last executing test programs: 9.296432893s ago: executing program 4 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x15, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001240)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) 9.174775s ago: executing program 4 (id=59): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="3204c9b2806a7a56f2440f500a995f1d58aca6f5f1906e11673c9bfb98786610d2d7d6bff4b83f08bb432afa6b220edbfb9cb5229e7a028921dc0de207f8133a8a9e35d54e3e063c8e5c9bbdcac7afc0dc4679336c59c62a06c965bbdd74eb1eb34b469450dcf3a34e8bb1711f44647accef9621ca044bba68cf55362f35f390314b4271597a07ca7072cae0af", 0x8d}, {&(0x7f0000000480)="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", 0x1000}], 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000040)=0x7393, 0x93) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000016, 0x11, r2, 0x32816000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_emit_ethernet(0x66, &(0x7f0000001480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002000000303a00fe880000000000000000ac4117000000000001ff02009078000000006000641a00003a00fc020000000000000000000000000009000100000000000000000000000000011b00"/106], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000200)={0x1, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c2781097ae3c54a9911ba73100000000600000002000000000000060400000000002e302500ad8056b7d18fa21f722daeb6f3b8d2b30fe01bf59c5a307c8a7185a278bb4a6eca6e6ca82c4841ac5c4fb6157fe0617ca3c6c38fc4fb18ca"], &(0x7f00000017c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1836000003000000000000000000000004a00900c14c656729aed70057959f030800010000054900100a000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000027c0)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0x3, 0x80, 0x5}, 0x10, 0x1aa8e, r4, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = syz_clone(0xb21e0400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_delroute={0x34, 0x19, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x0, 0x0, 0xff, 0x1, 0x0, 0x3}, [@RTA_OIF={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0xfffffffffffffff7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x1, 0x0) 8.954673023s ago: executing program 4 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000001800010000000000ffdbdf2502180000ff0300080000000008001200ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) 8.924144485s ago: executing program 4 (id=63): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmmsg$unix(r1, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x8}}], 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x180804, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@fowner_eq={'fowner', 0x3d, r3}}]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x9, 0x0, 0x7}, 0x10}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280100001000070000000000fddbdf25ff020000000000000000000000000001ff010d00000000014e20000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000020000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000014c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x5, 0x0, 0x60000}, {0x0, 0x200000, 0x6, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x40}]}, 0x10c}}, 0x40000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) 8.703072088s ago: executing program 4 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010000000000000000000000000000000000240002000200000000000000010000000008"], 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x6000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0x1, 0x0) r4 = syz_clone(0x42200, &(0x7f0000000300)="261498882178d513e120f1ebb994f290e8215464403bb9ae49efed2daa1dc499af643373c14cf886d6089921e4617ea9422fb7800e968c2ba25d013422f1bd38799b6713141d0b5f4d96152e6977971a438772ca8faeef043e004f5a554fd4b53bbcbff45737eb6464f30d97c6cd8edb2db9e3ca4d59d3b3bb4476cc4c33924028414c5b9cb29eb165ff36f9c1400faaf7c9294a580cc7083153b8834311cfe320b56a8f10020f91862b0fafefcb8a0c9c8dc949cdd5a77f3ced92347a90a4b0139939acbee0d5ea7187016d4caa799f40682a772a9378983ab0788508e5a7b89ddc5508ae4740c367e7ca", 0xeb, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000440)="d5917d5eb109cd917313cf82f17df843dd3cd782f93544a367") ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000480)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r5, 0x201, &(0x7f00000001c0)={0x0}) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @random="90f7a6a24ec5", @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "9c10467977229c36"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x88a, 0x39a, 0x71d, 0x4de]}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r7) getpid() ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) 7.504966918s ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x1}) (fail_nth: 3) 7.211244676s ago: executing program 4 (id=71): r0 = syz_open_dev$loop(0x0, 0x0, 0x80100) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000540)=0x8) 7.106428842s ago: executing program 0 (id=73): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000aa000000720a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000029010000009500001c1ca0b2002af0ff985903a82ba5a2a12eedc52d54f14821f4616740ff047b15edea912108279d6a5f5808129f6f0f6392e4cc096a19a198f7036138222798ccc881e5ca682167a3e6e5334288cc5dbc68539eac30acbe9869eed6e9dcb2beb78b325f5951d0cb6397a751fc2cff9cc6c8a6c96fba1f58018bcf780567cf57be8261f04243bd34e3537112463a5317fae9e3db9fd3156d252514e6f83c072c8145e7c796ee02648b8b"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 7.095124493s ago: executing program 0 (id=74): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000940)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nobarrier}, {@barrier}, {@noquota}, {@noacl}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$eJzs3MtvG8UfAPDvOk76/iW/Uh4tLQ0URMUjadIHPXABgdQDSEhwKIJLSNIq1G1QEyRaVRA4lCOqxB3xXyBOcEHABSSucEeVKtRLC1yM1rubuo6dOI1TN/XnI208s7vxzHdnx57dsR1AzxpO/yQR2yPi94gYzLK37zCcPdy8fmny7+uXJpOoVt/8K6ntd+P6pcli1+L/tmWZajXPb2pS7uV3IiYqlenzeX50/uwHo3MXLj4/c3bi9PTp6XPjx48fObxv4Nj40Y7EmcZ1Y8/Hs3t3n3j7yuuTJ6+891NSiizuaIijU4azo9vUU50urMt21KWTcv2W/b/cSjc7E+imvohIm6u/1v8Hoy+2LG4bjFc/62rlgHVVrVary7wqL1SB+1gS3a4B0B3FG316/VssrQYDWzo//Oi6ay9lF0Bp3DfzJdtSjlKW2N/fcH27vYPlD0fEyYV/vkqXWKf7EAAA9b5Lxz/PNRv/leKhLDGQ/vlfPocyFBH/j4idEfFAROyKiAcjavs+HBGPrLL8xhmSpeOf0tU7Dq4N6fjvxXxu6/bxX6nYZagvz+2oxd+fnJqpTB/Kj8nB6N90aiaZHlumjO9f+e2LVtvqx3/pkpZfjAXzelwtN9ygm5qYn1hLzPWufRqxp9ws/iSKaZwkInZHxJ47LGPmmXLLbSvHv4zWT9u26tcRT2ftvxAN8ReSlvOTYy8cGz86ujkq04dGi7NiqZ9/vfxGq/LXFH8HpO2/ten5vxj/ULI5Yu7CxTO1+dq5VT192nXi8h+ft7ymyeNPu1c75/+JHfn5P5C8VVsxkG/4aGJ+/vxYxEDy2tL147eercgX+6fxHzzQvP/vjFtH4tGI2BsR+yLisfSiMK/74xHxREQcWOYg/Pjyk++vEH+T9r87c6Vp/FMrtX/Ut//qE31nfvh25fg3R0Sr9j9SSx3M17Tz+tduBddy7AAAAGCjyD4Dn5RGFtOl0shI9hn+XbG1VJmdm3/21OyH56ayee+h6C8Vd7oG6+6HjuX3hov8eEP+cH7f+Mu+LbX8yORsZarbwUOP29ai/6f+7Ot27YB114F5NGCD0v+hd+n/0JsS/R96mv4PvatZ//+kccXi9yFGvln3CgF3jfd/6F1t9P+F7GHJqADY4Lz/Q+/S/6EntfxufGlNX/m/64l/898zvG1TObpfsfs2EaV7ohrLJ97Nf7fxXqnPnSTKbf+YxSoS1cHswKRrNjXdp6svSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3zXwAAAP//7r3fhw==") ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000280)={0x3fffffffbfb, 0x5, 0x5, 0x7f, 0x1, 0x0, [{0x1f3, 0x8, 0x1, '\x00', 0x1e86}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.334503457s ago: executing program 0 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="cc0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100f62000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004"], 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) fstat(r0, &(0x7f00000004c0)) keyctl$chown(0x4, r1, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x35, 0x37, 0x34, 0x66, 0x38, 0x39, 0x31, 0x38, 0x39, 0xe, 0x64, 0x61, 0x38, 0x37, 0x33, 0x38]}, &(0x7f0000000280)={0x0, "422d74fb20e032ed6057656356fab561bd4228c99fc3c582aefe7b8b5cd257dcf094d2fa570b23c695fa9bddbf5671019834cf3c3fb5d3a612dbc8bfdbf09057", 0x40015}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r4, 0xfffffffffffffffc, 0x1) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000083090000000b11200000b37488dffc"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$HIDIOCGNAME(r6, 0x80404806, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) 4.603643979s ago: executing program 2 (id=87): r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendto$inet6(r0, &(0x7f0000000080)="70fdbef7b983e092df281df5758ca69eb5bf9f9fc37e546dcd1ead5f802d600cc02d2f4c", 0x24, 0x20008000, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4000000}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_POLICE={0x44c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x29, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x81, 0x2, 0x2, 0x3, 0x3, 0x8}, {0x5, 0x1, 0x3, 0xa9, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x80000000, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x80000001, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x17a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x4000002, 0x340d, 0x74f, 0x2, 0x7, 0x8000000d, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x2, 0x20fb, 0x71f, 0x1, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0x13, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x8, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x6, 0x3, 0x85, 0x10001, 0x1, 0x5, 0x1, 0x44, 0x0, 0xf65, 0x1d7, 0xd3, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0xb, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x4, 0x0, 0x9, 0x7, 0x1, 0x4, 0xb46a, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0x0, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x8, 0xfd, 0x4, 0x1, 0x2a, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x1000002, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x41090}, 0xd0) 4.541386702s ago: executing program 2 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0xd3, 0x2, 0xfffffffffffff001}}], 0x38}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000001a40)) syz_mount_image$fuse(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x0, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}, 0x22}, {@obj_type={'obj_type', 0x3d, 'fsconte\"\"\xd9\xe9\x85c\xbb\x89\xd9\xb2\x7f\xcb\xdb=\xabZ/\xc5\xb8;\xe1\x93\x8c2\f\xce\xec\x03\xe8\x15\xdf\xc7\xb0\xa4\x92%;\x0ez*^T\xf8\x92\x19\x80\xd3QY\xf4\xf0\xf8+R\a\x1c\x82.