last executing test programs: 15.22133045s ago: executing program 4 (id=696): r0 = epoll_create1(0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x8, 0x6, 0x20, @empty, @remote, 0x1, 0x20, 0x7, 0x40}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x3}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x6}]}}}]}, 0x44}}, 0x0) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) inotify_rm_watch(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x20001000, r4}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002540), 0x0, 0x6, r4}, 0x38) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000300)={0xa0002006}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xc400}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x1ff]}, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0xe, 0x0, 0x0) 7.959593021s ago: executing program 4 (id=719): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00003df0cab059d353440009058230d93719ea02000200000009050302"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) select(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x11, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0x22, 0x35, {0x35, 0x2, "4eca9b612f2c31919c49eaa599918f076bc0540919a129111c672334800ae571a5d0e4992305325d5eeea1d931bfac7ec68994"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x60, 0x19, 0xa6, "e3eb9d6da4a0d19348c0139705ab60420b6f98abc1d515b1e21d61a5a2902ff6ff71703dc1db0e24617bd9979f56eccec9018edeb527cd6c838ca4c849830fe5dd4703aeddcb0c1fc42f3c4b587312c48d9cf3ebbb2f0260925f83dcbc6662d12ed3988e99d7e6a6720c44d7bb4014aa2e25bbf2a0262a5a24286c7de56a79b57c857e5a9e7132082aa406197bbc677bdd449241d60e9c2990254f5fa6f58118d14cfe4ab278"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x81, 0x1, 'u'}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "63e9df"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "b4950a"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "ecf869d3"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "bcd1b4"}}) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x388, 0xa6, 0xfb, 0x5d, 0x8, 0x85a, 0x28, 0x130, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x0, 0x8, "", [{{0x9, 0x4, 0x87, 0x6d, 0x0, 0xe0, 0x1, 0x3, 0x6}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x450, 0x0, 0x5002004a, 0xb, 0x0, 0xea13, 0x3b8, 0x3c8, 0x3c8, 0x3b8, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x5c00000000000000}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x6}, {0x2, 0x4, 0x1}, {0x4, 0x4}, 0x2, 0x81}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0xb, 0x400, 0x3560}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x1002, 0x4) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 6.340924752s ago: executing program 3 (id=725): timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', r6, r9, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 4.898828318s ago: executing program 3 (id=734): unshare(0x42000000) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000b12b71102e00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x4, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xfffffffe}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=ANY=[@ANYBLOB="380100001000010027bd700000010000fe880000000000010000000000000001ac14143d00000000000e000000000000000107144e230405000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fbffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) execveat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x8000000000000002, 0x300) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="ab1a966d3b0ecbc2378e62f613966bf884c9279f9fb3c506030fe186423cbb135299da6fc61d77949e50445706d9cd29454957abaf8eedeb", @ANYRES64=r2], 0x0) 3.758126076s ago: executing program 4 (id=741): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0xc00, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000001100)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000f240f0100000000000000000006241a00"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000000)={0x0, 0x2}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x100) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, 0x0) getdents(r0, &(0x7f0000000340)=""/198, 0x103) 3.757107036s ago: executing program 2 (id=742): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c026352ff988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.308548177s ago: executing program 2 (id=745): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', r6, r9, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2.78370269s ago: executing program 0 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xff, 0xb, 0x8, 0x60, 0xffffffffffffffff, 0x7d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0xa6, 0x45, 0x10, @private0, @private0, 0x40, 0x7800, 0x815, 0xd0}}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) (async) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000043c0)={0x50, 0x0, r5, {0x7, 0x2b, 0x6, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, 0x50) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x400, 0x836, 0x6, 0x1020, r0, 0x8, '\x00', r1, r7, 0x0, 0x0, 0x4}, 0x50) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x8, "b0bf2ebb48c849ac0000000003000018bfff40"}) r9 = syz_open_pts(r8, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x200, 0x9, 0x100, 0xc6d, 0x1000000, r12}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x20}, 0x18) (async) dup3(r9, r8, 0x0) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x58444, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b9, &(0x7f0000000540)="$eJzs3b2LY1UUAPDzZvKlFklhJYIPtLBx2dnWJoNkIZhKSaEWuri7IJMg7MKAHxi3srWx9C8QBDv/AjsbC3vBxkKwc8GFJ+9rkqwv2c1gZvz4/Zrcufecd897cyfDFHPyzrPzk5tp3L738U/R6yVxMIxh3E9iEAdR+zTWDD8PAODf7H6WxW9ZaX0l2ZqXr/b2WxoAsCebf/9v8M3eSwIA9uz1N9589XgyGb2Wpr24Pv/sdJr/ZZ+/luvHt+O9mMWtuBr9eBCRnSnH17MsW7TS3CBemC9Op3nm/O3vq+sf/xpR5B9FPwbF1Hr+eDI6Sksr+Yu8jier/Yd5/rXox9MN+48no2sN+THtxIvPr9R/Jfrxw7vxfsziZlFEkf/SH+PJ6JOjNH0l++L3j97Ky8vzk8XptFvELWWHF/ytAQAAAAAAAAAAAAAAAAAAAADgP+xK1TunG0X/nnyq6r9z+CD/oh1pbbDen6fMP+sS/FB/oEUWX9b9ea6maZpVgcv8VjzTil++u5zbBgAAAAAAAAAAAAAAAAAAgH+Uux98eHJjNrt1528Z1N0AWtXrea8zXJl5LhpiBnE2011ueVBtu+XKcVjHJBFby8ivuFPx7UfvvmHwxKasr77e9dH1Hh3TPkeFOw7q03VyI2l+ht2oZ3r1Ifl2NaYTj7lXZ9NSttPx6zQu9Xe+985TxWCxJSaSbYW9/HP55KqZ5OG76BRPtTG9XQ3Kn4Wms7HTef7re0XS2stbEAAAAAAAAAAAAAAAAAAAUFn+02/D4r0NST+Oyw/5j8GeqwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi7H8/P8dBosq+TGCO3Hn7iXfIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwYAAP//B+ZjcA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_elf32(r7, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x5, 0x6, 0x1, 0x1, 0x6, 0x0, 0x130, 0x38, 0x338, 0x1, 0x4, 0x20, 0x1, 0x3, 0x145d, 0x8}, [{0x6474e551, 0x3, 0x3, 0x1, 0x101, 0xff, 0x1, 0x5}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x658) (async) prctl$PR_GET_DUMPABLE(0x3) 2.759375511s ago: executing program 0 (id=752): modify_ldt$read_default(0x2, &(0x7f0000000240)=""/153, 0x99) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc01, 0x34) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000180)={0x0, 0x400000f000, 0x2}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6f626a5f747970653d6d7309602a9d606330f229232c00"], 0x1, 0x11a3, &(0x7f0000001280)="$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") flistxattr(r0, &(0x7f0000000080)=""/44, 0x2c) 2.39500344s ago: executing program 0 (id=754): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r5, r8, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2.39403568s ago: executing program 2 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) (async) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/58, 0x36) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca4f4000282000000000000000010000010100000100"/58, 0x36) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca4f4000280000000000000000010000010100000100"/58, 0x36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.227658794s ago: executing program 1 (id=758): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r5, r8, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2.227519594s ago: executing program 2 (id=759): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000002e40)=[{&(0x7f0000001cc0)="e54d15f8866253aa781e7457cf81bedff72bc4f20150dbae5da81f91545c1076c57cb3ea2d1f63722bbd93ee76ae055a90690d3ac444d5c1cfb7e9f58402735c727b71b42886ef34249c91e3adde9debff20711a5475f3f667404d27bcb7593724bd4c6eda053240f5344baaa90fc88ae138ee9eae47dd423f0a4918237f38566de77ceca25545cb209a528e74000349c158a98a96df39c855b327f193b38aaaf508eb83fcba7a", 0xa7}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xffffffffffffffe6) recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)=""/166, 0xa6}], 0x1}, 0x7}], 0x1, 0x40010140, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r3, 0x420}, {r4, 0x1}, {r2, 0x272c}, {r5, 0x8000}, {r1, 0x2021}, {r1, 0x2400}], 0x6, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000200)={[0x2]}, 0x8) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r8 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 1.880316023s ago: executing program 2 (id=760): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0xc20, &(0x7f0000001940)={[{@fat=@check_strict}, {@shortname_mixed}, {@shortname_lower}, {@fat=@umask={'umask', 0x3d, 0x800}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@utf8}, {@numtail}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000001100)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000100)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x7ff, 0x4, 0x5, 0xd, 0x8, 0x8, 0x4, 0x4, 0xff, 0xfffffff9, 0x222, 0xd, 0xa, 0xb701, [0xcf, 0x598]}}) getdents(r0, &(0x7f0000001fc0)=""/180, 0xb4) 1.862673323s ago: executing program 3 (id=761): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='loginuid\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001440)="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"}, {&(0x7f0000002640)="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"}, {&(0x7f0000002440)="c9934fb90558f8141a29e74ebef97222dc4a918a2c67862f7ee3fb4184ca6760824d757e638c98f30a04b4e0755fe60becdab17b4330b70477cd28b137af87b6e820e475b8408e30d230cff7119b24aebba1b7d2f66fabe52d34f2d6a1440fbd6febdc3211de3c854d86235e5e76857af1a7a179bc06aeea66645603c32ba92e2130415bd33042543ad9c9e4623bab469805938e70a091cf8096ffba2044caa8fd81f1a4e3e7b7068776bb383ee0c57a39c9dfc79f0fb218eda759edec4b47df4d30aa7f0a2488fb4583b9e0ae9dfcac305f413ae0799b47d7f990903a9e73790e2ffadf9779393231cb6327de533d6c6017"}, {&(0x7f0000002540)="c11c3a4e74fdeb3e4db9df02c0384fd20455c1d652249756ee804c7f103f0a5894012815b7dd4c2941cf6337b56f9b6e24c93d97f2f212a1e53cf990e7b3619d96b02d7c6f323c054d578eda9f5fad3f0dac4c07a9af086e7d3dc6c299c4c1a6ae0bda1e841b5d015ba0d43d0edff9211dfa714329192759d53b0311910853eb0b1fdcb222fa090fe1406aad64ac0f50406af42716bba499218d808452c6e3b36b1dbfe480c251e5647403ea73e3a29ff139f948f8c5d15e7746fa3751ee2b665b96bc3f1246b6b16117cfee073e401cbc41b80c6a4bbc6bbd6bd764bf95e37d35c969858ae504469d949f86c14c"}, {&(0x7f0000000040)="30d27c0fc0c96ff4460118bc2a8cfd30e48cf7b113b8bf514bfcff96e9379d9a7a448e49f4eff0d9fea549ff941c1f5b40eae1ff7494d1b325069e1e33ccffbf4a00c70284ec3f58069a5c"}, {&(0x7f00000000c0)="d8cab635836dfc55b1c59803cf8c93be3746e92ed08347f279f5a26f065a1152ca1a9ec2260405d2d956747e7d1ece990b61a74c78543f6a9ef2c135bd"}, {&(0x7f0000000100)="84ff2ae1660306000000000000000000"}], 0x15) 1.639779659s ago: executing program 3 (id=762): syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', r6, r9, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 1.639035549s ago: executing program 2 (id=763): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000100)=0x3) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x24, 0x28, {0x28, 0x21, "c26313852642792c3cbdeace918d0fb74237cc4bc3cb19cdb26400000000008958c355000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.408110534s ago: executing program 1 (id=764): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11000000, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x5f, 0xe]}}, &(0x7f0000000480)=""/171, 0x29, 0xab, 0x1}, 0x28) 1.388511105s ago: executing program 1 (id=765): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x22, &(0x7f0000000100)=[{0x6, 0x72, 0xfb, 0x7fff0000}]}) unshare(0x62020600) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "f30d207bb27f91a9d703000000b5296e05a60ff92ae1a29d9300407b0bb7dfae", "b1b90b9c9404dd050000002207544a8daea758500000a06c816cbbe0b2e6fb42", "550aa97e88000000000000c4e62995a2b411c94a3be96f1b390f79c1b38b4125", "f00797cd9144ce03f724b1365402593ebbef1ba747a1c2fcf7f69474a2cb0fdb", "1e54aa667e9fa1bf30321f8e5718f27d6e452317ec5a27f54a3359408900", "a9c64b8ea5d289a7ac983671", 0x3, 0x8, 0x0, 0x400c, 0x8098}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}}}}]}, 0x4c}}, 0x0) unshare(0x2040600) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x4, 0x4) sendmmsg$inet(r7, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000010000"], 0x38}}], 0x1, 0x46000) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rename(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x7, 0x8000, 0x4, 0x7, {{0xd, 0x4, 0x3, 0x3c, 0x34, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0x41, 0x3, 0x4, [{@loopback, 0x2}, {@local}, {@multicast1, 0x2}]}, @noop]}}}}}) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) 1.319713457s ago: executing program 3 (id=766): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.306932217s ago: executing program 1 (id=767): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x6) 1.296314257s ago: executing program 1 (id=768): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x14f) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) 1.249859299s ago: executing program 0 (id=769): r0 = epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000000000)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x16c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x138, 0x2, [@TCA_MATCHALL_ACT={0x12c, 0x2, [@m_gact={0x128, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1323, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x7, 0x10000000, 0x1, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2510, 0x1}}]}, {0xcb, 