last executing test programs: 2.351781351s ago: executing program 0 (id=30): r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x104}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 2.351016212s ago: executing program 0 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x2000001}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @rand_addr=0x64010100}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40020}, 0x4000050) 2.342897262s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x4) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000280)='7', 0x1) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(0x0, 0xb, 0x1, 0x0, r1, 0x403) 1.991625168s ago: executing program 0 (id=35): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x8201) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)) sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f00000012c0)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt\x00', 0x438001, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001340)=0x4091) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x10106, 0x2, 0x0) 1.559992201s ago: executing program 0 (id=42): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400000010"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=@can, 0x80) 1.415782336s ago: executing program 0 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2) 1.415698156s ago: executing program 32 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2) 1.187682669s ago: executing program 1 (id=62): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180), 0xfe, 0x259, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1'}, 0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.187624369s ago: executing program 1 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0xfffffff4, 0x4) 1.071696211s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./mnt\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) mount(&(0x7f0000001000)=@filename='127.0.0.1:/test\x00', &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='nfs\x00', 0x0, &(0x7f00000010c0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 1.071586131s ago: executing program 2 (id=69): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000002540)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$cgroup_pid(r1, &(0x7f0000002580), 0xb375) 1.039852664s ago: executing program 2 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x1f, 0xaa, 0xc8, r2}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.031644005s ago: executing program 3 (id=71): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/4093, 0xffd}], 0x1, 0x4e, 0xfc000000) 983.98154ms ago: executing program 2 (id=72): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000380)={'veth0_to_bond\x00', @remote}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x200, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}}, 0x0) 983.68293ms ago: executing program 3 (id=73): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x3}, @sack_perm], 0x8) 961.787272ms ago: executing program 2 (id=74): capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200000, 0x200000, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x8, 0x1, 0x4000, 0xffffffffffffffff, 0x800}, 0x50) 961.583562ms ago: executing program 3 (id=75): r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='.\x00', 0x0, 0x153) vmsplice(r0, &(0x7f0000003540)=[{&(0x7f0000000f80)="11", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xa) 951.693593ms ago: executing program 3 (id=76): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x181c42, 0x81) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 901.302768ms ago: executing program 5 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="1c0001000700aaaaaaaaaa1180", 0xd) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 900.061428ms ago: executing program 2 (id=77): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @remote, 0x1}, 0x10) 832.008965ms ago: executing program 5 (id=78): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x4000000, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="020f0000100000000200000000000000070005000000000002"], 0x80}}, 0x20000000) 831.861085ms ago: executing program 5 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768"], 0x40}}, 0x0) 831.726385ms ago: executing program 5 (id=80): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000193c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @remote, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x3}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffff00], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x2e}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 831.616255ms ago: executing program 5 (id=81): openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x481, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x242, 0x0) 445.568845ms ago: executing program 4 (id=84): getresuid(&(0x7f0000000740), 0x0, 0x0) 441.143585ms ago: executing program 4 (id=85): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000440)) 390.25908ms ago: executing program 4 (id=86): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffff81e00e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffff50e223fc5f2c84a88108000befabbb33ef4d", 0x58}], 0x1) 327.905846ms ago: executing program 4 (id=87): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000003c0)='./file1\x00', 0x804800, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x30, 0x1213, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001cc0)='./file7/file0\x00', 0x0) 270.084232ms ago: executing program 1 (id=88): r0 = open(&(0x7f0000000500)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000540)=""/36, 0x24) getdents(r0, &(0x7f0000000580)=""/184, 0xb8) 233.756906ms ago: executing program 5 (id=89): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4, &(0x7f0000000540), 0x1, 0x76a, &(0x7f0000000740)="$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") chdir(&(0x7f0000000ec0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000f40)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 232.838676ms ago: executing program 1 (id=90): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4) 152.012304ms ago: executing program 1 (id=91): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003b40), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003ac0)={0x1, &(0x7f0000003b00)=[{0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f0000003b40)=ANY=[], 0x0) 151.829504ms ago: executing program 4 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000300)) 78.693532ms ago: executing program 4 (id=93): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@orlov}, {@barrier}, {@errors_continue}, {@init_itable_val}]}, 0x0, 0x526, &(0x7f0000001300)="$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") 7.890969ms ago: executing program 1 (id=94): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/swaps\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.700279ms ago: executing program 2 (id=95): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettaction={0x24, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c5}, 0x200004d0) 0s ago: executing program 3 (id=96): socket$inet6(0xa, 0x3, 0xff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0xe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x1103, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000007c0)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 21.456983][ T30] audit: type=1400 audit(1794072464.567:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.458072][ T277] cgroup: Unknown subsys name 'net' [ 21.479623][ T30] audit: type=1400 audit(1794072464.567:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.506907][ T30] audit: type=1400 audit(1794072464.597:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.507121][ T277] cgroup: Unknown subsys name 'devices' [ 21.618555][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.624188][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.760518][ T30] audit: type=1400 audit(1794072464.867:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.783707][ T30] audit: type=1400 audit(1794072464.867:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.808486][ T30] audit: type=1400 audit(1794072464.867:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.814214][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.840429][ T30] audit: type=1400 audit(1794072464.947:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.865901][ T30] audit: type=1400 audit(1794072464.947:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.898491][ T30] audit: type=1400 audit(1794072465.007:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.924133][ T30] audit: type=1400 audit(1794072465.007:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.924225][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.933059][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.940181][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.947576][ T285] device bridge_slave_0 entered promiscuous mode [ 22.954252][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.961292][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.968720][ T288] device bridge_slave_0 entered promiscuous mode [ 22.975657][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.982841][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.990175][ T288] device bridge_slave_1 entered promiscuous mode [ 23.003244][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.010304][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.017645][ T285] device bridge_slave_1 entered promiscuous mode [ 23.045696][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.052772][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.060092][ T286] device bridge_slave_0 entered promiscuous mode [ 23.087933][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.094961][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.102391][ T286] device bridge_slave_1 entered promiscuous mode [ 23.130283][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.137448][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.144865][ T287] device bridge_slave_0 entered promiscuous mode [ 23.182973][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.190060][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.197432][ T287] device bridge_slave_1 entered promiscuous mode [ 23.245954][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.253039][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.260415][ T289] device bridge_slave_0 entered promiscuous mode [ 23.268571][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.275606][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.282983][ T289] device bridge_slave_1 entered promiscuous mode [ 