\xaa'}}]}}, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200"], 0x48) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0x2, &(0x7f0000000180)={0x8000, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r10, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000001c0), 0x2000090, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0000d64c0b4eb6efc51f04c5b10690ae5b38070300005d1200000046eeae8528e65a14d68bfe031f8cb890c657bab2da04b07ae9caf4bcde9d9c8e2018656f22684339706a63c776e169b69f0675d220807327d70a71886e8cdcc0aa519c4c37f377e0a0e1a74ae3c0c3c071acb8a2416b89f8e34532a289977e10696f3fa592360d51fe85fd08394a2e66feba01c47730c347d326a6e8bd17"]) 3.982804665s ago: executing program 1 (id=94): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0x4, @remote, 0x1}}, {{0xa, 0x4e24, 0x4, @remote, 0x3}}}, 0x108) 3.979128506s ago: executing program 1 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12) 3.952308987s ago: executing program 1 (id=96): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000200)=""/210, 0xd2, 0x8) pread64(r3, 0x0, 0x0, 0xe5d7) link(0x0, &(0x7f0000000100)='./file1\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={0x80d8}) 3.628135806s ago: executing program 0 (id=97): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x56f, &(0x7f0000001600)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 3.627696906s ago: executing program 2 (id=98): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(0xffffffffffffff9c, 0x0, 0x68cd42, 0x4) openat$cgroup_ro(r2, 0x0, 0x275a, 0xb) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x800, &(0x7f0000000440)) eventfd(0x0) 3.011937193s ago: executing program 3 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./bus\x00', 0x1400037e) 2.867471771s ago: executing program 0 (id=100): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.802821135s ago: executing program 2 (id=101): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) mlock(&(0x7f0000161000/0x4000)=nil, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 2.788859156s ago: executing program 1 (id=102): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x240048c0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) 2.604364906s ago: executing program 32 (id=100): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.039424679s ago: executing program 3 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.709395909s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readahead(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffff7ff8) 389.394866ms ago: executing program 3 (id=106): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad9bed0d52f91b18090987f70e06d038e7ff7fc6e5539b5b43078b089b3b33326d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) 219.866707ms ago: executing program 1 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 166.777789ms ago: executing program 3 (id=108): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@fallback, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 157.112311ms ago: executing program 1 (id=109): r0 = socket$netlink(0x10, 0x3, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") splice(r2, 0x0, r1, 0x0, 0xfabd, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 109.863123ms ago: executing program 3 (id=110): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8f0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x400, &(0x7f0000000400)=ANY=[]) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r4, 0x1d, 0x0, @void}, 0x10) 46.911297ms ago: executing program 2 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 2 (id=112): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 25.111898][ T30] audit: type=1400 audit(1769571493.550:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.115421][ T273] cgroup: Unknown subsys name 'net' [ 25.134866][ T30] audit: type=1400 audit(1769571493.550:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.162356][ T30] audit: type=1400 audit(1769571493.580:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.162813][ T273] cgroup: Unknown subsys name 'devices' [ 25.363290][ T273] cgroup: Unknown subsys name 'hugetlb' [ 25.368911][ T273] cgroup: Unknown subsys name 'rlimit' [ 25.598352][ T30] audit: type=1400 audit(1769571494.030:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.621619][ T30] audit: type=1400 audit(1769571494.030:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.646331][ T30] audit: type=1400 audit(1769571494.030:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.665227][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.678318][ T30] audit: type=1400 audit(1769571494.110:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.703738][ T30] audit: type=1400 audit(1769571494.110:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.727543][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.729967][ T30] audit: type=1400 audit(1769571494.140:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.763547][ T30] audit: type=1400 audit(1769571494.140:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.304818][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.311971][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.319360][ T282] device bridge_slave_0 entered promiscuous mode [ 26.327248][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.334355][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.341988][ T282] device bridge_slave_1 entered promiscuous mode [ 26.355723][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.362831][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.370178][ T281] device bridge_slave_0 entered promiscuous mode [ 26.378230][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.385366][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.392834][ T281] device bridge_slave_1 entered promiscuous mode [ 26.477458][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.484583][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.492115][ T285] device bridge_slave_0 entered promiscuous mode [ 26.515949][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.523141][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.530473][ T285] device bridge_slave_1 entered promiscuous mode [ 26.565199][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.572384][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.579705][ T283] device bridge_slave_0 entered promiscuous mode [ 26.596933][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604015][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.611473][ T283] device bridge_slave_1 entered promiscuous mode [ 26.638903][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.646008][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.653569][ T284] device bridge_slave_0 entered promiscuous mode [ 26.660507][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.667607][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.675090][ T284] device bridge_slave_1 entered promiscuous mode [ 26.698036][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.705118][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.712463][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.719498][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.803843][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.811018][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.818296][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.825355][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.868317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.876452][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.883868][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.891353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.898749][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.917344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.924918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.955209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.964024][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.971078][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.978518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.987105][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.994223][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.001724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.009893][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.016975][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