0x6, "911f44ee739e09e8056365796435773fa79bb510a7eef75ae212910943740704a2bd51d9022fd4f5d29281b886397283d2e2c2a0c67766f6a285cfd6ebb46ba9673e9bfe601017c0f4288843b8f8c5158faad0936ac95581931cda9f17af400164f05cab3981474c94eb902910ac01f22a2cffe5148c02d03734acec822becb94257042cdc3cda4f9c5fb7a2db62b9fc1e34c59a34c5d32ed7a3f8e3cba7f709aeb7f1a28dfa6cc42e4729942ea48c79a66882cea468c0a336193e6f4555e661d325e9eb4b38ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x91}, 0x20048080) r8 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000300)={0xa0002006}) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0xe, 0x0, 0x0) 1.031779324s ago: executing program 4 (id=770): ftruncate(0xffffffffffffffff, 0xfffffffffffff801) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x10, 0x0, 0x0, 0x5, 0x0, 0x2}, [@RTA_IIF={0xffffffffffffffd9, 0x3, r1}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199df7e) 902.849697ms ago: executing program 0 (id=771): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/10, 0xa}], 0x8, &(0x7f0000002280)=""/201, 0xc9}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 892.993577ms ago: executing program 1 (id=772): syz_usb_connect$uac3(0x0, 0x93, &(0x7f0000002540)=ANY=[@ANYBLOB="12011001000000406d049109400001020301090281000301ffc010080b0002010130070904000000010130"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$usbmon(0x0, 0x9, 0x14141) mmap$usbmon(&(0x7f00000fa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xf0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040052) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x800) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2b69, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0xf}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3b, 0x5, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd3, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x5, 0x7, 0x7, 0xff, 0x8}, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESHEX]}) 615.695774ms ago: executing program 0 (id=773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x2f0, 0x0, 0xfeffffff, 0x0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x0, 0x0, 0x4, 0x6, 0x5], 0x2}}}, @common=@ttl={{0x28}, {0x2, 0xd}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local, @remote, @icmp_id, @port=0x4e21}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffff00, 0xffffff00, 'wg2\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x2, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x9, 0x0, 0x8c}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000001000200000a140000fd0100000000000014000500000000000001"], 0x30}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0xdbf) 524.750487ms ago: executing program 4 (id=774): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x401, 0x7ff, 0x0, 0xffff, 0x51c1, 0x5, 0x80, 0x8}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}}, 0x48840) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000080), 0x100000000000038b, 0xa) write(r12, &(0x7f0000000280)="0f", 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r14, 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r15, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0xffff, 0x1000}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000013c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r12, 0xd0009412, &(0x7f00000023c0)={r16, 0x5c}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080125bd7000fcdbdf25310000000c009900010000004900000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0c00990004000000090000000800db00", @ANYRES32, @ANYBLOB="807763f3", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB='\b\x00R\x00', @ANYRES32=r14, @ANYBLOB="08000100410000000800db00", @ANYRES32=r15, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040000) 168.090525ms ago: executing program 4 (id=775): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r5, r8, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 0s ago: executing program 3 (id=776): syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, 0x0, 0x0, 0x60, 0x2732bd8c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x49, 0x9, 0x4, @loopback, @mcast1, 0x10, 0x80, 0x200, 0x9}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', r6, r9, 0x5, 0x4, 0x5}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) kernel console output (not intermixed with test programs): -session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.309416][ T24] audit: type=1400 audit(1785138536.190:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[14420]" dev="pipefs" ino=14420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.327219][ T24] audit: type=1400 audit(1785138536.190:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.346194][ T24] audit: type=1400 audit(1785138536.190:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 22.307176][ T24] audit: type=1400 audit(1785138543.190:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.310761][ T271] cgroup: Unknown subsys name 'net' [ 22.329971][ T24] audit: type=1400 audit(1785138543.190:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.357280][ T24] audit: type=1400 audit(1785138543.220:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.357912][ T271] cgroup: Unknown subsys name 'devices' [ 22.531416][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.537090][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.648381][ T24] audit: type=1400 audit(1785138543.530:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.671632][ T24] audit: type=1400 audit(1785138543.530:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.696510][ T24] audit: type=1400 audit(1785138543.530:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.711436][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.728478][ T24] audit: type=1400 audit(1785138543.620:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.754113][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.754340][ T24] audit: type=1400 audit(1785138543.620:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.788587][ T24] audit: type=1400 audit(1785138543.630:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.814123][ T24] audit: type=1400 audit(1785138543.630:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.254528][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.261792][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.269379][ T279] device bridge_slave_0 entered promiscuous mode [ 23.276398][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.283749][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.291200][ T279] device bridge_slave_1 entered promiscuous mode [ 23.409386][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.416459][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.424028][ T280] device bridge_slave_0 entered promiscuous mode [ 23.432336][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.439471][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.446818][ T280] device bridge_slave_1 entered promiscuous mode [ 23.453617][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.460686][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.467974][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.475064][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.482950][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.490103][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.497462][ T281] device bridge_slave_0 entered promiscuous mode [ 23.504458][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.511946][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.519416][ T281] device bridge_slave_1 entered promiscuous mode [ 23.584382][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591572][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.598881][ T282] device bridge_slave_0 entered promiscuous mode [ 23.608504][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.615753][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.623423][ T282] device bridge_slave_1 entered promiscuous mode [ 23.641038][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648120][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.655728][ T283] device bridge_slave_0 entered promiscuous mode [ 23.662734][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669893][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.677466][ T283] device bridge_slave_1 entered promiscuous mode [ 23.760868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.769498][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.777656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.785339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.841005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.849650][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.856718][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.882162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.890286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.925524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.943488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.952312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.960392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.967823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.975496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.983183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.991360][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.998373][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.005789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.014197][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.021335][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.031165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.038880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.047403][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.054456][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.062354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.070660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.077684][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.090388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.098459][ T279] device veth0_vlan entered promiscuous mode [ 24.111595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.131510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.140440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.148415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.156749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.165271][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.172368][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.179969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.188122][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.195212][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.202873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.216922][ T279] device veth1_macvtap entered promiscuous mode [ 24.230171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.239029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.247593][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.254674][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.263545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.271801][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.278823][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.286256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.295150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.303461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.322303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.330531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.338466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.346705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.364465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.372811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.381234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.389658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.397932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.406341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.414360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.422856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.431311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.439246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.447314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.454915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.469943][ T280] device veth0_vlan entered promiscuous mode [ 24.482120][ T282] device veth0_vlan entered promiscuous mode [ 24.489803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.498194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.507260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.515583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.523803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.532412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.540923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.548765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.557026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.564917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.574421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.582097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.589696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.597119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.613694][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 24.615068][ T282] device veth1_macvtap entered promiscuous mode [ 24.630482][ T281] device veth0_vlan entered promiscuous mode [ 24.637459][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.646469][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.654992][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.671598][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.684013][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.692807][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.701595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.715638][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.729345][ T281] device veth1_macvtap entered promiscuous mode [ 24.738426][ T280] device veth1_macvtap entered promiscuous mode [ 