23.335705][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.342764][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.350064][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357102][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.385446][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.392502][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.399770][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.407012][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.420835][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.427897][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.435138][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.442166][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.473362][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.480426][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.487747][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.494800][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.515929][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.523413][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.531002][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.538383][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.546052][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.553308][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.560537][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.567814][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.576153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.583801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.619980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.628055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.635823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.644412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.652627][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659644][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.667072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.675152][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.682171][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.689520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.697705][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.704706][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.712129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.720194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.728403][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.735405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.742752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.757270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.765360][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.772383][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.779793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.788026][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.795032][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.820595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.828760][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.835778][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.843258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.851877][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.858927][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.866271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.874243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.882123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.890113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.918270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.926379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.934496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.942749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.950826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.959226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.967588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.974923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.982431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.990771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.999006][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.006016][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.013378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.021763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.029894][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.036916][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.044212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.052516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.060784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.077888][ T288] device veth0_vlan entered promiscuous mode [ 24.084659][ T286] device veth0_vlan entered promiscuous mode [ 24.092973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.101485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.109557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.117708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.125558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.134022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.142395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.150301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.158327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.166103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.174125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.182022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.190072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.198740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.206082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.213577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.221055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.228488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.241000][ T285] device veth0_vlan entered promiscuous mode [ 