directory bread(block 1287) failed [ 63.438993][ T1131] FAT-fs (loop3): Directory bread(block 1288) failed [ 63.451865][ T28] audit: type=1326 audit(1794133659.715:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.180" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efeadd9fb19 code=0x7ffc0000 [ 63.512909][ T1131] FAT-fs (loop3): Directory bread(block 1285) failed [ 63.522328][ T1138] loop0: detected capacity change from 0 to 512 [ 63.541188][ T1131] FAT-fs (loop3): Directory bread(block 1286) failed [ 63.568289][ T1131] FAT-fs (loop3): Directory bread(block 1287) failed [ 63.591426][ T1141] futex_wake_op: syz.4.180 tries to shift op by 144; fix this program [ 63.600290][ T436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=436,uid=0 [ 63.601393][ T1131] FAT-fs (loop3): Directory bread(block 1288) failed [ 63.615427][ T436] Memory cgroup out of memory: Killed process 436 (syz.0.26) total-vm:324108kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:41744kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 63.641024][ T1149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.184'. [ 63.659069][ T1146] FAT-fs (loop3): Directory bread(block 1285) failed [ 63.679265][ T1146] FAT-fs (loop3): Directory bread(block 1286) failed [ 63.682430][ T1149] device dummy1 entered promiscuous mode [ 63.691872][ T1150] input: syz0 as /devices/virtual/input/input6 [ 63.737212][ T1138] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.787623][ T1154] loop3: detected capacity change from 0 to 2048 [ 63.851529][ T311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.861657][ T1138] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 64.524244][ T60] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 64.594619][ T1168] loop5: detected capacity change from 0 to 512 [ 65.081116][ T60] usb 5-1: device descriptor read/64, error -71 [ 65.088057][ T1168] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.289739][ T1138] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 65.309786][ T1177] loop3: detected capacity change from 0 to 128 [ 65.316534][ T1168] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.424386][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 65.424400][ T28] audit: type=1326 audit(1794133662.665:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.180" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efeadd9f7ab code=0x7ffc0000 [ 65.479600][ T1168] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.187: iget: bad i_size value: 2533274857506816 [ 65.520943][ T1178] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.187: iget: bad i_size value: 2533274857506816 [ 65.608935][ T28] audit: type=1400 audit(1794133662.715:1240): avc: denied { append } for pid=1167 comm="syz.5.187" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.192133][ T388] EXT4-fs (loop5): unmounting filesystem. [ 66.212257][ T28] audit: type=1400 audit(1794133663.425:1241): avc: denied { bind } for pid=1185 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.232443][ T30] oom_reaper: reaped process 436 (syz.0.26), now anon-rss:0kB, file-rss:20480kB, shmem-rss:35532kB [ 66.314959][ T28] audit: type=1400 audit(1794133663.425:1242): avc: denied { name_bind } for pid=1185 comm="syz.1.191" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 66.367026][ T28] audit: type=1400 audit(1794133663.425:1243): avc: denied { node_bind } for pid=1185 comm="syz.1.191" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 66.441191][ T28] audit: type=1400 audit(1794133663.525:1244): avc: denied { setopt } for pid=1189 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.491074][ T28] audit: type=1400 audit(1794133663.635:1245): avc: denied { ioctl } for pid=1189 comm="syz.4.193" path="socket:[20531]" dev="sockfs" ino=20531 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.495339][ T1205] syz.3.195 uses obsolete (PF_INET,SOCK_PACKET) [ 66.560462][ T1207] binder: 1206:1207 ioctl c0306201 0 returned -14 [ 66.596104][ T1208] loop3: detected capacity change from 0 to 2048 [ 66.638677][ T1209] binder: 1206:1209 ioctl c0306201 0 returned -14 [ 66.651258][ T1209] binder: 1206:1209 ioctl c0306201 0 returned -14 [ 66.660745][ T1208] ext3: Unknown parameter 'subj_role' [ 66.707851][ T1204] loop3: detected capacity change from 0 to 1024 [ 66.734599][ T1211] sch_fq: defrate 53322 ignored. [ 66.761308][ T1204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.780343][ T1187] 9pnet_fd: Insufficient options for proto=fd [ 66.783023][ T1204] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.840090][ T456] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 66.850050][ T456] CPU: 1 PID: 456 Comm: syz.0.26 Not tainted syzkaller #0 [ 66.857178][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 66.867190][ T1204] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.195: bg 0: block 112: padding at end of block bitmap is not set [ 66.867238][ T456] Call Trace: [ 66.867246][ T456] [ 66.887598][ T456] __dump_stack+0x21/0x24 [ 66.891936][ T456] dump_stack_lvl+0x110/0x170 [ 66.896621][ T456] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.901656][ T456] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 66.907470][ T456] ? ___ratelimit+0x40a/0x590 [ 66.912162][ T456] dump_stack+0x15/0x24 [ 66.916329][ T456] dump_header+0xdb/0x660 [ 66.920673][ T456] ? __cfi_gfp_zone+0x10/0x10 [ 66.925369][ T456] oom_kill_process+0x32a/0x410 [ 66.930237][ T456] ? kvm_sched_clock_read+0x18/0x40 [ 66.935467][ T456] out_of_memory+0x630/0x930 [ 66.940091][ T456] ? __cfi_out_of_memory+0x10/0x10 [ 66.945224][ T456] mem_cgroup_out_of_memory+0x2be/0x390 [ 66.950788][ T456] ? __kasan_check_write+0x14/0x20 [ 66.955910][ T456] ? mem_cgroup_oom_trylock+0x360/0x360 [ 66.961468][ T456] try_charge_memcg+0xb8a/0x1650 [ 66.966414][ T456] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 66.967314][ T1204] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 66.971794][ T456] ? __asan_set_shadow_00+0xe/0x10 [ 66.971820][ T456] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 66.971845][ T456] charge_memcg+0x81/0x1f0 [ 66.999515][ T456] __mem_cgroup_charge+0x93/0x290 [ 67.004547][ T456] ? xas_start+0x31d/0x3e0 [ 67.008986][ T456] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.014625][ T456] ? xas_load+0x3a2/0x3c0 [ 67.018966][ T456] shmem_add_to_page_cache+0x5b1/0xae0 [ 67.024435][ T456] ? put_page+0xb0/0xb0 [ 67.028609][ T456] ? __asan_set_shadow_00+0xe/0x10 [ 67.033735][ T456] shmem_get_folio_gfp+0xef9/0x20f0 [ 67.038951][ T456] ? xas_find+0x6ec/0x820 [ 67.043290][ T456] shmem_fault+0x1ab/0x670 [ 67.047715][ T456] ? __cfi_shmem_fault+0x10/0x10 [ 67.050842][ T1204] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.050842][ T1204] [ 67.052658][ T456] ? __kasan_check_write+0x14/0x20 [ 67.052679][ T456] ? vma_data_pages+0xfc/0x130 [ 67.052699][ T456] do_fault+0x19de/0x1e30 [ 67.076468][ T456] ? pte_marker_clear+0x220/0x220 [ 67.081504][ T456] ? copy_page_from_iter_atomic+0xa1a/0x1240 [ 67.087493][ T456] ? memcpy+0x51/0x70 [ 67.091481][ T456] handle_mm_fault+0x1363/0x26b0 [ 67.096424][ T456] ? __cfi_handle_mm_fault+0x10/0x10 [ 67.101720][ T456] __get_user_pages+0x34b/0xdb0 [ 67.106584][ T456] ? populate_vma_page_range+0x120/0x120 [ 67.107996][ T1204] EXT4-fs (loop3): Total free blocks count 0 [ 67.112219][ T456] get_dump_page+0x169/0x640 [ 67.112242][ T456] ? __cfi_get_dump_page+0x10/0x10 [ 67.112260][ T456] dump_user_range+0x123/0x630 [ 67.112277][ T456] ? __cfi_dump_user_range+0x10/0x10 [ 67.137933][ T456] ? dump_align+0xfe/0x120 [ 67.142360][ T456] ? dump_emit+0xa8/0xc0 [ 67.146606][ T456] elf_core_dump+0x2b60/0x30b0 [ 67.151380][ T456] ? __cfi_elf_core_dump+0x10/0x10 [ 67.156402][ T1204] EXT4-fs (loop3): Free/Dirty block details [ 67.156506][ T456] ? dump_interrupted+0xd0/0xd0 [ 67.167233][ T456] ? 0xffffffffff600000 [ 67.171400][ T456] do_coredump+0x160e/0x23a0 [ 67.176004][ T456] ? __cfi_do_coredump+0x10/0x10 [ 67.180957][ T456] ? kmem_cache_free+0x12d/0x300 [ 67.185907][ T456] ? ____kasan_slab_free+0x13d/0x180 [ 67.188322][ T1204] EXT4-fs (loop3): free_blocks=0 [ 67.191200][ T456] ? get_signal+0xac2/0x1700 [ 67.191228][ T456] ? kmem_cache_free+0x12d/0x300 [ 67.191251][ T456] get_signal+0x157d/0x1700 [ 67.210263][ T456] ? __cfi_get_signal+0x10/0x10 [ 67.215129][ T456] ? force_sig_info_to_task+0x306/0x3b0 [ 67.220689][ T456] arch_do_signal_or_restart+0xd1/0x11c0 [ 67.226336][ T456] ? page_fault_oops+0x8b0/0x8b0 [ 67.226829][ T1204] EXT4-fs (loop3): dirty_blocks=16 [ 67.231279][ T456] ? down_read_trylock+0x27f/0x660 [ 67.231303][ T456] ? find_vma+0x89/0xd0 [ 67.231324][ T456] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 67.251813][ T456] ? do_user_addr_fault+0xd10/0x1030 [ 67.257121][ T456] exit_to_user_mode_loop+0x7a/0xb0 [ 67.262338][ T456] exit_to_user_mode_prepare+0x87/0xd0 [ 67.267852][ T456] irqentry_exit_to_user_mode+0x9/0x10 [ 67.273327][ T456] irqentry_exit+0x12/0x40 [ 67.277763][ T456] exc_page_fault+0x5e/0xb0 [ 67.282283][ T456] asm_exc_page_fault+0x27/0x30 [ 67.285748][ T1201] loop4: detected capacity change from 0 to 40427 [ 67.287139][ T456] RIP: 0033:0x7f0fe399fb21 [ 67.287158][ T456] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 67.313915][ T1204] EXT4-fs (loop3): Block reservation details [ 67.317654][ T456] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 67.317676][ T456] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 67.317688][ T456] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 67.345897][ T456] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.353891][ T456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 67.358703][ T1204] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 67.361864][ T456] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 67.361882][ T456] [ 67.392055][ T1201] F2FS-fs (loop4): Image doesn't support compression [ 67.447415][ T287] EXT4-fs (loop3): unmounting filesystem. [ 67.467584][ T1201] F2FS-fs (loop4): invalid crc value [ 67.535303][ T1201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.635603][ T1226] loop3: detected capacity change from 0 to 512 [ 67.712968][ T1226] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 67.759865][ T1201] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.899454][ T28] audit: type=1326 audit(1794133665.135:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.1.202" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 67.924333][ T456] memory: usage 296040kB, limit 307200kB, failcnt 66045 [ 67.931472][ T456] memory+swap: usage 418708kB, limit 9007199254740988kB, failcnt 0 [ 67.958025][ T456] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.966278][ T28] audit: type=1326 audit(1794133665.175:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.1.202" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 68.023863][ T28] audit: type=1326 audit(1794133665.175:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.1.202" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 68.066432][ T456] Memory cgroup stats for /syz0: [ 68.066578][ T456] anon 110592 [ 68.066578][ T456] file 294084608 [ 68.066578][ T456] kernel 0 [ 68.066578][ T456] kernel_stack 0 [ 68.066578][ T456] pagetables 0 [ 68.066578][ T456] sec_pagetables 0 [ 68.066578][ T456] percpu 0 [ 68.066578][ T456] sock 0 [ 68.066578][ T456] vmalloc 0 [ 68.066578][ T456] shmem 293957632 [ 68.066578][ T456] file_mapped 28012544 [ 68.066578][ T456] file_dirty 126976 [ 68.066578][ T456] file_writeback 2007040 [ 68.066578][ T456] swapcached 2080768 [ 68.066578][ T456] anon_thp 0 [ 68.066578][ T456] file_thp 0 [ 68.066578][ T456] shmem_thp 0 [ 68.066578][ T456] inactive_anon 235507712 [ 68.066578][ T456] active_anon 59330560 [ 68.066578][ T456] inactive_file 126976 [ 68.066578][ T456] active_file 0 [ 68.066578][ T456] unevictable 0 [ 68.066578][ T456] slab_reclaimable 0 [ 68.066578][ T456] slab_unreclaimable 0 [ 68.066578][ T456] slab 0 [ 68.066578][ T456] workingset_refault_anon 9 [ 68.169834][ T456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=456,uid=0 [ 68.184843][ T456] Memory cgroup out of memory: Killed process 456 (syz.0.26) total-vm:324240kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:20420kB, UID:0 pgtables:276kB oom_score_adj:1000 [ 68.366649][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.461154][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.623319][ T1252] loop5: detected capacity change from 0 to 512 [ 68.696012][ T1252] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.705140][ T1252] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.771885][ T1272] loop3: detected capacity change from 0 to 512 [ 69.798299][ T1272] EXT4-fs: dax option not supported [ 70.774629][ T1285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.210'. [ 70.872445][ T1287] loop3: detected capacity change from 0 to 1024 [ 70.911551][ T1287] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.923663][ T1288] overlayfs: failed to resolve './file1': -2 [ 70.960282][ T28] kauditd_printk_skb: 474 callbacks suppressed [ 70.960297][ T28] audit: type=1400 audit(1794133668.195:1723): avc: denied { map } for pid=1291 comm="syz.0.212" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.005655][ T1287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.034804][ T388] EXT4-fs (loop5): unmounting filesystem. [ 71.056033][ T28] audit: type=1400 audit(1794133668.245:1724): avc: denied { execute } for pid=1291 comm="syz.0.212" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.129756][ T28] audit: type=1400 audit(1794133668.265:1725): avc: denied { setattr } for pid=1286 comm="syz.3.211" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.178700][ T28] audit: type=1400 audit(1794133668.415:1726): avc: denied { write } for pid=1298 comm="syz.5.214" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 71.254726][ T28] audit: type=1400 audit(1794133668.495:1727): avc: denied { mount } for pid=1298 comm="syz.5.214" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.277507][ T1303] netlink: 44 bytes leftover after parsing attributes in process `syz.5.214'. [ 71.297267][ T1282] loop4: detected capacity change from 0 to 131072 [ 71.306023][ T1282] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 71.316680][ T1282] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.327460][ T1282] F2FS-fs (loop4): invalid crc value [ 71.341755][ T1282] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.380501][ T1282] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 71.387660][ T1282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 71.541426][ T28] audit: type=1400 audit(1794133668.785:1728): avc: denied { append } for pid=1279 comm="syz.4.209" path=2F33392F66696C65312F02 dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.647210][ T28] audit: type=1326 audit(1794133668.885:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.1.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 71.687485][ T28] audit: type=1326 audit(1794133668.885:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.1.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 71.725762][ T287] EXT4-fs (loop3): unmounting filesystem. [ 71.741596][ T28] audit: type=1326 audit(1794133668.915:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.1.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 71.807775][ T28] audit: type=1326 audit(1794133668.915:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.1.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9699fb19 code=0x7ffc0000 [ 71.976005][ T1326] loop3: detected capacity change from 0 to 40427 [ 71.993704][ T1326] F2FS-fs (loop3): invalid crc value [ 72.026170][ T1326] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.079115][ T1326] F2FS-fs (loop3): Start checkpoint disabled! [ 72.096053][ T1326] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 72.124289][ T1326] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 72.191630][ T10] kworker/u4:1: attempt to access beyond end of device [ 72.191630][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 72.373417][ T1344] loop3: detected capacity change from 0 to 512 [ 72.394413][ T1344] EXT4-fs: dax option not supported [ 72.405099][ T1349] loop4: detected capacity change from 0 to 128 [ 72.423252][ T452] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 72.521686][ T452] CPU: 0 PID: 452 Comm: syz.0.26 Not tainted syzkaller #0 [ 72.528841][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 72.538896][ T452] Call Trace: [ 72.542173][ T452] [ 72.545110][ T452] __dump_stack+0x21/0x24 [ 72.549443][ T452] dump_stack_lvl+0x110/0x170 [ 72.554118][ T452] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.559141][ T452] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 72.561188][ T332] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 72.564949][ T452] ? ___ratelimit+0x40a/0x590 [ 72.577133][ T452] dump_stack+0x15/0x24 [ 72.581295][ T452] dump_header+0xdb/0x660 [ 72.585650][ T452] ? __cfi_gfp_zone+0x10/0x10 [ 72.590344][ T452] oom_kill_process+0x32a/0x410 [ 72.595196][ T452] ? kvm_sched_clock_read+0x18/0x40 [ 72.600398][ T452] out_of_memory+0x630/0x930 [ 72.605165][ T452] ? __cfi_out_of_memory+0x10/0x10 [ 72.610279][ T452] mem_cgroup_out_of_memory+0x2be/0x390 [ 72.615824][ T452] ? __kasan_check_write+0x14/0x20 [ 72.620945][ T452] ? mem_cgroup_oom_trylock+0x360/0x360 [ 72.626490][ T452] try_charge_memcg+0xb8a/0x1650 [ 72.631433][ T452] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 72.636806][ T452] ? __asan_set_shadow_00+0xe/0x10 [ 72.641927][ T452] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 72.647823][ T452] charge_memcg+0x81/0x1f0 [ 72.652230][ T452] __mem_cgroup_charge+0x93/0x290 [ 72.657241][ T452] ? xas_start+0x31d/0x3e0 [ 72.661643][ T452] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 72.667255][ T452] ? xas_load+0x3a2/0x3c0 [ 72.671565][ T452] shmem_add_to_page_cache+0x5b1/0xae0 [ 72.677011][ T452] ? put_page+0xb0/0xb0 [ 72.681153][ T452] shmem_get_folio_gfp+0xef9/0x20f0 [ 