.024507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.032824][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.039856][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.066814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.075047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.083433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.091752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.099615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.118187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.126589][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.133659][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.141179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.149491][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.156567][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.164094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.183999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.191651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.200129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.208448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.216394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.224248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.232581][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.239605][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.247248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.262822][ T281] device veth0_vlan entered promiscuous mode [ 27.269644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.277401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.290772][ T282] device veth0_vlan entered promiscuous mode [ 27.297474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.305828][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.312915][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.320331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.328835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.337083][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.344119][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.351726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.359596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.367742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.376215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.384514][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.391552][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.407494][ T281] device veth1_macvtap entered promiscuous mode [ 27.417136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.424839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.432618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.440103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.448355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.456608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.464808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.472835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.480916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.489147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.499263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.507751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.524213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.532394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.540315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.548631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.557172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.565375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.573494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.581579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.595790][ T285] device veth0_vlan entered promiscuous mode [ 27.605324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.613944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.622389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.630587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.639135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.647297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.655495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.663181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.684450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.692916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.701416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.709973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.718513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.726660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.734910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.742416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.750409][ T285] device veth1_macvtap entered promiscuous mode [ 27.759684][ T283] device veth0_vlan entered promiscuous mode [ 27.770704][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.778734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.787105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.787856][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 27.812281][ T282] device veth1_macvtap entered promiscuous mode [ 27.819205][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.827287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.835862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.844978][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.853299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.861774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.869948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.883293][ T283] device veth1_macvtap entered promiscuous mode [ 27.890787][ T284] device veth0_vlan entered promiscuous mode [ 27.910636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.920846][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.932914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.945428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.954010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.963988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.971631][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.982372][ T284] device veth1_macvtap entered promiscuous mode [ 28.004668][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.013340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.021667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.030024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.048288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.056863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.093963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.103404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.112460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.120789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.129792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.138816][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.148929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.157237][ T340] syz.4.5 (340) used greatest stack depth: 21792 bytes left [ 28.163737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.182216][ T342] Zero length message leads to an empty skb [ 28.419904][ T349] loop3: detected capacity change from 0 to 40427 [ 28.461342][ T349] ======================================================= [ 28.461342][ T349] WARNING: The mand mount option has been deprecated and [ 28.461342][ T349] and is ignored by this kernel. Remove the mand [ 28.461342][ T349] option from the mount to silence this warning. [ 28.461342][ T349] ======================================================= [ 28.516462][ T349] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 28.527673][ T349] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.547347][ T349] F2FS-fs (loop3): invalid crc value [ 28.554506][ T349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.591039][ T61] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.600882][ T349] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.611121][ T349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.661077][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.670436][ T369] loop2: detected capacity change from 0 to 256 [ 28.699659][ T369] FAT-fs (loop2): Directory bread(block 64) failed [ 28.706636][ T369] FAT-fs (loop2): Directory bread(block 65) failed [ 28.713491][ T369] FAT-fs (loop2): Directory bread(block 66) failed [ 28.720088][ T369] FAT-fs (loop2): Directory bread(block 67) failed [ 28.726930][ T369] FAT-fs (loop2): Directory bread(block 68) failed [ 28.733655][ T369] FAT-fs (loop2): Directory bread(block 69) failed [ 28.740199][ T369] FAT-fs (loop2): Directory bread(block 70) failed [ 28.746914][ T369] FAT-fs (loop2): Directory bread(block 71) failed [ 28.753773][ T369] FAT-fs (loop2): Directory bread(block 72) failed [ 28.760414][ T369] FAT-fs (loop2): Directory bread(block 73) failed [ 28.882400][ T61] usb 1-1: Using ep0 maxpacket: 32 [ 28.918220][ T374] xt_policy: neither incoming nor outgoing policy selected [ 28.941604][ T376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 28.950489][ T376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 28.959832][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 28.974860][ T376] bridge0: port 