24.248543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.256992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.271319][ T288] device veth1_macvtap entered promiscuous mode [ 24.288479][ T286] device veth1_macvtap entered promiscuous mode [ 24.295006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.303278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.311541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.319310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.327631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.335719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.343995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.351984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.367749][ T287] device veth0_vlan entered promiscuous mode [ 24.378382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.385807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.393427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.401827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.410282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.418503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.426703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.434985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.443336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.451735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.464649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.472952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.484640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.493030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.503358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.511380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.523486][ T285] device veth1_macvtap entered promiscuous mode [ 24.530425][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.531290][ T289] device veth0_vlan entered promiscuous mode [ 24.544526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.552346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.560358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.570391][ T287] device veth1_macvtap entered promiscuous mode [ 24.581621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.589772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.598080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.613276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.622019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.630498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.650552][ T289] device veth1_macvtap entered promiscuous mode [ 24.659662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.668494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.676938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.685476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.694240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.703150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.721683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.732981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.742030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.750827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.797777][ T318] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 24.829200][ T313] loop2: detected capacity change from 0 to 40427 [ 24.831412][ T327] loop1: detected capacity change from 0 to 128 [ 24.867842][ T327] EXT4-fs (loop1): Unrecognized mount option "subj_role=logon" or missing value [ 24.883388][ T318] loop0: detected capacity change from 0 to 512 [ 24.896939][ T313] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 24.911320][ T313] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 24.942218][ T313] F2FS-fs (loop2): invalid crc value [ 24.957234][ T327] loop1: detected capacity change from 0 to 256 [ 24.977715][ T327] FAT-fs (loop1): Directory bread(block 64) failed [ 24.993270][ T313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.002101][ T327] FAT-fs (loop1): Directory bread(block 65) failed [ 25.015319][ T327] FAT-fs (loop1): Directory bread(block 66) failed [ 25.031365][ T327] FAT-fs (loop1): Directory bread(block 67) failed [ 25.045649][ T327] FAT-fs (loop1): Directory bread(block 68) failed [ 25.056116][ T327] FAT-fs (loop1): Directory bread(block 69) failed [ 25.064780][ T327] FAT-fs (loop1): Directory bread(block 70) failed [ 25.082878][ T313] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.091000][ T313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.103217][ T327] FAT-fs (loop1): Directory bread(block 71) failed [ 25.110439][ T327] FAT-fs (loop1): Directory bread(block 72) failed [ 25.117234][ T327] FAT-fs (loop1): Directory bread(block 73) failed [ 25.236895][ T306] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 25.342833][ T316] attempt to access beyond end of device [ 25.342833][ T316] loop1: rw=1, want=1384, limit=256 [ 25.353908][ T316] attempt to access beyond end of device [ 25.353908][ T316] loop1: rw=1, want=1768, limit=256 [ 25.365300][ T316] attempt to access beyond end of device [ 25.365300][ T316] loop1: rw=1, want=1928, limit=256 [ 25.381096][ T316] attempt to access beyond end of device [ 25.381096][ T316] loop1: rw=1, want=12416, limit=256 [ 25.462109][ T313] attempt to access beyond end of device [ 25.462109][ T313] loop2: rw=2049, want=40432, limit=40427 [ 25.516827][ T306] usb 5-1: device descriptor read/64, error -71 [ 25.577224][ T357] SELinux: failed to load policy [ 25.930399][ T306] usb 5-1: device descriptor read/64, error -71 [ 25.959286][ T381] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.026731][ T381] kvm: emulating exchange as write [ 