72.686338][ T452] ? xas_find+0x6ec/0x820 [ 72.690651][ T452] shmem_fault+0x1ab/0x670 [ 72.695050][ T452] ? __cfi_shmem_fault+0x10/0x10 [ 72.699973][ T452] ? vma_data_pages+0xfc/0x130 [ 72.704730][ T452] do_fault+0x19de/0x1e30 [ 72.709040][ T452] ? pte_marker_clear+0x220/0x220 [ 72.714048][ T452] handle_mm_fault+0x1363/0x26b0 [ 72.718970][ T452] ? __cfi_handle_mm_fault+0x10/0x10 [ 72.724250][ T452] __get_user_pages+0x34b/0xdb0 [ 72.729081][ T452] ? populate_vma_page_range+0x120/0x120 [ 72.734699][ T452] get_dump_page+0x169/0x640 [ 72.739273][ T452] ? __cfi_get_dump_page+0x10/0x10 [ 72.744369][ T452] dump_user_range+0x123/0x630 [ 72.749117][ T452] ? __cfi_dump_user_range+0x10/0x10 [ 72.754379][ T452] ? dump_align+0xfe/0x120 [ 72.758776][ T452] ? dump_emit+0xa8/0xc0 [ 72.762996][ T452] elf_core_dump+0x2b60/0x30b0 [ 72.767745][ T452] ? __cfi_elf_core_dump+0x10/0x10 [ 72.772851][ T452] ? dump_interrupted+0xd0/0xd0 [ 72.777682][ T452] ? 0xffffffffff600000 [ 72.781821][ T452] do_coredump+0x160e/0x23a0 [ 72.786398][ T452] ? __cfi_do_coredump+0x10/0x10 [ 72.791322][ T452] ? kmem_cache_free+0x12d/0x300 [ 72.796252][ T452] ? ____kasan_slab_free+0x13d/0x180 [ 72.801522][ T452] ? get_signal+0xac2/0x1700 [ 72.806094][ T452] ? kmem_cache_free+0x12d/0x300 [ 72.811015][ T452] get_signal+0x157d/0x1700 [ 72.815506][ T452] ? __cfi_get_signal+0x10/0x10 [ 72.820343][ T452] ? force_sig_info_to_task+0x306/0x3b0 [ 72.825873][ T452] arch_do_signal_or_restart+0xd1/0x11c0 [ 72.831503][ T452] ? page_fault_oops+0x8b0/0x8b0 [ 72.836423][ T452] ? down_read_trylock+0x27f/0x660 [ 72.841523][ T452] ? find_vma+0x89/0xd0 [ 72.845661][ T452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 72.851804][ T452] ? do_user_addr_fault+0xd10/0x1030 [ 72.857075][ T452] exit_to_user_mode_loop+0x7a/0xb0 [ 72.862252][ T452] exit_to_user_mode_prepare+0x87/0xd0 [ 72.867696][ T452] irqentry_exit_to_user_mode+0x9/0x10 [ 72.873140][ T452] irqentry_exit+0x12/0x40 [ 72.877541][ T452] exc_page_fault+0x5e/0xb0 [ 72.882063][ T452] asm_exc_page_fault+0x27/0x30 [ 72.886904][ T452] RIP: 0033:0x7f0fe399fb21 [ 72.891300][ T452] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 72.910886][ T452] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 72.916936][ T452] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 72.924887][ T452] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 72.932842][ T452] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 72.940796][ T452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 72.948746][ T452] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 72.956706][ T452] [ 72.991942][ T452] memory: usage 307200kB, limit 307200kB, failcnt 66414 [ 73.028015][ T452] memory+swap: usage 431776kB, limit 9007199254740988kB, failcnt 0 [ 73.052809][ T332] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 122, changing to 10 [ 73.082221][ T452] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 73.093829][ T332] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17916, setting to 1024 [ 73.130876][ T452] Memory cgroup stats for /syz0: [ 73.132125][ T452] anon 327680 [ 73.132125][ T452] file 313815040 [ 73.132125][ T452] kernel 0 [ 73.132125][ T452] kernel_stack 0 [ 73.132125][ T452] pagetables 0 [ 73.132125][ T452] sec_pagetables 0 [ 73.132125][ T452] percpu 0 [ 73.132125][ T452] sock 0 [ 73.132125][ T452] vmalloc 0 [ 73.132125][ T452] shmem 313810944 [ 73.132125][ T452] file_mapped 58085376 [ 73.132125][ T452] file_dirty 0 [ 73.132125][ T452] file_writeback 0 [ 73.132125][ T452] swapcached 430080 [ 73.132125][ T452] anon_thp 0 [ 73.132125][ T452] file_thp 0 [ 73.132125][ T452] shmem_thp 0 [ 73.132125][ T452] inactive_anon 80064512 [ 73.132125][ T452] active_anon 234504192 [ 73.132125][ T452] inactive_file 4096 [ 73.132125][ T452] active_file 0 [ 73.132125][ T452] unevictable 0 [ 73.132125][ T452] slab_reclaimable 0 [ 73.132125][ T452] slab_unreclaimable 0 [ 73.132125][ T452] slab 0 [ 73.132125][ T452] workingset_refault_anon 9 [ 73.311952][ T332] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 73.331276][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.339353][ T332] usb 6-1: Product: syz [ 73.351089][ T332] usb 6-1: Manufacturer: syz [ 73.361225][ T332] usb 6-1: SerialNumber: syz [ 73.372478][ T1330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 73.390619][ T332] ums-onetouch 6-1:1.0: USB Mass Storage device detected [ 73.411233][ T332] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 73.441144][ T332] scsi host1: usb-storage 6-1:1.0 [ 73.511135][ T452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=459,uid=0 [ 73.546255][ T452] Memory cgroup out of memory: Killed process 459 (syz.0.26) total-vm:324240kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:46600kB, UID:0 pgtables:328kB oom_score_adj:1000 [ 73.568025][ T320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.598243][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 73.901160][ T332] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 74.111083][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 74.117408][ T332] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 74.126733][ T332] usb 4-1: config 0 has no interface number 0 [ 74.134969][ T332] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 74.149157][ T332] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 74.149595][ T422] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 74.161980][ T332] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 74.183950][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.190350][ T422] CPU: 0 PID: 422 Comm: syz.0.26 Not tainted syzkaller #0 [ 74.192576][ T332] usb 4-1: Product: syz [ 74.199108][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 74.199122][ T422] Call Trace: [ 74.199128][ T422] [ 74.199133][ T422] __dump_stack+0x21/0x24 [ 74.199155][ T422] dump_stack_lvl+0x110/0x170 [ 74.199170][ T422] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.199184][ T422] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 