3(vlan2) entered blocking state [ 28.982516][ T376] bridge0: port 3(vlan2) entered disabled state [ 29.145121][ T61] usb 1-1: config 4 has an invalid interface number: 228 but max is 0 [ 29.153798][ T61] usb 1-1: config 4 has no interface number 0 [ 29.160152][ T61] usb 1-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 29.174069][ T61] usb 1-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 29.186535][ T61] usb 1-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 29.223601][ T61] usb 1-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 29.237384][ T26] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.256658][ T26] usb 2-1: config 179 has no interface number 0 [ 29.291975][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 29.354752][ T61] usb 1-1: config 4 interface 228 has no altsetting 0 [ 29.386552][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 29.399069][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.411677][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 29.424694][ T26] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 29.440859][ T26] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 29.886967][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.921090][ T354] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.929175][ T61] usb 1-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 29.939833][ T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.017548][ T61] usb 1-1: Product: syz [ 30.021025][ C0] sched: RT throttling activated [ 30.027754][ T61] usb 1-1: Manufacturer: syz [ 30.033165][ T61] usb 1-1: SerialNumber: syz [ 30.132377][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 30.132406][ T30] audit: type=1400 audit(1769571498.570:179): avc: denied { create } for pid=384 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.233562][ T393] loop3: detected capacity change from 0 to 256 [ 30.288356][ T30] audit: type=1400 audit(1769571498.720:180): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.331114][ T336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.347502][ T30] audit: type=1400 audit(1769571498.780:181): avc: denied { create } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.372330][ T395] loop2: detected capacity change from 0 to 512 [ 30.376579][ T30] audit: type=1400 audit(1769571498.800:182): avc: denied { write } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.389343][ T393] FAT-fs (loop3): Directory bread(block 64) failed [ 30.401711][ T30] audit: type=1400 audit(1769571498.800:183): avc: denied { read } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.406944][ T393] FAT-fs (loop3): Directory bread(block 65) failed [ 30.433150][ T393] FAT-fs (loop3): Directory bread(block 66) failed [ 30.439878][ T393] FAT-fs (loop3): Directory bread(block 67) failed [ 30.445376][ T395] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.19: inode has both inline data and extents flags [ 30.459678][ T393] FAT-fs (loop3): Directory bread(block 68) failed [ 30.460499][ T61] snd-usb-audio: probe of 1-1:4.228 failed with error -12 [ 30.467430][ T393] FAT-fs (loop3): Directory bread(block 69) failed [ 30.480377][ T395] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 30.481985][ T393] FAT-fs (loop3): Directory bread(block 70) failed [ 30.499555][ T393] FAT-fs (loop3): Directory bread(block 71) failed [ 30.506495][ T61] usb 1-1: USB disconnect, device number 2 [ 30.509397][ T395] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.519917][ T393] FAT-fs (loop3): Directory bread(block 72) failed [ 30.531029][ T30] audit: type=1400 audit(1769571498.960:184): avc: denied { write } for pid=394 comm="syz.2.19" path="/3/file0/file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.546015][ T393] FAT-fs (loop3): Directory bread(block 73) failed [ 30.565857][ T30] audit: type=1400 audit(1769571498.960:185): avc: denied { ioctl } for pid=394 comm="syz.2.19" path="/3/file0/file2" dev="loop2" ino=18 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.592459][ T30] audit: type=1400 audit(1769571498.970:186): avc: denied { create } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.612185][ T30] audit: type=1400 audit(1769571498.970:187): avc: denied { connect } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.674197][ T336] usb 5-1: Using ep0 maxpacket: 16 [ 30.679576][ T30] audit: type=1400 audit(1769571499.110:188): avc: denied { create } for pid=394 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.791869][ T403] FAULT_INJECTION: forcing a failure. [ 30.791869][ T403] name failslab, interval 1, probability 0, space 0, times 1 [ 30.804653][ T403] CPU: 1 PID: 403 Comm: syz.2.20 Not tainted syzkaller #0 [ 30.811796][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.821883][ T403] Call Trace: [ 30.825179][ T403] [ 30.828134][ T403] __dump_stack+0x21/0x30 [ 30.832510][ T403] dump_stack_lvl+0x110/0x170 [ 30.837220][ T403] ? show_regs_print_info+0x20/0x20 [ 30.842442][ T403] ? stack_trace_save+0xa6/0xf0 [ 30.847321][ T403] dump_stack+0x15/0x20 [ 30.851276][ T336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.851503][ T403] should_fail+0x3c1/0x510 [ 30.865987][ T403] __should_failslab+0xa4/0xe0 [ 30.867046][ T336] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.870771][ T403] should_failslab+0x9/0x20 [ 30.885497][ T336] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 30.886132][ T403] slab_pre_alloc_hook+0x3b/0xe0 [ 30.903922][ T403] ? audit_log_start+0x3fb/0x8d0 [ 30.908892][ T403] kmem_cache_alloc+0x44/0x260 [ 30.913694][ T403] audit_log_start+0x3fb/0x8d0 [ 30.918499][ T403] ? audit_serial+0x30/0x30 [ 30.923025][ T403] ? slow_avc_audit+0x240/0x240 [ 30.927908][ T403] common_lsm_audit+0xd2/0x1670 [ 30.932789][ T403] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 30.938364][ T403] ? debug_smp_processor_id+0x17/0x20 [ 30.943765][ T403] ? call_rcu+0x5a9/0xf80 [ 30.948117][ T403] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 30.953605][ T403] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 30.959279][ T403] ? rcu_gp_kthread_wake+0x90/0x90 [ 30.964410][ T403] slow_avc_audit+0x1c4/0x240 [ 30.966955][ T407] loop7: detected capacity change from 0 to 7 [ 30.969103][ T403] ? avc_get_hash_stats+0x180/0x180 [ 30.975570][ T336] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.980392][ T403] ? avc_denied+0x132/0x1b0 [ 30.993955][ T403] avc_has_extended_perms+0x945/0xed0 [ 30.999350][ T403] ? __stack_depot_save+0x34/0x480 [ 31.004499][ T403] ? avc_flush+0x2b0/0x2b0 [ 31.008952][ T403] ? kasan_set_track+0x5b/0x70 [ 31.013739][ T403] ? __kasan_slab_free+0x11/0x20 [ 31.018689][ T403] ? slab_free_freelist_hook+0xc2/0x190 [ 31.024252][ T403] ? kmem_cache_free+0x100/0x320 [ 31.029217][ T403] ? putname+0x111/0x160 [ 31.033466][ T403] ? do_sys_openat2+0x6df/0x7f0 [ 31.038331][ T403] ? _kstrtoull+0x3c0/0x4d0 [ 31.042860][ T403] ? kstrtouint_from_user+0x1c4/0x220 [ 31.048243][ T403] ? kstrtol_from_user+0x2a0/0x2a0 [ 31.053367][ T403] ? ioctl_has_perm+0x1b8/0x4f0 [ 31.058231][ T403] ioctl_has_perm+0x3ab/0x4f0 [ 31.062918][ T403] ? security_file_permission+0x79/0xa0 [ 31.068520][ T403] ? has_cap_mac_admin+0x370/0x370 [ 31.073640][ T403] ? vfs_write+0xc72/0xfd0 [ 31.078071][ T403] selinux_file_ioctl+0x3a0/0x4d0 [ 31.083109][ T403] ? selinux_file_alloc_security+0x120/0x120 [ 31.089102][ T403] ? mutex_unlock+0x8f/0x230 [ 31.093849][ T403] ? __mutex_lock_slowpath+0x10/0x10 [ 31.099155][ T403] ? __fget_files+0x2c4/0x320 [ 31.103870][ T403] security_file_ioctl+0x74/0xa0 [ 31.108824][ T403] __se_sys_ioctl+0x53/0x1a0 [ 31.113431][ T403] __x64_sys_ioctl+0x7b/0x90 [ 31.118032][ T403] x64_sys_call+0x2f/0x9a0 [ 31.122458][ T403] do_syscall_64+0x4c/0xa0 [ 31.126890][ T403] ? clear_bhb_loop+0x50/0xa0 [ 31.131665][ T403] ? clear_bhb_loop+0x50/0xa0 [ 31.136362][ T403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.142278][ T403] RIP: 0033:0x7f6f396e7eb9 [ 31.146723][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.166344][ T403] RSP: 002b:00007f6f38144028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.174884][ T403] RAX: ffffffffffffffda RBX: 00007f6f39962fa0 RCX: 00007f6f396e7eb9 [ 31.182878][ T403] RDX: 0000000000000000 RSI: 000000004008556c RDI: 0000000000000003 [ 31.190869][ T403] RBP: 00007f6f38144090 R08: 0000000000000000 R09: 0000000000000000 [ 31.198852][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.206924][ T403] R13: 00007f6f39963038 R14: 00007f6f39962fa0 R15: 00007fffe2b37348 [ 31.214916][ T403] [ 31.591425][ T420] loop1: detected capacity change from 0 to 256 [ 31.628583][ T420] FAT-fs (loop1): Directory bread(block 64) failed [ 31.642947][ T420] FAT-fs (loop1): Directory bread(block 65) failed [ 31.656538][ T420] FAT-fs (loop1): Directory bread(block 66) failed [ 31.670896][ T420] FAT-fs (loop1): Directory bread(block 67) failed [ 31.685545][ T420] FAT-fs (loop1): Directory bread(block 68) failed [ 31.699838][ T420] FAT-fs (loop1): Directory bread(block 69) failed [ 31.733408][ T420] FAT-fs (loop1): Directory bread(block 70) failed [ 31.754158][ T420] FAT-fs (loop1): Directory bread(block 71) failed [ 31.781067][ T420] FAT-fs (loop1): Directory bread(block 72) failed [ 31.834490][ T425] loop4: detected capacity change from 0 to 128 [ 31.847869][ T420] FAT-fs (loop1): Directory bread(block 73) failed [ 32.038024][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.046298][ T336] usb 5-1: SerialNumber: syz [ 32.054455][ T390] usb 2-1: USB disconnect, device number 2 [ 32.071037][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 32.137962][ T336] usb 5-1: can't set config #1, error -71 [ 32.149541][ T336] usb 5-1: USB disconnect, device number 2 [ 32.920186][ T450] loop0: detected capacity change from 0 to 512 [ 33.601957][ T450] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 33.624299][ T464] loop4: detected capacity change from 0 to 512 [ 33.640494][ T450] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.801490][ T450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 33.815506][ T464] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.941241][ T450] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 33.950749][ T450] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 33.959507][ T450] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 34.001191][ T450] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.33: dx entry: limit 65535 != root limit 120 [ 34.015445][ T450] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.33: Corrupt directory, running e2fsck is recommended [ 34.030511][ T464] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,dioread_nolock,delalloc,inode_readahead_blks=0x0000000000200000,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 34.072242][ T464] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.112925][ T475] netlink: 312 bytes leftover after parsing attributes in process `syz.3.42'. [ 34.131778][ T464] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #2: comm syz.4.39: corrupted inode contents [ 34.150400][ T464] EXT4-fs (loop4): Remounting filesystem read-only [ 34.171585][ T464] EXT4-fs error (device loop4): ext4_dirty_inode:6084: inode #2: comm syz.4.39: mark_inode_dirty error [ 34.196683][ T479] loop2: detected capacity change from 0 to 512 [ 34.231247][ T464] EXT4-fs (loop4): Remounting filesystem read-only [ 34.439991][ T487] input: syz0 as /devices/virtual/input/input6 [ 34.600812][ T464] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #2: comm syz.4.39: corrupted inode contents [ 34.991716][ T464] EXT4-fs (loop4): Remounting filesystem read-only [ 35.051988][ T464] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.39: mark_inode_dirty error [ 35.101091][ T383] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 35.129673][ T464] EXT4-fs (loop4): Remounting filesystem read-only [ 35.136900][ T477] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #2: comm syz.4.39: corrupted inode contents [ 35.161261][ T477] EXT4-fs (loop4): Remounting filesystem read-only [ 35.167826][ T477] EXT4-fs error (device loop4): ext4_dirty_inode:6084: inode #2: comm syz.4.39: mark_inode_dirty error [ 35.189689][ T477] EXT4-fs (loop4): Remounting filesystem read-only [ 35.199864][ T477] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #2: comm syz.4.39: corrupted inode contents [ 35.225367][ T475] loop3: detected capacity change from 0 to 40427 [ 35.232047][ T477] EXT4-fs (loop4): Remounting filesystem read-only [ 35.239071][ T483] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #2: comm syz.4.39: corrupted inode contents [ 35.253229][ T483] EXT4-fs (loop4): Remounting filesystem read-only [ 35.271066][ T475] F2FS-fs (loop3): Unrecognized mount option "€wä”öÒ–Cˆ“¦~ž™¼¦ª©×Mhÿ^ù"i¶Ÿ÷ð+Ãuúçb¦ÁáátÍCr†èÅXKšìB‰å¶ ôza6"ä [ 35.271066][ T475] gÕ²8©(˜Ì™irÝùQ/£G¡ˆ«Cæ•ïƒ— [ 35.271066][ T475] #È®7ô2ÅœRshÁþ†ŸpÕ&õÉñ-^Sÿíh7EM½›‹AŠGœ2£ " or missing value [ 35.274837][ T483] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.39: mark_inode_dirty error [ 35.316083][ T483] EXT4-fs (loop4): Remounting filesystem read-only [ 35.322934][ T483] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 35.332167][ T483] EXT4-fs (loop4): Remounting filesystem read-only [ 35.421033][ T383] usb 1-1: Invalid ep0 maxpacket: 16 [ 35.466362][ T503] loop4: detected capacity change from 0 to 512 [ 35.516319][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 35.516333][ T30] audit: type=1400 audit(1769571503.950:255): avc: denied { create } for pid=504 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.541871][ T30] audit: type=1400 audit(1769571503.960:256): avc: denied { setopt } for pid=504 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.561566][ T30] audit: type=1400 audit(1769571503.960:257): avc: denied { ioctl } for pid=504 comm="syz.4.52" path="socket:[16914]" dev="sockfs" ino=16914 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.586731][ T383] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 35.600128][ T30] audit: type=1400 audit(1769571503.960:258): avc: denied { read } for pid=504 comm="syz.4.52" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 35.624453][ T30] audit: type=1400 audit(1769571503.960:259): avc: denied { open } for pid=504 comm="syz.4.52" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 35.649245][ T30] audit: type=1400 audit(1769571503.980:260): avc: denied { read } for pid=504 comm="syz.4.52" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.671876][ T30] audit: type=1400 audit(1769571503.980:261): avc: denied { open } for pid=504 comm="syz.4.52" path="net:[4026532474]" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.682942][ T509] loop4: detected capacity change from 0 to 256 [ 35.695483][ T30] audit: type=1400 audit(1769571503.980:262): avc: denied { create } for pid=504 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.720875][ T30] audit: type=1400 audit(1769571503.980:263): avc: denied { create } for pid=504 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 35.761032][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.792987][ T509] FAT-fs (loop4): Directory bread(block 64) failed [ 35.799573][ T509] FAT-fs (loop4): Directory bread(block 65) failed [ 35.806739][ T509] FAT-fs (loop4): Directory bread(block 66) failed [ 35.814099][ T509] FAT-fs (loop4): Directory bread(block 67) failed [ 35.821133][ T390] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.829381][ T509] FAT-fs (loop4): Directory bread(block 68) failed [ 35.837590][ T509] FAT-fs (loop4): Directory bread(block 69) failed [ 35.844459][ T509] FAT-fs (loop4): Directory bread(block 70) failed [ 35.851346][ T509] FAT-fs (loop4): Directory bread(block 71) failed [ 35.857974][ T509] FAT-fs (loop4): Directory bread(block 72) failed [ 35.864877][ T509] FAT-fs (loop4): Directory bread(block 73) failed [ 35.878454][ T30] audit: type=1400 audit(1769571504.310:264): avc: denied { create } for pid=513 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.901069][ T383] usb 1-1: Invalid ep0 maxpacket: 16 [ 35.907482][ T383] usb usb1-port1: attempt power cycle [ 35.925556][ T516] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 36.021099][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 36.091035][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 36.181109][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.211058][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.221496][ T390] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 36.232909][ T390] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.242847][ T390] usb 3-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 46 [ 36.261235][ T20] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 36.269841][ T20] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 36.280512][ T20] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 36.289731][ T20] usb 2-1: config 128 has no interface number 0 [ 36.296369][ T20] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 36.308324][ T20] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 36.318754][ T20] usb 2-1: config 128 interface 127 has no altsetting 0 [ 36.411071][ T390] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.420348][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.428724][ T390] usb 3-1: Product: syz [ 36.433189][ T390] usb 3-1: Manufacturer: syz [ 36.437871][ T390] usb 3-1: SerialNumber: syz [ 36.481351][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 36.493050][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.501544][ T20] usb 2-1: Product: syz [ 36.505832][ T20] usb 2-1: Manufacturer: syz [ 36.545759][ T20] usb 2-1: SerialNumber: syz [ 36.761077][ T383] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 36.792894][ T501] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.805768][ T501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.845244][ T501] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.851468][ T383] usb 1-1: Invalid ep0 maxpacket: 16 [ 36.862939][ T501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.921245][ T390] usb 3-1: USB disconnect, device number 2 [ 36.954951][ T533] loop3: detected capacity change from 0 to 256 [ 37.034763][ T20] usb 2-1: USB disconnect, device number 3 [ 37.041745][ T383] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 37.131170][ T383] usb 1-1: Invalid ep0 maxpacket: 16 [ 37.137061][ T383] usb usb1-port1: unable to enumerate USB device [ 37.498107][ T541] loop4: detected capacity change from 0 to 512 [ 37.523906][ T549] loop1: detected capacity change from 0 to 256 [ 37.686397][ T541] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 37.710119][ T541] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.521303][ T560] FAULT_INJECTION: forcing a failure. [ 38.521303][ T560] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.541218][ T560] CPU: 0 PID: 560 Comm: syz.0.69 Not tainted syzkaller #0 [ 38.548374][ T560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.558443][ T560] Call Trace: [ 38.561736][ T560] [ 38.564700][ T560] __dump_stack+0x21/0x30 [ 38.569061][ T560] dump_stack_lvl+0x110/0x170 [ 38.573764][ T560] ? show_regs_print_info+0x20/0x20 [ 38.578991][ T560] dump_stack+0x15/0x20 [ 38.583180][ T560] should_fail+0x3c1/0x510 [ 38.587622][ T560] should_fail_usercopy+0x1a/0x20 [ 38.592673][ T560] _copy_to_user+0x20/0x90 [ 38.597114][ T560] simple_read_from_buffer+0xe9/0x160 [ 38.602505][ T560] proc_fail_nth_read+0x1a6/0x220 [ 38.607556][ T560] ? proc_fault_inject_write+0x310/0x310 [ 38.613215][ T560] ? security_file_permission+0x83/0xa0 [ 38.618793][ T560] ? proc_fault_inject_write+0x310/0x310 [ 38.624462][ T560] vfs_read+0x28d/0xc40 [ 38.628796][ T560] ? kernel_read+0x1f0/0x1f0 [ 38.633511][ T560] ? __kasan_check_write+0x14/0x20 [ 38.638659][ T560] ? mutex_lock+0x9b/0x1c0 [ 38.643106][ T560] ? wait_for_completion_killable_timeout+0x10/0x10 [ 38.649732][ T560] ? __fget_files+0x2c4/0x320 [ 38.654454][ T560] ? __fdget_pos+0x2d2/0x380 [ 38.659076][ T560] ? ksys_read+0x71/0x250 [ 38.663436][ T560] ksys_read+0x149/0x250 [ 38.667706][ T560] ? vfs_write+0xfd0/0xfd0 [ 38.672150][ T560] ? debug_smp_processor_id+0x17/0x20 [ 38.677576][ T560] __x64_sys_read+0x7b/0x90 [ 38.682247][ T560] x64_sys_call+0x96d/0x9a0 [ 38.686782][ T560] do_syscall_64+0x4c/0xa0 [ 38.691310][ T560] ? clear_bhb_loop+0x50/0xa0 [ 38.696114][ T560] ? clear_bhb_loop+0x50/0xa0 [ 38.700815][ T560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.706745][ T560] RIP: 0033:0x7fb49017278e [ 38.711196][ T560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.730830][ T560] RSP: 002b:00007fb48ec0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.739310][ T560] RAX: ffffffffffffffda RBX: 00007fb48ec0e6c0 RCX: 00007fb49017278e [ 38.747307][ T560] RDX: 000000000000000f RSI: 00007fb48ec0e0a0 RDI: 0000000000000005 [ 38.755312][ T560] RBP: 00007fb48ec0e090 R08: 0000000000000000 R09: 0000000000000000 [ 38.763307][ T560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.771304][ T560] R13: 00007fb49042d038 R14: 00007fb49042cfa0 R15: 00007ffc099ec848 [ 38.779308][ T560] [ 38.784308][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 38.832554][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 38.865352][ T567] loop1: detected capacity change from 0 to 512 [ 38.871745][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.907508][ T572] loop0: detected capacity change from 0 to 512 [ 38.916159][ T567] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 38.916159][ T567] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 38.916159][ T567] [ 38.944230][ T567] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 38.944230][ T567] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 38.944230][ T567] [ 38.974004][ T572] EXT4-fs (loop0): Ignoring removed oldalloc option [ 38.990173][ T572] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 38.990173][ T572] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 38.990173][ T572] [ 39.002940][ T567] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.028217][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.043948][ T572] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2233: inode #15: comm syz.0.74: corrupted in-inode xattr [ 39.047932][ T567] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 39.082530][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.089190][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 39.091652][ T572] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.74: couldn't read orphan inode 15 (err -117) [ 39.101358][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.133275][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.151250][ T572] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,max_batch_time=0x0000000000000001,init_itable,oldalloc,inode_readahead_blks=0x0000000004000000,nobarrier,barrier,noquota,noacl,,errors=continue. Quota mode: none. [ 39.176353][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.176753][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 39.196341][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.207389][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 39.219197][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.260806][ T563] loop3: detected capacity change from 0 to 40427 [ 39.311380][ T563] F2FS-fs (loop3): Invalid uid value -1 [ 39.313323][ T576] FAULT_INJECTION: forcing a failure. [ 39.313323][ T576] name failslab, interval 1, probability 0, space 0, times 0 [ 39.341807][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.357269][ T572] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2233: inode #15: comm syz.0.74: corrupted in-inode xattr [ 39.369710][ T576] CPU: 1 PID: 576 Comm: syz.1.75 Not tainted syzkaller #0 [ 39.376879][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.386967][ T576] Call Trace: [ 39.390289][ T576] [ 39.393236][ T576] __dump_stack+0x21/0x30 [ 39.397599][ T576] dump_stack_lvl+0x110/0x170 [ 39.402310][ T576] ? show_regs_print_info+0x20/0x20 [ 39.407530][ T576] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.411309][ T20] usb 3-1: config 0 has no interfaces? [ 39.413612][ T576] dump_stack+0x15/0x20 [ 39.423237][ T576] should_fail+0x3c1/0x510 [ 39.427680][ T576] __should_failslab+0xa4/0xe0 [ 39.432464][ T576] should_failslab+0x9/0x20 [ 39.436988][ T576] slab_pre_alloc_hook+0x3b/0xe0 [ 39.441975][ T576] __kmalloc+0x6d/0x2c0 [ 39.446147][ T576] ? kobject_get_path+0xbf/0x1f0 [ 39.449880][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.451157][ T576] kobject_get_path+0xbf/0x1f0 [ 39.451179][ T576] kobject_uevent_env+0x28b/0x700 [ 39.480272][ T576] kobject_uevent+0x1d/0x30 [ 39.484806][ T576] device_del+0xd39/0xeb0 [ 39.489188][ T576] ? kill_device+0xd0/0xd0 [ 39.491991][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.493635][ T576] ? detach_if_pending+0xf4/0x300 [ 39.500146][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 39.505175][ T576] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 39.505203][ T576] device_unregister+0x15/0x40 [ 39.505224][ T576] wakeup_source_sysfs_remove+0x3b/0x40 [ 39.533313][ T576] wakeup_source_unregister+0x170/0x190 [ 39.538911][ T576] ep_remove+0x45f/0x590 [ 39.543194][ T576] eventpoll_release_file+0xcc/0x110 [ 39.548524][ T576] __fput+0x6e5/0x8b0 [ 39.552539][ T576] ____fput+0x15/0x20 [ 39.557003][ T576] task_work_run+0x127/0x190 [ 39.558545][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.561618][ T576] exit_to_user_mode_loop+0xd0/0xe0 [ 39.561639][ T576] exit_to_user_mode_prepare+0x87/0xd0 [ 39.561655][ T576] syscall_exit_to_user_mode+0x1a/0x30 [ 39.561671][ T576] do_syscall_64+0x58/0xa0 [ 39.603070][ T576] ? clear_bhb_loop+0x50/0xa0 [ 39.607780][ T576] ? clear_bhb_loop+0x50/0xa0 [ 39.612902][ T576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.618929][ T576] RIP: 0033:0x7fee8d55feb9 [ 39.623383][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.643016][ T576] RSP: 002b:00007fee8bf9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.651480][ T576] RAX: 0000000000000000 RBX: 00007fee8d7db090 RCX: 00007fee8d55feb9 [ 39.659615][ T576] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 39.662515][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.667619][ T576] RBP: 00007fee8bf9b090 R08: 0000000000000000 R09: 0000000000000000 [ 39.667635][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.690530][ T576] R13: 00007fee8d7db128 R14: 00007fee8d7db090 R15: 00007ffce4fd7838 [ 39.698534][ T576] [ 39.756828][ T581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.77'. [ 39.761367][ T20] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 39.783464][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.797458][ T581] loop0: detected capacity change from 0 to 512 [ 39.799452][ T20] usb 3-1: Product: syz [ 39.814776][ T581] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.821220][ T20] usb 3-1: Manufacturer: syz [ 39.831414][ T581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.77: invalid indirect mapped block 4294967295 (level 0) [ 39.849657][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.859211][ T20] usb 3-1: SerialNumber: syz [ 39.874854][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.878792][ T581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.77: invalid indirect mapped block 4294967295 (level 1) [ 39.891198][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 39.906699][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.909859][ T581] EXT4-fs (loop0): 1 orphan inode deleted [ 39.933739][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 39.943053][ T20] usb 3-1: config 0 descriptor?? [ 39.984753][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 40.004294][ T581] EXT4-fs (loop0): 1 truncate cleaned up [ 40.009973][ T581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.030746][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 40.042563][ T586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1014 sclass=netlink_tcpdiag_socket pid=586 comm=syz.3.79 [ 40.061152][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 40.189148][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 40.228070][ T555] UDC core: couldn't find an available UDC or it's busy: -16 [ 40.241053][ T555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.254218][ T597] loop1: detected capacity change from 0 to 512 [ 40.290649][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 40.311531][ T61] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.332046][ T597] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 40.351213][ T597] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.453243][ T555] UDC core: couldn't find an available UDC or it's busy: -16 [ 40.460689][ T555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.472190][ T597] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000008,dioread_nolock,delalloc,inode_readahead_blks=0x0000000000200000,lazytime,grpjquota=./bus,block_validity,block_validity,errors=remount-ro,. Quota mode: writeback. [ 40.496850][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 40.654748][ T597] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.681199][ T337] usb 3-1: USB disconnect, device number 3 [ 40.701289][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.871944][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.882694][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.82: corrupted inode contents [ 40.889440][ T61] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.907704][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 40.920945][ T61] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.921098][ T597] EXT4-fs error (device loop1): ext4_dirty_inode:6084: inode #2: comm syz.1.82: mark_inode_dirty error [ 40.941888][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 40.948521][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.82: corrupted inode contents [ 40.953398][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.969488][ T61] usb 1-1: config 0 descriptor?? [ 40.982004][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 41.041222][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 41.047868][ T597] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.82: mark_inode_dirty error [ 41.096486][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 41.111029][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 41.198458][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 41.279575][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 41.279589][ T30] audit: type=1400 audit(1769571509.710:299): avc: denied { create } for pid=609 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.365135][ T30] audit: type=1400 audit(1769571509.800:300): avc: denied { ioctl open } for pid=596 comm="syz.1.82" path="/14/file0/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.522968][ T627] SELinux: security_context_str_to_sid(unconfined_uobj_type=fsconteÙé…c»‰Ù²ËÛ=«Z/Ÿ;á“Œ2 ÎìèßÇ°¤’%;z*^Tø’€ÓQYôðø+R‚.ª,) failed for (dev ?, type ?) errno=-22 [ 41.547899][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.82: corrupted inode contents [ 41.564785][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 41.571646][ T597] EXT4-fs error (device loop1): ext4_dirty_inode:6084: inode #2: comm syz.1.82: mark_inode_dirty error [ 41.583151][ T627] fuse: Bad value for 'fd' [ 41.587945][ T30] audit: type=1400 audit(1769571510.020:301): avc: denied { write } for pid=623 comm="syz.2.88" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.611793][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 41.618447][ T597] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.82: corrupted inode contents [ 41.631819][ T597] EXT4-fs (loop1): Remounting filesystem read-only [ 41.638775][ T607] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.82: corrupted inode contents [ 41.643042][ T630] loop7: detected capacity change from 0 to 7 [ 41.653883][ T30] audit: type=1400 audit(1769571510.070:302): avc: denied { ioctl } for pid=629 comm="syz.3.89" path="socket:[17145]" dev="sockfs" ino=17145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.681798][ T607] EXT4-fs (loop1): Remounting filesystem read-only [ 41.701193][ T607] EXT4-fs error (device loop1): add_dirent_to_buf:2216: inode #2: comm syz.1.82: mark_inode_dirty error [ 41.712521][ T30] audit: type=1400 audit(1769571510.070:303): avc: denied { create } for pid=629 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 41.721596][ T607] EXT4-fs (loop1): Remounting filesystem read-only [ 41.742719][ T30] audit: type=1400 audit(1769571510.170:304): avc: denied { getopt } for pid=623 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.801125][ T61] usbhid 1-1:0.0: can't add hid device: -71 [ 41.807229][ T61] usbhid: probe of 1-1:0.0 failed with error -71 [ 41.824561][ T61] usb 1-1: USB disconnect, device number 7 [ 41.863317][ T636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1014 sclass=netlink_tcpdiag_socket pid=636 comm=syz.1.91 [ 41.905945][ T30] audit: type=1400 audit(1769571510.340:305): avc: denied { read } for pid=639 comm="syz.1.93" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.940532][ T30] audit: type=1400 audit(1769571510.340:306): avc: denied { open } for pid=639 comm="syz.1.93" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.981036][ T30] audit: type=1400 audit(1769571510.340:307): avc: denied { ioctl } for pid=639 comm="syz.1.93" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.055894][ T646] loop1: detected capacity change from 0 to 512 [ 42.101761][ T646] EXT4-fs error (device loop1): ext4_fill_super:4833: inode #2: comm syz.1.96: inode has both inline data and extents flags [ 42.115019][ T646] EXT4-fs (loop1): get root inode failed [ 42.120738][ T646] EXT4-fs (loop1): mount failed [ 42.217802][ T30] audit: type=1400 audit(1769571510.650:308): avc: denied { bind } for pid=645 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.297234][ T281] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 43.403685][ T396] device bridge_slave_1 left promiscuous mode [ 43.415837][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.461614][ T396] device bridge_slave_0 left promiscuous mode [ 43.495930][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.539672][ T396] device veth1_macvtap left promiscuous mode [ 43.574798][ T396] device veth0_vlan left promiscuous mode [ 43.926078][ T285] EXT4-fs error: 65 callbacks suppressed [ 43.926097][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 43.991202][ T285] EXT4-fs: 65 callbacks suppressed [ 43.991218][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 44.021159][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.089962][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 44.165548][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.206232][ T659] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.214743][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 44.229465][ T659] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.243505][ T285] EXT4-fs warning: 28 callbacks suppressed [ 44.243518][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 44.269095][ T659] device bridge_slave_0 entered promiscuous mode [ 44.278239][ T659] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.286807][ T659] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.295893][ T659] device bridge_slave_1 entered promiscuous mode [ 44.312548][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.481043][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 45.863154][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.908620][ T687] loop1: detected capacity change from 0 to 256 [ 45.937184][ T689] loop3: detected capacity change from 0 to 128 [ 46.014374][ T285] EXT4-fs (loop4): Remounting filesystem read-only [ 46.022649][ T692] ================================================================== [ 46.030746][ T692] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 46.039996][ T692] Read of size 1 at addr ffff88810d49d3f8 by task syz.2.112/692 [ 46.047663][ T692] [ 46.050021][ T692] CPU: 0 PID: 692 Comm: syz.2.112 Not tainted syzkaller #0 [ 46.057234][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.067302][ T692] Call Trace: [ 46.070633][ T692] [ 46.073599][ T692] __dump_stack+0x21/0x30 [ 46.077955][ T692] dump_stack_lvl+0x110/0x170 [ 46.082668][ T692] ? show_regs_print_info+0x20/0x20 [ 46.087890][ T692] ? load_image+0x3e0/0x3e0 [ 46.092419][ T692] ? unwind_get_return_address+0x4d/0x90 [ 46.098081][ T692] print_address_description+0x7f/0x2c0 [ 46.103683][ T692] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 46.110210][ T692] kasan_report+0xf1/0x140 [ 46.114648][ T692] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 46.121180][ T692] __asan_report_load1_noabort+0x14/0x20 [ 46.126839][ T692] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 46.133189][ T692] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 46.139371][ T692] ? xfrm_netlink_rcv+0x72/0x90 [ 46.144397][ T692] ? netlink_unicast+0x876/0xa40 [ 46.149391][ T692] ? ____sys_sendmsg+0x5b7/0x8f0 [ 46.154366][ T692] ? x64_sys_call+0x4b/0x9a0 [ 46.158973][ T692] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.165058][ T692] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 46.171233][ T692] xfrm_policy_inexact_insert+0x70/0x1130 [ 46.177002][ T692] ? __kasan_check_write+0x14/0x20 [ 46.182127][ T692] ? _raw_spin_lock_bh+0x94/0xf0 [ 46.187097][ T692] ? policy_hash_bysel+0x13f/0x6f0 [ 46.192221][ T692] xfrm_policy_insert+0x126/0x9a0 [ 46.197251][ T692] ? xfrm_policy_construct+0x54f/0x1f00 [ 46.202804][ T692] xfrm_add_policy+0x4ed/0x850 [ 46.207672][ T692] ? xfrm_dump_sa_done+0xc0/0xc0 [ 46.212646][ T692] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 46.217617][ T692] ? xfrm_netlink_rcv+0x90/0x90 [ 46.222486][ T692] ? avc_has_perm_noaudit+0x490/0x490 [ 46.227868][ T692] ? x64_sys_call+0x4b/0x9a0 [ 46.232472][ T692] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 46.237863][ T692] netlink_rcv_skb+0x1f5/0x440 [ 46.242652][ T692] ? xfrm_netlink_rcv+0x90/0x90 [ 46.247514][ T692] ? netlink_ack+0xb50/0xb50 [ 46.252111][ T692] ? wait_for_completion_killable_timeout+0x10/0x10 [ 46.258715][ T692] ? __netlink_lookup+0x387/0x3b0 [ 46.263747][ T692] xfrm_netlink_rcv+0x72/0x90 [ 46.268436][ T692] netlink_unicast+0x876/0xa40 [ 46.273210][ T692] netlink_sendmsg+0x879/0xb80 [ 46.277986][ T692] ? netlink_getsockopt+0x530/0x530 [ 46.283198][ T692] ? do_futex+0xde8/0x2800 [ 46.287623][ T692] ? security_socket_sendmsg+0x82/0xa0 [ 46.293090][ T692] ? netlink_getsockopt+0x530/0x530 [ 46.298297][ T692] ____sys_sendmsg+0x5b7/0x8f0 [ 46.303090][ T692] ? __sys_sendmsg_sock+0x40/0x40 [ 46.308144][ T692] ? import_iovec+0x7c/0xb0 [ 46.312680][ T692] ___sys_sendmsg+0x236/0x2e0 [ 46.317380][ T692] ? __sys_sendmsg+0x280/0x280 [ 46.322162][ T692] ? __fdget+0x1a1/0x230 [ 46.326439][ T692] __x64_sys_sendmsg+0x206/0x2f0 [ 46.331394][ T692] ? ___sys_sendmsg+0x2e0/0x2e0 [ 46.336256][ T692] ? __kasan_check_write+0x14/0x20 [ 46.341391][ T692] ? switch_fpu_return+0x15d/0x2c0 [ 46.346516][ T692] x64_sys_call+0x4b/0x9a0 [ 46.350942][ T692] do_syscall_64+0x4c/0xa0 [ 46.355373][ T692] ? clear_bhb_loop+0x50/0xa0 [ 46.360057][ T692] ? clear_bhb_loop+0x50/0xa0 [ 46.364736][ T692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.370642][ T692] RIP: 0033:0x7f6f396e7eb9 [ 46.375067][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.394688][ T692] RSP: 002b:00007f6f38144028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.403119][ T692] RAX: ffffffffffffffda RBX: 00007f6f39962fa0 RCX: 00007f6f396e7eb9 [ 46.411184][ T692] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 46.419159][ T692] RBP: 00007f6f39755c1f R08: 0000000000000000 R09: 0000000000000000 [ 46.427163][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.435145][ T692] R13: 00007f6f39963038 R14: 00007f6f39962fa0 R15: 00007fffe2b37348 [ 46.443128][ T692] [ 46.446150][ T692] [ 46.448470][ T692] Allocated by task 692: [ 46.452712][ T692] __kasan_kmalloc+0xda/0x110 [ 46.457407][ T692] __kmalloc+0x13d/0x2c0 [ 46.461674][ T692] sk_prot_alloc+0xed/0x320 [ 46.466273][ T692] sk_alloc+0x38/0x430 [ 46.470372][ T692] pfkey_create+0x12a/0x660 [ 46.474900][ T692] __sock_create+0x38d/0x7a0 [ 46.479503][ T692] __sys_socket+0xec/0x190 [ 46.483950][ T692] __x64_sys_socket+0x7a/0x90 [ 46.488635][ T692] x64_sys_call+0x8c5/0x9a0 [ 46.493142][ T692] do_syscall_64+0x4c/0xa0 [ 46.497566][ T692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.503467][ T692] [ 46.505796][ T692] The buggy address belongs to the object at ffff88810d49d000 [ 46.505796][ T692] which belongs to the cache kmalloc-1k of size 1024 [ 46.519856][ T692] The buggy address is located 1016 bytes inside of [ 46.519856][ T692] 1024-byte region [ffff88810d49d000, ffff88810d49d400) [ 46.533306][ T692] The buggy address belongs to the page: [ 46.539075][ T692] page:ffffea0004352600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d498 [ 46.549319][ T692] head:ffffea0004352600 order:3 compound_mapcount:0 compound_pincount:0 [ 46.557658][ T692] flags: 0x4000000000010200(slab|head|zone=1) [ 46.563792][ T692] raw: 4000000000010200 ffffea000432c800 0000000300000003 ffff888100043080 [ 46.572505][ T692] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 46.581097][ T692] page dumped because: kasan: bad access detected [ 46.587524][ T692] page_owner tracks the page as allocated [ 46.593245][ T692] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8, ts 27638938488, free_ts 27541951117 [ 46.611530][ T692] post_alloc_hook+0x192/0x1b0 [ 46.616326][ T692] prep_new_page+0x1c/0x110 [ 46.620836][ T692] get_page_from_freelist+0x2d3a/0x2dc0 [ 46.626396][ T692] __alloc_pages+0x1a2/0x460 [ 46.630993][ T692] new_slab+0xa1/0x4d0 [ 46.635082][ T692] ___slab_alloc+0x381/0x810 [ 46.639706][ T692] __slab_alloc+0x49/0x90 [ 46.644049][ T692] __kmalloc_track_caller+0x169/0x2c0 [ 46.649434][ T692] __alloc_skb+0x21a/0x740 [ 46.653864][ T692] inet6_rt_notify+0x293/0x480 [ 46.658638][ T692] fib6_add+0x2296/0x3d70 [ 46.662984][ T692] ip6_route_add+0x89/0x130 [ 46.667523][ T692] addrconf_add_linklocal+0x3cd/0x660 [ 46.672918][ T692] addrconf_addr_gen+0x53f/0x6a0 [ 46.677868][ T692] addrconf_init_auto_addrs+0x836/0xba0 [ 46.683445][ T692] addrconf_notify+0x95d/0xde0 [ 46.688218][ T692] page last free stack trace: [ 46.692899][ T692] free_unref_page_prepare+0x542/0x550 [ 46.698379][ T692] free_unref_page+0xae/0x540 [ 46.703067][ T692] __free_pages+0x6c/0x100 [ 46.707502][ T692] __free_slab+0xe8/0x1e0 [ 46.711842][ T692] __unfreeze_partials+0x160/0x190 [ 46.716967][ T692] put_cpu_partial+0xc6/0x120 [ 46.721659][ T692] __slab_free+0x1d4/0x290 [ 46.726088][ T692] ___cache_free+0x104/0x120 [ 46.730683][ T692] qlink_free+0x4d/0x90 [ 46.734939][ T692] qlist_free_all+0x5f/0xb0 [ 46.739468][ T692] kasan_quarantine_reduce+0x14a/0x170 [ 46.744974][ T692] __kasan_slab_alloc+0x2f/0xf0 [ 46.749837][ T692] slab_post_alloc_hook+0x4f/0x2b0 [ 46.755099][ T692] kmem_cache_alloc+0xf7/0x260 [ 46.759910][ T692] __alloc_skb+0xe0/0x740 [ 46.764255][ T692] mld_newpack+0x142/0x9e0 [ 46.768706][ T692] [ 46.771063][ T692] Memory state around the buggy address: [ 46.776873][ T692] ffff88810d49d280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.785051][ T692] ffff88810d49d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.793144][ T692] >ffff88810d49d380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 46.801240][ T692] ^ [ 46.809234][ T692] ffff88810d49d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.817304][ T692] ffff88810d49d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.825367][ T692] ================================================================== [ 46.833437][ T692] Disabling lock debugging due to kernel taint [ 46.852356][ T30] kauditd_printk_skb: 10 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 46.852372][ T30] audit: type=1400 audit(1769571515.280:319): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[429]" dev="pipefs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 47.048858][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 47.132390][ T30] audit: type=1400 audit(1769571515.440:320): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.154383][ T30] audit: type=1400 audit(1769571515.440:321): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.176949][ T30] audit: type=1400 audit(1769571515.440:322): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.198234][ T30] audit: type=1400 audit(1769571515.440:323): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.231560][ T30] audit: type=1400 audit(1769571515.440:324): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.235757][ T282] syz-executor (282) used greatest stack depth: 20640 bytes left [ 47.282810][ T30] audit: type=1400 audit(1769571515.440:325): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.308873][ T30] audit: type=1400 audit(1769571515.440:326): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.201740][ T443] device bridge_slave_1 left promiscuous mode [ 48.207858][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.215345][ T443] device bridge_slave_0 left promiscuous mode [ 48.221516][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.229234][ T443] device veth1_macvtap left promiscuous mode [ 48.235326][ T443] device veth0_vlan left promiscuous mode [ 49.882369][ T443] device bridge_slave_1 left promiscuous mode [ 49.888594][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.896407][ T443] device bridge_slave_0 left promiscuous mode [ 49.902596][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.910362][ T443] device bridge_slave_1 left promiscuous mode [ 49.916568][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.923988][ T443] device bridge_slave_0 left promiscuous mode [ 49.930110][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.938090][ T443] device bridge_slave_1 left promiscuous mode [ 49.944210][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.951956][ T443] device bridge_slave_0 left promiscuous mode [ 49.958082][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.966768][ T443] device bridge_slave_1 left promiscuous mode [ 49.972913][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.980297][ T443] device bridge_slave_0 left promiscuous mode [ 49.986546][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.994809][ T443] device veth1_macvtap left promiscuous mode [ 50.000817][ T443] device veth0_vlan left promiscuous mode [ 50.006793][ T443] device veth1_macvtap left promiscuous mode [ 50.012870][ T443] device veth0_vlan left promiscuous mode [ 50.018700][ T443] device veth1_macvtap left promiscuous mode [ 50.024810][ T443] device veth0_vlan left promiscuous mode