26.072608][ T384] loop0: detected capacity change from 0 to 256 [ 26.130069][ T384] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 26.190742][ T390] device-mapper: table: 253:0: thin: unknown target type [ 26.197814][ T390] device-mapper: ioctl: error adding target to table [ 26.206860][ T306] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 26.214965][ T393] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 26.243658][ T397] FAULT_INJECTION: forcing a failure. [ 26.243658][ T397] name fail_futex, interval 1, probability 0, space 0, times 1 [ 26.256598][ T397] CPU: 1 PID: 397 Comm: syz.0.32 Not tainted syzkaller #0 [ 26.263718][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 26.273772][ T397] Call Trace: [ 26.277035][ T397] [ 26.279946][ T397] __dump_stack+0x21/0x30 [ 26.284282][ T397] dump_stack_lvl+0x110/0x170 [ 26.288955][ T397] ? show_regs_print_info+0x20/0x20 [ 26.294130][ T397] ? futex_wait+0x5b1/0x8f0 [ 26.298613][ T397] dump_stack+0x15/0x20 [ 26.302762][ T397] should_fail+0x3ab/0x500 [ 26.307156][ T397] get_futex_key+0x6ee/0xb60 [ 26.311747][ T397] ? futex_wait_restart+0x250/0x250 [ 26.316922][ T397] ? __stack_depot_save+0x34/0x480 [ 26.322006][ T397] ? path_openat+0x284f/0x2f80 [ 26.326745][ T397] do_futex+0x1b4f/0x2800 [ 26.331057][ T397] ? kasan_set_track+0x4a/0x70 [ 26.335796][ T397] ? kmem_cache_free+0x100/0x320 [ 26.340709][ T397] ? do_sys_openat2+0x6df/0x7f0 [ 26.345531][ T397] ? x64_sys_call+0x219/0x9a0 [ 26.350180][ T397] ? do_syscall_64+0x4c/0xa0 [ 26.354744][ T397] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.360804][ T397] ? _kstrtoull+0x3bb/0x4c0 [ 26.365288][ T397] ? futex_exit_release+0x1e0/0x1e0 [ 26.370478][ T397] ? kstrtouint_from_user+0x1c4/0x220 [ 26.375826][ T397] ? __kasan_check_write+0x14/0x20 [ 26.380914][ T397] ? proc_fail_nth_write+0x180/0x200 [ 26.386178][ T397] ? security_file_permission+0x79/0xa0 [ 26.391701][ T397] ? file_end_write+0x1b0/0x1b0 [ 26.396525][ T397] ? __kasan_check_write+0x14/0x20 [ 26.401629][ T397] ? mutex_unlock+0x8f/0x230 [ 26.406196][ T397] __se_sys_futex+0x135/0x330 [ 26.410850][ T397] ? __kasan_check_write+0x14/0x20 [ 26.415940][ T397] ? __x64_sys_futex+0x100/0x100 [ 26.420851][ T397] ? ksys_write+0x1fa/0x260 [ 26.425328][ T397] ? __kasan_check_write+0x14/0x20 [ 26.430416][ T397] __x64_sys_futex+0xe5/0x100 [ 26.435070][ T397] x64_sys_call+0x251/0x9a0 [ 26.439546][ T397] do_syscall_64+0x4c/0xa0 [ 26.443936][ T397] ? clear_bhb_loop+0x50/0xa0 [ 26.448622][ T397] ? clear_bhb_loop+0x50/0xa0 [ 26.453286][ T397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.459182][ T397] RIP: 0033:0x7f79509e2b19 [ 26.463669][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.483250][ T397] RSP: 002b:00007f794f43a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.491656][ T397] RAX: ffffffffffffffda RBX: 00007f7950c68fa0 RCX: 00007f79509e2b19 [ 26.499611][ T397] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 26.507583][ T397] RBP: 00007f7950a7ab70 R08: 00002000000000c0 R09: 0000000000000403 [ 26.515550][ T397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.523513][ T397] R13: 00007f7950c69038 R14: 00007f7950c68fa0 R15: 00007ffc08fb19e8 [ 26.531484][ T397] [ 26.558099][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 26.558111][ T30] audit: type=1400 audit(1794072469.667:189): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.558979][ T401] loop3: detected capacity change from 0 to 512 [ 26.597324][ T408] loop0: detected capacity change from 0 to 128 [ 26.617528][ T401] ======================================================= [ 26.617528][ T401] WARNING: The mand mount option has been deprecated and [ 26.617528][ T401] and is ignored by this kernel. Remove the mand [ 26.617528][ T401] option from the mount to silence this warning. [ 26.617528][ T401] ======================================================= [ 26.654286][ T30] audit: type=1400 audit(1794072469.757:190): avc: denied { write } for pid=406 comm="syz.0.35" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.677353][ T30] audit: type=1400 audit(1794072469.757:191): avc: denied { open } for pid=406 comm="syz.0.35" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.701753][ T30] audit: type=1400 audit(1794072469.787:192): avc: denied { ioctl } for pid=406 comm="syz.0.35" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.759378][ T401] EXT4-fs (loop3): Ignoring removed bh option [ 26.765896][ T401] EXT4-fs (loop3): Ignoring removed bh option [ 26.772399][ T30] audit: type=1400 audit(1794072469.867:193): avc: denied { mounton } for pid=406 comm="syz.0.35" path="/11/file0/dev" dev="loop0" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 26.796005][ T401] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.805414][ T30] audit: type=1400 audit(1794072469.867:194): avc: denied { mount } for pid=406 comm="syz.0.35" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.808940][ T306] usb 5-1: device descriptor read/64, error -71 [ 26.830302][ T30] audit: type=1400 audit(1794072469.897:195): avc: denied { mount } for pid=406 comm="syz.0.35" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.882871][ T401] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,init_itable,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 26.897976][ T401] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.917811][ T30] audit: type=1400 audit(1794072470.027:196): avc: denied { append } for pid=398 comm="syz.3.34" path="/9/bus/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.997995][ T30] audit: type=1400 audit(1794072470.087:197): avc: denied { append } for pid=398 