24.760872][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.769549][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.777913][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.786141][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.797569][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.806489][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.814603][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.823014][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.831544][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.839943][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.858836][ T307] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 24.868324][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.876709][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.892135][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.906018][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.908407][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.916778][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.939821][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.948031][ T309] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 24.969067][ T283] device veth0_vlan entered promiscuous mode [ 24.988102][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.996564][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.015334][ T283] device veth1_macvtap entered promiscuous mode [ 25.022597][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.030517][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.038130][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.047456][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.056043][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.096018][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.106970][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.117656][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.319420][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.375250][ T335] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 26.562865][ T324] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.748404][ T324] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 26.905907][ T304] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.509647][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 27.509667][ T24] audit: type=1400 audit(2000000002.590:126): avc: denied { create } for pid=354 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.999472][ T24] audit: type=1400 audit(2000000003.170:127): avc: denied { create } for pid=360 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.999663][ T24] audit: type=1400 audit(2000000003.180:128): avc: denied { write } for pid=360 comm="syz.1.12" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.999738][ T24] audit: type=1400 audit(2000000003.190:129): avc: denied { setattr } for pid=360 comm="syz.1.12" path="socket:[15625]" dev="sockfs" ino=15625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.999785][ T24] audit: type=1400 audit(2000000003.190:130): avc: denied { read write } for pid=360 comm="syz.1.12" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.999831][ T24] audit: type=1400 audit(2000000003.190:131): avc: denied { open } for pid=360 comm="syz.1.12" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.361293][ T24] audit: type=1400 audit(2000000003.570:132): avc: denied { create } for pid=372 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.385727][ T373] netlink: 240 bytes leftover after parsing attributes in process `syz.4.15'. [ 28.402377][ T24] audit: type=1400 audit(2000000003.590:133): avc: denied { ioctl } for pid=372 comm="syz.4.15" path="socket:[15640]" dev="sockfs" ino=15640 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.492196][ T24] audit: type=1400 audit(2000000003.590:134): avc: denied { write } for pid=372 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.745483][ T24] audit: type=1400 audit(2000000003.590:135): avc: denied { nlmsg_write } for pid=372 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.691016][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 29.799908][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.815919][ T390] netlink: 240 bytes leftover after parsing attributes in process `syz.1.19'. [ 29.987205][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.438278][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 33.438291][ T24] audit: type=1400 audit(2000000005.770:142): avc: denied { prog_load } for pid=392 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.515322][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.549333][ T24] audit: type=1400 audit(2000000005.900:143): avc: denied { bpf } for pid=392 comm="syz.4.21" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.569706][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.578209][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.586276][ T24] audit: type=1400 audit(2000000006.880:144): avc: denied { perfmon } for pid=392 comm="syz.4.21" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.586437][ T24] audit: type=1400 audit(2000000006.890:145): avc: denied { prog_run } for pid=392 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.586454][ T24] audit: type=1400 audit(2000000007.090:146): avc: denied { wake_alarm } for pid=392 comm="syz.4.21" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.586470][ T24] audit: type=1400 audit(2000000007.480:147): avc: denied { write } for pid=392 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.710866][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.719616][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.852237][ T24] audit: type=1400 audit(2000000009.060:148): avc: denied { mounton } for pid=401 comm="syz.1.22" path="/4/file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 34.183410][ T406] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 34.749331][ T24] audit: type=1400 audit(2000000009.500:149): avc: denied { name_bind } for pid=410 comm="syz.3.24" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.843970][ T24] audit: type=1400 audit(2000000009.500:150): avc: denied { node_bind } for pid=410 comm="syz.3.24" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.106350][ T24] audit: type=1400 audit(2000000010.260:151): avc: denied { mount } for pid=410 comm="syz.3.24" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.546290][ T427] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 35.627977][ T402] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.694397][ T402] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 36.560212][ T447] Zero length message leads to an empty skb [ 36.858851][ T456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 37.102359][ T458] netlink: 'syz.4.36': attribute type 4 has an invalid length. [ 37.183520][ T467] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 37.260105][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 38.099645][ T464] ====================================================== [ 38.099645][ T464] WARNING: the mand mount option is being deprecated and [ 38.099645][ T464] will be removed in v5.15! [ 38.099645][ T464] ====================================================== [ 38.206697][ T464] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.218087][ T464] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 38.450132][ T494] overlayfs: missing 'lowerdir' [ 39.877926][ T503] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 40.287955][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 40.287968][ T24] audit: type=1400 audit(2000000002.360:164): avc: denied { ioctl } for pid=500 comm="syz.2.46" path="socket:[16002]" dev="sockfs" ino=16002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.325475][ T484] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 40.453140][ T517] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 40.465513][ T24] audit: type=1400 audit(2000000002.740:165): avc: denied { ioctl } for pid=516 comm="syz.4.49" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.010665][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 41.611559][ T538] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 42.575081][ T567] overlayfs: missing 'lowerdir' [ 43.702594][ T559] overlayfs: missing 'lowerdir' [ 43.960744][ T575] overlayfs: missing 'lowerdir' [ 44.000563][ T583] sched: RT throttling activated [ 44.573431][ T24] audit: type=1400 audit(2000000002.960:166): avc: denied { append } for pid=586 comm="syz.0.66" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.789966][ T596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 47.695985][ T625] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 48.160692][ T631] overlayfs: missing 'lowerdir' [ 49.381714][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 49.953139][ T673] overlayfs: missing 'lowerdir' [ 50.297875][ T669] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.316401][ T669] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 52.912718][ T697] overlayfs: missing 'lowerdir' [ 53.256037][ T714] overlayfs: missing 'lowerdir' [ 55.058641][ T727] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 55.652793][ T716] overlayfs: missing 'lowerdir' [ 55.664733][ T715] overlayfs: missing 'lowerdir' [ 55.808341][ T738] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 56.095873][ T736] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.199985][ T736] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 56.661706][ T754] netlink: 'syz.2.101': attribute type 4 has an invalid length. [ 58.931032][ T24] audit: type=1400 audit(2000000002.420:167): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.216311][ T802] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 59.424051][ T823] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 62.780862][ T862] overlayfs: missing 'lowerdir' [ 63.999616][ T871] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 64.777269][ T897] overlayfs: missing 'lowerdir' [ 66.627652][ T914] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 69.996249][ T956] overlayfs: missing 'lowerdir' [ 70.022582][ T24] audit: type=1400 audit(2000000003.410:168): avc: denied { write } for pid=955 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.051885][ T951] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 71.544632][ T942] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.605562][ T942] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 71.832675][ T24] audit: type=1400 audit(2000000005.220:169): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 80.051704][ T1045] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 81.057307][ T24] audit: type=1400 audit(2000000009.090:170): avc: denied { mount } for pid=1051 comm="syz.1.167" name="/" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.262686][ T1039] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.422003][ T24] audit: type=1400 audit(2000000009.460:171): avc: denied { search } for pid=1063 comm="syz.0.169" name="/" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.501969][ T1039] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 81.595520][ T24] audit: type=1400 audit(2000000009.480:172): avc: denied { write } for pid=1063 comm="syz.0.169" name="usb_gadget" dev="configfs" ino=14097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.980858][ T24] audit: type=1400 audit(2000000009.480:173): avc: denied { add_name } for pid=1063 comm="syz.0.169" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.013081][ T24] audit: type=1400 audit(2000000009.480:174): avc: denied { create } for pid=1063 comm="syz.0.169" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 82.124312][ T24] audit: type=1400 audit(2000000009.520:175): avc: denied { write } for pid=1063 comm="syz.0.169" name="idVendor" dev="configfs" ino=19651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 82.239499][ T24] audit: type=1400 audit(2000000009.520:176): avc: denied { open } for pid=1063 comm="syz.0.169" path="/27/config/usb_gadget/g1/idVendor" dev="configfs" ino=19651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 82.273055][ T24] audit: type=1400 audit(2000000009.680:177): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.293122][ T24] audit: type=1400 audit(2000000009.810:178): avc: denied { mount } for pid=1038 comm="syz.3.166" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.509236][ T24] audit: type=1400 audit(2000000010.520:179): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.111839][ T1081] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 83.196138][ T1085] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 85.126313][ T1110] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 85.186742][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.228869][ T1078] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.251096][ T1078] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 85.312211][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 85.320540][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.329673][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 85.338322][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.347384][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.356679][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.361856][ T1108] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.402944][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.450826][ T1108] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 85.488867][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.331275][ T1164] overlayfs: missing 'lowerdir' [ 91.570153][ T24] audit: type=1400 audit(2000000019.600:180): avc: denied { mount } for pid=1161 comm="syz.3.187" name="/" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 92.078883][ T1183] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 93.051566][ T1207] overlayfs: missing 'lowerdir' [ 93.080898][ T1199] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 93.969234][ T24] audit: type=1400 audit(2000000021.870:181): avc: denied { write } for pid=1208 comm="syz.4.195" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 94.979802][ T1217] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.907135][ T1197] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.069886][ T1197] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 96.155771][ T1241] overlayfs: missing 'lowerdir' [ 96.649751][ T1251] overlayfs: missing 'lowerdir' [ 96.674057][ T1229] overlayfs: missing 'lowerdir' [ 97.234862][ T1256] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 97.621767][ T1254] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.847767][ T1254] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 100.023887][ T1288] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.813424][ T1315] overlayfs: missing 'lowerdir' [ 103.996925][ T1323] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 104.234284][ T1350] overlayfs: missing 'lowerdir' [ 108.020749][ T1381] overlayfs: missing 'lowerdir' [ 114.360629][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.434668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 114.443162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.468399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 114.494767][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.505961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.514680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.536367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.550809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.009051][ T1417] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 119.766280][ T1466] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.820628][ T1466] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 119.870088][ T1470] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 119.956592][ T1472] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 121.251509][ T1465] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.412408][ T1465] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 122.208111][ T1458] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.259244][ T1495] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 122.274967][ T1458] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 122.482464][ T1507] overlayfs: missing 'lowerdir' [ 124.481450][ T1531] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 127.108513][ T1555] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 128.328767][ T1574] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 128.574138][ T1552] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.836741][ T1552] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 129.080542][ T1568] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.312757][ T1568] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 130.171683][ T1617] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 131.542916][ T1620] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 132.009767][ T1608] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.139719][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.160716][ T1608] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 133.184978][ T1611] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.319014][ T1611] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 133.406322][ T1643] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 134.100660][ T1642] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.148075][ T1642] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 135.847277][ T1678] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 135.928876][ T1684] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 136.338817][ T1672] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.670290][ T1672] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 137.701526][ T1675] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.748233][ T1675] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 137.880487][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.897496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 137.937241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.945615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 137.953873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.962211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.970681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.979584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.988611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.718055][ T1715] overlayfs: missing 'lowerdir' [ 139.519171][ T1721] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 140.791550][ T1734] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 141.211585][ T1752] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 141.244529][ T1719] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.261107][ T1719] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 141.450057][ T1725] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.570097][ T1725] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 141.602096][ T1748] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.759871][ T1748] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 141.996615][ T1779] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 142.919612][ T1796] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 142.934323][ T1798] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 143.091317][ T1775] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.112997][ T1775] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 143.659955][ T1793] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.687682][ T1793] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 149.926057][ T1868] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.943583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 149.954764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.964637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 149.974374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.983049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.992432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.000761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.008993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.071513][ T1855] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 150.088238][ T1858] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 152.181429][ T1893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 153.134067][ T1903] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 154.811810][ T1889] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.841724][ T1927] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 154.856678][ T1926] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 154.876261][ T1889] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 155.326753][ T1941] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 155.451699][ T1917] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.483603][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 155.525019][ T1955] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 155.709764][ T1946] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.734932][ T1946] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 155.841615][ T1970] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 157.980957][ T1964] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.000708][ T1964] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 158.136335][ T24] audit: type=1400 audit(2000000086.170:182): avc: denied { create } for pid=1986 comm="syz.2.341" dev="anon_inodefs" ino=21873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.172224][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.186235][ T24] audit: type=1400 audit(2000000086.220:183): avc: denied { ioctl } for pid=1986 comm="syz.2.341" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21873 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.465584][ T1996] overlayfs: missing 'lowerdir' [ 160.236395][ T2011] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 161.292096][ T2013] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 161.435719][ T2006] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.539400][ T2006] EXT4-fs: failed to create workqueue [ 162.555871][ T2019] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 162.568407][ T2006] EXT4-fs (loop1): mount failed [ 164.395081][ T2058] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 164.425157][ T2054] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 164.637041][ T2067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 164.676057][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 166.179907][ T2058] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.201741][ T2058] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 169.360736][ T2100] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.390470][ T2110] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 169.481295][ T2100] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 169.630805][ T2126] overlayfs: missing 'lowerdir' [ 170.172101][ T2110] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.223108][ T2110] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 170.314069][ T2134] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 171.203013][ T2130] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.249777][ T2130] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 172.391987][ T2160] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 173.244794][ T2160] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.294854][ T2160] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 174.333554][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 175.574960][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 176.994930][ T2200] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 177.296589][ T2214] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 177.438044][ T2208] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 177.451553][ T2217] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 177.668397][ T2203] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 178.261433][ T2230] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 178.297333][ T2213] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.344372][ T2213] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 178.491776][ T2197] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.670453][ T2197] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 178.796074][ T2253] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 178.819584][ T2226] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.845787][ T2226] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 179.303154][ T2249] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.454278][ T2249] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 179.604948][ T2271] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 179.689693][ T2281] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 179.859419][ T2261] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.984652][ T2261] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 180.497118][ T2294] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 181.646324][ T2306] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 181.939838][ T2288] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.421374][ T2310] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 182.440504][ T2288] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 182.821501][ T2310] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.030356][ T2310] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 184.678368][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 184.701807][ T2337] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 184.745387][ T2340] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 184.903960][ T2345] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.981543][ T2360] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 185.045335][ T2344] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.058404][ T2345] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 185.363958][ T2344] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 186.089857][ T2375] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 188.956441][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 189.834852][ T2355] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.850786][ T2355] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 190.236758][ T2392] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 190.249422][ T2402] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 190.440848][ T2421] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 190.463662][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.522080][ T2400] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.565043][ T2392] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.596282][ T2400] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 190.634519][ T2392] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 192.272762][ T2436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.335540][ T2441] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 192.533453][ T2440] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.600244][ T2449] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 192.622173][ T2440] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 192.777648][ T2459] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 193.041626][ T2447] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.060429][ T2447] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 193.329022][ T2453] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.540308][ T2470] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 193.611854][ T2453] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 193.847975][ T2483] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 193.899923][ T2465] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.036563][ T2465] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 195.091311][ T2513] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 195.270541][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.320946][ T2523] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 195.847656][ T2521] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.870535][ T2521] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 196.132946][ T2536] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 197.340709][ T2536] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.628540][ T2536] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 200.753968][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 202.761099][ T2596] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 205.256442][ T2632] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 207.657968][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 