74.207499][ T332] usb 4-1: Manufacturer: syz [ 74.213349][ T422] ? ___ratelimit+0x40a/0x590 [ 74.213377][ T422] dump_stack+0x15/0x24 [ 74.213391][ T422] dump_header+0xdb/0x660 [ 74.213410][ T422] ? __cfi_gfp_zone+0x10/0x10 [ 74.213427][ T422] oom_kill_process+0x32a/0x410 [ 74.218781][ T332] usb 4-1: SerialNumber: syz [ 74.219607][ T422] ? kvm_sched_clock_read+0x18/0x40 [ 74.219635][ T422] out_of_memory+0x630/0x930 [ 74.232072][ T332] usb 4-1: config 0 descriptor?? [ 74.233634][ T422] ? __cfi_out_of_memory+0x10/0x10 [ 74.233666][ T422] mem_cgroup_out_of_memory+0x2be/0x390 [ 74.239811][ T1364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.244031][ T422] ? __kasan_check_write+0x14/0x20 [ 74.251036][ T60] usb 6-1: USB disconnect, device number 13 [ 74.252823][ T422] ? mem_cgroup_oom_trylock+0x360/0x360 [ 74.252844][ C1] input input8: can't resubmit intr, dummy_hcd.5-1/input0, retval -19 [ 74.252851][ T422] try_charge_memcg+0xb8a/0x1650 [ 74.252876][ T422] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 74.263710][ T1364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.266695][ T422] ? __asan_set_shadow_00+0xe/0x10 [ 74.291822][ T1380] loop0: detected capacity change from 0 to 512 [ 74.296539][ T422] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 74.362774][ T422] ? __kasan_check_write+0x14/0x20 [ 74.367891][ T422] charge_memcg+0x81/0x1f0 [ 74.372310][ T422] __mem_cgroup_charge+0x93/0x290 [ 74.377330][ T422] ? xas_start+0x31d/0x3e0 [ 74.381737][ T422] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 74.387352][ T422] ? xas_load+0x3a2/0x3c0 [ 74.391664][ T422] shmem_add_to_page_cache+0x5b1/0xae0 [ 74.397108][ T422] ? put_page+0xb0/0xb0 [ 74.401246][ T422] ? preempt_schedule+0xbc/0xd0 [ 74.406083][ T422] ? __cfi_preempt_schedule+0x10/0x10 [ 74.411435][ T422] shmem_get_folio_gfp+0xef9/0x20f0 [ 74.416625][ T422] shmem_write_begin+0xea/0x2c0 [ 74.421459][ T422] generic_perform_write+0x32d/0x740 [ 74.426731][ T422] ? __mark_inode_dirty+0x264/0x9c0 [ 74.431917][ T422] ? __cfi_generic_perform_write+0x10/0x10 [ 74.437718][ T422] ? __cfi_file_update_time+0x10/0x10 [ 74.443081][ T422] shmem_file_write_iter+0x104/0x130 [ 74.448367][ T422] __kernel_write_iter+0x2a9/0x6a0 [ 74.453461][ T422] ? __cfi___kernel_write_iter+0x10/0x10 [ 74.459082][ T422] ? iov_iter_bvec+0x53/0x1f0 [ 74.463741][ T422] dump_user_range+0x3e6/0x630 [ 74.468486][ T422] ? __cfi_dump_user_range+0x10/0x10 [ 74.473837][ T422] ? dump_align+0xfe/0x120 [ 74.478247][ T422] ? dump_emit+0xa8/0xc0 [ 74.482477][ T422] elf_core_dump+0x2b60/0x30b0 [ 74.487249][ T422] ? __cfi_elf_core_dump+0x10/0x10 [ 74.492352][ T422] ? dump_interrupted+0xd0/0xd0 [ 74.497182][ T422] ? 0xffffffffff600000 [ 74.501334][ T422] do_coredump+0x160e/0x23a0 [ 74.505905][ T422] ? __cfi_do_coredump+0x10/0x10 [ 74.510828][ T422] ? kmem_cache_free+0x12d/0x300 [ 74.515763][ T422] ? ____kasan_slab_free+0x13d/0x180 [ 74.521035][ T422] ? get_signal+0xac2/0x1700 [ 74.525616][ T422] ? kmem_cache_free+0x12d/0x300 [ 74.530536][ T422] get_signal+0x157d/0x1700 [ 74.535048][ T422] ? __cfi_get_signal+0x10/0x10 [ 74.539883][ T422] ? force_sig_info_to_task+0x306/0x3b0 [ 74.545412][ T422] arch_do_signal_or_restart+0xd1/0x11c0 [ 74.551027][ T422] ? page_fault_oops+0x8b0/0x8b0 [ 74.555951][ T422] ? down_read_trylock+0x27f/0x660 [ 74.561051][ T422] ? find_vma+0x89/0xd0 [ 74.565194][ T422] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.571332][ T422] ? do_user_addr_fault+0xd10/0x1030 [ 74.576607][ T422] exit_to_user_mode_loop+0x7a/0xb0 [ 74.581790][ T422] exit_to_user_mode_prepare+0x87/0xd0 [ 74.587248][ T422] irqentry_exit_to_user_mode+0x9/0x10 [ 74.592706][ T422] irqentry_exit+0x12/0x40 [ 74.597136][ T422] exc_page_fault+0x5e/0xb0 [ 74.601621][ T422] asm_exc_page_fault+0x27/0x30 [ 74.606453][ T422] RIP: 0033:0x7f0fe399fb21 [ 74.610851][ T422] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 74.630450][ T422] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 74.636504][ T422] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 74.644458][ T422] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 74.652419][ T422] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.660367][ T422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.668330][ T422] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 74.676300][ T422] [ 74.703710][ T1364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.705124][ T1382] loop5: detected capacity change from 0 to 16 [ 74.711282][ T1364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.724844][ T422] memory: usage 302444kB, limit 307200kB, failcnt 71596 [ 74.742228][ T422] memory+swap: usage 416880kB, limit 9007199254740988kB, failcnt 0 [ 74.750889][ T422] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 74.753317][ T1382] erofs: (device loop5): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 74.765947][ T1388] xt_CT: No such helper "snmp_trap" [ 74.772850][ T422] Memory cgroup stats for /syz0: [ 74.772992][ T422] anon 184320 [ 74.772992][ T422] file 308715520 [ 74.772992][ T422] kernel 0 [ 74.772992][ T422] kernel_stack 0 [ 74.772992][ T422] pagetables 0 [ 74.772992][ T422] sec_pagetables 0 [ 74.772992][ T422] percpu 0 [ 74.772992][ T422] sock 0 [ 74.772992][ T422] vmalloc 0 [ 74.772992][ T422] shmem 308703232 [ 74.772992][ T422] file_mapped 56446976 [ 74.772992][ T422] file_dirty 4096 [ 74.772992][ T422] file_writeback 0 [ 74.772992][ T422] swapcached 811008 [ 74.772992][ T422] anon_thp 0 [ 74.772992][ T422] file_thp 0 [ 74.772992][ T422] shmem_thp 0 [ 74.772992][ T422] inactive_anon 154828800 [ 74.772992][ T422] active_anon 154869760 [ 74.772992][ T422] inactive_file 0 [ 74.772992][ T422] active_file 12288 [ 74.772992][ T422] unevictable 0 [ 74.772992][ T422] slab_reclaimable 0 [ 74.772992][ T422] slab_unreclaimable 0 [ 74.772992][ T422] slab 0 [ 74.772992][ T422] workingset_refault_anon 9 [ 74.869751][ T1388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 74.887404][ T422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=451,uid=0 [ 74.945495][ T1364] loop3: detected capacity change from 0 to 512 [ 74.954862][ T320] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.987737][ T1398] loop5: detected capacity change from 0 to 512 [ 75.001279][ T1398] EXT4-fs: dax option not supported [ 75.003307][ T422] Memory cgroup out of memory: Killed process 451 (syz.0.26) total-vm:324240kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:42504kB, UID:0 pgtables:316kB oom_score_adj:1000 [ 75.026516][ T1364] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 75.041585][ T1364] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.225: corrupted inode contents [ 75.053616][ T1364] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.225: mark_inode_dirty error [ 75.065146][ T1364] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.225: corrupted inode contents [ 75.077475][ T1364] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.225: mark_inode_dirty error [ 75.097636][ T1364] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.225: corrupted inode contents [ 75.109695][ T1364] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.225: mark_inode_dirty error [ 75.121260][ T1364] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.225: corrupted inode contents [ 75.133373][ T1364] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 75.142108][ T1364] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.225: corrupted inode contents [ 75.242189][ T1364] EXT4-fs error (device loop3): ext4_truncate:4327: inode #16: comm syz.3.225: mark_inode_dirty error [ 75.323349][ T1364] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 75.412704][ T1364] EXT4-fs (loop3): 1 truncate cleaned up [ 75.467583][ T1364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.556984][ T1364] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.991235][ T10] __quota_error: 500 callbacks suppressed [ 75.991253][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 76.029659][ T1406] loop5: detected capacity change from 0 to 2048 [ 76.047192][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 76.072013][ T1380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.080956][ T1380] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.346597][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 76.431188][ T332] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 76.446771][ T1364] EXT4-fs (loop3): unmounting filesystem. [ 76.537577][ T332] asix: probe of 4-1:0.34 failed with error -71 [ 76.739205][ T332] usb 4-1: USB disconnect, device number 11 [ 77.042825][ T1419] netlink: 40 bytes leftover after parsing attributes in process `syz.5.239'. [ 77.249136][ T1423] netlink: 292 bytes leftover after parsing attributes in process `syz.1.241'. [ 77.268668][ T1426] loop3: detected capacity change from 0 to 512 [ 77.316183][ T1426] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.499626][ T1386] loop4: detected capacity change from 0 to 131072 [ 77.507841][ T365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.541683][ T1386] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 5) [ 77.561714][ T1386] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.583393][ T365] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 77.608126][ T1386] F2FS-fs (loop4): invalid crc value [ 77.618225][ T365] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.618225][ T365] [ 77.650542][ T365] EXT4-fs (loop0): Total free blocks count 0 [ 77.666647][ T1386] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.677092][ T365] EXT4-fs (loop0): Free/Dirty block details [ 77.710062][ T365] EXT4-fs (loop0): free_blocks=65280 [ 77.721122][ T365] EXT4-fs (loop0): dirty_blocks=1 [ 77.726162][ T365] EXT4-fs (loop0): Block reservation details [ 77.747508][ T365] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 77.770197][ T289] EXT4-fs (loop0): unmounting filesystem. [ 77.925624][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.988242][ T1445] loop3: detected capacity change from 0 to 128 [ 78.171338][ T1450] xt_hashlimit: size too large, truncated to 1048576 [ 78.458070][ T1452] device wireguard0 entered promiscuous mode [ 79.353142][ T1461] loop0: detected capacity change from 0 to 256 [ 79.438561][ T1462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 80.328297][ T1461] FAT-fs (loop0): Directory bread(block 64) failed [ 80.353798][ T1461] FAT-fs (loop0): Directory bread(block 65) failed [ 80.360431][ T1461] FAT-fs (loop0): Directory bread(block 66) failed [ 80.381394][ T1468] 9p: Unknown Cache mode readahead [ 80.406803][ T1470] loop4: detected capacity change from 0 to 256 [ 80.431128][ T1461] FAT-fs (loop0): Directory bread(block 67) failed [ 80.450971][ T1470] FAT-fs (loop4): Directory bread(block 64) failed [ 80.471183][ T1470] FAT-fs (loop4): Directory bread(block 65) failed [ 80.489200][ T1461] FAT-fs (loop0): Directory bread(block 68) failed [ 80.491077][ T1470] FAT-fs (loop4): Directory bread(block 66) failed [ 80.531096][ T1470] FAT-fs (loop4): Directory bread(block 67) failed [ 80.538165][ T1464] loop3: detected capacity change from 0 to 40427 [ 80.544957][ T1461] FAT-fs (loop0): Directory bread(block 69) failed [ 80.545741][ T1470] FAT-fs (loop4): Directory bread(block 68) failed [ 80.568269][ T1470] FAT-fs (loop4): Directory bread(block 69) failed [ 80.576477][ T1464] F2FS-fs (loop3): invalid crc value [ 80.581118][ T1470] FAT-fs (loop4): Directory bread(block 70) failed [ 80.595687][ T1470] FAT-fs (loop4): Directory bread(block 71) failed [ 80.616042][ T1470] FAT-fs (loop4): Directory bread(block 72) failed [ 80.622697][ T1461] FAT-fs (loop0): Directory bread(block 70) failed [ 80.622725][ T1461] FAT-fs (loop0): Directory bread(block 71) failed [ 80.622755][ T1461] FAT-fs (loop0): Directory bread(block 72) failed [ 80.622772][ T1461] FAT-fs (loop0): Directory bread(block 73) failed [ 80.656400][ T1464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.679603][ T1470] FAT-fs (loop4): Directory bread(block 73) failed [ 80.710336][ T28] audit: type=1400 audit(1794133677.945:2233): avc: denied { watch_reads } for pid=1469 comm="syz.4.256" path="/48/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 80.827000][ T1477] loop4: detected capacity change from 0 to 512 [ 80.892320][ T1477] EXT4-fs: dax option not supported [ 80.922195][ T1464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.002918][ T1483] netlink: 292 bytes leftover after parsing attributes in process `syz.0.252'. [ 81.076145][ T1473] f2fs_ckpt-7:3: attempt to access beyond end of device [ 81.076145][ T1473] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.382438][ T28] audit: type=1400 audit(1794133679.625:2234): avc: denied { setopt } for pid=1496 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.445084][ T1497] loop0: detected capacity change from 0 to 512 [ 82.476258][ T1506] loop3: detected capacity change from 0 to 128 [ 82.497199][ T1506] EXT4-fs: Ignoring removed i_version option [ 82.517707][ T1506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.526784][ T1506] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.539655][ T1506] syz.3.264 (pid 1506) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 82.561281][ T287] EXT4-fs (loop3): unmounting filesystem. [ 82.655333][ T1497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.681760][ T1497] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.695047][ T1497] EXT4-fs (loop0): 1 truncate cleaned up [ 82.700700][ T1497] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.775257][ T1513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 83.531520][ T289] EXT4-fs (loop0): unmounting filesystem. [ 83.642439][ T28] audit: type=1400 audit(1794133680.885:2235): avc: denied { map } for pid=1517 comm="syz.5.267" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.674501][ T1502] loop4: detected capacity change from 0 to 40427 [ 83.690784][ T1521] loop3: detected capacity change from 0 to 256 [ 83.697447][ T1502] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.719372][ T1519] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 83.731092][ T1502] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.751351][ T1502] F2FS-fs (loop4): invalid crc value [ 83.790398][ T1502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.805559][ T1529] loop3: detected capacity change from 0 to 512 [ 83.815279][ T1531] loop5: detected capacity change from 0 to 512 [ 83.829961][ T1529] EXT4-fs: dax option not supported [ 83.838491][ T1531] EXT4-fs: dax option not supported [ 83.841815][ T28] audit: type=1326 audit(1794133681.075:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 83.911116][ T28] audit: type=1326 audit(1794133681.135:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 83.948950][ T1502] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.957615][ T455] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 83.972619][ T1502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.983056][ T28] audit: type=1326 audit(1794133681.135:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.010799][ T28] audit: type=1326 audit(1794133681.135:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.032384][ T455] CPU: 0 PID: 455 Comm: syz.0.26 Not tainted syzkaller #0 [ 84.042568][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 84.052629][ T455] Call Trace: [ 84.055898][ T455] [ 84.058815][ T455] __dump_stack+0x21/0x24 [ 84.063142][ T455] dump_stack_lvl+0x110/0x170 [ 84.067828][ T455] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.072869][ T455] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 84.078689][ T455] ? ___ratelimit+0x40a/0x590 [ 84.081103][ T28] audit: type=1326 audit(1794133681.135:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.083358][ T455] dump_stack+0x15/0x24 [ 84.083376][ T455] dump_header+0xdb/0x660 [ 84.116449][ T455] ? __cfi_gfp_zone+0x10/0x10 [ 84.121132][ T455] oom_kill_process+0x32a/0x410 [ 84.125997][ T455] ? kvm_sched_clock_read+0x18/0x40 [ 84.131208][ T455] out_of_memory+0x630/0x930 [ 84.135796][ T455] ? __cfi_out_of_memory+0x10/0x10 [ 84.138433][ T28] audit: type=1326 audit(1794133681.135:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.140903][ T455] mem_cgroup_out_of_memory+0x2be/0x390 [ 84.171045][ T455] ? __kasan_check_write+0x14/0x20 [ 84.175775][ T28] audit: type=1326 audit(1794133681.135:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.176151][ T455] ? mem_cgroup_oom_trylock+0x360/0x360 [ 84.206316][ T455] try_charge_memcg+0xb8a/0x1650 [ 84.211262][ T455] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 84.216632][ T455] ? __asan_set_shadow_00+0xe/0x10 [ 84.221097][ T28] audit: type=1326 audit(1794133681.135:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.0.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe399fb19 code=0x7ffc0000 [ 84.221741][ T455] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 84.252262][ T455] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 84.258091][ T455] charge_memcg+0x81/0x1f0 [ 84.262538][ T455] __mem_cgroup_charge+0x93/0x290 [ 84.267565][ T455] ? xas_start+0x31d/0x3e0 [ 84.271980][ T455] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 84.277616][ T455] ? xas_load+0x3a2/0x3c0 [ 84.281945][ T455] shmem_add_to_page_cache+0x5b1/0xae0 [ 84.287582][ T455] ? put_page+0xb0/0xb0 [ 84.291739][ T455] ? do_fault+0x1b23/0x1e30 [ 84.296238][ T455] shmem_get_folio_gfp+0xef9/0x20f0 [ 84.301446][ T455] shmem_write_begin+0xea/0x2c0 [ 84.306307][ T455] generic_perform_write+0x32d/0x740 [ 84.311597][ T455] ? __cfi_generic_perform_write+0x10/0x10 [ 84.317404][ T455] ? __cfi_file_update_time+0x10/0x10 [ 84.322784][ T455] shmem_file_write_iter+0x104/0x130 [ 84.328077][ T455] __kernel_write_iter+0x2a9/0x6a0 [ 84.333192][ T455] ? __cfi___kernel_write_iter+0x10/0x10 [ 84.338825][ T455] ? dump_user_range+0x575/0x630 [ 84.343768][ T455] ? iov_iter_bvec+0x53/0x1f0 [ 84.348456][ T455] dump_user_range+0x3e6/0x630 [ 84.353221][ T455] ? __cfi_dump_user_range+0x10/0x10 [ 84.358504][ T455] ? dump_align+0xfe/0x120 [ 84.362920][ T455] ? dump_emit+0xa8/0xc0 [ 84.367160][ T455] elf_core_dump+0x2b60/0x30b0 [ 84.371930][ T455] ? __cfi_elf_core_dump+0x10/0x10 [ 84.377484][ T455] ? dump_interrupted+0xd0/0xd0 [ 84.382338][ T455] ? 0xffffffffff600000 [ 84.386517][ T455] do_coredump+0x160e/0x23a0 [ 84.391116][ T455] ? __cfi_do_coredump+0x10/0x10 [ 84.396062][ T455] ? kmem_cache_free+0x12d/0x300 [ 84.401024][ T455] ? ____kasan_slab_free+0x13d/0x180 [ 84.406314][ T455] ? get_signal+0xac2/0x1700 [ 84.410917][ T455] ? kmem_cache_free+0x12d/0x300 [ 84.415873][ T455] get_signal+0x157d/0x1700 [ 84.420478][ T455] ? __cfi_get_signal+0x10/0x10 [ 84.425347][ T455] ? force_sig_info_to_task+0x306/0x3b0 [ 84.430894][ T455] arch_do_signal_or_restart+0xd1/0x11c0 [ 84.436529][ T455] ? page_fault_oops+0x8b0/0x8b0 [ 84.441466][ T455] ? down_read_trylock+0x27f/0x660 [ 84.446585][ T455] ? find_vma+0x89/0xd0 [ 84.450741][ T455] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 84.456900][ T455] ? do_user_addr_fault+0xd10/0x1030 [ 84.462191][ T455] exit_to_user_mode_loop+0x7a/0xb0 [ 84.467393][ T455] exit_to_user_mode_prepare+0x87/0xd0 [ 84.472848][ T455] irqentry_exit_to_user_mode+0x9/0x10 [ 84.478312][ T455] irqentry_exit+0x12/0x40 [ 84.482728][ T455] exc_page_fault+0x5e/0xb0 [ 84.487232][ T455] asm_exc_page_fault+0x27/0x30 [ 84.492202][ T455] RIP: 0033:0x7f0fe399fb21 [ 84.496619][ T455] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 84.516316][ T455] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 84.522395][ T455] RAX: 0000000000000000 RBX: 00007f0fe3c26090 RCX: 00007f0fe399fb19 [ 84.530373][ T455] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 84.538350][ T455] RBP: 00007f0fe3a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.546322][ T455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.554298][ T455] R13: 00007f0fe3c26128 R14: 00007f0fe3c26090 R15: 00007ffce6038468 [ 84.562282][ T455] [ 84.576486][ T455] memory: usage 307200kB, limit 307200kB, failcnt 83129 [ 84.584328][ T455] memory+swap: usage 428720kB, limit 9007199254740988kB, failcnt 0 [ 84.594334][ T455] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 84.601790][ T455] Memory cgroup stats for /syz0: [ 84.602321][ T455] anon 180224 [ 84.602321][ T455] file 310833152 [ 84.602321][ T455] kernel 0 [ 84.602321][ T455] kernel_stack 0 [ 84.602321][ T455] pagetables 0 [ 84.602321][ T455] sec_pagetables 0 [ 84.602321][ T455] percpu 0 [ 84.602321][ T455] sock 0 [ 84.602321][ T455] vmalloc 0 [ 84.602321][ T455] shmem 310833152 [ 84.602321][ T455] file_mapped 92012544 [ 84.602321][ T455] file_dirty 0 [ 84.602321][ T455] file_writeback 0 [ 84.602321][ T455] swapcached 3559424 [ 84.602321][ T455] anon_thp 0 [ 84.602321][ T455] file_thp 0 [ 84.602321][ T455] shmem_thp 0 [ 84.602321][ T455] inactive_anon 206229504 [ 84.602321][ T455] active_anon 108343296 [ 84.602321][ T455] inactive_file 0 [ 84.602321][ T455] active_file 0 [ 84.602321][ T455] unevictable 0 [ 84.602321][ T455] slab_reclaimable 0 [ 84.602321][ T455] slab_unreclaimable 0 [ 84.602321][ T455] slab 0 [ 84.602321][ T455] workingset_refault_anon 9 [ 85.741160][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 86.454835][ T455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=422,uid=0 [ 86.470759][ T455] Memory cgroup out of memory: Killed process 422 (syz.0.26) total-vm:324108kB, anon-rss:1260kB, file-rss:20544kB, shmem-rss:77724kB, UID:0 pgtables:372kB oom_score_adj:1000 [ 86.507300][ T1540] netlink: 292 bytes leftover after parsing attributes in process `syz.1.272'. [ 86.789326][ T1548] loop3: detected capacity change from 0 to 128 [ 86.820893][ T1548] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 86.912156][ T1548] loop3: detected capacity change from 0 to 4096 [ 86.918805][ T1548] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.940809][ T1548] EXT4-fs: Ignoring removed orlov option [ 86.952925][ T1557] loop4: detected capacity change from 0 to 16 [ 86.959753][ T1548] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.976801][ T1557] erofs: Unknown parameter 'ÿÿ' [ 86.996066][ T1548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.158987][ T287] EXT4-fs (loop3): unmounting filesystem. [ 87.248309][ T1559] loop5: detected capacity change from 0 to 256 [ 87.357194][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 88.489162][ T1559] FAT-fs (loop5): Directory bread(block 64) failed [ 88.535735][ T1559] FAT-fs (loop5): Directory bread(block 65) failed [ 88.543130][ T1559] FAT-fs (loop5): Directory bread(block 66) failed [ 88.549740][ T1559] FAT-fs (loop5): Directory bread(block 67) failed [ 88.556538][ T1559] FAT-fs (loop5): Directory bread(block 68) failed [ 88.563306][ T1559] FAT-fs (loop5): Directory bread(block 69) failed [ 88.569842][ T1559] FAT-fs (loop5): Directory bread(block 70) failed [ 88.591110][ T1559] FAT-fs (loop5): Directory bread(block 71) failed [ 88.611677][ T1582] input: syz0 as /devices/virtual/input/input9 [ 89.455053][ T1559] FAT-fs (loop5): Directory bread(block 72) failed [ 89.464923][ T1559] FAT-fs (loop5): Directory bread(block 73) failed [ 89.668540][ T1587] loop4: detected capacity change from 0 to 512 [ 89.714227][ T1587] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.973459][ T1586] loop3: detected capacity change from 0 to 4096 [ 90.064083][ T1586] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.070637][ T1586] EXT4-fs: Ignoring removed orlov option [ 90.077115][ T10] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 90.089587][ T1586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.110769][ T1586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.564560][ T1597] printk: console [ttyS0] disabled [ 90.682895][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 90.682917][ T28] audit: type=1326 audit(1794133687.915:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.5.290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdc79fb19 code=0x7ffc0000