comm="syz.3.34" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.008943][ T285] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 27.021711][ T30] audit: type=1400 audit(1794072470.087:198): avc: denied { ioctl } for pid=398 comm="syz.3.34" path="/9/bus/cpuset.effective_cpus" dev="loop3" ino=19 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.031928][ T285] FAT-fs (loop0): Filesystem has been set read-only [ 27.061303][ T285] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 27.069250][ T285] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 27.117042][ T432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 27.212610][ T443] loop3: detected capacity change from 0 to 512 [ 27.254829][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.263085][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.270548][ T438] device bridge_slave_0 entered promiscuous mode [ 27.279746][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.286826][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.292519][ T443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.294266][ T438] device bridge_slave_1 entered promiscuous mode [ 27.305539][ T306] usb 5-1: device descriptor read/64, error -71 [ 27.326961][ T443] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.381606][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.388718][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.395954][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.402986][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.430495][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.438533][ T306] usb usb5-port1: attempt power cycle [ 27.444328][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.452324][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.479652][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.487946][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.495017][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.502890][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.511531][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.516530][ T480] ip_tables: iptables: counters copy to user failed while replacing table [ 27.518593][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.520057][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.552319][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.565672][ T438] device veth0_vlan entered promiscuous mode [ 27.573904][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.583319][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.591801][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.599649][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.613770][ T438] device veth1_macvtap entered promiscuous mode [ 27.628036][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.640403][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.666400][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.718639][ T506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.79'. [ 27.768703][ T45] device bridge_slave_1 left promiscuous mode [ 27.770448][ T511] loop5: detected capacity change from 0 to 512 [ 27.774964][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.789518][ T45] device bridge_slave_0 left promiscuous mode [ 27.795928][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.975804][ T306] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 27.979158][ T511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.012790][ T45] device veth1_macvtap left promiscuous mode [ 28.022102][ T511] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 28.023643][ T45] device veth0_vlan left promiscuous mode [ 28.042820][ T511] EXT4-fs error (device loop5): ext4_do_update_inode:5260: inode #11: comm syz.5.81: corrupted inode contents [ 28.055966][ T511] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #11: comm syz.5.81: mark_inode_dirty error [ 28.067862][ T511] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.81: invalid indirect mapped block 1 (level 1) [ 28.084556][ T511] EXT4-fs error (device loop5): ext4_do_update_inode:5260: inode #11: comm syz.5.81: corrupted inode contents [ 28.097912][ T511] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 28.125463][ T511] EXT4-fs error (device loop5): ext4_do_update_inode:5260: inode #11: comm syz.5.81: corrupted inode contents [ 28.165212][ T511] EXT4-fs error (device loop5): ext4_truncate:4317: inode #11: comm syz.5.81: mark_inode_dirty error [ 28.191067][ T511] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 28.207069][ T511] EXT4-fs (loop5): 1 truncate cleaned up [ 28.212843][ T511] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.276253][ T511] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #2: block 13: comm syz.5.81: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 28.278095][ T529] loop4: detected capacity change from 0 to 8192 [ 28.338731][ T529] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.511378][ T541] EXT4-fs (loop4): Ignoring removed orlov option [ 28.517901][ T306] usb 5-1: device not accepting address 4, error -71 [ 28.581257][ T543] 9pnet: Insufficient options for proto=fd [ 28.590820][ T545] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 28.598035][ T541] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 28.614111][ T548] binder: 547:548 ioctl c0306201 200000000680 returned -14 [ 28.615933][ T541] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 28.628791][ T548] ------------[ cut here ]------------ [ 28.633760][ T536] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.636744][ T548] kernel BUG at drivers/android/binder.c:1330! [ 28.653961][ T548] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 28.660022][ T548] CPU: 1 PID: 548 Comm: syz.3.96 Not tainted syzkaller #0 [ 28.667239][ T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 28.677278][ T548] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 28.683688][ T548] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 28.703276][ T548] RSP: 0018:ffffc90000b07370 EFLAGS: 00010283 [ 28.709330][ T548] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 28.717282][ T548] RDX: ffffc90002bb1000 RSI: 0000000000000037 RDI: 0000000000000038 [ 28.725234][ T548] RBP: ffffc90000b07410 R08: ffff888131aa3d3f R09: ffff888131aa3d30 [ 28.733183][ T548] R10: dffffc0000000000 R11: ffffed10263547a8 R12: dffffc0000000000 [ 28.741136][ T548] R13: ffff888131aa3e28 R14: ffff888131aa3e10 R15: 0000000000000000 [ 28.749087][ T548] FS: 00007ff768d4c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.757998][ T548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.764568][ T548] CR2: 000000110c287e8f CR3: 000000011167b000 CR4: 00000000003506a0 [ 28.772527][ T548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.780485][ T548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.788438][ T548] Call Trace: [ 28.791697][ T548] [ 28.794617][ T548] binder_thread_write+0x1497/0x6fe0 [ 28.799898][ T548] ? __kasan_check_write+0x14/0x20 [ 28.804998][ T548] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 28.811131][ T548] ? finish_task_switch+0x16b/0x790 [ 28.816330][ T548] ? switch_mm_irqs_off+0x2fb/0x960 [ 28.821512][ T548] ? __schedule+0xbd7/0x14a0 [ 28.826096][ T548] ? release_firmware_map_entry+0x190/0x190 [ 28.831972][ T548] ? check_preempt_wakeup+0x725/0xbb0 [ 28.837331][ T548] ? __kasan_check_write+0x14/0x20 [ 28.842426][ T548] ? _copy_from_user+0x95/0xd0 [ 28.847171][ T548] binder_ioctl_write_read+0x203/0x6700 [ 28.852700][ T548] ? schedule_preempt_disabled+0x20/0x20 [ 28.858315][ T548] ? ttwu_do_wakeup+0x100/0x470 [ 28.863149][ T548] ? preempt_schedule_thunk+0x16/0x18 [ 28.868507][ T548] ? try_to_wake_up+0x632/0x1150 [ 28.873427][ T548] ? __kasan_check_write+0x14/0x20 [ 28.878520][ T548] ? wake_up_q+0x106/0x1b0 [ 28.882936][ T548] ? futex_wake+0x64b/0x8f0 [ 28.887425][ T548] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 28.893038][ T548] ? avc_has_extended_perms+0x869/0xed0 [ 28.898566][ T548] ? memcpy+0x56/0x70 [ 28.902529][ T548] ? avc_has_extended_perms+0x9d5/0xed0 [ 28.908055][ T548] ? __kasan_check_write+0x14/0x20 [ 28.913148][ T548] ? avc_flush+0x2b0/0x2b0 [ 28.917543][ T548] ? do_futex+0xdd3/0x2800 [ 28.921941][ T548] ? __kasan_check_write+0x14/0x20 [ 28.927037][ T548] ? _raw_spin_lock+0x94/0xf0 [ 28.931696][ T548] ? _raw_spin_trylock_bh+0x150/0x150 [ 28.937048][ T548] ? _raw_spin_unlock+0x4d/0x70 [ 28.941882][ T548] binder_ioctl+0x36c/0x1df0 [ 28.946452][ T548] ? vma_link+0x1a0/0x1f0 [ 28.950769][ T548] ? ioctl_has_perm+0x1b8/0x4f0 [ 28.955603][ T548] ? binder_poll+0x2d0/0x2d0 [ 28.960170][ T548] ? has_cap_mac_admin+0x370/0x370 [ 28.965266][ T548] ? selinux_file_ioctl+0x3ad/0x4c0 [ 28.970446][ T548] ? selinux_file_alloc_security+0x120/0x120 [ 28.976414][ T548] ? __fget_files+0x2e1/0x340 [ 28.981071][ T548] ? security_file_ioctl+0x84/0xa0 [ 28.986168][ T548] ? binder_poll+0x2d0/0x2d0 [ 28.990737][ T548] __se_sys_ioctl+0x121/0x1a0 [ 28.995397][ T548] __x64_sys_ioctl+0x7b/0x90 [ 28.999975][ T548] x64_sys_call+0x2f/0x9a0 [ 29.004372][ T548] do_syscall_64+0x4c/0xa0 [ 29.008775][ T548] ? clear_bhb_loop+0x50/0xa0 [ 29.013444][ T548] ? clear_bhb_loop+0x50/0xa0 [ 29.018113][ T548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.023992][ T548] RIP: 0033:0x7ff76a2f4b19 [ 29.028391][ T548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.047983][ T548] RSP: 002b:00007ff768d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.056379][ T548] RAX: ffffffffffffffda RBX: 00007ff76a57afa0 RCX: 00007ff76a2f4b19 [ 29.064331][ T548] RDX: 0000200000000780 RSI: 00000000c0306201 RDI: 0000000000000005 [ 29.072281][ T548] RBP: 00007ff76a38cb70 R08: 0000000000000000 R09: 0000000000000000 [ 29.080232][ T548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.088183][ T548] R13: 00007ff76a57b038 R14: 00007ff76a57afa0 R15: 00007ffdd695df38 [ 29.096142][ T548] [ 29.099140][ T548] Modules linked in: [ 29.103427][ T548] ---[ end trace 7b58f48907f75b42 ]--- [ 29.109063][ T536] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.111781][ T541] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 29.120369][ T548] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 29.136359][ T548] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 29.155967][ T548] RSP: 0018:ffffc90000b07370 EFLAGS: 00010283 [ 29.162030][ T548] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 29.169996][ T548] RDX: ffffc90002bb1000 RSI: 0000000000000037 RDI: 0000000000000038 [ 29.177958][ T548] RBP: ffffc90000b07410 R08: ffff888131aa3d3f R09: ffff888131aa3d30 [ 29.185907][ T548] R10: dffffc0000000000 R11: ffffed10263547a8 R12: dffffc0000000000 [ 29.193864][ T548] R13: ffff888131aa3e28 R14: ffff888131aa3e10 R15: 0000000000000000 [ 29.201823][ T548] FS: 00007ff768d4c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.210851][ T548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.217444][ T548] CR2: 000000110c287e8f CR3: 000000011167b000 CR4: 00000000003506a0 [ 29.225402][ T548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.233376][ T548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.241342][ T548] Kernel panic - not syncing: Fatal exception [ 29.247459][ T548] Kernel Offset: disabled [ 29.251795][ T548] Rebooting in 86400 seconds..