207.800657][ T2666] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 207.910139][ T2632] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.016661][ T2632] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 209.366997][ T2678] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 209.479543][ T2690] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 209.671305][ T2695] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 209.971641][ T2690] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.984125][ T2705] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 210.000597][ T2690] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 210.060355][ T2676] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.080838][ T2676] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 210.261206][ T2700] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.287680][ T2700] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 210.322821][ T2695] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.380069][ T2695] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 216.410991][ T2781] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 217.051095][ T2777] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 217.392114][ T2771] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.407778][ T2791] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 217.422898][ T2771] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 217.706711][ T2773] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.793301][ T2773] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 217.849631][ T2782] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.911088][ T2782] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 218.234779][ T2826] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 219.614802][ T2837] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 219.628096][ T2839] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 220.624472][ T2832] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.861899][ T2832] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 222.873571][ T2882] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 223.334054][ T2903] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 223.348957][ T2905] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 223.363957][ T2878] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.408003][ T2878] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 223.823426][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.934072][ T2897] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.993234][ T2897] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 224.235324][ T2926] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.453175][ T2926] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 226.601105][ T2959] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 227.846090][ T2965] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 228.011245][ T2973] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 228.232974][ T2984] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 228.272186][ T2950] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.290930][ T2950] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 228.942528][ T2997] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.971099][ T2997] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 229.000205][ T2961] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.043506][ T2961] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 229.047422][ T2981] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.119633][ T2981] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 229.733316][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 231.069373][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.075364][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.123902][ T3070] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 233.152671][ T3075] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 233.639995][ T3068] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.689834][ T3068] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 234.863211][ T3124] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 236.999627][ T3118] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.985305][ T3118] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 242.091837][ T3171] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 242.117468][ T3170] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 242.563478][ T3192] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 244.614056][ T3187] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.629639][ T3214] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 244.655258][ T3187] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 245.249321][ T3208] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.089685][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.549382][ T3208] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 250.279135][ T3244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.312199][ T3262] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 252.549559][ T3269] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 253.848328][ T3260] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.003497][ T3260] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 255.340959][ T3265] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.474999][ T3265] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 257.466213][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.488284][ T3302] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 260.729160][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 265.125041][ T24] audit: type=1400 audit(2000000193.110:184): avc: denied { block_suspend } for pid=3375 comm="syz.1.590" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.444411][ T24] audit: type=1400 audit(2000000193.110:185): avc: denied { read } for pid=3375 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.509813][ T3374] exfat: Deprecated parameter 'namecase' [ 265.520609][ T3374] exfat: Deprecated parameter 'namecase' [ 267.719889][ T3389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.733483][ T3374] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 269.126970][ T3392] F2FS-fs (loop3): invalid crc value [ 269.153928][ T3392] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 269.212652][ T3392] F2FS-fs (loop3): f2fs_remove_inode_page: inconsistent i_blocks, ino:3, iblocks:35342701763231744 [ 269.637940][ T24] audit: type=1400 audit(2000000197.670:186): avc: denied { name_bind } for pid=3407 comm="syz.3.600" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 269.692173][ T24] audit: type=1400 audit(2000000197.720:187): avc: denied { setopt } for pid=3407 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.719197][ T24] audit: type=1400 audit(2000000197.720:188): avc: denied { setopt } for pid=3407 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.731956][ T3409] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 269.793467][ T3396] F2FS-fs (loop0): invalid crc value [ 269.833740][ T3396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.919081][ T3396] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.963544][ T3396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 270.023185][ T3403] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.056043][ T3403] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 270.330131][ T3406] F2FS-fs (loop2): Unrecognized mount option "checkpoint=merge" or missing value [ 271.921768][ T24] audit: type=1400 audit(2000000199.960:189): avc: denied { ioctl } for pid=3467 comm="syz.3.613" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.950064][ T3459] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 272.269097][ T287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.299442][ T3479] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 272.409059][ T331] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 272.539078][ T287] usb 4-1: device descriptor read/64, error -71 [ 272.555835][ T3484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 272.573132][ T3484] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.600669][ T24] audit: type=1400 audit(2000000200.640:190): avc: denied { read write open } for pid=3483 comm="syz.4.619" path="/119/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.626529][ T24] audit: type=1400 audit(2000000200.640:191): avc: denied { setattr } for pid=3483 comm="syz.4.619" path="/119/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.649648][ T24] audit: type=1400 audit(2000000200.670:192): avc: denied { create } for pid=3483 comm="syz.4.619" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 272.669201][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 272.670275][ T24] audit: type=1400 audit(2000000200.690:193): avc: denied { append } for pid=3483 comm="syz.4.619" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.709905][ T24] audit: type=1400 audit(2000000200.750:194): avc: denied { ioctl } for pid=3483 comm="syz.4.619" path="/119/file1/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.736365][ T3466] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.778106][ T3466] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 272.799151][ T331] usb 1-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 272.809549][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 246, changing to 11 [ 272.834357][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 58815, setting to 1024 [ 272.911954][ T24] audit: type=1400 audit(2000000200.950:195): avc: denied { read } for pid=3501 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.939170][ T287] usb 4-1: device descriptor read/64, error -71 [ 272.961219][ T3507] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 272.973567][ T24] audit: type=1400 audit(2000000201.010:196): avc: denied { connect } for pid=3501 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.994792][ T24] audit: type=1400 audit(2000000201.010:197): avc: denied { ioctl } for pid=3501 comm="syz.2.624" path="socket:[25490]" dev="sockfs" ino=25490 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.009415][ T331] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 273.028689][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.036844][ T331] usb 1-1: Product: syz [ 273.041256][ T331] usb 1-1: Manufacturer: syz [ 273.045876][ T331] usb 1-1: SerialNumber: syz [ 273.069140][ T3473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 273.209083][ T287] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 273.232171][ T3504] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.260539][ T3504] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 273.339656][ T3473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.374521][ T3473] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.386610][ T3473] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.614: bad orphan inode 131083 [ 273.397183][ T3473] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 273.409306][ T3473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 273.420478][ T3473] bridge0: port 3(vlan2) entered blocking state [ 273.426805][ T3473] bridge0: port 3(vlan2) entered disabled state [ 273.439557][ T3473] device vlan2 entered promiscuous mode [ 273.445149][ T3473] device gretap0 entered promiscuous mode [ 273.451754][ T3473] bridge0: port 3(vlan2) entered blocking state [ 273.458068][ T3473] bridge0: port 3(vlan2) entered forwarding state [ 273.489078][ T287] usb 4-1: device descriptor read/64, error -71 [ 273.555406][ T3513] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 273.567454][ T3513] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 273.576456][ T3513] F2FS-fs (loop1): invalid crc value [ 273.582007][ T3513] F2FS-fs (loop1): invalid crc value [ 273.587439][ T3513] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 273.596490][ T24] audit: type=1400 audit(2000000201.630:198): avc: denied { write } for pid=3512 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.889258][ T287] usb 4-1: device descriptor read/64, error -71 [ 274.297424][ T3539] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007, [ 274.317599][ T3539] ext4 filesystem being mounted at /125/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.413479][ T3549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'. [ 274.422567][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 274.546315][ T287] usb usb4-port1: attempt power cycle [ 274.690424][ T331] usb 1-1: MIDIStreaming interface descriptor not found [ 274.713187][ T331] usb 1-1: USB disconnect, device number 2 [ 274.834397][ T3553] EXT4-fs (loop1): orphan cleanup on readonly fs [ 274.849771][ T3553] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.636: EA inode hash validation failed [ 274.879180][ T3553] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 274.890470][ T3551] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 274.903977][ T3551] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 274.913140][ T3551] F2FS-fs (loop0): invalid crc value [ 274.926164][ T3553] EXT4-fs (loop1): 1 orphan inode deleted [ 274.931010][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.932894][ T3553] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,nogrpid,,errors=continue [ 274.969083][ T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 274.972620][ T3551] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.039599][ T3563] erofs: Unknown parameter 'O [ 275.039599][ T3563] :´ˆᯔÝZÔý•f¤ó000000000000000000030x0000000000000003' [ 275.051799][ T3551] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 275.059115][ T3551] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.300266][ T3563] FAT-fs (loop3): Unrecognized mount option "name=ÖðTFd" or missing value [ 275.312885][ T3567] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 275.336640][ T3571] FAULT_INJECTION: forcing a failure. [ 275.336640][ T3571] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 275.359110][ T3571] CPU: 0 PID: 3571 Comm: syz.0.640 Not tainted syzkaller #0 [ 275.366441][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.376534][ T3571] Call Trace: [ 275.379874][ T3571] __dump_stack+0x21/0x24 [ 275.384224][ T3571] dump_stack_lvl+0x1a7/0x208 [ 275.388922][ T3571] ? show_regs_print_info+0x18/0x18 [ 275.394150][ T3571] dump_stack+0x15/0x1c [ 275.398322][ T3571] should_fail+0x3ab/0x500 [ 275.402768][ T3571] should_fail_alloc_page+0x4f/0x60 [ 275.407984][ T3571] __alloc_pages_nodemask+0x11a/0x640 [ 275.413380][ T3571] ? arch_stack_walk+0xee/0x140 [ 275.418257][ T3571] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 275.423826][ T3571] ? stack_trace_snprint+0xe0/0xe0 [ 275.428954][ T3571] get_zeroed_page+0x19/0x40 [ 275.433563][ T3571] __pud_alloc+0x37/0x1a0 [ 275.437915][ T3571] handle_mm_fault+0x1530/0x1720 [ 275.442873][ T3571] ? can_reuse_spf_vma+0xe0/0xe0 [ 275.447828][ T3571] ? follow_page_mask+0x1c4/0x1150 [ 275.452957][ T3571] __get_user_pages+0xbf8/0x1400 [ 275.457918][ T3571] ? populate_vma_page_range+0xf0/0xf0 [ 275.463394][ T3571] __mm_populate+0x31c/0x420 [ 275.467998][ T3571] ? __get_user_pages+0x1400/0x1400 [ 275.469217][ T287] usb 4-1: device not accepting address 4, error -71 [ 275.473253][ T3571] ? __kasan_check_write+0x14/0x20 [ 275.485084][ T3571] vm_mmap_pgoff+0x23b/0x350 [ 275.489689][ T3571] ? account_locked_vm+0x1a0/0x1a0 [ 275.494856][ T3571] ? ksys_write+0x1fa/0x260 [ 275.499391][ T3571] ksys_mmap_pgoff+0xfd/0x1e0 [ 275.504095][ T3571] __x64_sys_mmap+0xfa/0x110 [ 275.508702][ T3571] do_syscall_64+0x31/0x40 [ 275.513139][ T3571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 275.519052][ T3571] RIP: 0033:0x7f5247bb2e99 [ 275.523480][ T3571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.543103][ T3571] RSP: 002b:00007f524660c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.551554][ T3571] RAX: ffffffffffffffda RBX: 00007f5247e3afa0 RCX: 00007f5247bb2e99 [ 275.559545][ T3571] RDX: 000000000200000c RSI: 0000000000c00000 RDI: 0000200000001000 [ 275.567541][ T3571] RBP: 00007f524660c090 R08: ffffffffffffffff R09: 0000000000000000 [ 275.575531][ T3571] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 275.583524][ T3571] R13: 00007f5247e3b038 R14: 00007f5247e3afa0 R15: 00007fff16ec5ea8 [ 275.669639][ T3572] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.818422][ T3557] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.890309][ T3557] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 275.927332][ T3590] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 275.934730][ T3590] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 275.947580][ T3579] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.986512][ T3590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 275.994570][ T3590] System zones: 1-12 [ 275.999186][ T3590] EXT4-fs (loop0): orphan cleanup on readonly fs [ 276.005745][ T3590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.647: bg 0: block 361: padding at end of block bitmap is not set [ 276.025844][ T3590] EXT4-fs (loop0): Remounting filesystem read-only [ 276.032475][ T3590] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 276.041911][ T3590] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #11: comm syz.0.647: attempt to clear invalid blocks 33619980 len 1 [ 276.055662][ T3590] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.647: invalid indirect mapped block 1811939328 (level 0) [ 276.069827][ T3590] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.647: invalid indirect mapped block 2 (level 2) [ 276.083330][ T3590] EXT4-fs (loop0): 1 truncate cleaned up [ 276.089053][ T3590] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,sysvgroups,discard,errors=remount-ro,mblk_io_submit [ 276.117124][ T3557] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 276.135473][ T3557] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 276.517817][ T3605] FAT-fs (loop3): Directory bread(block 64) failed [ 276.580101][ T3605] FAT-fs (loop3): Directory bread(block 65) failed [ 276.591958][ T3605] FAT-fs (loop3): Directory bread(block 66) failed [ 276.598594][ T3605] FAT-fs (loop3): Directory bread(block 67) failed [ 276.606692][ T3605] FAT-fs (loop3): Directory bread(block 68) failed [ 276.613545][ T3605] FAT-fs (loop3): Directory bread(block 69) failed [ 276.620209][ T3605] FAT-fs (loop3): Directory bread(block 70) failed [ 276.626880][ T3605] FAT-fs (loop3): Directory bread(block 71) failed [ 276.633520][ T3605] FAT-fs (loop3): Directory bread(block 72) failed [ 276.640118][ T3605] FAT-fs (loop3): Directory bread(block 73) failed [ 276.771452][ T3618] EXT4-fs (loop1): Ignoring removed bh option [ 276.789309][ T3618] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.653: corrupted in-inode xattr [ 276.848004][ T3618] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.653: couldn't read orphan inode 15 (err -117) [ 276.860328][ T3618] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue [ 276.908632][ T3618] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz.1.653: Unrecognised inode hash code 4 [ 276.920030][ T3618] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.653: Corrupt directory, running e2fsck is recommended [ 276.933666][ T3621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 276.941352][ T3618] EXT4-fs warning (device loop1): dx_probe:806: inode #2: comm syz.1.653: Unrecognised inode hash code 4 [ 276.943075][ T3621] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.954600][ T3618] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.653: Corrupt directory, running e2fsck is recommended [ 278.141268][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 278.141281][ T24] audit: type=1400 audit(2000000206.180:219): avc: denied { create } for pid=3636 comm="syz.0.659" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.178926][ T24] audit: type=1400 audit(2000000206.210:220): avc: denied { read write } for pid=3636 comm="syz.0.659" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.512274][ T24] audit: type=1400 audit(2000000206.210:221): avc: denied { open } for pid=3636 comm="syz.0.659" path="/130/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.535550][ T24] audit: type=1400 audit(2000000206.210:222): avc: denied { ioctl } for pid=3636 comm="syz.0.659" path="/130/file0" dev="tmpfs" ino=772 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.569504][ T24] audit: type=1400 audit(2000000207.530:223): avc: denied { unlink } for pid=281 comm="syz-executor" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.645072][ T287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 279.749008][ T3651] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 279.873039][ T24] audit: type=1400 audit(2000000207.910:224): avc: denied { mounton } for pid=3658 comm="syz.3.662" path="/130/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 280.022887][ T3647] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.059213][ T287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.063422][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,norecovery,delalloc,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue [ 280.144985][ T3647] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 280.239141][ T287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.248227][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.269067][ T287] usb 2-1: Product: syz [ 280.273256][ T287] usb 2-1: Manufacturer: syz [ 280.277845][ T287] usb 2-1: SerialNumber: syz [ 280.449702][ T24] audit: type=1400 audit(2000000208.490:225): avc: denied { remount } for pid=3667 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 280.553961][ T24] audit: type=1400 audit(2000000208.590:226): avc: denied { read } for pid=3674 comm="syz.4.664" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.578122][ T24] audit: type=1400 audit(2000000208.590:227): avc: denied { open } for pid=3674 comm="syz.4.664" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.602253][ T24] audit: type=1400 audit(2000000208.590:228): avc: denied { ioctl } for pid=3674 comm="syz.4.664" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.745509][ T3708] FAULT_INJECTION: forcing a failure. [ 282.745509][ T3708] name failslab, interval 1, probability 0, space 0, times 1 [ 282.762560][ T3708] CPU: 0 PID: 3708 Comm: syz.0.676 Not tainted syzkaller #0 [ 282.769881][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 282.779975][ T3708] Call Trace: [ 282.783297][ T3708] __dump_stack+0x21/0x24 [ 282.787652][ T3708] dump_stack_lvl+0x1a7/0x208 [ 282.792477][ T3708] ? thaw_kernel_threads+0x220/0x220 [ 282.797794][ T3708] ? show_regs_print_info+0x18/0x18 [ 282.803020][ T3708] ? _raw_spin_lock+0x94/0xf0 [ 282.807725][ T3708] ? _raw_spin_trylock_bh+0x150/0x150 [ 282.813120][ T3708] dump_stack+0x15/0x1c [ 282.817304][ T3708] should_fail+0x3ab/0x500 [ 282.821762][ T3708] ? __alloc_file+0x28/0x320 [ 282.826403][ T3708] __should_failslab+0xa4/0xe0 [ 282.831191][ T3708] should_failslab+0x9/0x20 [ 282.835717][ T3708] kmem_cache_alloc+0x3d/0x2d0 [ 282.840498][ T3708] __alloc_file+0x28/0x320 [ 282.844940][ T3708] alloc_empty_file+0x97/0x180 [ 282.849724][ T3708] alloc_file+0x59/0x580 [ 282.853987][ T3708] alloc_file_pseudo+0x180/0x200 [ 282.858957][ T3708] ? alloc_empty_file_noaccount+0x80/0x80 [ 282.864699][ T3708] ? __kasan_check_write+0x14/0x20 [ 282.869829][ T3708] ? clear_nlink+0x8a/0xe0 [ 282.874269][ T3708] __shmem_file_setup+0x1df/0x2b0 [ 282.879340][ T3708] shmem_file_setup+0x2f/0x40 [ 282.884043][ T3708] __se_sys_memfd_create+0x1de/0x3a0 [ 282.889349][ T3708] __x64_sys_memfd_create+0x5b/0x70 [ 282.894571][ T3708] do_syscall_64+0x31/0x40 [ 282.899017][ T3708] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 282.904929][ T3708] RIP: 0033:0x7f5247bb2e99 [ 282.909372][ T3708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.929091][ T3708] RSP: 002b:00007f524660be08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 282.937544][ T3708] RAX: ffffffffffffffda RBX: 00000000000011a3 RCX: 00007f5247bb2e99 [ 282.945545][ T3708] RDX: 00007f524660bee0 RSI: 0000000000000000 RDI: 00007f5247c4908f [ 282.953518][ T3708] RBP: 0000200000001280 R08: 00000000ffffffff R09: 0000000000000000 [ 282.961482][ T3708] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000001200 [ 282.969462][ T3708] R13: 00007f524660bee0 R14: 00007f524660bea0 R15: 0000200000001240 [ 282.999333][ T287] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 283.005905][ T287] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 283.025887][ T287] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 283.553436][ T3702] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 283.599120][ T287] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 283.615061][ T3702] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 283.626370][ T287] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 283.684383][ T3702] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 283.694353][ T3702] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 283.707203][ T3702] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 283.717223][ T3702] EXT4-fs (loop4): orphan cleanup on readonly fs [ 283.724685][ T3702] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.673: bg 0: block 34: padding at end of block bitmap is not set [ 283.739762][ T3702] Quota error (device loop4): write_blk: dquota write failed [ 283.771459][ T287] usb 2-1: USB disconnect, device number 2 [ 283.777653][ T287] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 283.789230][ T3702] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 283.802137][ T3702] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.673: Failed to acquire dquot type 1 [ 283.814271][ T3702] EXT4-fs (loop4): 1 truncate cleaned up [ 283.825775][ T3702] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue [ 284.317180][ T3727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 284.383050][ T24] audit: type=1400 audit(2000000212.420:229): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 284.801683][ T3725] capability: warning: `syz.0.679' uses deprecated v2 capabilities in a way that may be insecure [ 284.949795][ T3702] EXT4-fs error (device loop4): ext4_lookup:1830: inode #15: comm syz.4.673: iget: bad i_size value: 360287970189639690 [ 284.982766][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 285.000965][ T24] audit: type=1400 audit(2000000212.830:230): avc: denied { mounton } for pid=3724 comm="syz.0.679" path="/proc/536/task" dev="proc" ino=27984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 286.531983][ T24] audit: type=1400 audit(2000000214.570:231): avc: denied { create } for pid=3753 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 286.802294][ T633] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 287.119506][ T633] usb 2-1: Using ep0 maxpacket: 8 [ 287.660045][ T24] audit: type=1400 audit(2000000215.700:232): avc: denied { mounton } for pid=3769 comm="syz.4.690" path="/130/file0" dev="tmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 287.759191][ T633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.766175][ T633] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 287.775514][ T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.784532][ T633] usb 2-1: config 0 descriptor?? [ 287.790637][ T24] audit: type=1400 audit(2000000215.830:233): avc: denied { mounton } for pid=3769 comm="syz.4.690" path="/130/file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 288.204266][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 288.269970][ T3755] udc-core: couldn't find an available UDC or it's busy [ 288.286898][ T3755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.328412][ T3755] udc-core: couldn't find an available UDC or it's busy [ 288.369120][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 288.376056][ T3755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.489167][ T633] usbhid 2-1:0.0: can't add hid device: -71 [ 288.495205][ T633] usbhid: probe of 2-1:0.0 failed with error -71 [ 288.533068][ T633] usb 2-1: USB disconnect, device number 3 [ 288.629037][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 288.698414][ T24] audit: type=1400 audit(2000000216.730:234): avc: denied { connect } for pid=3791 comm="syz.3.697" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.750570][ T24] audit: type=1400 audit(2000000216.790:235): avc: denied { create } for pid=3793 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.865803][ T24] audit: type=1400 audit(2000000216.900:236): avc: denied { getopt } for pid=3793 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.939143][ T25] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 288.948227][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.976898][ T25] usb 1-1: Product: syz [ 288.986984][ T25] usb 1-1: Manufacturer: syz [ 288.997074][ T25] usb 1-1: SerialNumber: syz [ 289.469543][ T25] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 289.483213][ T25] usb 1-1: USB disconnect, device number 3 [ 289.899821][ T3811] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 289.909984][ T3813] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.703: inode has both inline data and extents flags [ 289.919446][ T3811] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.933892][ T3813] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.703: couldn't read orphan inode 15 (err -117) [ 289.964249][ T3813] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 291.519112][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.535452][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): syztnl0: link becomes ready [ 292.670554][ T3834] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.708: bg 0: block 127: padding at end of block bitmap is not set [ 292.720382][ T3834] EXT4-fs (loop1): Remounting filesystem read-only [ 292.747961][ T3834] EXT4-fs error (device loop1) in ext4_evict_inode:260: Readonly filesystem [ 292.784445][ T3834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.708: iget: bad extra_isize 58 (inode size 256) [ 292.849286][ T3834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.708: error while reading EA inode 11 err=-117 [ 292.970681][ T3834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.708: iget: bad extra_isize 58 (inode size 256) [ 292.989291][ T3834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.708: error while reading EA inode 11 err=-117 [ 293.019811][ T3834] EXT4-fs (loop1): 1 orphan inode deleted [ 293.989892][ T3834] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,grpjquota=, [ 294.457003][ T3857] udc-core: couldn't find an available UDC or it's busy [ 294.479138][ T3857] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 294.500204][ T3857] tipc: Enabling of bearer rejected, media not registered [ 294.529257][ T3866] tipc: Enabling of bearer rejected, media not registered [ 294.549554][ T24] audit: type=1400 audit(2000000222.590:237): avc: denied { append } for pid=3855 comm="syz.1.714" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.642230][ T3869] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 294.678270][ T3869] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.729053][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.971172][ T3861] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 294.989780][ T3861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 294.999085][ T5] usb 2-1: device descriptor read/64, error -71 [ 295.027954][ T3861] F2FS-fs (loop0): invalid crc value [ 295.042156][ T3861] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 295.102638][ T3861] F2FS-fs (loop0): Start checkpoint disabled! [ 295.135421][ T3861] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 295.153437][ T3861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 295.192451][ T24] audit: type=1400 audit(2000000223.230:238): avc: denied { mounton } for pid=3859 comm="syz.0.709" path="/147/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.216636][ T399] attempt to access beyond end of device [ 295.216636][ T399] loop0: rw=2049, want=45112, limit=40427 [ 295.235941][ T24] audit: type=1400 audit(2000000223.230:239): avc: denied { setattr } for pid=3859 comm="syz.0.709" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.277958][ T24] audit: type=1400 audit(2000000223.240:240): avc: denied { remove_name } for pid=3859 comm="syz.0.709" name="#1" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.315462][ T24] audit: type=1400 audit(2000000223.240:241): avc: denied { rename } for pid=3859 comm="syz.0.709" name="#1" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.343562][ T24] audit: type=1400 audit(2000000223.240:242): avc: denied { unlink } for pid=3859 comm="syz.0.709" name="#1" dev="loop0" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.399055][ T5] usb 2-1: device descriptor read/64, error -71 [ 295.407632][ T24] audit: type=1400 audit(2000000223.250:243): avc: denied { unlink } for pid=3859 comm="syz.0.709" name="#2" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.429429][ T633] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 295.449112][ T24] audit: type=1400 audit(2000000223.290:244): avc: denied { remove_name } for pid=3859 comm="syz.0.709" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.472228][ T24] audit: type=1400 audit(2000000223.290:245): avc: denied { rename } for pid=3859 comm="syz.0.709" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.669094][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 295.691938][ T24] audit: type=1400 audit(2000000223.730:246): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 296.010097][ T3888] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.641737][ T3877] F2FS-fs (loop2): Zoned block device path is missing [ 296.660579][ T3877] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 296.675965][ T3877] F2FS-fs (loop2): invalid crc value [ 296.683156][ T3877] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.723638][ T3877] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 296.730868][ T3877] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 296.880197][ T633] usb 5-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 297.136396][ T633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.279101][ T5] usb 2-1: device descriptor read/64, error -71 [ 297.299261][ T633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.314977][ T633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.327014][ T3905] FAT-fs (loop0): Directory bread(block 64) failed [ 297.333717][ T3905] FAT-fs (loop0): Directory bread(block 65) failed [ 297.340319][ T633] usb 5-1: Product: syz [ 297.341335][ T3905] FAT-fs (loop0): Directory bread(block 66) failed [ 297.344934][ T633] usb 5-1: Manufacturer: syz [ 297.352022][ T3905] FAT-fs (loop0): Directory bread(block 67) failed [ 297.356320][ T633] usb 5-1: SerialNumber: syz [ 297.368062][ T3905] FAT-fs (loop0): Directory bread(block 68) failed [ 297.374796][ T3905] FAT-fs (loop0): Directory bread(block 69) failed [ 297.381702][ T3905] FAT-fs (loop0): Directory bread(block 70) failed [ 297.384316][ T3908] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.726: inode has both inline data and extents flags [ 297.388340][ T3905] FAT-fs (loop0): Directory bread(block 71) failed [ 297.408602][ T633] usb 5-1: selecting invalid altsetting 1 [ 297.414618][ T3905] FAT-fs (loop0): Directory bread(block 72) failed [ 297.420699][ T3908] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.726: couldn't read orphan inode 15 (err -117) [ 297.422624][ T3905] FAT-fs (loop0): Directory bread(block 73) failed [ 297.434404][ T3908] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 297.483354][ T3908] syz.2.726 (pid 3908) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 297.719413][ T3919] fuse: blksize only supported for fuseblk [ 297.855745][ T3875] udc-core: couldn't find an available UDC or it's busy [ 297.867660][ T3875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.060952][ T3928] udc-core: couldn't find an available UDC or it's busy [ 298.068366][ T3928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.199269][ T633] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 298.207502][ T633] cdc_ncm 5-1:1.0: bind() failure [ 298.224908][ T633] cdc_ncm 5-1:1.1: bind() failure [ 298.293651][ T3937] FAULT_INJECTION: forcing a failure. [ 298.293651][ T3937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.307474][ T3937] CPU: 0 PID: 3937 Comm: syz.0.736 Not tainted syzkaller #0 [ 298.314790][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 298.324872][ T3937] Call Trace: [ 298.328198][ T3937] __dump_stack+0x21/0x24 [ 298.332554][ T3937] dump_stack_lvl+0x1a7/0x208 [ 298.337254][ T3937] ? show_regs_print_info+0x18/0x18 [ 298.342475][ T3937] ? kasan_set_track+0x5b/0x70 [ 298.347263][ T3937] ? kasan_set_free_info+0x23/0x40 [ 298.352391][ T3937] ? ____kasan_slab_free+0x125/0x160 [ 298.357700][ T3937] ? __kasan_slab_free+0x11/0x20 [ 298.362666][ T3937] ? kmem_cache_free+0x100/0x2d0 [ 298.367650][ T3937] dump_stack+0x15/0x1c [ 298.371825][ T3937] should_fail+0x3ab/0x500 [ 298.376378][ T3937] should_fail_alloc_page+0x4f/0x60 [ 298.381600][ T3937] __alloc_pages_nodemask+0x11a/0x640 [ 298.386990][ T3937] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 298.392565][ T3937] ? memset+0x35/0x40 [ 298.396568][ T3937] ? __kasan_check_write+0x14/0x20 [ 298.401699][ T3937] ? mutex_lock+0x92/0xf0 [ 298.406045][ T3937] ? mutex_trylock+0xb0/0xb0 [ 298.410658][ T3937] ? fsnotify_perm+0x66/0x4a0 [ 298.415354][ T3937] __get_free_pages+0xe/0x30 [ 298.419961][ T3937] configfs_write_file+0x9b/0x3d0 [ 298.425007][ T3937] ? configfs_read_file+0x400/0x400 [ 298.430225][ T3937] vfs_write+0x344/0xd70 [ 298.434486][ T3937] ? kernel_write+0x3c0/0x3c0 [ 298.439183][ T3937] ? __kasan_check_write+0x14/0x20 [ 298.444312][ T3937] ? mutex_lock+0x92/0xf0 [ 298.448675][ T3937] ? mutex_trylock+0xb0/0xb0 [ 298.453290][ T3937] ? __fget_files+0x2e1/0x340 [ 298.458108][ T3937] ? __fdget_pos+0x2d2/0x380 [ 298.462731][ T3937] ? ksys_write+0x70/0x260 [ 298.467186][ T3937] ksys_write+0x14a/0x260 [ 298.471559][ T3937] ? __ia32_sys_read+0x90/0x90 [ 298.476357][ T3937] ? debug_smp_processor_id+0x17/0x20 [ 298.481749][ T3937] __x64_sys_write+0x7b/0x90 [ 298.486402][ T3937] do_syscall_64+0x31/0x40 [ 298.490834][ T3937] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 298.496749][ T3937] RIP: 0033:0x7f5247bb2e99 [ 298.501219][ T3937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.520849][ T3937] RSP: 002b:00007f524660c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.529327][ T3937] RAX: ffffffffffffffda RBX: 00007f5247e3afa0 RCX: 00007f5247bb2e99 [ 298.537316][ T3937] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000004 [ 298.545312][ T3937] RBP: 00007f524660c090 R08: 0000000000000000 R09: 0000000000000000 [ 298.553310][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.561358][ T3937] R13: 00007f5247e3b038 R14: 00007f5247e3afa0 R15: 00007fff16ec5ea8 [ 298.685882][ T3934] process 'syz.3.734' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 298.704474][ T3942] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 298.979074][ T633] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 299.259106][ T633] usb 4-1: device descriptor read/64, error -71 [ 299.260237][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.359026][ T387] usb 5-1: USB disconnect, device number 2 [ 299.576490][ T3959] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.880011][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 299.880026][ T24] audit: type=1326 audit(2000000227.920:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 299.915825][ T24] audit: type=1326 audit(2000000227.920:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 299.940735][ T633] usb 4-1: device descriptor read/64, error -71 [ 299.947332][ T24] audit: type=1326 audit(2000000227.920:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 299.981640][ T24] audit: type=1326 audit(2000000227.920:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.006843][ T24] audit: type=1326 audit(2000000227.920:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.033730][ T24] audit: type=1326 audit(2000000227.920:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.070938][ T24] audit: type=1326 audit(2000000227.920:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.096244][ T24] audit: type=1326 audit(2000000227.920:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.121486][ T24] audit: type=1326 audit(2000000227.920:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.166229][ T24] audit: type=1326 audit(2000000227.920:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.0.746" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5247bb2e99 code=0x7ffc0000 [ 300.284730][ T3977] overlayfs: filesystem on './file0' not supported [ 300.379112][ T633] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 300.419160][ T387] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 300.533422][ T3987] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 300.541701][ T3987] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 300.551365][ T3987] F2FS-fs (loop0): invalid crc value [ 300.558099][ T3987] F2FS-fs (loop0): Found nat_bits in checkpoint [ 300.587688][ T3987] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 300.594831][ T3987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 300.659102][ T633] usb 4-1: device descriptor read/64, error -71 [ 300.697408][ T281] attempt to access beyond end of device [ 300.697408][ T281] loop0: rw=2049, want=40968, limit=40427 [ 300.746441][ T3997] tipc: Started in network mode [ 300.752800][ T3997] tipc: Own node identity 1000001, cluster identity 4711 [ 300.760187][ T3997] tipc: 32-bit node address hash set to 1000001 [ 300.766735][ T3998] tipc: Enabled bearer , priority 1 [ 300.779229][ T387] usb 5-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 300.801466][ T387] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.812442][ T387] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.825735][ T3998] tipc: Resetting bearer [ 300.833406][ T3998] tipc: Disabling bearer [ 300.953795][ T4009] EXT4-fs (loop2): Ignoring removed bh option [ 300.962741][ T4009] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.759: invalid indirect mapped block 234881024 (level 0) [ 300.979087][ T387] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.989246][ T4009] EXT4-fs (loop2): Remounting filesystem read-only [ 300.995960][ T4009] EXT4-fs (loop2): 1 truncate cleaned up [ 300.998203][ T387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.009897][ T387] usb 5-1: Product: syz [ 301.014358][ T387] usb 5-1: Manufacturer: syz [ 301.019111][ T387] usb 5-1: SerialNumber: syz [ 301.027078][ T4009] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity, [ 301.059053][ T633] usb 4-1: device descriptor read/64, error -71 [ 301.072436][ T387] cdc_ncm 5-1:1.0: skipping garbage [ 301.078317][ T387] cdc_ncm 5-1:1.0: bind() failure [ 301.100158][ T4009] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.2.759: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 301.139338][ T4009] EXT4-fs (loop2): Remounting filesystem read-only [ 301.179111][ T633] usb usb4-port1: attempt power cycle [ 301.297964][ T3952] capability: warning: `syz.4.741' uses 32-bit capabilities (legacy support in use) [ 301.349916][ T387] usb 5-1: USB disconnect, device number 3 [ 301.773044][ T287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 301.925687][ T4044] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.768: inode has both inline data and extents flags [ 301.968921][ T4044] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.768: couldn't read orphan inode 15 (err -117) [ 301.981694][ T4044] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 302.059115][ T287] usb 3-1: Using ep0 maxpacket: 8 [ 302.259657][ T287] usb 3-1: config 0 interface 0 has no altsetting 0 [ 302.343696][ T287] usb 3-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 302.390459][ T4051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.770'. [ 302.420328][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.527526][ T287] usb 3-1: config 0 descriptor?? [ 302.993883][ T4056] 9pnet: Insufficient options for proto=fd [ 303.000135][ T4056] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.139143][ T3900] ================================================================== [ 303.147304][ T3900] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0 [ 303.154950][ T3900] Read of size 8 at addr ffff88810acef880 by task kworker/u4:9/3900 [ 303.162934][ T3900] [ 303.165283][ T3900] CPU: 0 PID: 3900 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 303.172836][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 303.182918][ T3900] Workqueue: l2tp l2tp_tunnel_del_work [ 303.188404][ T3900] Call Trace: [ 303.191714][ T3900] __dump_stack+0x21/0x24 [ 303.196055][ T3900] dump_stack_lvl+0x1a7/0x208 [ 303.200748][ T3900] ? show_regs_print_info+0x18/0x18 [ 303.205958][ T3900] ? thaw_kernel_threads+0x220/0x220 [ 303.211300][ T3900] print_address_description+0x7f/0x2c0 [ 303.216860][ T3900] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 303.222156][ T3900] kasan_report+0x100/0x140 [ 303.226669][ T3900] ? __switch_to_asm+0x3a/0x60 [ 303.231448][ T3900] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 303.236748][ T3900] __asan_report_load8_noabort+0x14/0x20 [ 303.242402][ T3900] l2tp_tunnel_del_work+0xcd/0x3d0 [ 303.247531][ T3900] process_one_work+0x6fd/0xbc0 [ 303.252412][ T3900] worker_thread+0xa8e/0x13c0 [ 303.257116][ T3900] ? __kthread_parkme+0xb3/0x1b0 [ 303.262074][ T3900] kthread+0x324/0x3b0 [ 303.266162][ T3900] ? worker_clr_flags+0x190/0x190 [ 303.271246][ T3900] ? kthread_blkcg+0xd0/0xd0 [ 303.275883][ T3900] ret_from_fork+0x1f/0x30 [ 303.280306][ T3900] [ 303.282645][ T3900] Allocated by task 4058: [ 303.286990][ T3900] __kasan_kmalloc+0xd4/0x100 [ 303.291683][ T3900] __kmalloc+0x19f/0x330 [ 303.295940][ T3900] l2tp_session_create+0x39/0xb60 [ 303.300977][ T3900] pppol2tp_connect+0xbf5/0x1640 [ 303.306010][ T3900] __sys_connect+0x3ce/0x450 [ 303.310611][ T3900] __x64_sys_connect+0x7a/0x90 [ 303.315384][ T3900] do_syscall_64+0x31/0x40 [ 303.319809][ T3900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 303.325705][ T3900] [ 303.328051][ T3900] Freed by task 4058: [ 303.332062][ T3900] kasan_set_track+0x4a/0x70 [ 303.336670][ T3900] kasan_set_free_info+0x23/0x40 [ 303.341624][ T3900] ____kasan_slab_free+0x125/0x160 [ 303.346748][ T3900] __kasan_slab_free+0x11/0x20 [ 303.351525][ T3900] slab_free_freelist_hook+0xc5/0x190 [ 303.356914][ T3900] kfree+0xc0/0x270 [ 303.360735][ T3900] l2tp_session_put+0xb2/0x1a0 [ 303.365514][ T3900] pppol2tp_ioctl+0x748/0x960 [ 303.370460][ T3900] pppox_ioctl+0x1e4/0x320 [ 303.374892][ T3900] sock_do_ioctl+0xda/0x380 [ 303.379407][ T3900] sock_ioctl+0x472/0x740 [ 303.383786][ T3900] __se_sys_ioctl+0x121/0x1a0 [ 303.388468][ T3900] __x64_sys_ioctl+0x7b/0x90 [ 303.393072][ T3900] do_syscall_64+0x31/0x40 [ 303.397510][ T3900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 303.403408][ T3900] [ 303.405752][ T3900] The buggy address belongs to the object at ffff88810acef800 [ 303.405752][ T3900] which belongs to the cache kmalloc-512 of size 512 [ 303.419817][ T3900] The buggy address is located 128 bytes inside of [ 303.419817][ T3900] 512-byte region [ffff88810acef800, ffff88810acefa00) [ 303.433096][ T3900] The buggy address belongs to the page: [ 303.438766][ T3900] page:ffffea00042b3b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810aced400 pfn:0x10acec [ 303.450321][ T3900] head:ffffea00042b3b00 order:2 compound_mapcount:0 compound_pincount:0 [ 303.458659][ T3900] flags: 0x4000000000010200(slab|head) [ 303.464147][ T3900] raw: 4000000000010200 ffffea00042dda00 0000000200000002 ffff888100043080 [ 303.472763][ T3900] raw: ffff88810aced400 000000008010000f 00000001ffffffff 0000000000000000 [ 303.481357][ T3900] page dumped because: kasan: bad access detected [ 303.487788][ T3900] page_owner tracks the page as allocated [ 303.493546][ T3900] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 23711691056, free_ts 23701239423 [ 303.512578][ T3900] prep_new_page+0x176/0x190 [ 303.517184][ T3900] get_page_from_freelist+0x225f/0x23f0 [ 303.522826][ T3900] __alloc_pages_nodemask+0x29a/0x640 [ 303.528214][ T3900] new_slab+0x84/0x3f0 [ 303.532331][ T3900] ___slab_alloc+0x2f8/0x4c0 [ 303.536974][ T3900] __slab_alloc+0x63/0xa0 [ 303.541315][ T3900] __kmalloc_track_caller+0x1e4/0x310 [ 303.546700][ T3900] __alloc_skb+0xdc/0x520 [ 303.551044][ T3900] netlink_sendmsg+0x693/0xb70 [ 303.555820][ T3900] __sys_sendto+0x467/0x620 [ 303.560347][ T3900] __x64_sys_sendto+0xe5/0x100 [ 303.565160][ T3900] do_syscall_64+0x31/0x40 [ 303.569594][ T3900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 303.575492][ T3900] page last free stack trace: [ 303.580182][ T3900] __free_pages_ok+0x80b/0x830 [ 303.584959][ T3900] __free_pages+0xd8/0x390 [ 303.589389][ T3900] __free_slab+0xcf/0x190 [ 303.593728][ T3900] unfreeze_partials+0x150/0x180 [ 303.598678][ T3900] put_cpu_partial+0xc1/0x180 [ 303.603364][ T3900] __slab_free+0x2c9/0x3a0 [ 303.607831][ T3900] ___cache_free+0x10e/0x130 [ 303.612432][ T3900] qlink_free+0x50/0x90 [ 303.616818][ T3900] qlist_free_all+0x5f/0xb0 [ 303.621331][ T3900] kasan_quarantine_reduce+0x14a/0x160 [ 303.626796][ T3900] __kasan_slab_alloc+0x2f/0xe0 [ 303.631654][ T3900] slab_post_alloc_hook+0x5d/0x2f0 [ 303.636771][ T3900] __kmalloc_track_caller+0x176/0x310 [ 303.642150][ T3900] kvasprintf+0xe3/0x1a0 [ 303.646404][ T3900] kvasprintf_const+0xf2/0x240 [ 303.651175][ T3900] kobject_set_name_vargs+0x61/0x110 [ 303.656470][ T3900] [ 303.658812][ T3900] Memory state around the buggy address: [ 303.664459][ T3900] ffff88810acef780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.672536][ T3900] ffff88810acef800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.680614][ T3900] >ffff88810acef880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.688686][ T3900] ^ [ 303.692767][ T3900] ffff88810acef900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.700893][ T3900] ffff88810acef980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.709075][ T3900] ================================================================== [ 303.717170][ T3900] Disabling lock debugging due to kernel taint [ 303.730733][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x2 [ 303.737885][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x6 [ 303.744930][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x0 [ 303.752324][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x0 [ 303.759550][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x0 [ 303.766511][ T3900] ------------[ cut here ]------------ [ 303.766598][ T287] wacom 0003:056A:0057.0001: unknown main item tag 0x0 [ 303.775572][ T4059] ------------[ cut here ]------------ [ 303.779233][ T287] wacom 0003:056A:0057.0001: collection stack underflow [ 303.791497][ T331] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 303.791501][ T3900] refcount_t: underflow; use-after-free. [ 303.791813][ T3900] WARNING: CPU: 0 PID: 3900 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 303.799078][ T287] wacom 0003:056A:0057.0001: item 0 4 0 12 parsing failed [ 303.815553][ T3900] Modules linked in: [ 303.844133][ T287] wacom 0003:056A:0057.0001: parse failed [ 303.854455][ T287] wacom: probe of 0003:056A:0057.0001 failed with error -22 [ 303.873827][ T4059] WARNING: CPU: 0 PID: 4059 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 303.878587][ T3900] [ 303.884681][ T4059] Modules linked in: [ 303.890439][ T3900] CPU: 1 PID: 3900 Comm: kworker/u4:9 Tainted: G B syzkaller #0 [ 303.963076][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 303.974097][ T4059] CPU: 1 PID: 4059 Comm: syz.4.774 Tainted: G B syzkaller #0 [ 303.985311][ T287] usb 3-1: USB disconnect, device number 2 [ 304.131769][ T3900] Workqueue: l2tp l2tp_tunnel_del_work [ 304.142761][ T3900] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 304.151885][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 304.162264][ T3900] Code: 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 0f 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40 85 e8 60 ca 3a 02 <0f> 0b eb a7 e8 57 89 26 ff c6 05 92 75 82 04 01 48 c7 c7 60 48 40 [ 304.184815][ T4059] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 304.195389][ T3900] RSP: 0018:ffffc90000f17c58 EFLAGS: 00010246 [ 304.199146][ T4059] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 304.201856][ T3900] RAX: a9eb5e68a175eb00 RBX: 0000000000000003 RCX: ffff8881187e2780 [ 304.222286][ T4059] RSP: 0018:ffffc900012d7c40 EFLAGS: 00010293 [ 304.235503][ T4059] RAX: ffffffff842ec3a7 RBX: ffff88810f90c000 RCX: ffff888117f9cf00 [ 304.243846][ T4059] RDX: 0000000000000000 RSI: 000000001c3e42a0 RDI: 000000000c04eb7d [ 304.249152][ T3900] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 304.252549][ T4059] RBP: ffffc900012d7c60 R08: ffff88810f90c083 R09: 1ffff11021f21810 [ 304.259983][ T3900] RBP: ffffc90000f17c68 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 304.268724][ T4059] R10: dffffc0000000000 R11: ffffed1021f21811 R12: dffffc0000000000 [ 304.279325][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.284630][ T4059] R13: dffffc0000000000 R14: 000000001c3e42a0 R15: ffff88810acef800 [ 304.299073][ T3900] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: ffff8881267d6020 [ 304.302724][ T4059] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 304.310110][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.328028][ T4059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.334997][ T4059] CR2: 00002000000d6030 CR3: 000000012609e000 CR4: 00000000003526b0 [ 304.339114][ T3900] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 304.343825][ T4059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.352564][ T3900] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 304.359923][ T4059] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.376403][ T4059] Call Trace: [ 304.379252][ T3900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.380236][ T4059] pppol2tp_release+0x150/0x2b0 [ 304.386406][ T3900] CR2: 000020000013a030 CR3: 00000001172b0000 CR4: 00000000003526a0 [ 304.386418][ T3900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.386425][ T3900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.386436][ T3900] Call Trace: [ 304.392217][ T4059] sock_close+0xb8/0x200 [ 304.409132][ T3900] l2tp_session_put+0xcb/0x1a0 [ 304.416136][ T4059] ? sock_mmap+0xa0/0xa0 [ 304.418625][ T3900] l2tp_session_delete+0x3a9/0x4a0 [ 304.418670][ T3900] l2tp_tunnel_del_work+0x180/0x3d0 [ 304.423488][ T4059] __fput+0x2dc/0x730 [ 304.427803][ T3900] process_one_work+0x6fd/0xbc0 [ 304.432544][ T4059] ? _raw_spin_lock+0x94/0xf0 [ 304.439371][ T3900] worker_thread+0xa8e/0x13c0 [ 304.443085][ T4059] ____fput+0x15/0x20 [ 304.446395][ T3900] ? __kthread_parkme+0xb3/0x1b0 [ 304.446432][ T3900] kthread+0x324/0x3b0 [ 304.451798][ T4059] task_work_run+0x127/0x190 [ 304.466287][ T3900] ? worker_clr_flags+0x190/0x190 [ 304.470329][ T4059] do_exit+0xa7c/0x24e0 [ 304.473769][ T3900] ? kthread_blkcg+0xd0/0xd0 [ 304.473814][ T3900] ret_from_fork+0x1f/0x30 [ 304.478452][ T4059] ? __kasan_check_write+0x14/0x20 [ 304.493769][ T3900] ---[ end trace 720a78046b11463c ]--- [ 304.497999][ T4059] ? switch_fpu_return+0x19c/0x330 [ 304.512739][ T4059] ? put_task_struct+0x90/0x90 [ 304.517582][ T4059] ? fpu__clear_all+0x20/0x20 [ 304.519413][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=0991, bcdDevice= 0.40 [ 304.523109][ T4059] ? __kasan_check_read+0x11/0x20 [ 304.536578][ T4059] __x64_sys_exit+0x40/0x40 [ 304.539156][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.541632][ T4059] do_syscall_64+0x31/0x40 [ 304.549216][ T331] usb 2-1: Product: syz [ 304.554158][ T4059] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 304.569026][ T331] usb 2-1: Manufacturer: syz [ 304.574864][ T4059] RIP: 0033:0x7fa4e67fbe99 [ 304.579487][ T4059] Code: Unable to access opcode bytes at RIP 0x7fa4e67fbe6f. [ 304.584932][ T331] usb 2-1: SerialNumber: syz [ 304.587083][ T4059] RSP: 002b:00007fa4e5254fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 304.600354][ T4059] RAX: ffffffffffffffda RBX: 00007fa4e6a83fa0 RCX: 00007fa4e67fbe99 [ 304.608435][ T4059] RDX: 00007fa4e52559c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.616851][ T4059] RBP: 00007fa4e6891eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.625340][ T4059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.633664][ T4059] R13: 00007fa4e6a84038 R14: 00007fa4e6a83fa0 R15: 00007ffe20e14f18 [ 304.641837][ T4059] ---[ end trace 720a78046b11463d ]--- [ 304.883793][ T4063] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 304.892904][ T4063] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.913884][ T4063] udc-core: couldn't find an available UDC or it's busy [ 304.921010][ T4063] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.029250][ T331] usb 2-1: 0:1 : does not exist [ 305.036400][ T331] usb 2-1: USB disconnect, device number 6 [ 305.239724][ T2073] udevd[2073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory